last executing test programs: 7m52.675609793s ago: executing program 3 (id=115): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x43, [0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x100003, 0x19, 0xfffffffffffffffa, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) memfd_create$auto(0x0, 0x2) socket(0x2, 0x1, 0x6) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) (async) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) (async) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2502000000060001000f0000000600010081000000"], 0x24}}, 0x4000000) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x200000000006, 0x8) (async) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) (async) ioctl$auto(r0, 0x8946, 0x24) 7m52.004516381s ago: executing program 3 (id=117): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x3b, 0xf99b, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) io_uring_enter$auto(r0, 0x2, 0x1005f0, 0x14, 0x0, 0x7) r2 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001200)='/proc/thread-self/mounts\x00', 0x28000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r3) sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027b57100fedbdf25030000000400a30000000100040000004aa1e5a41aebb35829ffcb4dc59fac5dc2218c3933ec8678105b000c07df49f80dfb8f5c45260c33b096c37627bd5cb94844f6c3255237f5215525ca73fa7b823c10fa9be515c3f71434da8e21a92a790fade3d62193464bd623951a6fe2978333b3378fc14e0b2231ec55127b022714afc90f8255f70856c522995e2430ad173d31f7cad165e923b7dbfdbd8f86cf6a511f04145f48ac7ea61ee09b0d8e207544d13ac704505c67cbefe229617724d31c50835b2ff3cb03"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = epoll_create$auto(0x4) r6 = socket(0xb, 0x80000, 0x0) epoll_ctl$auto(r5, 0x1, r6, 0x0) r7 = epoll_create$auto(0x3e) epoll_ctl$auto(r7, 0x1, r5, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, &(0x7f0000000000)="cc9c8f6d4ac52e0fce5a887ad4ffcb308998cab91d0f076752824329f2b3ca4028152bd0b76272f7b2e41433e0604436244198f21db0ddd193f2c65341680569a98e441c3f5348f0a2d3c02cd239ebe2fc75eb08d6984ff0386854edcd74269f535ce9d28f6007ad88dfd5e9b0f8108eff8da0c5e38194d9e9bb265f69a185f070ef8298e847344736d892d4108a939fa006a8ea099e246e1652a237564a053a0e5eff1bedda") preadv$auto(r2, &(0x7f00000031c0)={&(0x7f0000003140), 0x182}, 0x8, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = socket(0x2, 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r8, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socket(0x2b, 0x800, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r8, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x9) 7m50.783572243s ago: executing program 3 (id=121): r0 = socket(0x2, 0x1, 0x106) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x4) r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x4, &(0x7f0000000240)={@siginfo_0_0={0xffffd034, 0x4, 0x0, @_timer={r2, 0x0, @sival_int=0x7, 0xd5ba}}}, 0x3) wait4$auto(r2, 0x0, 0x80000001, 0x0) waitid$auto(0x5000, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0x6, &(0x7f00000002c0)={{0x4, 0x5}, {0x5, 0x5}, 0x16, 0x7, 0x4b, 0x80, 0x2, 0x9b5, 0x8000, 0x4, 0x8, 0x7, 0x1, 0x0, 0xde, 0x3}) pidfd_open$auto(r2, 0x1) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r1, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x6, 0x9, 0x0, 0xfe11) unshare$auto(0x40000080) ioctl$auto_BCH_IOCTL_DATA(r3, 0x4070bc0a, &(0x7f00000000c0)={0x2, 0x8, 0x8, 0x0, {0x21, 0x9eb, 0x3}, {0x1ff, 0x6}, @bch_ioctl_data_6_2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) sched_setaffinity$auto(0x1, 0x1, 0x0) mmap$auto(0x0, 0x2020029, 0x3, 0xeb2, r4, 0x8000) mlock$auto(0xfbea, 0x7fffffffffffffff) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, 0x0) 7m50.054682112s ago: executing program 3 (id=122): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) setrlimit$auto(0x1000000007, 0x0) userfaultfd$auto(0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) 7m49.930673786s ago: executing program 3 (id=123): mlockall$auto(0x7) (async) mlockall$auto(0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000080)='./file0\x00', 0x662c2, 0xe1d2b27bdc14aa0c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r1 = prctl$auto(0x43, 0xe5, 0x0, 0x2, 0x8) ioctl$auto(r1, 0x541b, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) close_range$auto(r2, r2, 0x0) (async) close_range$auto(r2, r2, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) (async) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) r4 = io_uring_setup$auto(0x89, 0x0) mmap$auto(0x1, 0x2020008, 0x4, 0xeb1, r3, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, 0x0, 0x81) (async) write$auto(r2, 0x0, 0x81) write$auto(r4, 0x0, 0xf0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0x27, 0x8) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x57d641, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x400000005, 0xeb1, 0xfffffffffffffffa, 0x2) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x5, 0xd59, 0xfffffffffffffffa, 0x8200) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) 7m49.562632351s ago: executing program 3 (id=125): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x2, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x7, 0x1, 0x40, 0x0, 0x8, 0x100000000}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x2, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x7, 0x1, 0x40, 0x0, 0x8, 0x100000000}}) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0xd2042, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0xd2042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x800000000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x0, 0x800000000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000007ffd) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250a0000000800030009000000080002009f2c03e2031c732bb8aa0467efa4da7532314d81dcb416519100000000000000000000000060416b690b85da0e1996cee7926ea813c3852b81505a0e1d2bd131dd5824afcd52a155d4cd9b2e0c8ca011e025faa94611c5c917936582cab6342941f6d209441144896ea75c73b2a0cd6c6b748ca7eb9a01000080", @ANYRES32=r3, @ANYBLOB="08000100fbffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250a0000000800030009000000080002009f2c03e2031c732bb8aa0467efa4da7532314d81dcb416519100000000000000000000000060416b690b85da0e1996cee7926ea813c3852b81505a0e1d2bd131dd5824afcd52a155d4cd9b2e0c8ca011e025faa94611c5c917936582cab6342941f6d209441144896ea75c73b2a0cd6c6b748ca7eb9a01000080", @ANYRES32=r3, @ANYBLOB="08000100fbffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) uname$auto(0x0) setsockopt$auto(0x3, 0x81, 0x85, 0x0, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xda9c, 0x1, 0x9}, 0x800000b, 0xffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x202001, 0x0) close_range$auto(0x2, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto(0x3, 0xae41, r5) 7m34.223012014s ago: executing program 32 (id=125): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x2, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x7, 0x1, 0x40, 0x0, 0x8, 0x100000000}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x2, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x7, 0x1, 0x40, 0x0, 0x8, 0x100000000}}) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0xd2042, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0xd2042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x800000000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x0, 0x800000000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000007ffd) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250a0000000800030009000000080002009f2c03e2031c732bb8aa0467efa4da7532314d81dcb416519100000000000000000000000060416b690b85da0e1996cee7926ea813c3852b81505a0e1d2bd131dd5824afcd52a155d4cd9b2e0c8ca011e025faa94611c5c917936582cab6342941f6d209441144896ea75c73b2a0cd6c6b748ca7eb9a01000080", @ANYRES32=r3, @ANYBLOB="08000100fbffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250a0000000800030009000000080002009f2c03e2031c732bb8aa0467efa4da7532314d81dcb416519100000000000000000000000060416b690b85da0e1996cee7926ea813c3852b81505a0e1d2bd131dd5824afcd52a155d4cd9b2e0c8ca011e025faa94611c5c917936582cab6342941f6d209441144896ea75c73b2a0cd6c6b748ca7eb9a01000080", @ANYRES32=r3, @ANYBLOB="08000100fbffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) uname$auto(0x0) setsockopt$auto(0x3, 0x81, 0x85, 0x0, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xda9c, 0x1, 0x9}, 0x800000b, 0xffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x202001, 0x0) close_range$auto(0x2, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto(0x3, 0xae41, r5) 6m30.856877537s ago: executing program 0 (id=324): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x4, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) fsmount$auto(r0, 0xfffffff4, 0x3) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000180)={0x406, 0x1ff, 0x0, 0x1, 0xb5, "50b8cf4692b172b4cfc1ca8e"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x8802, 0x0) io_uring_setup$auto(0x55, &(0x7f0000000100)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x80006, 0x8c48, 0x7, 0x3, 0x7f, 0x0, 0x2}, {0x100, 0x9, 0x53, 0x81, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0xffffffff}}) socket(0x23, 0x2, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) close_range$auto(0x2, 0x8, 0x2008) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x403c6f2b, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000240), 0x5, 0x3, 0x2, @stream_id, 0x7, 0x476, 0x0}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 6m29.175862504s ago: executing program 0 (id=329): timer_settime$auto(0xffffffff, 0x9, 0x0, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x1ffffd, 0x0, 0x0, 0x10, r0, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x7) write$auto(r0, &(0x7f00000000c0)='\n@--(+!&%]\xeb\x00', 0x3e2219c7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) r3 = gettid() mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) rt_sigqueueinfo$auto(r3, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0, @_trapno=0xfffffffe}}}) getsockopt$auto(r1, 0x11, 0x64, 0xfffffffffffffffc, 0x0) setrlimit$auto(0x0, 0x0) 6m28.75093485s ago: executing program 0 (id=330): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7) writev$auto(r0, &(0x7f0000000180)={0x0, 0x6}, 0x3) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, r1, 0x0) 6m28.051718821s ago: executing program 0 (id=331): mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x18, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20008000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) read$auto_vhost_net_fops_net(r0, &(0x7f0000000100)=""/4096, 0x1000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) keyctl$auto(0x11, 0xfffffffd, 0x8, 0x4, 0x1000000000008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) getrandom$auto(&(0x7f0000000040)='[,@@,%\x00', 0xd6, 0x5d4) 6m27.842152748s ago: executing program 0 (id=332): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40000f, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x7) writev$auto(r0, &(0x7f0000000180)={0x0, 0x6}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) waitid$auto_P_ALL(0x0, 0x3, 0x0, 0x401, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, r2, 0x0) socket(0x25, 0x6, 0x80000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x80000000, 0x3000}, 0x4) 6m25.18921151s ago: executing program 0 (id=341): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) mmap$auto(0x3, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0xfffffffffffffffc, 0x20000000000001, 0x64, 0xeb1, r3, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) utimensat$auto(r4, &(0x7f0000001c80)='\x00', 0x0, 0x1000) 6m9.929330727s ago: executing program 33 (id=341): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) mmap$auto(0x3, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0xfffffffffffffffc, 0x20000000000001, 0x64, 0xeb1, r3, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) utimensat$auto(r4, &(0x7f0000001c80)='\x00', 0x0, 0x1000) 4m4.07955014s ago: executing program 1 (id=770): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x80, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x5) setuid$auto(0xe) ioctl$auto(0x3, 0x400454ca, 0x38) io_uring_register$auto_IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000040)="c88aeb8c2f0be9be87636d9b2f175991b80f0a254f3d93ee58da4e668f7a1c07fe6c39be31518cbe4fe4c849af4dff951d751dd6f42d18b79322f92b92de74687edfdeea787c659ded89175417207ac600358b6d5026ab7531ae5b89b0f3c2eebd", 0x6) 4m3.73338787s ago: executing program 1 (id=772): r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/cpuid\x00', 0x10000, 0x0) ioctl$auto_FIONBIO(r0, 0x5421, 0x1) r1 = prctl$auto_PR_SET_MM_ARG_END(0x2, 0x9, 0x0, 0x1c, 0x1) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x4008081) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x511080, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f00000001c0)={0x0, 0x9, [0xfffffffd, 0xe, 0xb28, 0x3, 0xe4, 0x4, 0x2, 0x7, 0xad96, 0xf]}) getrandom$auto(&(0x7f0000000200)='/dev/snd/controlC1\x00', 0x9e4, 0xfffffffd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r1) write$auto(r1, &(0x7f0000000280)='IPVS\x00', 0xfffffffffffffffc) read$auto_proc_environ_operations_base(0xffffffffffffffff, &(0x7f00000002c0)=""/208, 0xd0) getrandom$auto(&(0x7f00000003c0)='/dev/snd/controlC1\x00', 0xc7a, 0xf) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth0_vlan\x00', 0x0}) r5 = waitid$auto_P_ALL(0x0, 0x8e800000, &(0x7f0000000480)={@_si_pad}, 0x5, &(0x7f0000000500)={{0x5, 0x2}, {0x8, 0x4}, 0x4, 0x9, 0x9, 0x80, 0x5, 0x7fffffffffffffff, 0xb8000000000000, 0x6, 0xfffffffffffff35c, 0xb24c, 0x3ff, 0x711d, 0xb433, 0x800}) r6 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/media6\x00', 0x408100, 0x0) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000600)={"3dba9950b0e77da6c1b22f737c9725d08edfa69f9fc1e27339882925f7a5fcd7", 0x2, 0x5, 0xff, 0x0, 0x2, 0x0}) shmctl$auto_IPC_INFO(0x404, 0x3, &(0x7f0000000800)={{0x4, 0x0, 0xee00, 0x6, 0x4, 0x0, 0x2}, 0xe0, 0x3, 0x6, 0x5, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x1ff, 0x0, &(0x7f0000000680)="ca43e553c43bc86f950fece00a9f2a56198aab7bd0ce001a88610d0a9807f68cd190107ddf8e19ad3f9c882bef341d8c704a549b1888c9ece5addd45bda9d51c443574fac8711e81e682a95211b3ab9a42f229553dd590c191da9779642d9c42431dd453fc42a7bba24de92bf60bfb5812400c712b093b3810731e9a01697a929dcbf07f505e69b0fa201f3aaf36c279f2b8a0814342f6ac0ac1953190e1bb578c2a944ff91df3474074982d553e23eeefc83d76b86d03fd516ba6cf508d693a72498227e45f3d216ad414922a565b4a7f897009e674a37579c329f9fe5640ed8e778305e45b2af2c1854fd18f0ccf1e2e290ecbff1c053b0c", &(0x7f0000000780)="ad7850507e3a856149531ab8bdc81c7e977040f788fc2d4c0650276e287c8298a83b06e221f8cf1a2d374262c13e2c74f4c0e23f5c0f5ae5a870c91bdaf43f3472c90ed69d891deee3f289d23728226777956d9053c206e7a36e45094452756150f2b0758d0d7c7b527a347a8d984eda"}) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000880)={0x0, 0x39b, 0x40, 0x4, 0x0, 0xffffffffffffffff}) lstat$auto(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x2b40000000000, 0x10001, 0x101, 0x1, 0xee00, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0x6, 0x8, 0x8, 0xa0d6, 0x4, 0x3, 0x0, 0x5}) r11 = semctl$auto_GETPID(0x40, 0x331, 0xb, 0x88) r12 = clone3$auto(&(0x7f00000009c0)={0xa, 0x7, 0x0, 0x9, 0xe2c, 0x80000000, 0x5, 0x9, 0x41023c3d, 0x100000001, 0x779}, 0xe25) r13 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000a40)={@_si_pad}, 0xfffffffe, &(0x7f0000000ac0)={{}, {0x1, 0x9}, 0x9, 0xfffffffffffffff9, 0x8, 0x3ff, 0x1, 0x4b, 0x0, 0x800, 0x5, 0x4, 0x0, 0x5, 0x0, 0x7fffffff}) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000cc0)={{0xfff, 0xee00, 0x0, 0x401, 0x1b26, 0x4, 0x1}, 0x83, 0x79b0, 0x200, 0x7, @inferred, @inferred, 0xff, 0x0, &(0x7f0000000b80)="42f72f6ac9a9e62e29e5ce67c79c09693f3cd12b42e6102e2d32eae7af2647707244fd320781229b181be1a87d11cb7a7478827b0278a0b22a395876c12477b06986730675d94c4d06d9eba897c77802d2ef423cf182e3cfc7cb4a50b2e18d201af4394d140bddd609733385776ddfc9e9a1887a1a6a95b54db4ad", &(0x7f0000000c00)="95b861b7bbcd09da0f8f39e1e2dd482ad64ae3cdb59b4d52bce129ea70beb5df216ec1c5122778defa93d8227c89aae4e2502687fde3f83bdafba283c50be1045184345196f07d7a36d23d5a98112635016762ed6ffc5c211ba0d3a2934a628e1d5ff228e4fb6409dbc2c2932c8d2c75ebdb578b04665bbd1df006236e3bd0297d8c9c030cf13a1073de6b9de4cadf3533e8a4edc058786daeb49b338a47"}) msgctl$auto_IPC_INFO(0x40, 0x3, &(0x7f0000000dc0)={{0xfffffff6, 0xee01, 0xffffffffffffffff, 0x2, 0xb7, 0xd98, 0x3}, &(0x7f0000000d40)=0x6, &(0x7f0000000d80)=0x4f, 0x1000, 0xffff, 0x9000000, 0xb2, 0x3, 0x10, 0x19, 0x8001, @raw=0x5, @raw=0x7ff}) r16 = getpid() sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000001a80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x60000608}, 0xc, &(0x7f0000001a40)={&(0x7f0000000e40)={0xbfc, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x101}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x42b8d589}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x18, 0x2, 0x0, 0x1, [@typed={0xc, 0x32, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x147, 0x0, 0x0, @ipv4=@local}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x213, 0x2, 0x0, 0x1, [@generic="ac14f318fde68b91823363985ce8704f9adeeb0aa5ae268c98aa2c87c0519969ac171a", @generic="e5653a42efa4ad4806ca0b828548e795ce9e4f914a19c4e32f8d2e43d6d7e03f1cb730b1427b7215336f5b05b9b834a2faf6ab528e6212908e460b4bc4c48385dc8a30e34df747e49b32648590c875aaf0237c536efaa205b7b23ae9889d96cf5a7c7b60b2326a90065167b4e529029df631545ddb98c4a740d73609ce0221b0b75725ffcf847985bb5be5bd16591f8b13cf0bd9ebb67242b5ffe7974cda533fa1ec05aeefd6aaf4285ae85645f21bf073d9152fbe732275fc88fcec8d11078787f1bfb8b05d41843b2d46e9c8db7316787097814ee04e8886784d5cee17f6e0", @nested={0x109, 0x109, 0x0, 0x1, [@generic="228941ec", @typed={0x4, 0x5f}, @nested={0x4, 0x74}, @nested={0x4, 0x36}, @generic="730d693f0d4c5083878f299bd4d3fd3b7bba99e72888fad4ddb54996fb6b062e20637957d28c5494c7f4b84b4ad941007ba4569c019a901edb07a4e290e7a881694384137c34647b181015294db808700a43b7921facd24cfd2084d7cfcfc00bdc40a1b14e91e0aeb126228756d108c146cf9fb1f4225a86d5d94163822026eab99a257896ad04f1d8187f06d8893d494b64e68f8427da1d59accdb619d865b765972c5c82bad7b3ad85977d3980e537c45694415d43fb4b5cb052e7798bc17adda25e2e16c1ad79ef401bc56d748994edcb696ac20a1bc85d0ad9e43374829dc3ba1b3398ea3dba6fbb642fb3", @typed={0x8, 0xe0, 0x0, 0x0, @pid=r5}]}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x48, 0x2, 0x0, 0x1, [@generic="8779a9dd40f08334ec842553815698b95fff20aadfb61f197c555f20b109070a613042e1c1bd6dce2496620d", @typed={0x8, 0xc2, 0x0, 0x0, @u32=0x80}, @nested={0x10, 0x7c, 0x0, 0x1, [@nested={0x4, 0xa}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x1f8, 0x2, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="85250005ec90abc932ba7f43e06b50260a19ef9ea009d04a6dea5de7497929eee601c1afb169b11bb2bd9c003d5818072dd74d8e2927a0e68d03caff62c66281f62ad6194c958a92f4452f01eb6c6350383641166d33a63fc5455e6b4f122494e039cce53a8653cc134ffe5edbe7dbf3232e94fec598daec5b9cb72054e8269dd351a82252bdb7388255d531b14e4b333ac60c30f89f7f771d902ecfe0b5bbf6c0cbcbe740cf622f2a92", @generic="a2078c0d7f19b9bc93d12cb1c002f788e900b786134f665193ad9604cf055b75fa75ed62149b6b981f04b49bc21388f3df0174b37682c8253c0a9c671cb358385fe85aee4a0f01403384", @typed={0x4, 0x78}, @nested={0xf4, 0x12c, 0x0, 0x1, [@generic="e80a21b4eeb6a316eef3c67e2f0b413db1d9db5a798cae9c9d8563a7964e9a246261924808a1e508d5f13376927b9e780dc447fd2c24f86042a354bff098690536d16dca8248e3c53f91120c54f3feea1c512af98ab758a8374147a5db23e364364d981bb3c5ed535a9ad186936fb209c0767ebbf1f8e2a42c900ec8761166a04dba2555886092b144071947ed9a4dc9396cf9821c2edb1dda12d3111c9df01ab1bc73172966e4af2c9e62996f992072b493b8a14a8a53ea6b6ab4e1383ee2740090047901da1d7d79e39c657ea9dae639eeecefb7be149ae3be67a9ff1af109d5a3792f4315fd985f951af5cdb67e84"]}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x6bf, 0x2, 0x0, 0x1, [@nested={0x8d, 0xf0, 0x0, 0x1, [@nested={0x4, 0xb5}, @typed={0x8, 0x7b, 0x0, 0x0, @fd=r6}, @typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x115, 0x0, 0x0, @pid=r7}, @generic="bbb18430f3af2a31e799b870e617318e6b67d54f426ac37323a0c0e5bcf01572db5e6ea8b59aa9382182db35973d6ab1cdbf56a007772702f92dfe1d09fcf078b77f4e779bb4f9eb06203ae54b", @typed={0x8, 0x113, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x150}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=r8}]}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x23, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x126, 0x0, 0x0, @uid=0xee00}, @nested={0x183, 0x2a, 0x0, 0x1, [@typed={0x9b, 0xdd, 0x0, 0x0, @binary="5c9ce534780842650900788d5b3506dbdc703fe4d2234856aa2b741d19ddd1defa509cf717bc8be80556f1b3da42f68414cc0c2c407d70d88dafa3d436236f91ab70c00f2e54ef841ca47c95e2c53a49fcbf108dd4b5380a0e5689028fa7c5321a247fcd5ccb67d66db7f52e47144704135a9352707dc86de732399285aa9c318eda69665b96a859acdf37b49e543f556cf01c078e18b8"}, @nested={0x4, 0x8c}, @nested={0x4, 0x135}, @generic="170aecd4b864558ef26df5a6e0c71bbdda5f33378b438dcfb9dea4ca33490574b5e18af189603985287490294015d840ae8447d495c1812fd5421c6604a80eda7c10ba9a696b6fb5eaab7439f56900c29aab83a38d4ddb7b9b7a9826ef46925f5f2630a8c4a84bf625981cca386bbd2b9771fdb898", @generic="bc5e8e75fe3338738ae7dffa02a07359ef0446e9c5d5a135479f890098bcec", @generic="0b3801bc01cb0b8eb7c5f86b9148f20ea6ef34485200fd1c4c383def69807bc315f797c127f39efb85d933d58abd303b8585f47d63ab128cf6de12c101ebf6", @typed={0x8, 0xc2, 0x0, 0x0, @fd=r0}]}, @nested={0xc0, 0xfe, 0x0, 0x1, [@typed={0x8, 0x10e, 0x0, 0x0, @uid=r10}, @nested={0x4, 0x48}, @generic="5a530db90f2eadb85fce76dcd8fd5596b2c2f61f6a67ee38364078dd5736ed19de1f607b520e5b09", @generic="0dddafecf9ad877caaa76b63ccf4a2949ea2354313d11ccef9e41fa3271581cba48836d32165a2e26964879a5994f3f1e85e1e0b5a876ddf89c73d9873310a99c18990eb8ffdce6bc165d6221ac933d4a362dfff46520dff53266931256b6be8a7a100a7f33869413bb99013e353617dbf992227da2d13bd670903cee125531e", @typed={0x8, 0xb1, 0x0, 0x0, @pid=r11}]}, @nested={0x1b2, 0xa2, 0x0, 0x1, [@nested={0x4, 0xf7}, @typed={0x8, 0x37, 0x0, 0x0, @pid=r12}, @generic="27fd015b74bc95c519ef09b7c0f24ded89d01fa7d0d9fdf2aa8820e528ce93262a5be906eb54890e52e3b641de5cf7df3bf6d02f758f958b57ae2a152d52cbefd56f6d6db70b4b78919b1877d715a0b33aa79f1cf32b7658abbc355328daeb22a4b2371eadb361e94725393f54671ad18284f29bd46e7a57c3d6dbda4f9aea63bacad0fd918af3689c09916e5655333ae5dd8102684d6086dee9ba71e46401353304bebe09d45e6453a42fc3ae4ee46a46cfe4ebda44889057e4827ef54e779d7b72ab9de10f6fc2cbe2224b0549a0b615f92ed970855ee848fa52f866a98f9b2438362d2d101cb781", @generic="45e569961c2f33cf73ae1c76fcc62df0004fee323f9d8fd4966e5b7a5a2ac5ff41cd6c9d4b58f429b6c8c94fd4489cc2168e6829c58725b55a92d01d5c1177591c6846717d614902e40ab50461613fc0a18cdd05bdeae3caddfd0b4032c311f70acfe669910bb2803ed4d9445db03e408d59e1443b717ac082960edfbc32568ee81bccd381c3be91a51b92eab085beac715f00db5a12708199", @typed={0x8, 0x3, 0x0, 0x0, @pid=r13}, @nested={0x4, 0xce}, @typed={0x8, 0xc4, 0x0, 0x0, @uid=r14}, @typed={0xc, 0xba, 0x0, 0x0, @str='nl80211\x00'}]}, @nested={0x88, 0xab, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @uid=r15}, @generic="d40cfe9cb3f53855b3617673ff39223464d62e55d6def9c275b9add5f37682d845f6a6f52514e8723a74691bc66934fbbdc3415566d0d000b96c16b27a26abce33ff534a59fbfc3016f5b30a8186612e8a3a711511006a24db4a206829631d2b5fce4543", @typed={0x4, 0x71}, @nested={0x4, 0x140}, @typed={0x8, 0x44, 0x0, 0x0, @pid}, @typed={0x8, 0xe3, 0x0, 0x0, @u32}]}, @nested={0x16b, 0x3f, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid=r16}, @generic="ce35144521958c86d2ef1333faebf8d217d315aba6e453fccca576f3b4e8affa313636f39d6a903cada998a5de359bfd0f14447aae59fb3050d645ef86140a9051efc58cc7cba68e05c88e954453bc29106c17318bcaa2299adbeb5f296b8bd398f0990b08cd6e030f7b4a5df0f2c5ab4b852144c1244da1abcba23d3121947e783002849644c7d331cf6d708dc531b788c89178a96e72321c0bf87ddd6acbb7807c1d88b240a83a47ca1fcce20c024c8ce62133b2a29b55d5c8f63e5e2ae305b0abb8e8be090e1a762641a37c33daf9b716061342932bc3c18f1a7da80d14478f6f45e0", @typed={0xc, 0x121, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x124}, @generic="01eab48c537f227b0f943f9a4dc959088e0e7998306bc724a1c6ce4ceb59944eda3e4cf3d9a9971187f1", @typed={0x8, 0xe5, 0x0, 0x0, @str='$#!\x00'}, @generic="67eb878dfa987da9bec8f42d8ae712d8c5485431e98ee57fa4163ce923b848961364d0c6c489be72bb34e97298ca4d316f3ac5abe6", @nested={0x4, 0x128}]}, @generic="23ddcae24d3c0021493a0029e431e4e48cff53ecec9fbfce804c6bf591c5a553d1e14d90c673c4"]}]}, 0xbfc}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/sg1\x00', 0x0, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r1, 0x4008af20, &(0x7f0000001b00)={0x8000, r6}) read$auto_kernfs_file_fops_kernfs_internal(r17, &(0x7f0000001b40)=""/148, 0x94) accept$auto(r3, &(0x7f0000001c00)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000001c40)=0x80000000) 4m3.548283022s ago: executing program 1 (id=773): mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (rerun: 32) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) (async, rerun: 32) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x1200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd03, &(0x7f00000001c0)) (async) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd693840f03c423aa0000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x404c050}, 0x80) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (rerun: 64) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r2) (async) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000440)=""/82, 0x52) (async) ioctl$auto_TIOCSWINSZ2(r7, 0x5414, &(0x7f00000001c0)) (async) ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) (async) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x2, 0x14) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) 4m2.515130153s ago: executing program 5 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) setfsuid$auto(0xee01) capset$auto(0x0, 0x0) socket(0x1d, 0x2, 0x7) clock_adjtime$auto(0xfffffffffffffffb, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = fanotify_init$auto(0x200, 0x1) socket(0x1, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) socket(0xa, 0x3, 0x100) fanotify_mark$auto(0x0, 0x1, 0x7, 0x4, 0x0) swapon$auto(&(0x7f0000000200)='/dev/ptp0\x00', 0x3) fanotify_mark$auto(0x0, 0x201, 0x9, 0x4, 0x0) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0ab326bd7000fcdbdfbfeb82d500"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r1) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x211, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040015}, 0x0) 4m2.008746759s ago: executing program 5 (id=778): mmap$auto(0x0, 0x4, 0x8, 0x12, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0xffffffffffffffff, 0xf0, 0x400006, 0x14, r0, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x40002, 0x0) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x0, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @none}, 0x3ff) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x800000000000df, 0x9b73, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@query={@target_ifindex, 0x7, 0xab2, 0x4, 0x4d1, @count=0xa, 0x0, 0x3, 0x10, 0x3, 0x5}, 0x6f3) 4m1.638849834s ago: executing program 1 (id=779): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40000f, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, 0x0, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) waitid$auto_P_ALL(0x0, 0x3, 0x0, 0x401, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, r2, 0x0) socket(0x25, 0x6, 0x80000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x80000000, 0x3000}, 0x4) 4m1.40008591s ago: executing program 5 (id=781): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) keyctl$auto(0x1c, 0x1, 0x6, 0x0, 0x402) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r3, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000280)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L%\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="840001801400020076657468315f766c616e00000041cd0000000800", @ANYRES32=0x0, @ANYBLOB="08000400c45c00000800030002000000080004000100000014000200767863616e3100000000000000000000080003000500000008000100", @ANYRES32=r5, @ANYBLOB="1400020063616966300000000000000000000000140002007465616d3000"/40], 0x254c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4) madvise$auto(0x0, 0x2003f2, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, 0x0, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x8000400) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f0000000340)={{0x0, 0x0, 0xee01, 0x7, 0x3, 0x1, 0x3ff}, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x8, 0xb93, 0x2, 0x9b000, 0x6, 0xffffffffffffffff, 0x7, 0x4, 0x0, @raw=0x8}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r7 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r7, &(0x7f00000020c0)=""/4093, 0xffd) 4m0.533546485s ago: executing program 1 (id=783): mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x402, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), r1) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="efff289d7000ffdbdf2503000000050002"], 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x800) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) r3 = socket(0xa, 0x3, 0x4) getsockopt$auto(r3, 0xff, 0x7, 0x0, 0x0) 4m0.39349695s ago: executing program 5 (id=784): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x0, 0x0) ioctl$auto(r1, 0x2284, r0) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/ns/cgroup\x00', 0x200800, 0x0) r2 = socket(0x2, 0x5, 0x0) setsockopt$auto(r2, 0x0, 0x82, 0x0, 0x806) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="0a5cbc3ac5229b90633d", 0xa) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x20, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7169, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, [0x0, 0x6, 0x3, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x0, 0x100000000, 0x7, 0x8000000000000001, 0xc2, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010800000000000000254500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000895}, 0x24000004) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4008200}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="100027bd7000fedbdf2506000000140017800500060005000000050006000a000000040067000800dc00000100000500300106000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r7 = socket(0x11, 0x2, 0x40000e) capset$auto(0x0, &(0x7f0000000000)={0xfffffffe, 0x41, 0x4a}) sendmmsg$auto(r7, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x30, 0x0, 0x9, 0x8}, 0x5}, 0x20000002, 0x100) 4m0.375486191s ago: executing program 1 (id=785): sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01012bbd700049cfade7fddbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x40, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xbf\xff\xff\x1fj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xff\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xbdg', 0x420b5bf1) socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r3, 0x4, r3}, 0x10) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) bpf$auto(0x3, &(0x7f0000000140)=@raw_tracepoint={0x7, r4, 0x0, 0xf}, 0x1) creat$auto(&(0x7f0000000040)='./file0\x00', 0x8f) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 3m59.789758479s ago: executing program 5 (id=790): statmount$auto(0x0, &(0x7f00000006c0)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x1, 0x40000000007f, 0x20000005, 0x8, 0x3, 0x6, 0x400000004, 0x9, 0x4, 0x1, 0x1e, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838e, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x251, 0x3, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffff7cc, 0x4, 0x400000000000002, 0x0, 0x0, 0xf5, 0xfffffffffffffffc, 0x9, 0x1, 0x2000]}, 0x1fe, 0x8) personality$auto(0xfffff032) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = io_uring_setup$auto(0xa, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x202, 0x10001, 0x8, r0, [], {0x6, 0x6, 0x8c48, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x52, 0x1, 0x1, 0x40, 0x76c4, 0x80008, 0x5}}) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, 0x0) ioctl$auto_TUNSETNOCSUM(r1, 0x400454c8, &(0x7f0000000080)=0x2) bind$auto(0x3, 0x0, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(0xffffffffffffffff, 0xffffffff, 0x14, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x400c1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfdf3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x280009, 0xb, 0x8000000008011, r3, 0x0) syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) 3m52.178044847s ago: executing program 5 (id=793): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x5, 0x2a340, 0x0) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) r3 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000280)={0x7fff, &(0x7f0000000240)={0x6, 0x0, 0x80, @raw=0xfffffffe}}) getsockopt$auto_SO_TIMESTAMPNS_OLD(r3, 0x8474, 0x23, &(0x7f0000000340)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', &(0x7f0000000380)=0x4) (async) wait4$auto(r2, 0x0, 0x80000001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000200) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0x1000, 0x42, 0x8001, 0x1, 0x60, 0x40000102}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r6, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r7, 0x3, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x6, 0x2, 0x0, 0x0, @str='\xff\xff'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (rerun: 64) 3m43.607468853s ago: executing program 34 (id=785): sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01012bbd700049cfade7fddbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x40, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xbf\xff\xff\x1fj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xff\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xbdg', 0x420b5bf1) socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r3, 0x4, r3}, 0x10) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) bpf$auto(0x3, &(0x7f0000000140)=@raw_tracepoint={0x7, r4, 0x0, 0xf}, 0x1) creat$auto(&(0x7f0000000040)='./file0\x00', 0x8f) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 3m36.301196963s ago: executing program 35 (id=793): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x5, 0x2a340, 0x0) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) r3 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000280)={0x7fff, &(0x7f0000000240)={0x6, 0x0, 0x80, @raw=0xfffffffe}}) getsockopt$auto_SO_TIMESTAMPNS_OLD(r3, 0x8474, 0x23, &(0x7f0000000340)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', &(0x7f0000000380)=0x4) (async) wait4$auto(r2, 0x0, 0x80000001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000200) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0x1000, 0x42, 0x8001, 0x1, 0x60, 0x40000102}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r6, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r7, 0x3, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x6, 0x2, 0x0, 0x0, @str='\xff\xff'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (rerun: 64) 11.942354738s ago: executing program 2 (id=1267): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) fallocate$auto(0x3, 0x3, 0xe, 0x80000007) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0x40008000) syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0) keyctl$auto(0x5, 0xffffffffffffffff, 0x9, 0x6, 0x80000000) keyctl$auto(0x7, 0xdfffffffffffffff, 0x7fffffffffffffff, 0x7, 0xbcc) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/nvme_core/parameters/iopolicy\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = fanotify_init$auto(0x8, 0x2000000000002) r5 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r4, 0x9, 0x9, r5, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x5) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x28000, 0x0) mlockall$auto(0x7) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f00000001c0)={r4, 0x8}) ppoll$auto(&(0x7f0000001ac0)={r6, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x408000000}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) socket(0x22, 0x800, 0x9) 9.983175023s ago: executing program 4 (id=1274): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/erspan0/ioam6_enabled\x00', 0x42b81, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x7, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/cache/index0/size\x00', 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) socket(0x1e, 0x4, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x10f, 0xffff8001, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) io_setup$auto(0x1, 0x0) (async, rerun: 32) mmap$auto(0x4006, 0x20009, 0x8000000000000000, 0xeb1, 0x401, 0x8000) (async) io_setup$auto(0x6, &(0x7f0000000000)) (async, rerun: 32) r2 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x2000, 0x0) (rerun: 32) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb3ba218", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) (async, rerun: 32) ioctl$auto_FS_IOC_ADD_ENCRYPTION_KEY2(r2, 0xc0506617, &(0x7f0000000080)={{0x98, 0x0, @identifier="2fe65f795cc453a630afe82542eef6dd"}, 0x1, 0x0, '\x00', "b63e613ff5e994af2016cf9a78ea477f2ebcd2fd41e9618b1b828a522b4ae7fdcd95cf56902287e08ef52dd95a216a485fe3e6c3c4c817008d0b867eb522834204a54cad9a33395fa9af5784dd31f6cf29c84d4dc38a9fac93f6866c7fec1d82fda6b4948090bad92ea434e5faa5c1527055982e10ad"}) (async, rerun: 32) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) 9.494866275s ago: executing program 4 (id=1276): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x0, 0x0) r1 = pidfd_open$auto(0x1, 0x800) waitid$auto_P_PIDFD(0x3, r1, 0x0, 0xc, 0x0) (async) read$auto_rng_chrdev_ops_core(r1, &(0x7f00000005c0)=""/43, 0x2b) (async) read$auto(r0, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/cpuidle/available_governors\x00', 0x18481, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/247, 0xf7) (async) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cpu.stat.local\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000002c0)=""/251, 0xfb) (async) r5 = syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r7) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r8, @ANYRES8=r8, @ANYRES16=r5, @ANYBLOB="5200088008002e00", @ANYRES32=r5, @ANYRESDEC=r0], 0x2a8}, 0x1, 0x0, 0x0, 0x40}, 0xc004) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, 0x0, 0x8000) (async) r9 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r9, 0x64c7, 0xffffffffffffffff) (async) mmap$auto(0x7, 0x5, 0x5, 0x8000000eb1, 0xfffffffffffffffa, 0x1) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x4) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r10 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 8.386654476s ago: executing program 4 (id=1278): mmap$auto(0x1, 0x2, 0x1e0, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0xc2481, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) socket(0x11, 0x3, 0x9) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/dummy0/mldv1_unsolicited_report_interval\x00', 0x202, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/arch_status\x00', 0x108202, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vbi0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x4, 0x5, 0x20000000, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, &(0x7f0000000180)={0x3, 0x1, 0x7, 0x0, 0x4, 0x6}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000080)=0x8) close_range$auto(r0, r2, 0x7fffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000b, 0x802, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x10, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x40) 8.012360456s ago: executing program 2 (id=1282): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0xb, 0x18, 0xfffffffffffffffa, 0x3) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r2 = dup$auto(r1) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r3, 0x81004523, r2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r4, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) shmctl$auto_IPC_INFO(0xf161, 0x3, &(0x7f0000000300)={{0x200, 0x0, 0x0, 0xfff, 0x3e, 0xbc, 0x8000}, 0x2, 0x7fffffffffffffff, 0x10001, 0x5, @raw=0x7ff, @inferred, 0xf180, 0x0, &(0x7f0000000180)="c42cc7dd163f94b094e32e961a14bf0d130001e8082f62d4f2885a7d483c646414a34936a2f5e05b69da2d657170181539982c8005813cc822bf39b84282736c48ee05337c7741c8712c7c8e8c5b8743f46c283dea", &(0x7f0000000080)="b879d1daf8c7bc9e7f7013f432036acbf8affdb2099b2454b93f678a2d301f5f573522d463c53a796861c11c522ac318b431b576192e79518ee78efbf231b8"}) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0xc) 7.140569015s ago: executing program 4 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f00000008c0)={0x7, 0x3, 0x3}, 0xa2b, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, r1, 0x737, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) 6.0782908s ago: executing program 4 (id=1285): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1) setsockopt$auto(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x28) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x4000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de152"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000140), 0xcb}, 0x3, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x7, 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="000000a0", @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c0000000c0003800800038004000580"], 0x20}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) r4 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r4, 0x6a, 0x1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) 5.729834509s ago: executing program 2 (id=1287): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/content\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto_SO_BINDTODEVICE(r0, 0xfffff801, 0x19, &(0x7f0000000040)=',\x84#[\x1a\x00', &(0x7f0000000080)=0x7) getsockopt$auto(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)=0x4) 5.078625733s ago: executing program 7 (id=1289): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x40000, 0x0) (async) ioctl$auto(r0, 0x4108af14, r0) 4.870983437s ago: executing program 7 (id=1290): socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event0\x00', 0x40000, 0x0) (async) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event0\x00', 0x40000, 0x0) readv$auto(r0, &(0x7f0000001100)={0x0, 0x371}, 0x3) flock$auto(r0, 0x7) ioctl$auto_EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$auto_EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r1, r0, 0xffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dri/card1\x00', 0x218000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/irq/8/smp_affinity_list\x00', 0x224080, 0x0) mmap$auto(0x6, 0xe983, 0x8c2, 0xeb1, 0x401, 0x6) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) (async) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) ioctl$auto(r2, 0xd81, 0x9) ioctl$auto(r0, 0x400c4d03, r2) (async) ioctl$auto(r0, 0x400c4d03, r2) ioctl$auto_BTRFS_IOC_DEVICES_READY(r1, 0x90009427, &(0x7f0000000040)={@raw=0x8000, "90f76cafdf9350e097b7b41c4bce9027e1427278beb634e4ff4a9bbba4d7f7e88a63db963884a3b5a9618d36b67bc26208db95f99006c537550d92cbc7484a20b3546e5a8518601c773244d928695cd77cbef7d4fb0065edd10d670a4b9f830839535277ad4a024d17a5f6d8ba6e4cad2d70a72aa060b12931eed03755ed42a5412922e6d8d5a98f4b050a5513c6ff1bc983dbbf96b7bd1ae2a514ce48e2d0a50079b4a93680f99112c5bbcd06f22b360f7d07d20fe0a4ed4d2f465d1b0e4ad600a62fd9518c4bef013761ed260766cef5622f52b078105bde182758a9a3e56958d275d9f281386ccba530f8905f57b3f0d3de06b2ef1684af704f73038baffaf929e9d43b2c1131b4a47bda7f18af6cd990419d76076c11cc99425cd9e001ba205b9e587a9e45e8de4fd5a77c31d7dc4c481bec73c665b64ed01215c396e33c19022ca522c509f00291367ed6e2bade11ce0308dafd07dc7601654d75d9db66c3c4595b8788a657208607a8ff2b5d57616668ddc6016d8227a85dafbfa4b7986ba00ecb90c8852f84179d3e7ac2987e72ba9cb2e49486db6670cbf15255cf0be32f5e65fb97d1ce34318cb8251bc47892f36be9420992b9fcf4ead79667866aa2206732d9211a1f4a58438c10ade99862b6563d2bf98bd491aada2b5343f11546154f89d0b22d3a4a1e29ffe58b797917cac97585fa43644075c18ef89f011883f136ef39beb7886d3d28954b460d170859e2168a1d2c552d6fd76e8a76bd11b7025dda3c41759bb6b81fa28916ae9c41eb4a6f5e8d32db3bebc15ed74fa29c3fc0fffba2851e12aa8c8cb20a5432c1c7a89d7dac97cfd7b067491cb489204ad67d7ee39c2bdd9e932a1db11c0600bca8353c1712bb6ca6a1bb41ac80f613e8ba3cfca16169b617e4b5df142b8107bf7300999ed255ffda3c16e36587c5e24bd3e01521cb44b0fd0dab4af45baf2d4bcadb035a656084a3dc9b3cd858a823fecce56b18334556a95ff2cca445e214b3da494b08938a4b4c0e1b90997a53532bc2849c2e12d589d6d99cffeef1535ebb9922d4e5418ecc10df5fed72e1b6307af3cb73fff67e8c5629fc43c88124d510958bc346cfdeac05b7b49a44a3951c0dbe373234a2d50d2e8d8f5dfd75f045b273e7540e524c9d54b3dd11c8456f80066fb6c43df197fafe816be352be2e0393701ec7b1eab80acd83fa00903eba4e2bebb07dd8aabec9847b2c41c93563f5f9da171bf5eb083daa38d686f7911dc02118478db7b658a44bf57762bede58d36030d6297068c62004e7f7caa2aa0fbe20c2a0a6bc64db45016b7395ba4841a4f41ad7e9ef1fd22126ff72f9bfcd3615f00f23368be20cb7a429e4443b04b5ff856435c2311aa1c87e51bda28b49fc7a7f53e815dcd018bad063ab5a0a5b12d2c5e55e3780c399b0f047a58d5244c05e42ebf788cf7d135d00416c18128da52ec36d5eb5b5098838884a14d3d92f088e7831fdbd9d68eafdf75dfb41abf28d2e7fc314745e2d2ea99ed867bab04167058bc7c27124c07f86e772ddddf654bfe997d0382c4a3735fb3a7443fadcf1bf478785a70e0070a141780bac8f4bd64bd15784cec607f6d613f7f3529acb3ff275adfb37f1573761a3f36257780f0e3fba020d62b6eb45e933df36b7d5390e80f413212fd1cbf686d9ca9173a9d5f7dcd185c85f1d525333b2f669b5904943688b7a7198ba851bfd70b5511d2315c5cef3be254c3b49464fb2595f6b91c532189dbac160d6249bd0b8ac3330d1ce0d50bcee80ed87e831cff2f7e64711e1cf3d5da5a6fb8002c57397be9b919ae802710c281def52ee3001b6399c7e4570bbb1a4fba8d877e8fb5f31987a17b918bc44bb68c27d055028b4360b12ed94bbfe46b8f00360438733b605833ad856ac04a0239eae9ca8b2b28d8f66475f4fbeac8439dc62443822c9c38b2536b70b7b00c7d0dc1349eedede1ca6f82da5f033e0f359908fb70269dd0304a086515010bc84a5e895504544a4d4b557d17420bd7e8e4629b9d2a0a7823fe8b54b1a09936811146532e8e0bb8400545dc49103e88f4508bd354638c7111db72e22ab7ec6ad396265928d8ea68e58a7a88bd714b53386ef0b06b204f1a1eb9ba8d0c2296f1d0678ce91ead03eebbcd59fa3fed37bdecb717e8e26a9ebc477d15e6b7c0159227331787d90eaa0d4e69a97319551671e18611c4b547a35fae8a6e01ee1ba4926bb3608306b0a9189c3de83551da3021537c40f51d859d569e38499b76cf8efced00c9e4f3ae00621e4a74c29c72b9a6c62e20f96366c25c5108dd1d25f72dd64db48a63b17fa41aa024bd6390a913a838e4001dad1e656c8dc1304f46e50e3c00f721da50415309886a2dd0841029178c1106dab067406c42abc2734ae6a747c67251661e51cd7dd7e7a5df845f6fb53af99990c40e9505dc5795f0953dcda33619d8c8bfc4d2e9e2414ab80bc77bdb922e75e9d84e4c507324b0a0004e622f5ed89fc6ebc9e49dbd4cad15fa6fc38f012199afd62b6c6c5c58766134dd3cb58af513addac79fd1f776d3a13fbc544c1aeeea3103715069d459cebb455aa173511d68768869ec185ad41054bb0a6ed61c376f869078fa662426f12b427ebb153d12544fdd8c08ba55bdb6be0c94ec82d2b76b399d03da67ab9a242dec3b02d0b788b00fee9249c277b4a295017d02d8e08d6f17eb300f5a1dc9ac5eef3224d7e3ff7027fdf220f0afee826f2882a4f2a78ff767de88c48e79d0adcb55fee06319b60bf0954b8279354900387836d17f9b644875b9907e59a68a3b11403c1f6c3238cace2fa1ec86d04bea605fa86bdcd8cf12c448e662a32a3c59bfcd1cd33425e0b7caee3c88899bc891d7e20c265b03b1642ce0e642088c38a16eb693a644904774b82de1e3bc71a224bf716356211606d878015748a1ad6a58fe691c1727e231380309fdea45f45ee28c3c80ade9e251ddd396d783fac205512c8751fc4f3da9107e33a457b6237e1121088a2c97dc450b46ba6c4850277ba46e7e222713c5fa4f4438470118d1450d4d72f2acf456d94d755791e1f84cd5b680a0a60f6e9c511065c89458ab87f60f0e391f53784424f48dbd8b58bf28f989f93eb78f82037164eb15eefad2d8eea33a4e1f95a6914abf7f5757a7d3821266363f961d1f2415c7f9f55dab2e8e53fddbba63e45850325667dc951e7a58108b31556dd47cc40a9963159beffb1d480ceddff6245f553cbb78223e98db356e4bdcbe9953fcdd6527827eae5419f0320825ce2648e14e29e848c6c2e7b01417a2b9fd4f069c3aeedf983cd4412af2f82264c5d4f7a956582b1041564e5d6ab4fee2ca9ebffcb27218c99d8b6541477f2b5b9c4ae10d60c748f6999010b40e99ef45fe453fb79cefe2e61e4a3e3fc6fb1ce42ad26e41f2a02b52c598a0d5629000429824760e01cf4fd5ef33aa3ccc6d3a718b1f7c2ba5fbe7b0eec2fa7cc27911417ce434809aa874c219c635ae7cefb7968e1b3a62497eaaf1eee046967cfd0c9f6540e05d3f415aae01a11a1f9824a767a3327f0dac933db32a04a7c8e82ab2dd0def4bc847d06a4469fd85ce58da8fb3c40a608bfccb6277fbda2a59cbbb0362dcb0594e15612d50b3a4b7de1435a6b4138008ef5115ead122fd080aa43b435861dd928b1a18e807fab349c7fc0e87f252692bef5b5db3187eaf876b574ca7ef7199091d9a1e13094cd9efea25fc8ce0fee0f9b3be269ef9bfef83f179e8ddd1ef429f7144e58f76d87d5c9256235960b9546645be7557f43d56fbebaa2fe98600320a50832ab33540afde9524551c3cd3460e585fef92e6bd633e6c422d99b1d3875ea9d4c66a1b5536792dfae3aa29cba98c00d595ff2f3e62165d1a115e25b8b52ef05c88b2e348fff927eb8a3a8f82123547368cb6b23ff3a956e55eb5580db2a10b5ecd08f65772a02fbee728ebfc61578ffd4c5e27cfb2acbeb7d2d3be6b438c63fd61b67856f6bcf3387ee551827266ea98c4d074a86b8839e08a7bd65a309f3d05291fd02ede1b865e92070dcc4625e2bd6080c49d092da1e8873fdd6036d5ffe9f4c0c8b46e9aa4a3643a87e5a5e85e4a55863537e5b5154871d93b7a42edc728d5a91da814097433821e9c083823edab3d3e4639c03d60a9f8ed46afcfe0a1349e0d94d88e71eed3cc84bf5af7eb50a8ae4b049b9efd394a2337e6db8342c0ca78b9306222a475db6d7925fcb484cf711dbd03bb75fa77b7da29a86f0b5128f0c87c0d797c91ed583705790826f711a087db787be9c56bb7fbdcd2b408104716866295e5da3075c42fd0307779ee46f7367de7c941ff72a8c038a5c020f1e238620e77ee056119ae7f7951d995a5d5e2a863a558ad8d29f0450e5a9262df963be362e225c27b205e97e21f18c93e4bc032dc39e4c69703b1117f14ed080e7db327a4fab222c7767c683af3d7c0b2d2bb4c7ccc92eec8666fb6d707383ee3fdcf77a649e9efb3d95aef25fcbb73323eed03a6dc1ab01eadaf86ea70799ab33e06933528f98398296f21fb3fbfdbaf4c0ee7a68c445fe9d93b8bbbf6485415856ebba787ee7b792335d70436d7d546f0e76972691ff6142e5eb94f68789c35d9b4f0948571080850ab113ad2fcd5511f9e58bcb96465584c0d41bd05bb02777a4c53cd1c184a8ef9b0d438a018c2507036a96d1009144672935dd1b3c7c623b30d5151c32e326ffa5642fa044f5c31d78837814cda04628b3afc952216f896025ea58bac9541c578a43ad4906cd7ba0612e29592d5df29607f03ffefd1b9c48d08c93923bc94f645eae9fd6b7634980bba114f74bd5ed18f594016a6476434b04461c4d3b34fe200e5450869799f298cc29ffc4ea57219a453c6c5803d5aa04757fce3d5aa26467d3fb684a6c6af8d70ae8757d232172570b0af0f6b7695cb9940cfb06aeaef049d4d6603919c30b26fdaf4f0ef6d9390c1951f027e79b5ac6fc690872a7d197a57b07d5547909c79e106e336ce55be78b2498857eaa2dd7685ad9bfd8537d6543c0881f1180da6531018876858ab1583d91cf8bb04335b832af8efe9df32bd9a21d01c73de685c9594c0ca550d4918ba27c48feb590f9075329004350ab97be1bac240659d590e1a368a2a1df7966abd8d64810d88988d2ec08c85888b7d1644ed805f446769b000bbc376a0f275bc079f16238fcd9c7826c06dc8993d8a2e788ffec2a1f03bed3a2758a8071d714079e245e3afaadc49355570358212112092783c35e5de496ba6608a3436c8ac3139f78eaedb61aed51d4098438219f5099da1d8fb92e73c396876e5bd8c4349b3456454246d3bd0803e71d7813edacf216cfbb0cb1bcdf1bbf489637d6c91da9bc729de9aedcee243da70744c1c3051edd7d7e444c817b64219757d542831e521bf8fb7c488497c232bc1dbc01f46d42448b9a0212f92e97a4c6a846b4909d556dbf8db2f74ec7aae264a85555fd605416955390f62d82e50a0038b5cbda96011c7eefc8f4610afc088669a4746363215547e519d21265af8fd5579f99581afc398d83b62030c2d9d731e0d1549df34e5a66dd20027cf19ce4fbef7ff057331eca9b37c93f4b8f8d1ff98ccd4549c6f46b92e1d2a840c82864f584815d867e13a91117c2c25c7980df8af39b367e35d928714d17c1a51a636d0d761e7c83f68d688e6e1ff91da5b60e9ace8aa814f932bb42ab96c8de6dafa1cf111c3cfe45ce8c5b0b2764b491891f35c86474316c8210906e05341b"}) (async) ioctl$auto_BTRFS_IOC_DEVICES_READY(r1, 0x90009427, &(0x7f0000000040)={@raw=0x8000, "90f76cafdf9350e097b7b41c4bce9027e1427278beb634e4ff4a9bbba4d7f7e88a63db963884a3b5a9618d36b67bc26208db95f99006c537550d92cbc7484a20b3546e5a8518601c773244d928695cd77cbef7d4fb0065edd10d670a4b9f830839535277ad4a024d17a5f6d8ba6e4cad2d70a72aa060b12931eed03755ed42a5412922e6d8d5a98f4b050a5513c6ff1bc983dbbf96b7bd1ae2a514ce48e2d0a50079b4a93680f99112c5bbcd06f22b360f7d07d20fe0a4ed4d2f465d1b0e4ad600a62fd9518c4bef013761ed260766cef5622f52b078105bde182758a9a3e56958d275d9f281386ccba530f8905f57b3f0d3de06b2ef1684af704f73038baffaf929e9d43b2c1131b4a47bda7f18af6cd990419d76076c11cc99425cd9e001ba205b9e587a9e45e8de4fd5a77c31d7dc4c481bec73c665b64ed01215c396e33c19022ca522c509f00291367ed6e2bade11ce0308dafd07dc7601654d75d9db66c3c4595b8788a657208607a8ff2b5d57616668ddc6016d8227a85dafbfa4b7986ba00ecb90c8852f84179d3e7ac2987e72ba9cb2e49486db6670cbf15255cf0be32f5e65fb97d1ce34318cb8251bc47892f36be9420992b9fcf4ead79667866aa2206732d9211a1f4a58438c10ade99862b6563d2bf98bd491aada2b5343f11546154f89d0b22d3a4a1e29ffe58b797917cac97585fa43644075c18ef89f011883f136ef39beb7886d3d28954b460d170859e2168a1d2c552d6fd76e8a76bd11b7025dda3c41759bb6b81fa28916ae9c41eb4a6f5e8d32db3bebc15ed74fa29c3fc0fffba2851e12aa8c8cb20a5432c1c7a89d7dac97cfd7b067491cb489204ad67d7ee39c2bdd9e932a1db11c0600bca8353c1712bb6ca6a1bb41ac80f613e8ba3cfca16169b617e4b5df142b8107bf7300999ed255ffda3c16e36587c5e24bd3e01521cb44b0fd0dab4af45baf2d4bcadb035a656084a3dc9b3cd858a823fecce56b18334556a95ff2cca445e214b3da494b08938a4b4c0e1b90997a53532bc2849c2e12d589d6d99cffeef1535ebb9922d4e5418ecc10df5fed72e1b6307af3cb73fff67e8c5629fc43c88124d510958bc346cfdeac05b7b49a44a3951c0dbe373234a2d50d2e8d8f5dfd75f045b273e7540e524c9d54b3dd11c8456f80066fb6c43df197fafe816be352be2e0393701ec7b1eab80acd83fa00903eba4e2bebb07dd8aabec9847b2c41c93563f5f9da171bf5eb083daa38d686f7911dc02118478db7b658a44bf57762bede58d36030d6297068c62004e7f7caa2aa0fbe20c2a0a6bc64db45016b7395ba4841a4f41ad7e9ef1fd22126ff72f9bfcd3615f00f23368be20cb7a429e4443b04b5ff856435c2311aa1c87e51bda28b49fc7a7f53e815dcd018bad063ab5a0a5b12d2c5e55e3780c399b0f047a58d5244c05e42ebf788cf7d135d00416c18128da52ec36d5eb5b5098838884a14d3d92f088e7831fdbd9d68eafdf75dfb41abf28d2e7fc314745e2d2ea99ed867bab04167058bc7c27124c07f86e772ddddf654bfe997d0382c4a3735fb3a7443fadcf1bf478785a70e0070a141780bac8f4bd64bd15784cec607f6d613f7f3529acb3ff275adfb37f1573761a3f36257780f0e3fba020d62b6eb45e933df36b7d5390e80f413212fd1cbf686d9ca9173a9d5f7dcd185c85f1d525333b2f669b5904943688b7a7198ba851bfd70b5511d2315c5cef3be254c3b49464fb2595f6b91c532189dbac160d6249bd0b8ac3330d1ce0d50bcee80ed87e831cff2f7e64711e1cf3d5da5a6fb8002c57397be9b919ae802710c281def52ee3001b6399c7e4570bbb1a4fba8d877e8fb5f31987a17b918bc44bb68c27d055028b4360b12ed94bbfe46b8f00360438733b605833ad856ac04a0239eae9ca8b2b28d8f66475f4fbeac8439dc62443822c9c38b2536b70b7b00c7d0dc1349eedede1ca6f82da5f033e0f359908fb70269dd0304a086515010bc84a5e895504544a4d4b557d17420bd7e8e4629b9d2a0a7823fe8b54b1a09936811146532e8e0bb8400545dc49103e88f4508bd354638c7111db72e22ab7ec6ad396265928d8ea68e58a7a88bd714b53386ef0b06b204f1a1eb9ba8d0c2296f1d0678ce91ead03eebbcd59fa3fed37bdecb717e8e26a9ebc477d15e6b7c0159227331787d90eaa0d4e69a97319551671e18611c4b547a35fae8a6e01ee1ba4926bb3608306b0a9189c3de83551da3021537c40f51d859d569e38499b76cf8efced00c9e4f3ae00621e4a74c29c72b9a6c62e20f96366c25c5108dd1d25f72dd64db48a63b17fa41aa024bd6390a913a838e4001dad1e656c8dc1304f46e50e3c00f721da50415309886a2dd0841029178c1106dab067406c42abc2734ae6a747c67251661e51cd7dd7e7a5df845f6fb53af99990c40e9505dc5795f0953dcda33619d8c8bfc4d2e9e2414ab80bc77bdb922e75e9d84e4c507324b0a0004e622f5ed89fc6ebc9e49dbd4cad15fa6fc38f012199afd62b6c6c5c58766134dd3cb58af513addac79fd1f776d3a13fbc544c1aeeea3103715069d459cebb455aa173511d68768869ec185ad41054bb0a6ed61c376f869078fa662426f12b427ebb153d12544fdd8c08ba55bdb6be0c94ec82d2b76b399d03da67ab9a242dec3b02d0b788b00fee9249c277b4a295017d02d8e08d6f17eb300f5a1dc9ac5eef3224d7e3ff7027fdf220f0afee826f2882a4f2a78ff767de88c48e79d0adcb55fee06319b60bf0954b8279354900387836d17f9b644875b9907e59a68a3b11403c1f6c3238cace2fa1ec86d04bea605fa86bdcd8cf12c448e662a32a3c59bfcd1cd33425e0b7caee3c88899bc891d7e20c265b03b1642ce0e642088c38a16eb693a644904774b82de1e3bc71a224bf716356211606d878015748a1ad6a58fe691c1727e231380309fdea45f45ee28c3c80ade9e251ddd396d783fac205512c8751fc4f3da9107e33a457b6237e1121088a2c97dc450b46ba6c4850277ba46e7e222713c5fa4f4438470118d1450d4d72f2acf456d94d755791e1f84cd5b680a0a60f6e9c511065c89458ab87f60f0e391f53784424f48dbd8b58bf28f989f93eb78f82037164eb15eefad2d8eea33a4e1f95a6914abf7f5757a7d3821266363f961d1f2415c7f9f55dab2e8e53fddbba63e45850325667dc951e7a58108b31556dd47cc40a9963159beffb1d480ceddff6245f553cbb78223e98db356e4bdcbe9953fcdd6527827eae5419f0320825ce2648e14e29e848c6c2e7b01417a2b9fd4f069c3aeedf983cd4412af2f82264c5d4f7a956582b1041564e5d6ab4fee2ca9ebffcb27218c99d8b6541477f2b5b9c4ae10d60c748f6999010b40e99ef45fe453fb79cefe2e61e4a3e3fc6fb1ce42ad26e41f2a02b52c598a0d5629000429824760e01cf4fd5ef33aa3ccc6d3a718b1f7c2ba5fbe7b0eec2fa7cc27911417ce434809aa874c219c635ae7cefb7968e1b3a62497eaaf1eee046967cfd0c9f6540e05d3f415aae01a11a1f9824a767a3327f0dac933db32a04a7c8e82ab2dd0def4bc847d06a4469fd85ce58da8fb3c40a608bfccb6277fbda2a59cbbb0362dcb0594e15612d50b3a4b7de1435a6b4138008ef5115ead122fd080aa43b435861dd928b1a18e807fab349c7fc0e87f252692bef5b5db3187eaf876b574ca7ef7199091d9a1e13094cd9efea25fc8ce0fee0f9b3be269ef9bfef83f179e8ddd1ef429f7144e58f76d87d5c9256235960b9546645be7557f43d56fbebaa2fe98600320a50832ab33540afde9524551c3cd3460e585fef92e6bd633e6c422d99b1d3875ea9d4c66a1b5536792dfae3aa29cba98c00d595ff2f3e62165d1a115e25b8b52ef05c88b2e348fff927eb8a3a8f82123547368cb6b23ff3a956e55eb5580db2a10b5ecd08f65772a02fbee728ebfc61578ffd4c5e27cfb2acbeb7d2d3be6b438c63fd61b67856f6bcf3387ee551827266ea98c4d074a86b8839e08a7bd65a309f3d05291fd02ede1b865e92070dcc4625e2bd6080c49d092da1e8873fdd6036d5ffe9f4c0c8b46e9aa4a3643a87e5a5e85e4a55863537e5b5154871d93b7a42edc728d5a91da814097433821e9c083823edab3d3e4639c03d60a9f8ed46afcfe0a1349e0d94d88e71eed3cc84bf5af7eb50a8ae4b049b9efd394a2337e6db8342c0ca78b9306222a475db6d7925fcb484cf711dbd03bb75fa77b7da29a86f0b5128f0c87c0d797c91ed583705790826f711a087db787be9c56bb7fbdcd2b408104716866295e5da3075c42fd0307779ee46f7367de7c941ff72a8c038a5c020f1e238620e77ee056119ae7f7951d995a5d5e2a863a558ad8d29f0450e5a9262df963be362e225c27b205e97e21f18c93e4bc032dc39e4c69703b1117f14ed080e7db327a4fab222c7767c683af3d7c0b2d2bb4c7ccc92eec8666fb6d707383ee3fdcf77a649e9efb3d95aef25fcbb73323eed03a6dc1ab01eadaf86ea70799ab33e06933528f98398296f21fb3fbfdbaf4c0ee7a68c445fe9d93b8bbbf6485415856ebba787ee7b792335d70436d7d546f0e76972691ff6142e5eb94f68789c35d9b4f0948571080850ab113ad2fcd5511f9e58bcb96465584c0d41bd05bb02777a4c53cd1c184a8ef9b0d438a018c2507036a96d1009144672935dd1b3c7c623b30d5151c32e326ffa5642fa044f5c31d78837814cda04628b3afc952216f896025ea58bac9541c578a43ad4906cd7ba0612e29592d5df29607f03ffefd1b9c48d08c93923bc94f645eae9fd6b7634980bba114f74bd5ed18f594016a6476434b04461c4d3b34fe200e5450869799f298cc29ffc4ea57219a453c6c5803d5aa04757fce3d5aa26467d3fb684a6c6af8d70ae8757d232172570b0af0f6b7695cb9940cfb06aeaef049d4d6603919c30b26fdaf4f0ef6d9390c1951f027e79b5ac6fc690872a7d197a57b07d5547909c79e106e336ce55be78b2498857eaa2dd7685ad9bfd8537d6543c0881f1180da6531018876858ab1583d91cf8bb04335b832af8efe9df32bd9a21d01c73de685c9594c0ca550d4918ba27c48feb590f9075329004350ab97be1bac240659d590e1a368a2a1df7966abd8d64810d88988d2ec08c85888b7d1644ed805f446769b000bbc376a0f275bc079f16238fcd9c7826c06dc8993d8a2e788ffec2a1f03bed3a2758a8071d714079e245e3afaadc49355570358212112092783c35e5de496ba6608a3436c8ac3139f78eaedb61aed51d4098438219f5099da1d8fb92e73c396876e5bd8c4349b3456454246d3bd0803e71d7813edacf216cfbb0cb1bcdf1bbf489637d6c91da9bc729de9aedcee243da70744c1c3051edd7d7e444c817b64219757d542831e521bf8fb7c488497c232bc1dbc01f46d42448b9a0212f92e97a4c6a846b4909d556dbf8db2f74ec7aae264a85555fd605416955390f62d82e50a0038b5cbda96011c7eefc8f4610afc088669a4746363215547e519d21265af8fd5579f99581afc398d83b62030c2d9d731e0d1549df34e5a66dd20027cf19ce4fbef7ff057331eca9b37c93f4b8f8d1ff98ccd4549c6f46b92e1d2a840c82864f584815d867e13a91117c2c25c7980df8af39b367e35d928714d17c1a51a636d0d761e7c83f68d688e6e1ff91da5b60e9ace8aa814f932bb42ab96c8de6dafa1cf111c3cfe45ce8c5b0b2764b491891f35c86474316c8210906e05341b"}) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001140)='/dev/audio1\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x8) (async) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001080)='/dev/snd/controlC0\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x83) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(0x3, 0x40045532, 0x38) (async) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/loop10\x00', 0x101040, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/loop10\x00', 0x101040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/sctp/max_autoclose\x00', 0x141241, 0x0) 4.812332288s ago: executing program 6 (id=1291): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) socket(0x15, 0x5, 0x0) socket(0xa, 0x1, 0x84) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) read$auto_clear_warn_once_fops_(r1, &(0x7f0000000300)=""/169, 0xa9) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) mmap$auto(0x8000000000000001, 0x8, 0x8, 0xebe, r2, 0x1000000008000) capset$auto(&(0x7f0000000140), 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) mmap$auto(0x100000001, 0x100, 0x7fffffffffffffff, 0x7fff, 0xffffffffffffffff, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r4 = socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x802}, 0x44801) ioctl$auto(r4, 0x8b0f, 0x24) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe) 4.615168235s ago: executing program 2 (id=1292): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = memfd_create$auto(0x0, 0xe) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0xffffffffffffffff, 0x12, &(0x7f00000003c0)={@_si_pad}) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x2c, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x401}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x8000) r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r6, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) (async) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) close_range$auto(0x2, 0x8, 0x0) 3.758087494s ago: executing program 6 (id=1293): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x48041, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = signalfd4$auto(r2, &(0x7f0000000280)={0x7}, 0x8, 0x10001) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = socket(0x2b, 0x1, 0x1) sendmmsg$auto(r4, 0x0, 0x7, 0x20020000) listmount$auto(0x0, &(0x7f0000000240)=0x8001, 0x8000, 0xdce) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = io_uring_setup$auto(0x7, 0x0) r6 = socket(0x2a, 0x2, 0x6) set_mempolicy$auto(0x8000, 0x0, 0x3936) connect$auto(r6, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) name_to_handle_at$auto(r5, &(0x7f0000000040)='/dev/snd/controlC2\x00', &(0x7f0000000140)={0x61, 0x7, "ae90d3a8d4a02113a465b311e54097bce99a5a62eb9b7b268d09e25bc3daa9041f9e1ba97722ea7e2cc5653a11d8bfb5dff97a376ddeed9227b8360e09018b9b85cc9ac1a50b39026f0424f9104daffbed7b2df29408e32472a882827676fff14f"}, &(0x7f00000001c0)="db", 0xffffff76) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, &(0x7f00000000c0)={0x2, 0x6, 0x1, @inferred=0x0, &(0x7f0000000080)={@inferred, 0x4, 0x6, 0x5e, "fab1a714d4e8023bb46a64b835b51af88afdeafaffd491b52c156fe3d4021d4e94c2ff81bd8da39aa44fac17", @raw=0xe0000000}, "c659491445a51b365f4e27e0b5d5f45157b60c95830c727cfc4f3d31beb5e1eec43735fd1b3784bbc591a7f61ea489070095"}) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$auto(0x3, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000300), r6) r9 = socket(0x2, 0x1, 0x0) getsockopt$auto(r9, 0x0, 0x62, 0x0, &(0x7f00000000c0)=0x565) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000440), r5) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r9, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x148, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x134, 0x2, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @pid=r8}, @typed={0x16, 0x2c, 0x0, 0x0, @str='./cgroup.cpu/syz1\x00'}, @nested={0x10f, 0x13d, 0x0, 0x1, [@generic="a4c0633724f8868b3298db4f4050ae551c600dbea01a8cd38f87daadcb78d2140213ee83bfba9661e4bf15f62a1ece8dbc17db99c41b5a302a630614c6cf51b42171e3839d3899a294a2245bcd694dbd7bf6a97bd6dfed0edf41426da7beded9aa2894aff0b56714b0633bee348638e58b86ce856f5cbd930996697cff0e1ff97c4bafe433ab983a95785f792ff8158ebaf171f9baf1c928242d4738e7be34042dff2d657beb292a96b7e10b3fab5bc9f2d2e564c51deac6a4348d933de8e038b20a32e7e7f406016475f331c9e0cec7b24379149f9aa5046643c0", @typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x46, 0x0, 0x0, @pid=r8}, @generic, @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xb, 0x2, 0x0, 0x0, @str='netdev\x00'}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x5090}, 0x40c1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20040001) close_range$auto(0x2, 0x8, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)="1c52", 0x2) write$auto(r0, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) 3.622927283s ago: executing program 7 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x1}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x18, 0x25, 0x0, 0x1, [@typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@empty}]}]}, 0x38}}, 0x10) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) access$auto(0x0, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_TXTIME(r2, 0x1, 0x3d, &(0x7f00000006c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000700)=0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x1}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x18, 0x25, 0x0, 0x1, [@typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@empty}]}]}, 0x38}}, 0x10) (async) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) (async) access$auto(0x0, 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$auto_SO_TXTIME(r2, 0x1, 0x3d, &(0x7f00000006c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000700)=0x5) (async) 3.528202961s ago: executing program 4 (id=1295): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x1800) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000000)='./file0\x00', 0x1001, 0x4) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f00000001c0)={0x67, 0x4, 0x7fff, 0x5, 0x80000000007, 0x200001, 0x80000001, 0x80000000ff, 0x5, 0x7, 0xfbfffffe, 0x3, 0x1006c, 0x7, 0xc}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(r1, r1, 0xfffffff9) mmap$auto(0x0, 0x200000000400006, 0x8, 0x9b72, 0x8000000000000003, 0x8000000000000000) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlink$auto(0x0, 0x0) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r3, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230027bd7000fedbdf25090000003c0003803800018034000b80280067800400328004009480049e94000000000000001a00050000000000000008005900", @ANYRES8=r3, @ANYBLOB="0800c800ac1e01010400028008000100", @ANYRES32=r4, @ANYBLOB="8e4341648e3914066c5b314448aba67813e8a8d156150b84232fd982f3b56c3089e499b182c64b4a07822d527eb9243f7fcda58dac3238ecb65c7e5619fc99a9d1e93091f0dee581f780bf5edd9ef3f649f18fec9baaa8098175ef1a60a3f8a4ec0b8212d8896a7f68a2a83f3d598e7ffb995d8725bfb7ae621fad976d9628e7e70b77a20e"], 0x5c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 3.406094059s ago: executing program 7 (id=1296): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(r0, 0x6e, 0x4, 0x0, 0x6) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) getdents$auto(r1, &(0x7f0000000040)={0x7ff, 0x100, 0x6}, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'dummy0\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000) 3.225735453s ago: executing program 6 (id=1297): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) r0 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x20008804}, 0x40) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram12\x00', 0x0, 0x0) ioctl$auto_HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) 2.734711512s ago: executing program 2 (id=1298): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = syz_clone(0x20000000, &(0x7f00000001c0)="5d72feef34fdd0a27eb7e56df38f250987e0b8310f39e532cdbde8cec75ce9f048e94dfcea0d8baa52e6066d3de97f52d6f6759adafcb54ea5eaf500c90ed43cbbd056ee311eb07318bce86195a2af8c5eefebf3bf73a44746899517887b74b3fe27ecefeae5006b3b51d1891fb12b60b6a576fefe084a9d6ca9bcfc53e50918e8f8faaa9743f30409a28a69907879cc9a387311dc6292fb1308764cced3b7b8fd20fff070f3e0854070d7b45f6660ad29105c", 0xb3, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7") r6 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r7 = set_tid_address$auto(&(0x7f0000000500)=0x5) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="34050000", @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95f64ca8dce56ad81f3544cd13185920f4b3cf6824134e2df6d3630800c500", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb7109d5df3d29eb45fdec0800050001040000e603038008001500", @ANYRES32=r5, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a80040047800400998008004600", @ANYRES32=r6, @ANYBLOB="57ba479ceef4e6818324b1e9f97fa97bbe3ce31a348cfecb7eec2ef684a20d2ea23398226e773ef1df8719e25ae127e2fcb014daabd30bea4e395f065bebc9c55ca74c7170fa16912b9b54004794ad5d85392503b27624cb7f4b83bbe614fb416f04813fa9a47f303a598ce4ec013c3187ad375eaf61b8e1e49010e1aa0609b7978b149b275524b056e248cc1fcefd092668aca115baa909239baa89e380df020526f0a0bab67ed14d5e55eacdcc09475ce8c32099979a6b51978b761469bfa1790de1824cb99352f038dd88beedd909dea608002900", @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYRES32=r7, @ANYBLOB="0800e300", @ANYRES32, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) r8 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r8, 0x80046f45, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x4a100, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r9 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r9, &(0x7f0000000100)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb84877", 0x20) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x10, 0x6, 0x7, 0xffffffffffffff78, 0x8) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x22, 0x0, 0x10) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2.696723318s ago: executing program 6 (id=1299): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = socket(0xa, 0x5, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000100), 0x0) mmap$auto(0x0, 0x8, 0x10000000000008, 0xeb1, 0xfffffffffffffffa, 0x7ffc) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) sendmsg$auto_SMC_PNETID_DEL(r1, 0x0, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kt\xdf\x1ao\x06\x89|%\'hf!\x04\xb4\x80U\xa14m\xfa\xf4\xa8g\ta{\xc4', 0x200000000009) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) getsockopt$auto(r0, 0x84, 0x75, 0x0, 0x0) 2.447000461s ago: executing program 7 (id=1300): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010103, 0x2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x6, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) 1.50549477s ago: executing program 6 (id=1301): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r1, 0xc0c0128e, r1) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)={0x1, 0x7, 0x17, 0x8, 0x1, 0x63, 0x10, 0x3, 0x3}) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_MAX_PACING_RATE(r0, 0x4, 0x2f, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', &(0x7f00000000c0)=0x1) mmap$auto(0x4ab8f800, 0xa0009, 0x4000000000db, 0x11, 0xffffffffffffffff, 0x18002) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=@token_create={0xa, r5}, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0xa00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="09032dbd7000fcdbdf000000ffff0000000000000000e1ca4d0d333be83d94d1ae82fe4d531d08ac45094a640137d561abe97ad44b28808f2c3e39ea1abf701f00e605f2d8f8d248c83889cace2e0dcaeffc588762f7f70e729c0995cc9a5c3d277dbbca907d2a4cd7a06bab1ecf935e4cc6d424952e0b928d4ff420075bcefdb6d51be8"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 808.686887ms ago: executing program 7 (id=1302): mmap$auto(0x0, 0x2000000000000007, 0xdc, 0xeb1, 0x401, 0x7ffd) (async) ioctl$auto_BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (rerun: 64) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd1/mq/0/nr_reserved_tags\x00', 0xf1d2746458bf59cd, 0x0) read$auto(r1, 0x0, 0x7) read$auto_snd_rawmidi_f_ops_rawmidi(r0, &(0x7f0000000040)=""/91, 0x5b) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 32) r3 = setfsuid$auto(0xee00) (rerun: 32) setreuid$auto(r3, 0x0) (async) shmctl$auto_SHM_INFO(0x100, 0xe, &(0x7f00000003c0)={{0x200, 0x0, 0x0, 0xe0000000, 0x0, 0x62f, 0x401}, 0x8000, 0xfff, 0x6, 0x3, @inferred=0xffffffffffffffff, @raw=0x8, 0xa2, 0x0, &(0x7f0000000180)="5026a4064e8227", 0x0}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x1, 0x0) pwrite64$auto(r4, &(0x7f0000000100)='/dev/sda1\x00', 0xe, 0x7) (async, rerun: 64) r5 = setfsuid$auto(0xee00) (rerun: 64) setreuid$auto(r5, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (rerun: 64) r6 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) write$auto_proc_pid_set_comm_operations_base(r6, &(0x7f0000000000)="bcba", 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) 789.24505ms ago: executing program 2 (id=1303): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x75, 0x20400000000ffb, 0x80000011, 0x3, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x83) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x10) sysfs$auto(0x2, 0x23, 0x0) r1 = fsopen$auto(0x0, 0x5) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) close_range$auto(r1, r0, 0x2) readv$auto(r3, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/stat\x00', 0x240, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0x840, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000180)=""/138, 0x8a) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000300)=""/251, 0xfb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/dev_snmp6/macvtap0\x00', 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) symlink$auto(&(0x7f0000000400)='./file0\x00', 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) 0s ago: executing program 6 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c06, 0x0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) pkey_free$auto(0x9d5e) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r4 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004091}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf25110000000c00098008000100", @ANYRES32=0x0, @ANYBLOB="9c4046"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) kernel console output (not intermixed with test programs): nk: set zone limit has 8 unknown bytes [ 331.906737][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 332.990911][ T9249] netlink: 'syz.2.645': attribute type 11 has an invalid length. [ 333.050804][ T9249] netlink: 'syz.2.645': attribute type 11 has an invalid length. [ 333.098608][ T9249] netlink: 'syz.2.645': attribute type 11 has an invalid length. [ 335.558814][ T9293] netlink: 'syz.5.658': attribute type 11 has an invalid length. [ 335.607788][ T9293] netlink: 'syz.5.658': attribute type 11 has an invalid length. [ 335.641927][ T9293] netlink: 'syz.5.658': attribute type 11 has an invalid length. [ 336.229085][ T9299] netlink: 342 bytes leftover after parsing attributes in process `syz.5.659'. [ 338.183110][ T9330] netlink: 'syz.5.667': attribute type 11 has an invalid length. [ 338.228636][ T9330] netlink: 'syz.5.667': attribute type 11 has an invalid length. [ 338.318668][ T9330] netlink: 'syz.5.667': attribute type 11 has an invalid length. [ 338.606744][ T9332] openvswitch: netlink: Key type 29 is not supported [ 339.600230][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 340.939479][ T9359] bridge0: port 3(veth0_to_bridge) entered blocking state [ 340.957773][ T9359] bridge0: port 3(veth0_to_bridge) entered disabled state [ 340.990526][ T9359] veth0_to_bridge: entered allmulticast mode [ 341.028706][ T9359] veth0_to_bridge: entered promiscuous mode [ 341.056822][ T9359] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.125737][ T9359] bridge0: port 3(veth0_to_bridge) entered blocking state [ 341.133052][ T9359] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 343.646670][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.688'. [ 344.737222][ T9403] FAULT_INJECTION: forcing a failure. [ 344.737222][ T9403] name fail_futex, interval 1, probability 0, space 0, times 0 [ 344.787464][ T9403] CPU: 1 UID: 0 PID: 9403 Comm: syz.4.689 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.787517][ T9403] Tainted: [L]=SOFTLOCKUP [ 344.787533][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.787551][ T9403] Call Trace: [ 344.787561][ T9403] [ 344.787573][ T9403] dump_stack_lvl+0x16c/0x1f0 [ 344.787630][ T9403] should_fail_ex+0x512/0x640 [ 344.787674][ T9403] get_futex_key+0x1d0/0x15f0 [ 344.787715][ T9403] ? __pfx_get_futex_key+0x10/0x10 [ 344.787750][ T9403] ? reacquire_held_locks+0xcd/0x1f0 [ 344.787782][ T9403] ? release_sock+0x21/0x220 [ 344.787825][ T9403] ? do_raw_spin_lock+0x12c/0x2b0 [ 344.787865][ T9403] futex_wake+0xea/0x530 [ 344.787910][ T9403] ? rcu_is_watching+0x12/0xc0 [ 344.787956][ T9403] ? __pfx_futex_wake+0x10/0x10 [ 344.787996][ T9403] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.788048][ T9403] ? __local_bh_enable_ip+0xa4/0x120 [ 344.788097][ T9403] ? __pfx_sock_fasync+0x10/0x10 [ 344.788156][ T9403] ? do_vfs_ioctl+0x128/0x14f0 [ 344.788203][ T9403] do_futex+0x1e3/0x350 [ 344.788241][ T9403] ? __pfx_do_futex+0x10/0x10 [ 344.788280][ T9403] ? find_held_lock+0x2b/0x80 [ 344.788327][ T9403] __x64_sys_futex+0x1e0/0x4c0 [ 344.788367][ T9403] ? __fget_files+0x20e/0x3c0 [ 344.788412][ T9403] ? __pfx___x64_sys_futex+0x10/0x10 [ 344.788452][ T9403] ? fput+0x70/0xf0 [ 344.788485][ T9403] do_syscall_64+0xcd/0xf80 [ 344.788516][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.788549][ T9403] RIP: 0033:0x7f008e38f7c9 [ 344.788574][ T9403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.788606][ T9403] RSP: 002b:00007f008f2630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 344.788635][ T9403] RAX: ffffffffffffffda RBX: 00007f008e5e5fa8 RCX: 00007f008e38f7c9 [ 344.788657][ T9403] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f008e5e5fac [ 344.788677][ T9403] RBP: 00007f008e5e5fa0 R08: 00007f008f264000 R09: 0000000000000000 [ 344.788697][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.788716][ T9403] R13: 00007f008e5e6038 R14: 00007ffec4c86bb0 R15: 00007ffec4c86c98 [ 344.788756][ T9403] [ 348.825606][ T9435] FAULT_INJECTION: forcing a failure. [ 348.825606][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 348.869172][ T9435] CPU: 0 UID: 0 PID: 9435 Comm: syz.4.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.869226][ T9435] Tainted: [L]=SOFTLOCKUP [ 348.869237][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.869256][ T9435] Call Trace: [ 348.869267][ T9435] [ 348.869279][ T9435] dump_stack_lvl+0x16c/0x1f0 [ 348.869337][ T9435] should_fail_ex+0x512/0x640 [ 348.869372][ T9435] ? __kmalloc_noprof+0xca/0x910 [ 348.869412][ T9435] should_failslab+0xc2/0x120 [ 348.869462][ T9435] __kmalloc_noprof+0xeb/0x910 [ 348.869493][ T9435] ? __kernel_text_address+0xd/0x40 [ 348.869528][ T9435] ? unwind_get_return_address+0x59/0xa0 [ 348.869569][ T9435] ? constrain_params_by_rules+0x175/0xca0 [ 348.869610][ T9435] ? constrain_params_by_rules+0x175/0xca0 [ 348.869642][ T9435] constrain_params_by_rules+0x175/0xca0 [ 348.869684][ T9435] ? stack_trace_save+0x8e/0xc0 [ 348.869742][ T9435] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 348.869775][ T9435] ? is_bpf_text_address+0x94/0x1a0 [ 348.869827][ T9435] ? __kasan_kmalloc+0xaa/0xb0 [ 348.869867][ T9435] ? snd_pcm_oss_change_params_locked+0x86d/0x3ab0 [ 348.869902][ T9435] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 348.869941][ T9435] ? snd_pcm_oss_sync+0x1de/0x840 [ 348.869988][ T9435] ? snd_interval_refine+0x2fa/0x580 [ 348.870037][ T9435] snd_pcm_hw_refine+0x7de/0xad0 [ 348.870075][ T9435] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 348.870124][ T9435] ? snd_interval_refine+0x2fa/0x580 [ 348.870170][ T9435] snd_pcm_oss_change_params_locked+0x220c/0x3ab0 [ 348.870208][ T9435] ? __mutex_lock+0x217/0x1ca0 [ 348.870247][ T9435] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 348.870280][ T9435] ? __pfx___mutex_lock+0x10/0x10 [ 348.870337][ T9435] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 348.870370][ T9435] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 348.870400][ T9435] snd_pcm_oss_sync+0x1de/0x840 [ 348.870436][ T9435] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 348.870467][ T9435] snd_pcm_oss_release+0x28b/0x310 [ 348.870502][ T9435] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 348.870533][ T9435] __fput+0x402/0xb70 [ 348.870572][ T9435] task_work_run+0x150/0x240 [ 348.870607][ T9435] ? __pfx_task_work_run+0x10/0x10 [ 348.870637][ T9435] ? __do_sys_close_range+0x278/0x730 [ 348.870713][ T9435] exit_to_user_mode_loop+0xfb/0x540 [ 348.870757][ T9435] do_syscall_64+0x4ee/0xf80 [ 348.870787][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.870818][ T9435] RIP: 0033:0x7f008e38f7c9 [ 348.870842][ T9435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.870871][ T9435] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 348.870899][ T9435] RAX: 0000000000000000 RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 348.870946][ T9435] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 348.870964][ T9435] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 348.870982][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.871000][ T9435] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 348.871042][ T9435] [ 353.359282][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.716'. [ 356.786150][ T9565] netlink: 342 bytes leftover after parsing attributes in process `syz.2.725'. [ 363.631350][ T9655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.647656][ T9655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.680772][ T9655] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 363.710996][ T9655] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 363.762313][ T9655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.778395][ T9655] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 363.934157][ T9655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 363.943772][ T9655] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 364.079127][ T9655] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 364.454631][ T30] audit: type=1800 audit(1768505658.133:6): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.751" name="dbroot" dev="configfs" ino=29064 res=0 errno=0 [ 365.652523][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.658773][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 365.728614][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 365.818540][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 365.988558][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 367.809636][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 367.892318][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 368.048874][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 369.721835][ T9753] netlink: 342 bytes leftover after parsing attributes in process `syz.5.769'. [ 370.129511][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 370.324195][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.774'. [ 370.403750][ T9772] netlink: 334 bytes leftover after parsing attributes in process `syz.5.771'. [ 370.471281][ T9768] bond0: entered promiscuous mode [ 370.476437][ T9768] bond_slave_0: entered promiscuous mode [ 370.482610][ T9768] bond_slave_1: entered promiscuous mode [ 370.522543][ T9768] bond0: entered allmulticast mode [ 370.529718][ T9768] bond_slave_0: entered allmulticast mode [ 370.537826][ T9768] bond_slave_1: entered allmulticast mode [ 370.947549][ T9778] netlink: 342 bytes leftover after parsing attributes in process `syz.5.775'. [ 373.203394][ T9815] netlink: 234 bytes leftover after parsing attributes in process `syz.1.783'. [ 373.382556][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 373.542550][ T9818] bond0: (slave bond_slave_0): Releasing backup interface [ 378.858260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 378.870730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.883130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.896568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 378.908943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.921661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.935026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 378.947450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.959835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.973045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 383.858763][ C1] net_ratelimit: 7685 callbacks suppressed [ 383.858783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 383.877350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.889799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.902967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 383.915318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.927728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.940941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 383.953303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.965677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.979068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 388.869719][ C1] net_ratelimit: 8639 callbacks suppressed [ 388.869746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 388.888279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.900896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.914789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 388.927485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.940100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.953858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 388.966560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.979315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.993180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 389.103478][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.128514][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.317648][ C0] sched: DL replenish lagged too much [ 393.879415][ C1] net_ratelimit: 9135 callbacks suppressed [ 393.879436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.897866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 393.910429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.922756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.935954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.948335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 393.960703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.973172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.986572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.998994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 397.794445][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.813011][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.822256][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.830772][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.838964][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.889344][ C1] net_ratelimit: 8238 callbacks suppressed [ 398.889363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.907792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 398.920188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.932601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.945678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.958519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 398.970962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.983435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.996620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.009125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 399.469173][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.798'. [ 399.838720][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.798'. [ 399.969826][ T5836] Bluetooth: hci1: command tx timeout [ 402.074734][ T5836] Bluetooth: hci1: command tx timeout [ 402.220091][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 402.241302][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 402.265821][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 402.291223][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 402.309248][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 403.898676][ C1] net_ratelimit: 7505 callbacks suppressed [ 403.898695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.918236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.930726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 403.943191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.955592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.968920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.981356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 403.993716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.006282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.019533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.129187][ T5836] Bluetooth: hci1: command tx timeout [ 404.368587][ T5836] Bluetooth: hci6: command tx timeout [ 406.750107][ T5847] Bluetooth: hci6: command tx timeout [ 406.755661][ T5836] Bluetooth: hci1: command tx timeout [ 408.768575][ T5836] Bluetooth: hci6: command tx timeout [ 408.910015][ C1] net_ratelimit: 8359 callbacks suppressed [ 408.910042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.928746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 408.941330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.953992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.967820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.980457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 408.993045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.005666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.019477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.032133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 411.028552][ T5836] Bluetooth: hci6: command tx timeout [ 413.918969][ C1] net_ratelimit: 9010 callbacks suppressed [ 413.918990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.937470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 413.949933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.962285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.975444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.987961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 414.000361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.012943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.026146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.038777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 418.928936][ C1] net_ratelimit: 8738 callbacks suppressed [ 418.928958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.947186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 418.959551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.971921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.985076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.997431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 419.009772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.022101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.035324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.047687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 419.143138][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 420.075906][ T6556] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.939671][ C1] net_ratelimit: 9094 callbacks suppressed [ 423.939697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.958367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 423.970990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.983616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.997404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.010199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 424.022774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.035335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.048979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.061534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 424.081465][ T6556] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.427231][ T6556] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.027997][ T6556] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.269402][ T9899] chnl_net:caif_netlink_parms(): no params data found [ 427.989384][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.016605][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.038775][ T9886] bridge_slave_0: entered allmulticast mode [ 428.090798][ T9886] bridge_slave_0: entered promiscuous mode [ 428.948640][ C1] net_ratelimit: 9166 callbacks suppressed [ 428.948662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.967095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 428.979615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.992125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.005293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.017666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 429.030050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.042362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.055442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.067788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 429.329716][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.336948][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.417524][ T9886] bridge_slave_1: entered allmulticast mode [ 429.460803][ T9886] bridge_slave_1: entered promiscuous mode [ 430.353610][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.619563][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.781494][ T9886] team0: Port device team_slave_0 added [ 431.977152][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.020386][ T9899] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.027726][ T9899] bridge_slave_0: entered allmulticast mode [ 432.125475][ T9899] bridge_slave_0: entered promiscuous mode [ 432.205333][ T9886] team0: Port device team_slave_1 added [ 432.244134][ T9899] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.304406][ T9899] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.358770][ T9899] bridge_slave_1: entered allmulticast mode [ 432.507995][ T9899] bridge_slave_1: entered promiscuous mode [ 433.438590][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.496821][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.598811][ T9952] FAULT_INJECTION: forcing a failure. [ 433.598811][ T9952] name failslab, interval 1, probability 0, space 0, times 0 [ 433.616336][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.4.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.616387][ T9952] Tainted: [L]=SOFTLOCKUP [ 433.616398][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.616428][ T9952] Call Trace: [ 433.616437][ T9952] [ 433.616450][ T9952] dump_stack_lvl+0x16c/0x1f0 [ 433.616510][ T9952] should_fail_ex+0x512/0x640 [ 433.616546][ T9952] ? __kmalloc_cache_noprof+0x5f/0x800 [ 433.616588][ T9952] should_failslab+0xc2/0x120 [ 433.616640][ T9952] __kmalloc_cache_noprof+0x80/0x800 [ 433.616677][ T9952] ? snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 433.616722][ T9952] ? snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 433.616759][ T9952] snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 433.616797][ T9952] ? trace_contention_end+0xb5/0x110 [ 433.616831][ T9952] ? __mutex_lock+0x27b/0x1ca0 [ 433.616874][ T9952] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 433.616908][ T9952] ? find_held_lock+0x2b/0x80 [ 433.616950][ T9952] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 433.616985][ T9952] ? __pfx___mutex_lock+0x10/0x10 [ 433.617030][ T9952] ? __pfx_default_wake_function+0x10/0x10 [ 433.617089][ T9952] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 433.617128][ T9952] snd_pcm_oss_sync+0x1de/0x840 [ 433.617167][ T9952] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 433.617202][ T9952] snd_pcm_oss_release+0x28b/0x310 [ 433.617249][ T9952] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 433.617283][ T9952] __fput+0x402/0xb70 [ 433.617328][ T9952] task_work_run+0x150/0x240 [ 433.617365][ T9952] ? __pfx_task_work_run+0x10/0x10 [ 433.617398][ T9952] ? __do_sys_close_range+0x278/0x730 [ 433.617461][ T9952] exit_to_user_mode_loop+0xfb/0x540 [ 433.617504][ T9952] do_syscall_64+0x4ee/0xf80 [ 433.617536][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.617569][ T9952] RIP: 0033:0x7f008e38f7c9 [ 433.617594][ T9952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.617627][ T9952] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 433.617658][ T9952] RAX: 0000000000000000 RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 433.617679][ T9952] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 433.617699][ T9952] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.617719][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.617738][ T9952] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 433.617791][ T9952] [ 433.871097][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.892228][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.899354][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.926564][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.958801][ C1] net_ratelimit: 7243 callbacks suppressed [ 433.958825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 433.977194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.989779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.003384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.015938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 434.028523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.039186][ T9886] hsr_slave_0: entered promiscuous mode [ 434.042065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.049500][ T9886] hsr_slave_1: entered promiscuous mode [ 434.063936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.066277][ T9886] debugfs: 'hsr0' already exists in 'hsr' [ 434.077365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:43:9d:3e:e3:3d, vlan:0) [ 434.081963][ T9886] Cannot create hsr debugfs directory [ 434.094957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.577539][ T9899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.870599][ T6556] veth0_to_bridge: left allmulticast mode [ 434.901426][ T6556] veth0_to_bridge: left promiscuous mode [ 434.909080][ T6556] bridge0: port 3(veth0_to_bridge) entered disabled state [ 434.927167][ T6556] bridge_slave_1: left allmulticast mode [ 434.959118][ T6556] bridge_slave_1: left promiscuous mode [ 434.964901][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.005678][ T6556] bridge_slave_0: left allmulticast mode [ 435.018499][ T6556] bridge_slave_0: left promiscuous mode [ 435.025634][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.181498][ T6556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.198878][ T6556] bond0 (unregistering): Released all slaves [ 436.220049][ T9899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.447538][ T9899] team0: Port device team_slave_0 added [ 436.505500][ T9899] team0: Port device team_slave_1 added [ 436.602446][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.816'. [ 436.706100][ T9981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.718870][ T9981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.734514][ T9981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.749845][ T9981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.834752][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.865464][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.955104][ T9899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.017981][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.048614][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.126713][ T9899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.324140][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.341946][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.379688][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.406034][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.484996][ T6556] veth1_macvtap: left promiscuous mode [ 437.505261][ T6556] veth0_macvtap: left promiscuous mode [ 437.518771][ T6556] veth1_vlan: left promiscuous mode [ 437.524168][ T6556] veth0_vlan: left promiscuous mode [ 437.703263][ T9988] nbd: must specify a device to reconfigure [ 438.534784][ T6556] team0 (unregistering): Port device team_slave_1 removed [ 438.617081][ T6556] team0 (unregistering): Port device team_slave_0 removed [ 439.250577][ T9978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 439.266811][ T9978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 439.296455][ T9978] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 439.330951][ T9978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 439.355500][ T9899] hsr_slave_0: entered promiscuous mode [ 439.361457][ T9978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 439.380006][ T9899] hsr_slave_1: entered promiscuous mode [ 439.386520][ T9899] debugfs: 'hsr0' already exists in 'hsr' [ 439.393698][ T9899] Cannot create hsr debugfs directory [ 439.467900][ T9978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 439.520580][ T9978] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 439.553823][ T9978] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 439.677649][ T9978] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 439.840017][ T9886] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.919891][ T9886] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.998762][ T9886] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 440.050995][ T9886] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 440.305028][T10001] No such timeout policy "" [ 440.325746][T10001] net_ratelimit: 1239 callbacks suppressed [ 440.325772][T10001] netlink: Failed to associated timeout policy '' [ 440.547445][ T6556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.651101][ T9899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.737340][ T9899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.792657][ T9899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.958111][ T6556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.033913][ T9899] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 441.186515][ T6556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.328900][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 441.335353][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 441.341481][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.426702][T10032] Bluetooth: hci1: command 0x0c1a tx timeout [ 441.491817][ T6556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.579675][T10032] Bluetooth: hci6: command 0x0c1a tx timeout [ 442.215647][ T6556] hsr0: left allmulticast mode [ 442.224780][ T6556] hsr_slave_0: left allmulticast mode [ 442.230760][ T6556] hsr_slave_1: left allmulticast mode [ 442.236331][ T6556] hsr0: left promiscuous mode [ 442.242612][ T6556] bridge0: port 3(hsr0) entered disabled state [ 442.270910][ T6556] bridge_slave_1: left allmulticast mode [ 442.276629][ T6556] bridge_slave_1: left promiscuous mode [ 442.289480][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.300383][ T6556] bridge_slave_0: left allmulticast mode [ 442.306951][ T6556] bridge_slave_0: left promiscuous mode [ 442.318741][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.175778][ T6556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.200986][ T6556] bond0 (unregistering): Released all slaves [ 443.395592][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.508557][T10032] Bluetooth: hci1: command 0x0c1a tx timeout [ 443.648527][T10032] Bluetooth: hci6: command 0x0c1a tx timeout [ 443.704552][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.793116][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.800410][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.931300][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.938562][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.131460][ T9899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.294834][ T9899] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.365288][ T6556] hsr_slave_0: left promiscuous mode [ 444.400374][ T6556] hsr_slave_1: left promiscuous mode [ 444.430953][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.466634][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.488558][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.529493][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.661757][ T6556] veth1_macvtap: left promiscuous mode [ 444.667396][ T6556] veth0_macvtap: left promiscuous mode [ 444.675832][ T6556] veth1_vlan: left promiscuous mode [ 444.681514][ T6556] veth0_vlan: left promiscuous mode [ 445.576777][T10032] Bluetooth: hci1: command 0x0c1a tx timeout [ 445.733843][T10032] Bluetooth: hci6: command 0x0c1a tx timeout [ 446.181700][ T6556] team0 (unregistering): Port device team_slave_1 removed [ 446.279362][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'. [ 446.323200][ T6556] team0 (unregistering): Port device team_slave_0 removed [ 447.086718][T10077] bridge0: port 4(bond0) entered blocking state [ 447.095809][T10077] bridge0: port 4(bond0) entered disabled state [ 447.103997][T10077] bond0: entered allmulticast mode [ 447.109333][T10077] bond_slave_0: entered allmulticast mode [ 447.116250][T10077] bond_slave_1: entered allmulticast mode [ 447.123906][T10077] bond0: entered promiscuous mode [ 447.139407][T10077] bond_slave_0: entered promiscuous mode [ 447.145419][T10077] bond_slave_1: entered promiscuous mode [ 447.167323][T10077] bridge0: port 4(bond0) entered blocking state [ 447.173767][T10077] bridge0: port 4(bond0) entered forwarding state [ 447.262285][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.269555][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.301046][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.308190][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.857818][T10084] FAULT_INJECTION: forcing a failure. [ 447.857818][T10084] name failslab, interval 1, probability 0, space 0, times 0 [ 447.889559][T10084] CPU: 1 UID: 0 PID: 10084 Comm: syz.4.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.889609][T10084] Tainted: [L]=SOFTLOCKUP [ 447.889620][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.889639][T10084] Call Trace: [ 447.889649][T10084] [ 447.889661][T10084] dump_stack_lvl+0x16c/0x1f0 [ 447.889718][T10084] should_fail_ex+0x512/0x640 [ 447.889753][T10084] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 447.889799][T10084] should_failslab+0xc2/0x120 [ 447.889850][T10084] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 447.889894][T10084] ? alloc_inode+0x64/0x240 [ 447.889936][T10084] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 447.889988][T10084] ? alloc_inode+0x64/0x240 [ 447.890022][T10084] alloc_inode+0x64/0x240 [ 447.890058][T10084] new_inode+0x22/0x1c0 [ 447.890099][T10084] __debugfs_create_file+0x105/0x530 [ 447.890137][T10084] debugfs_create_file_full+0x41/0x60 [ 447.890173][T10084] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 447.890222][T10084] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 447.890301][T10084] ? lockdep_init_map_type+0x5c/0x270 [ 447.890341][T10084] preinit_net.part.0+0x437/0x8f0 [ 447.890391][T10084] copy_net_ns+0x4cd/0x7c0 [ 447.890446][T10084] create_new_namespaces+0x3ea/0xab0 [ 447.890501][T10084] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 447.890550][T10084] ksys_unshare+0x45b/0xa40 [ 447.890602][T10084] ? __pfx_ksys_unshare+0x10/0x10 [ 447.890656][T10084] ? xfd_validate_state+0x61/0x180 [ 447.890699][T10084] __x64_sys_unshare+0x31/0x40 [ 447.890727][T10084] do_syscall_64+0xcd/0xf80 [ 447.890760][T10084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.890793][T10084] RIP: 0033:0x7f008e38f7c9 [ 447.890817][T10084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.890850][T10084] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 447.890880][T10084] RAX: ffffffffffffffda RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 447.890902][T10084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 447.890921][T10084] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 447.890941][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.890962][T10084] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 447.891006][T10084] [ 447.891019][T10084] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88805a4e0290' [ 448.483544][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.590848][ T9899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.535928][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.542556][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.555421][ T9899] veth0_vlan: entered promiscuous mode [ 450.601478][ T9899] veth1_vlan: entered promiscuous mode [ 450.721983][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.732609][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.741114][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.753956][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.762045][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.786381][ T9899] veth0_macvtap: entered promiscuous mode [ 450.851748][ T9899] veth1_macvtap: entered promiscuous mode [ 451.013449][ T9899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.439936][T10144] netlink: 'syz.2.833': attribute type 11 has an invalid length. [ 451.640156][ T9899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.897786][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.961073][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.059655][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.069254][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.698274][T10134] chnl_net:caif_netlink_parms(): no params data found [ 452.849174][T10032] Bluetooth: hci0: command tx timeout [ 452.986273][ T7686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.038666][ T7686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.173366][T10134] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.224837][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.252070][T10134] bridge_slave_0: entered allmulticast mode [ 453.270999][T10134] bridge_slave_0: entered promiscuous mode [ 453.352152][T10134] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.364184][T10175] FAULT_INJECTION: forcing a failure. [ 453.364184][T10175] name failslab, interval 1, probability 0, space 0, times 0 [ 453.379807][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.420204][T10134] bridge_slave_1: entered allmulticast mode [ 453.433275][T10175] CPU: 1 UID: 0 PID: 10175 Comm: syz.4.837 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.433327][T10175] Tainted: [L]=SOFTLOCKUP [ 453.433344][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.433359][T10175] Call Trace: [ 453.433367][T10175] [ 453.433376][T10175] dump_stack_lvl+0x16c/0x1f0 [ 453.433417][T10175] should_fail_ex+0x512/0x640 [ 453.433444][T10175] ? __kvmalloc_node_noprof+0x129/0xa40 [ 453.433479][T10175] should_failslab+0xc2/0x120 [ 453.433514][T10175] __kvmalloc_node_noprof+0x14a/0xa40 [ 453.433556][T10175] ? io_alloc_cache_init+0x38/0x170 [ 453.433584][T10175] ? io_alloc_cache_init+0x38/0x170 [ 453.433604][T10175] ? __init_waitqueue_head+0xca/0x150 [ 453.433630][T10175] io_alloc_cache_init+0x38/0x170 [ 453.433654][T10175] io_uring_setup+0x578/0x1f80 [ 453.433688][T10175] ? __pfx_io_uring_setup+0x10/0x10 [ 453.433721][T10175] ? do_futex+0x122/0x350 [ 453.433747][T10175] ? __pfx_do_futex+0x10/0x10 [ 453.433789][T10175] ? xfd_validate_state+0x61/0x180 [ 453.433809][T10175] ? __pfx_ksys_write+0x10/0x10 [ 453.433847][T10175] __x64_sys_io_uring_setup+0xc2/0x170 [ 453.433881][T10175] do_syscall_64+0xcd/0xf80 [ 453.433903][T10175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.433926][T10175] RIP: 0033:0x7f008e38f7c9 [ 453.433944][T10175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.433966][T10175] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 453.433987][T10175] RAX: ffffffffffffffda RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 453.434002][T10175] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 453.434016][T10175] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 453.434030][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.434043][T10175] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 453.434072][T10175] [ 453.644242][T10134] bridge_slave_1: entered promiscuous mode [ 453.717546][T10134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.730199][T10134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.746871][T10175] loop6: detected capacity change from 0 to 8192 [ 454.068135][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.091888][T10134] team0: Port device team_slave_0 added [ 454.103823][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.146166][T10134] team0: Port device team_slave_1 added [ 454.355453][T10134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.421516][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.506681][T10134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.586542][T10134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.598579][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.738473][T10134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.929733][T10032] Bluetooth: hci0: command tx timeout [ 455.124418][T10194] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 455.197253][T10134] hsr_slave_0: entered promiscuous mode [ 455.248111][T10134] hsr_slave_1: entered promiscuous mode [ 455.541379][ T7720] bridge_slave_1: left allmulticast mode [ 455.547063][ T7720] bridge_slave_1: left promiscuous mode [ 455.575660][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.601795][ T7720] bridge_slave_0: left allmulticast mode [ 455.607545][ T7720] bridge_slave_0: left promiscuous mode [ 455.684293][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.993232][T10213] NFSD: Failed to start, no listeners configured. [ 457.010088][T10032] Bluetooth: hci0: command tx timeout [ 457.407116][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.475981][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.511218][ T7720] bond0 (unregistering): Released all slaves [ 458.201889][ T7720] hsr_slave_0: left promiscuous mode [ 458.268509][ T7720] hsr_slave_1: left promiscuous mode [ 458.274891][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.320640][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.089523][T10032] Bluetooth: hci0: command tx timeout [ 459.688297][T10267] Invalid ELF header magic: != ELF [ 460.951893][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 461.169563][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 463.117144][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 465.417300][T10329] usb usb40: usbfs: process 10329 (syz.4.860) did not claim interface 0 before use [ 465.719447][T10134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 465.830663][T10134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 466.010903][T10134] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 466.412109][T10134] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 467.761124][T10134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.828242][T10134] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.894772][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.901976][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.978038][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.985321][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.904849][T10385] pim6reg: entered allmulticast mode [ 469.450132][T10397] netlink: 'syz.2.867': attribute type 11 has an invalid length. [ 469.458048][T10397] netlink: 'syz.2.867': attribute type 11 has an invalid length. [ 469.503351][T10397] netlink: 'syz.2.867': attribute type 11 has an invalid length. [ 469.598204][T10134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.231934][T10134] veth0_vlan: entered promiscuous mode [ 471.273139][T10134] veth1_vlan: entered promiscuous mode [ 471.390468][T10134] veth0_macvtap: entered promiscuous mode [ 471.442247][T10134] veth1_macvtap: entered promiscuous mode [ 471.571021][T10134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.641781][T10134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.786117][ T3471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.846758][ T3471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.858987][ T3471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.867723][ T3471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.106864][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.140222][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.441161][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.481159][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.488193][T10475] FAULT_INJECTION: forcing a failure. [ 474.488193][T10475] name failslab, interval 1, probability 0, space 0, times 0 [ 474.563084][T10475] CPU: 0 UID: 0 PID: 10475 Comm: syz.4.877 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.563135][T10475] Tainted: [L]=SOFTLOCKUP [ 474.563146][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.563165][T10475] Call Trace: [ 474.563175][T10475] [ 474.563187][T10475] dump_stack_lvl+0x16c/0x1f0 [ 474.563246][T10475] should_fail_ex+0x512/0x640 [ 474.563283][T10475] ? kmem_cache_alloc_noprof+0x62/0x770 [ 474.563327][T10475] should_failslab+0xc2/0x120 [ 474.563378][T10475] kmem_cache_alloc_noprof+0x83/0x770 [ 474.563418][T10475] ? sk_prot_alloc+0x60/0x2a0 [ 474.563476][T10475] ? sk_prot_alloc+0x60/0x2a0 [ 474.563521][T10475] sk_prot_alloc+0x60/0x2a0 [ 474.563577][T10475] sk_alloc+0x36/0xe30 [ 474.563617][T10475] kcm_create+0xfc/0x690 [ 474.563665][T10475] __sock_create+0x339/0x8a0 [ 474.563705][T10475] __sys_socket+0x14d/0x260 [ 474.563739][T10475] ? __pfx___sys_socket+0x10/0x10 [ 474.563772][T10475] ? xfd_validate_state+0x61/0x180 [ 474.563801][T10475] ? __pfx_ksys_write+0x10/0x10 [ 474.563857][T10475] __x64_sys_socket+0x72/0xb0 [ 474.563889][T10475] ? lockdep_hardirqs_on+0x7c/0x110 [ 474.563941][T10475] do_syscall_64+0xcd/0xf80 [ 474.563973][T10475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.564015][T10475] RIP: 0033:0x7f008e38f7c9 [ 474.564041][T10475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.564074][T10475] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 474.564104][T10475] RAX: ffffffffffffffda RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 474.564127][T10475] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 474.564146][T10475] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.564166][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.564186][T10475] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 474.564229][T10475] [ 476.287645][T10509] FAULT_INJECTION: forcing a failure. [ 476.287645][T10509] name failslab, interval 1, probability 0, space 0, times 0 [ 476.418611][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.7.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.418663][T10509] Tainted: [L]=SOFTLOCKUP [ 476.418674][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.418692][T10509] Call Trace: [ 476.418703][T10509] [ 476.418716][T10509] dump_stack_lvl+0x16c/0x1f0 [ 476.418772][T10509] should_fail_ex+0x512/0x640 [ 476.418805][T10509] ? __kmalloc_cache_noprof+0x5f/0x800 [ 476.418844][T10509] should_failslab+0xc2/0x120 [ 476.418891][T10509] __kmalloc_cache_noprof+0x80/0x800 [ 476.418927][T10509] ? snd_pcm_oss_change_params_locked+0x247/0x3ab0 [ 476.418969][T10509] ? snd_pcm_oss_change_params_locked+0x247/0x3ab0 [ 476.419002][T10509] snd_pcm_oss_change_params_locked+0x247/0x3ab0 [ 476.419036][T10509] ? trace_contention_end+0xb5/0x110 [ 476.419066][T10509] ? __mutex_lock+0x27b/0x1ca0 [ 476.419096][T10509] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 476.419131][T10509] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 476.419163][T10509] ? __pfx___mutex_lock+0x10/0x10 [ 476.419213][T10509] ? __fsnotify_parent+0x24b/0xcc0 [ 476.419256][T10509] ? __pfx_task_work_add+0x10/0x10 [ 476.419303][T10509] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 476.419337][T10509] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 476.419368][T10509] snd_pcm_oss_sync+0x1de/0x840 [ 476.419404][T10509] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 476.419436][T10509] snd_pcm_oss_release+0x28b/0x310 [ 476.419471][T10509] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 476.419501][T10509] __fput+0x402/0xb70 [ 476.419540][T10509] task_work_run+0x150/0x240 [ 476.419574][T10509] ? __pfx_task_work_run+0x10/0x10 [ 476.419604][T10509] ? __do_sys_close_range+0x278/0x730 [ 476.419662][T10509] exit_to_user_mode_loop+0xfb/0x540 [ 476.419703][T10509] do_syscall_64+0x4ee/0xf80 [ 476.419732][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.419761][T10509] RIP: 0033:0x7fccab18f7c9 [ 476.419785][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.419813][T10509] RSP: 002b:00007fccac0a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 476.419841][T10509] RAX: 0000000000000000 RBX: 00007fccab3e6180 RCX: 00007fccab18f7c9 [ 476.419861][T10509] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 476.419878][T10509] RBP: 00007fccab213f91 R08: 0000000000000000 R09: 0000000000000000 [ 476.419896][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.419913][T10509] R13: 00007fccab3e6218 R14: 00007fccab3e6180 R15: 00007ffe2aaec498 [ 476.419955][T10509] [ 478.515611][T10539] netlink: 186 bytes leftover after parsing attributes in process `syz.2.887'. [ 480.715974][T10572] random: crng reseeded on system resumption [ 481.250463][T10580] netlink: 'syz.6.895': attribute type 11 has an invalid length. [ 481.258273][T10580] netlink: 'syz.6.895': attribute type 11 has an invalid length. [ 481.298582][T10580] netlink: 'syz.6.895': attribute type 11 has an invalid length. [ 482.885458][T10604] netlink: 1780 bytes leftover after parsing attributes in process `syz.2.899'. [ 483.387733][T10611] binder: 10609:10611 ioctl 4018620d ffffffffffffffff returned -22 [ 483.930727][T10625] netlink: 'syz.6.904': attribute type 11 has an invalid length. [ 483.990685][T10625] netlink: 'syz.6.904': attribute type 11 has an invalid length. [ 484.039837][T10625] netlink: 'syz.6.904': attribute type 11 has an invalid length. [ 485.117851][T10616] kexec: Could not allocate control_code_buffer [ 486.133894][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.7.909'. [ 487.556816][T10688] netlink: 'syz.7.913': attribute type 11 has an invalid length. [ 487.609770][T10688] netlink: 'syz.7.913': attribute type 11 has an invalid length. [ 487.641094][T10688] netlink: 'syz.7.913': attribute type 11 has an invalid length. [ 490.434617][T10767] ICMPv6: process `syz.7.929' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 492.923072][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'. [ 494.546882][T10844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 494.553631][T10844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 494.563792][T10844] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 494.696341][T10844] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 494.705340][T10844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 494.765990][T10844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 494.978346][T10844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 495.457872][T10871] netlink: 28 bytes leftover after parsing attributes in process `syz.7.944'. [ 495.509999][T10871] hsr_slave_0: left promiscuous mode [ 495.552511][T10871] hsr_slave_1: left promiscuous mode [ 496.538432][T10032] Bluetooth: hci2: command 0x0c1a tx timeout [ 496.610891][T10032] Bluetooth: hci5: command 0x0406 tx timeout [ 496.612751][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 496.768459][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 496.768586][T10032] Bluetooth: hci6: command 0x0c1a tx timeout [ 497.650585][ T5842] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 498.030311][T10914] FAULT_INJECTION: forcing a failure. [ 498.030311][T10914] name failslab, interval 1, probability 0, space 0, times 0 [ 498.122376][T10914] CPU: 1 UID: 0 PID: 10914 Comm: syz.7.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.122429][T10914] Tainted: [L]=SOFTLOCKUP [ 498.122440][T10914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.122459][T10914] Call Trace: [ 498.122470][T10914] [ 498.122482][T10914] dump_stack_lvl+0x16c/0x1f0 [ 498.122542][T10914] should_fail_ex+0x512/0x640 [ 498.122577][T10914] ? kmem_cache_alloc_noprof+0x62/0x770 [ 498.122623][T10914] should_failslab+0xc2/0x120 [ 498.122681][T10914] kmem_cache_alloc_noprof+0x83/0x770 [ 498.122721][T10914] ? __mpol_dup+0x74/0x380 [ 498.122761][T10914] ? __mpol_dup+0x74/0x380 [ 498.122789][T10914] __mpol_dup+0x74/0x380 [ 498.122819][T10914] ? __pfx___mpol_dup+0x10/0x10 [ 498.122854][T10914] ? anon_vma_name+0x81/0x2f0 [ 498.122889][T10914] vma_dup_policy+0x42/0xc0 [ 498.122922][T10914] __split_vma+0x36b/0x1050 [ 498.122965][T10914] ? __pfx___split_vma+0x10/0x10 [ 498.123012][T10914] ? __pfx_mas_prev+0x10/0x10 [ 498.123053][T10914] vms_gather_munmap_vmas+0x3aa/0x1340 [ 498.123101][T10914] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 498.123146][T10914] ? mas_walk+0x6f5/0x980 [ 498.123205][T10914] __mmap_region+0x47c/0x2a00 [ 498.123247][T10914] ? __lock_acquire+0x436/0x2890 [ 498.123276][T10914] ? __pfx___mmap_region+0x10/0x10 [ 498.123311][T10914] ? rcu_is_watching+0x12/0xc0 [ 498.123367][T10914] ? lock_acquire+0x179/0x330 [ 498.123396][T10914] ? find_held_lock+0x2b/0x80 [ 498.123441][T10914] ? finish_task_switch.isra.0+0x202/0xbd0 [ 498.123489][T10914] ? rcu_is_watching+0x12/0xc0 [ 498.123531][T10914] ? finish_task_switch.isra.0+0x207/0xbd0 [ 498.123575][T10914] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.123625][T10914] ? finish_task_switch.isra.0+0x207/0xbd0 [ 498.123757][T10914] ? rcu_is_watching+0x12/0xc0 [ 498.123813][T10914] mmap_region+0x1ab/0x3f0 [ 498.123854][T10914] ? __get_unmapped_area+0x267/0x3f0 [ 498.123906][T10914] do_mmap+0xa3e/0x1210 [ 498.123963][T10914] ? __pfx_do_mmap+0x10/0x10 [ 498.124012][T10914] ? __pfx_down_write_killable+0x10/0x10 [ 498.124058][T10914] vm_mmap_pgoff+0x29e/0x470 [ 498.124114][T10914] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 498.124171][T10914] ? __x64_sys_futex+0x1e0/0x4c0 [ 498.124207][T10914] ? __x64_sys_futex+0x1e9/0x4c0 [ 498.124251][T10914] ksys_mmap_pgoff+0x7d/0x5c0 [ 498.124298][T10914] ? xfd_validate_state+0x61/0x180 [ 498.124335][T10914] __x64_sys_mmap+0x125/0x190 [ 498.124374][T10914] do_syscall_64+0xcd/0xf80 [ 498.124406][T10914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.124438][T10914] RIP: 0033:0x7fccab18f7c9 [ 498.124464][T10914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.124496][T10914] RSP: 002b:00007fccac0eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 498.124526][T10914] RAX: ffffffffffffffda RBX: 00007fccab3e5fa0 RCX: 00007fccab18f7c9 [ 498.124548][T10914] RDX: 00000000000000e3 RSI: 0000000000000007 RDI: 0000000000000000 [ 498.124567][T10914] RBP: 00007fccab213f91 R08: 0000000000000002 R09: 0000000000008000 [ 498.124587][T10914] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 498.124607][T10914] R13: 00007fccab3e6038 R14: 00007fccab3e5fa0 R15: 00007ffe2aaec498 [ 498.124657][T10914] [ 498.918613][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 499.800124][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.6.956'. [ 499.944800][T10946] hub 8-0:1.0: USB hub found [ 500.131620][T10946] hub 8-0:1.0: 1 port detected [ 500.930388][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 503.899968][T11014] FAULT_INJECTION: forcing a failure. [ 503.899968][T11014] name failslab, interval 1, probability 0, space 0, times 0 [ 503.958139][T11014] CPU: 1 UID: 0 PID: 11014 Comm: syz.6.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.958189][T11014] Tainted: [L]=SOFTLOCKUP [ 503.958200][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.958226][T11014] Call Trace: [ 503.958236][T11014] [ 503.958249][T11014] dump_stack_lvl+0x16c/0x1f0 [ 503.958307][T11014] should_fail_ex+0x512/0x640 [ 503.958347][T11014] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 503.958391][T11014] should_failslab+0xc2/0x120 [ 503.958442][T11014] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 503.958483][T11014] ? __d_lookup+0x25c/0x4a0 [ 503.958520][T11014] ? __d_alloc+0x35/0xa80 [ 503.958553][T11014] ? __d_alloc+0x35/0xa80 [ 503.958577][T11014] __d_alloc+0x35/0xa80 [ 503.958610][T11014] d_alloc+0x4a/0x1e0 [ 503.958642][T11014] lookup_one_qstr_excl+0x175/0x250 [ 503.958684][T11014] start_dirop+0x59/0xb0 [ 503.958728][T11014] simple_start_creating+0xf4/0x100 [ 503.958771][T11014] ? __pfx_simple_start_creating+0x10/0x10 [ 503.958813][T11014] ? do_raw_spin_unlock+0x172/0x230 [ 503.958851][T11014] ? simple_pin_fs+0xa3/0x190 [ 503.958891][T11014] debugfs_start_creating.part.0+0x86/0x1c0 [ 503.958947][T11014] __debugfs_create_file+0xb3/0x530 [ 503.958985][T11014] debugfs_create_file_full+0x41/0x60 [ 503.959021][T11014] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 503.959061][T11014] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 503.959134][T11014] ? lockdep_init_map_type+0x5c/0x270 [ 503.959186][T11014] preinit_net.part.0+0x24e/0x8f0 [ 503.959240][T11014] copy_net_ns+0x4cd/0x7c0 [ 503.959291][T11014] create_new_namespaces+0x3ea/0xab0 [ 503.959342][T11014] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 503.959390][T11014] ksys_unshare+0x45b/0xa40 [ 503.959439][T11014] ? __pfx_ksys_unshare+0x10/0x10 [ 503.959491][T11014] ? xfd_validate_state+0x61/0x180 [ 503.959533][T11014] __x64_sys_unshare+0x31/0x40 [ 503.959561][T11014] do_syscall_64+0xcd/0xf80 [ 503.959593][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.959625][T11014] RIP: 0033:0x7f4ca518f7c9 [ 503.959651][T11014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.959684][T11014] RSP: 002b:00007f4ca6010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 503.959714][T11014] RAX: ffffffffffffffda RBX: 00007f4ca53e5fa0 RCX: 00007f4ca518f7c9 [ 503.959735][T11014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 503.959756][T11014] RBP: 00007f4ca5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 503.959794][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.959815][T11014] R13: 00007f4ca53e6038 R14: 00007f4ca53e5fa0 R15: 00007ffe179bc5f8 [ 503.959861][T11014] [ 504.778532][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.965'. [ 507.899595][T11059] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 507.926272][T11056] Invalid ELF header magic: != ELF [ 508.149867][T11053] zswap: compressor not available [ 510.140882][ T6154] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.236232][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.6.977'. [ 510.248149][T11091] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.415850][T11091] bridge_slave_1 (unregistering): left allmulticast mode [ 510.431712][T11091] bridge_slave_1 (unregistering): left promiscuous mode [ 510.463996][T11091] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.503129][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.6.977'. [ 511.382273][ T30] audit: type=1800 audit(1768505805.063:7): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.985" name="dbroot" dev="configfs" ino=38288 res=0 errno=0 [ 511.973449][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.979951][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.579517][T11133] FAULT_INJECTION: forcing a failure. [ 512.579517][T11133] name failslab, interval 1, probability 0, space 0, times 0 [ 512.655419][T11133] CPU: 1 UID: 0 PID: 11133 Comm: syz.4.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.655458][T11133] Tainted: [L]=SOFTLOCKUP [ 512.655467][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.655480][T11133] Call Trace: [ 512.655487][T11133] [ 512.655497][T11133] dump_stack_lvl+0x16c/0x1f0 [ 512.655545][T11133] should_fail_ex+0x512/0x640 [ 512.655571][T11133] ? __kmalloc_cache_noprof+0x5f/0x800 [ 512.655601][T11133] should_failslab+0xc2/0x120 [ 512.655637][T11133] __kmalloc_cache_noprof+0x80/0x800 [ 512.655664][T11133] ? snd_pcm_oss_change_params_locked+0x247/0x3ab0 [ 512.655695][T11133] ? snd_pcm_oss_change_params_locked+0x247/0x3ab0 [ 512.655720][T11133] snd_pcm_oss_change_params_locked+0x247/0x3ab0 [ 512.655746][T11133] ? trace_contention_end+0xb5/0x110 [ 512.655770][T11133] ? __mutex_lock+0x27b/0x1ca0 [ 512.655794][T11133] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 512.655826][T11133] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 512.655852][T11133] ? __pfx___mutex_lock+0x10/0x10 [ 512.655884][T11133] ? __fsnotify_parent+0x24b/0xcc0 [ 512.655918][T11133] ? __pfx_task_work_add+0x10/0x10 [ 512.655952][T11133] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 512.656006][T11133] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 512.656040][T11133] snd_pcm_oss_sync+0x1de/0x840 [ 512.656079][T11133] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 512.656114][T11133] snd_pcm_oss_release+0x28b/0x310 [ 512.656140][T11133] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 512.656164][T11133] __fput+0x402/0xb70 [ 512.656193][T11133] task_work_run+0x150/0x240 [ 512.656220][T11133] ? __pfx_task_work_run+0x10/0x10 [ 512.656243][T11133] ? __do_sys_close_range+0x278/0x730 [ 512.656289][T11133] exit_to_user_mode_loop+0xfb/0x540 [ 512.656323][T11133] do_syscall_64+0x4ee/0xf80 [ 512.656345][T11133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.656369][T11133] RIP: 0033:0x7f008e38f7c9 [ 512.656388][T11133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.656411][T11133] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 512.656432][T11133] RAX: 0000000000000000 RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 512.656446][T11133] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 512.656459][T11133] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.656473][T11133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.656486][T11133] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 512.656516][T11133] [ 513.544546][T11150] FAULT_INJECTION: forcing a failure. [ 513.544546][T11150] name failslab, interval 1, probability 0, space 0, times 0 [ 513.588528][T11150] CPU: 0 UID: 0 PID: 11150 Comm: syz.4.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.588585][T11150] Tainted: [L]=SOFTLOCKUP [ 513.588597][T11150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.588615][T11150] Call Trace: [ 513.588625][T11150] [ 513.588637][T11150] dump_stack_lvl+0x16c/0x1f0 [ 513.588691][T11150] should_fail_ex+0x512/0x640 [ 513.588727][T11150] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 513.588775][T11150] should_failslab+0xc2/0x120 [ 513.588826][T11150] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 513.588864][T11150] ? alloc_inode+0x64/0x240 [ 513.588900][T11150] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 513.588941][T11150] ? alloc_inode+0x64/0x240 [ 513.588968][T11150] alloc_inode+0x64/0x240 [ 513.588998][T11150] new_inode+0x22/0x1c0 [ 513.589030][T11150] __debugfs_create_file+0x105/0x530 [ 513.589062][T11150] debugfs_create_file_full+0x41/0x60 [ 513.589092][T11150] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 513.589127][T11150] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 513.589190][T11150] ? lockdep_init_map_type+0x5c/0x270 [ 513.589223][T11150] preinit_net.part.0+0x437/0x8f0 [ 513.589264][T11150] copy_net_ns+0x4cd/0x7c0 [ 513.589310][T11150] create_new_namespaces+0x3ea/0xab0 [ 513.589355][T11150] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 513.589395][T11150] ksys_unshare+0x45b/0xa40 [ 513.589439][T11150] ? __pfx_ksys_unshare+0x10/0x10 [ 513.589483][T11150] ? xfd_validate_state+0x61/0x180 [ 513.589516][T11150] __x64_sys_unshare+0x31/0x40 [ 513.589549][T11150] do_syscall_64+0xcd/0xf80 [ 513.589575][T11150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.589603][T11150] RIP: 0033:0x7f008e38f7c9 [ 513.589625][T11150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.589652][T11150] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 513.589677][T11150] RAX: ffffffffffffffda RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 513.589695][T11150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 513.589711][T11150] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 513.589727][T11150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.589743][T11150] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 513.589778][T11150] [ 513.900044][T11150] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff8880356cce10' [ 514.040556][T11153] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000140 pfn:0x78000 [ 514.100838][T11153] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 514.108056][T11153] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 514.127056][T11153] raw: ffff888078000140 0000000000000000 00000001ffffffff 0000000000000000 [ 514.238775][T11153] page dumped because: unmovable page [ 514.266587][T11153] page_owner tracks the page as allocated [ 514.317765][T11153] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 6058, tgid 6058 (syz.0.27), ts 116885858551, free_ts 116728226790 [ 514.424041][T11153] post_alloc_hook+0x1af/0x220 [ 514.438504][T11153] get_page_from_freelist+0xd0b/0x31a0 [ 514.444066][T11153] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 514.480786][T11153] alloc_pages_bulk_noprof+0x77a/0x1410 [ 514.486491][T11153] __kasan_populate_vmalloc+0xfb/0x220 [ 514.550319][T11153] alloc_vmap_area+0x98d/0x2a50 [ 514.578977][T11153] __get_vm_area_node+0x1ca/0x330 [ 514.607574][T11153] __vmalloc_node_range_noprof+0x247/0x16b0 [ 514.654914][T11153] __vmalloc_node_noprof+0xad/0xf0 [ 514.685981][T11153] copy_process+0x619/0x7430 [ 514.745259][T11153] kernel_clone+0xfc/0x910 [ 514.759941][T11153] __do_sys_clone3+0x212/0x290 [ 514.769410][T11162] netlink: 28 bytes leftover after parsing attributes in process `syz.6.994'. [ 514.838426][T11153] do_syscall_64+0xcd/0xf80 [ 514.871489][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.904653][T11153] page last free pid 5849 tgid 5849 stack trace: [ 514.938592][T11153] __free_frozen_pages+0x7df/0x1170 [ 514.947451][T11153] qlist_free_all+0x4c/0xf0 [ 514.958502][T11153] kasan_quarantine_reduce+0x195/0x1e0 [ 514.964086][T11153] __kasan_slab_alloc+0x69/0x90 [ 515.020350][T11153] kmem_cache_alloc_noprof+0x25e/0x770 [ 515.025946][T11153] getname_flags.part.0+0x4c/0x550 [ 515.062409][T11153] getname_flags+0x93/0xf0 [ 515.066969][T11153] vfs_fstatat+0xe1/0xf0 [ 515.111131][T11153] __do_sys_newfstatat+0x97/0x120 [ 515.128482][T11153] do_syscall_64+0xcd/0xf80 [ 515.133117][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.664448][T11175] FAULT_INJECTION: forcing a failure. [ 515.664448][T11175] name failslab, interval 1, probability 0, space 0, times 0 [ 515.714378][T11175] CPU: 0 UID: 0 PID: 11175 Comm: syz.7.998 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.714452][T11175] Tainted: [L]=SOFTLOCKUP [ 515.714463][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 515.714482][T11175] Call Trace: [ 515.714493][T11175] [ 515.714505][T11175] dump_stack_lvl+0x16c/0x1f0 [ 515.714564][T11175] should_fail_ex+0x512/0x640 [ 515.714600][T11175] ? __kmalloc_noprof+0xca/0x910 [ 515.714640][T11175] should_failslab+0xc2/0x120 [ 515.714687][T11175] __kmalloc_noprof+0xeb/0x910 [ 515.714720][T11175] ? __kernel_text_address+0xd/0x40 [ 515.714756][T11175] ? unwind_get_return_address+0x59/0xa0 [ 515.714797][T11175] ? constrain_params_by_rules+0x175/0xca0 [ 515.714839][T11175] ? constrain_params_by_rules+0x175/0xca0 [ 515.714870][T11175] constrain_params_by_rules+0x175/0xca0 [ 515.714921][T11175] ? stack_trace_save+0x8e/0xc0 [ 515.714978][T11175] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 515.715012][T11175] ? is_bpf_text_address+0x94/0x1a0 [ 515.715063][T11175] ? __kasan_kmalloc+0xaa/0xb0 [ 515.715111][T11175] ? snd_pcm_oss_change_params_locked+0x86d/0x3ab0 [ 515.715147][T11175] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 515.715178][T11175] ? snd_pcm_oss_sync+0x1de/0x840 [ 515.715225][T11175] ? snd_interval_refine+0x2fa/0x580 [ 515.715277][T11175] snd_pcm_hw_refine+0x7de/0xad0 [ 515.715317][T11175] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 515.715371][T11175] ? snd_interval_refine+0x2fa/0x580 [ 515.715421][T11175] snd_pcm_oss_change_params_locked+0x220c/0x3ab0 [ 515.715460][T11175] ? __mutex_lock+0x217/0x1ca0 [ 515.715504][T11175] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 515.715539][T11175] ? __pfx___mutex_lock+0x10/0x10 [ 515.715600][T11175] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 515.715636][T11175] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 515.715669][T11175] snd_pcm_oss_sync+0x1de/0x840 [ 515.715709][T11175] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 515.715743][T11175] snd_pcm_oss_release+0x28b/0x310 [ 515.715780][T11175] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 515.715813][T11175] __fput+0x402/0xb70 [ 515.715856][T11175] task_work_run+0x150/0x240 [ 515.715893][T11175] ? __pfx_task_work_run+0x10/0x10 [ 515.715926][T11175] ? __do_sys_close_range+0x278/0x730 [ 515.715989][T11175] exit_to_user_mode_loop+0xfb/0x540 [ 515.716034][T11175] do_syscall_64+0x4ee/0xf80 [ 515.716066][T11175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.716106][T11175] RIP: 0033:0x7fccab18f7c9 [ 515.716133][T11175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.716168][T11175] RSP: 002b:00007fccac0eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 515.716199][T11175] RAX: 0000000000000000 RBX: 00007fccab3e5fa0 RCX: 00007fccab18f7c9 [ 515.716221][T11175] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 515.716240][T11175] RBP: 00007fccab213f91 R08: 0000000000000000 R09: 0000000000000000 [ 515.716260][T11175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.716280][T11175] R13: 00007fccab3e6038 R14: 00007fccab3e5fa0 R15: 00007ffe2aaec498 [ 515.716325][T11175] [ 516.938490][T11182] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1000'. [ 518.170373][T11209] misc userio: Invalid payload size [ 519.124423][T11224] FAULT_INJECTION: forcing a failure. [ 519.124423][T11224] name failslab, interval 1, probability 0, space 0, times 0 [ 519.126761][T11224] CPU: 0 UID: 0 PID: 11224 Comm: syz.6.1010 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.126810][T11224] Tainted: [L]=SOFTLOCKUP [ 519.126821][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.126840][T11224] Call Trace: [ 519.126850][T11224] [ 519.126862][T11224] dump_stack_lvl+0x16c/0x1f0 [ 519.126924][T11224] should_fail_ex+0x512/0x640 [ 519.126957][T11224] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 519.126999][T11224] should_failslab+0xc2/0x120 [ 519.127045][T11224] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 519.127081][T11224] ? stack_trace_save+0x8e/0xc0 [ 519.127129][T11224] ? __d_alloc+0x35/0xa80 [ 519.127162][T11224] ? __d_alloc+0x35/0xa80 [ 519.127185][T11224] __d_alloc+0x35/0xa80 [ 519.127216][T11224] d_alloc_parallel+0x111/0x1510 [ 519.127267][T11224] ? find_held_lock+0x2b/0x80 [ 519.127311][T11224] ? __pfx_d_alloc_parallel+0x10/0x10 [ 519.127356][T11224] ? __d_lookup+0x266/0x4a0 [ 519.127401][T11224] lookup_open.isra.0+0x66c/0x1780 [ 519.127450][T11224] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 519.127515][T11224] ? lookup_fast+0x156/0x610 [ 519.127559][T11224] path_openat+0x12bb/0x3140 [ 519.127620][T11224] ? __pfx_path_openat+0x10/0x10 [ 519.127682][T11224] do_filp_open+0x20b/0x470 [ 519.127729][T11224] ? __pfx_do_filp_open+0x10/0x10 [ 519.127805][T11224] ? alloc_fd+0x471/0x7d0 [ 519.127874][T11224] do_sys_openat2+0x121/0x290 [ 519.127912][T11224] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.127965][T11224] __x64_sys_openat+0x174/0x210 [ 519.128003][T11224] ? __pfx___x64_sys_openat+0x10/0x10 [ 519.128058][T11224] do_syscall_64+0xcd/0xf80 [ 519.128091][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.128125][T11224] RIP: 0033:0x7f4ca518f7c9 [ 519.128151][T11224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.128183][T11224] RSP: 002b:00007f4ca6010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 519.128214][T11224] RAX: ffffffffffffffda RBX: 00007f4ca53e5fa0 RCX: 00007f4ca518f7c9 [ 519.128234][T11224] RDX: 0000000000000180 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 519.128255][T11224] RBP: 00007f4ca5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 519.128275][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.128293][T11224] R13: 00007f4ca53e6038 R14: 00007f4ca53e5fa0 R15: 00007ffe179bc5f8 [ 519.128340][T11224] [ 520.487255][T11244] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1014'. [ 521.036524][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1016'. [ 521.068288][T11253] bond0: left allmulticast mode [ 521.085245][T11253] bond_slave_0: left allmulticast mode [ 521.128691][T11253] bond_slave_1: left allmulticast mode [ 521.167887][T11253] bond0: left promiscuous mode [ 521.194915][T11253] bond_slave_0: left promiscuous mode [ 521.214989][T11253] bond_slave_1: left promiscuous mode [ 521.266737][T11253] bridge0: port 4(bond0) entered disabled state [ 521.509654][T11253] dummy0: left allmulticast mode [ 521.722317][T11253] dummy0: left promiscuous mode [ 521.727454][T11253] bridge0: port 3(dummy0) entered disabled state [ 521.801738][T11256] FAULT_INJECTION: forcing a failure. [ 521.801738][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 521.815867][T11256] CPU: 0 UID: 0 PID: 11256 Comm: syz.4.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.815922][T11256] Tainted: [L]=SOFTLOCKUP [ 521.815933][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.815953][T11256] Call Trace: [ 521.815964][T11256] [ 521.815977][T11256] dump_stack_lvl+0x16c/0x1f0 [ 521.816038][T11256] should_fail_ex+0x512/0x640 [ 521.816083][T11256] ? __kmalloc_cache_noprof+0x5f/0x800 [ 521.816126][T11256] should_failslab+0xc2/0x120 [ 521.816177][T11256] __kmalloc_cache_noprof+0x80/0x800 [ 521.816215][T11256] ? blk_trace_setup_prepare+0x12a/0x700 [ 521.816260][T11256] ? blk_trace_setup_prepare+0x12a/0x700 [ 521.816297][T11256] blk_trace_setup_prepare+0x12a/0x700 [ 521.816342][T11256] blk_trace_setup+0x1c5/0x3b0 [ 521.816386][T11256] ? __pfx_blk_trace_setup+0x10/0x10 [ 521.816425][T11256] ? vsnprintf+0x331/0x11e0 [ 521.816478][T11256] ? __pfx_vsnprintf+0x10/0x10 [ 521.816548][T11256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 521.816601][T11256] ? do_vfs_ioctl+0x128/0x14f0 [ 521.816648][T11256] blk_trace_ioctl+0x2ce/0x300 [ 521.816698][T11256] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 521.816747][T11256] ? find_held_lock+0x2b/0x80 [ 521.816790][T11256] ? hook_file_ioctl_common+0x144/0x410 [ 521.816837][T11256] blkdev_ioctl+0x1fa/0x6e0 [ 521.816878][T11256] ? __pfx_blkdev_ioctl+0x10/0x10 [ 521.816924][T11256] ? __pfx_blkdev_ioctl+0x10/0x10 [ 521.816966][T11256] __x64_sys_ioctl+0x18e/0x210 [ 521.817016][T11256] do_syscall_64+0xcd/0xf80 [ 521.817048][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.817082][T11256] RIP: 0033:0x7f008e38f7c9 [ 521.817109][T11256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.817142][T11256] RSP: 002b:00007f008f221038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.817173][T11256] RAX: ffffffffffffffda RBX: 00007f008e5e6180 RCX: 00007f008e38f7c9 [ 521.817195][T11256] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000009 [ 521.817215][T11256] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 521.817235][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.817255][T11256] R13: 00007f008e5e6218 R14: 00007f008e5e6180 R15: 00007ffec4c86c98 [ 521.817299][T11256] [ 522.351187][T11253] bridge_slave_1: left allmulticast mode [ 522.356902][T11253] bridge_slave_1: left promiscuous mode [ 522.485805][T11253] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.780823][T11253] bridge_slave_0: left allmulticast mode [ 522.786554][T11253] bridge_slave_0: left promiscuous mode [ 522.978985][T11253] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.792647][T11283] netlink: 'syz.4.1021': attribute type 11 has an invalid length. [ 524.822573][T11283] netlink: 'syz.4.1021': attribute type 11 has an invalid length. [ 524.838526][T11283] netlink: 'syz.4.1021': attribute type 11 has an invalid length. [ 527.761718][T11312] FAULT_INJECTION: forcing a failure. [ 527.761718][T11312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.848423][T11312] CPU: 0 UID: 0 PID: 11312 Comm: syz.4.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.848476][T11312] Tainted: [L]=SOFTLOCKUP [ 527.848487][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.848506][T11312] Call Trace: [ 527.848517][T11312] [ 527.848529][T11312] dump_stack_lvl+0x16c/0x1f0 [ 527.848593][T11312] should_fail_ex+0x512/0x640 [ 527.848636][T11312] should_fail_alloc_page+0xe7/0x130 [ 527.848692][T11312] prepare_alloc_pages+0x401/0x670 [ 527.848743][T11312] ? kernel_text_address+0x8d/0x100 [ 527.848796][T11312] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 527.848854][T11312] ? stack_trace_save+0x8e/0xc0 [ 527.848903][T11312] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 527.848944][T11312] ? trace_mm_page_alloc+0x11b/0x180 [ 527.848997][T11312] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 527.849031][T11312] ? __pmd_alloc+0xbf/0x9c0 [ 527.849096][T11312] ? __handle_mm_fault+0xbeb/0x2bb0 [ 527.849128][T11312] ? handle_mm_fault+0x3fe/0xad0 [ 527.849160][T11312] ? __get_user_pages+0x54e/0x3590 [ 527.849206][T11312] ? populate_vma_page_range+0x267/0x3f0 [ 527.849254][T11312] ? __mm_populate+0x1d8/0x380 [ 527.849301][T11312] ? vm_mmap_pgoff+0x37f/0x470 [ 527.849344][T11312] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 527.849387][T11312] ? __x64_sys_mmap+0x125/0x190 [ 527.849417][T11312] ? do_syscall_64+0xcd/0xf80 [ 527.849443][T11312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.849477][T11312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 527.849528][T11312] ? policy_nodemask+0xea/0x4e0 [ 527.849606][T11312] alloc_pages_mpol+0x1fb/0x550 [ 527.849659][T11312] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 527.849723][T11312] alloc_pages_noprof+0x131/0x390 [ 527.849775][T11312] pte_alloc_one+0x1e/0x3d0 [ 527.849820][T11312] __pte_alloc+0x6d/0x3f0 [ 527.849863][T11312] ? __pfx___pte_alloc+0x10/0x10 [ 527.849909][T11312] ? do_raw_spin_lock+0x12c/0x2b0 [ 527.849945][T11312] ? find_held_lock+0x2b/0x80 [ 527.849987][T11312] do_anonymous_page+0x1092/0x2190 [ 527.850024][T11312] ? do_raw_spin_unlock+0x172/0x230 [ 527.850063][T11312] ? _raw_spin_unlock+0x28/0x50 [ 527.850106][T11312] ? __pmd_alloc+0x6aa/0x9c0 [ 527.850161][T11312] __handle_mm_fault+0x1ecf/0x2bb0 [ 527.850208][T11312] ? __pfx___handle_mm_fault+0x10/0x10 [ 527.850277][T11312] handle_mm_fault+0x3fe/0xad0 [ 527.850319][T11312] __get_user_pages+0x54e/0x3590 [ 527.850385][T11312] ? __pfx___get_user_pages+0x10/0x10 [ 527.850446][T11312] populate_vma_page_range+0x267/0x3f0 [ 527.850501][T11312] ? __pfx_populate_vma_page_range+0x10/0x10 [ 527.850550][T11312] ? __pfx_find_vma_intersection+0x10/0x10 [ 527.850610][T11312] ? do_mmap+0x69c/0x1210 [ 527.850663][T11312] __mm_populate+0x1d8/0x380 [ 527.850716][T11312] ? __pfx___mm_populate+0x10/0x10 [ 527.850781][T11312] ? up_write+0x282/0x4e0 [ 527.850819][T11312] vm_mmap_pgoff+0x37f/0x470 [ 527.850867][T11312] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 527.850920][T11312] ? __x64_sys_futex+0x1e0/0x4c0 [ 527.850954][T11312] ? __x64_sys_futex+0x1e9/0x4c0 [ 527.850995][T11312] ksys_mmap_pgoff+0x7d/0x5c0 [ 527.851039][T11312] ? __pfx_ksys_write+0x10/0x10 [ 527.851090][T11312] __x64_sys_mmap+0x125/0x190 [ 527.851126][T11312] do_syscall_64+0xcd/0xf80 [ 527.851159][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.851191][T11312] RIP: 0033:0x7f008e38f7c9 [ 527.851216][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.851248][T11312] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 527.851279][T11312] RAX: ffffffffffffffda RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 527.851300][T11312] RDX: 0000000000000004 RSI: 0000000000040009 RDI: 0000000000000000 [ 527.851319][T11312] RBP: 00007f008e413f91 R08: ffffffffffffffff R09: 0000000000028000 [ 527.851340][T11312] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 527.851359][T11312] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 527.851419][T11312] [ 530.635755][T11354] zswap: compressor not available [ 532.244110][T11389] Invalid ELF header magic: != ELF [ 533.892117][ T30] audit: type=1800 audit(1768505827.573:8): pid=11419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1051" name="dbroot" dev="configfs" ino=40042 res=0 errno=0 [ 535.215300][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1056'. [ 535.259184][T11452] ipvlan0: entered promiscuous mode [ 535.288975][T11452] ipvlan0: entered allmulticast mode [ 535.294428][T11452] veth0_vlan: entered allmulticast mode [ 538.319285][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 538.370741][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 539.267492][T11518] FAULT_INJECTION: forcing a failure. [ 539.267492][T11518] name failslab, interval 1, probability 0, space 0, times 0 [ 539.329950][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.6.1069 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.330001][T11518] Tainted: [L]=SOFTLOCKUP [ 539.330013][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.330031][T11518] Call Trace: [ 539.330040][T11518] [ 539.330053][T11518] dump_stack_lvl+0x16c/0x1f0 [ 539.330109][T11518] should_fail_ex+0x512/0x640 [ 539.330145][T11518] ? __kmalloc_cache_noprof+0x5f/0x800 [ 539.330186][T11518] should_failslab+0xc2/0x120 [ 539.330236][T11518] __kmalloc_cache_noprof+0x80/0x800 [ 539.330274][T11518] ? snd_pcm_oss_change_params_locked+0x86d/0x3ab0 [ 539.330311][T11518] ? _snd_pcm_hw_param_min+0x259/0x630 [ 539.330347][T11518] ? snd_pcm_oss_change_params_locked+0x86d/0x3ab0 [ 539.330382][T11518] snd_pcm_oss_change_params_locked+0x86d/0x3ab0 [ 539.330421][T11518] ? __mutex_lock+0x27b/0x1ca0 [ 539.330477][T11518] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 539.330513][T11518] ? __pfx___mutex_lock+0x10/0x10 [ 539.330573][T11518] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 539.330611][T11518] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 539.330645][T11518] snd_pcm_oss_sync+0x1de/0x840 [ 539.330684][T11518] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 539.330718][T11518] snd_pcm_oss_release+0x28b/0x310 [ 539.330754][T11518] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 539.330788][T11518] __fput+0x402/0xb70 [ 539.330831][T11518] task_work_run+0x150/0x240 [ 539.330869][T11518] ? __pfx_task_work_run+0x10/0x10 [ 539.330901][T11518] ? __do_sys_close_range+0x278/0x730 [ 539.330970][T11518] exit_to_user_mode_loop+0xfb/0x540 [ 539.331018][T11518] do_syscall_64+0x4ee/0xf80 [ 539.331051][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.331083][T11518] RIP: 0033:0x7f4ca518f7c9 [ 539.331108][T11518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.331140][T11518] RSP: 002b:00007f4ca6010038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 539.331170][T11518] RAX: 0000000000000000 RBX: 00007f4ca53e5fa0 RCX: 00007f4ca518f7c9 [ 539.331192][T11518] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 539.331211][T11518] RBP: 00007f4ca5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.331231][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.331250][T11518] R13: 00007f4ca53e6038 R14: 00007f4ca53e5fa0 R15: 00007ffe179bc5f8 [ 539.331294][T11518] [ 540.790735][T11539] netlink: 186 bytes leftover after parsing attributes in process `syz.7.1072'. [ 541.601928][T11565] FAULT_INJECTION: forcing a failure. [ 541.601928][T11565] name failslab, interval 1, probability 0, space 0, times 0 [ 541.690480][T11543] kexec: Could not allocate control_code_buffer [ 541.816836][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.7.1078 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.816887][T11565] Tainted: [L]=SOFTLOCKUP [ 541.816898][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.816916][T11565] Call Trace: [ 541.816925][T11565] [ 541.816937][T11565] dump_stack_lvl+0x16c/0x1f0 [ 541.816993][T11565] should_fail_ex+0x512/0x640 [ 541.817029][T11565] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 541.817073][T11565] should_failslab+0xc2/0x120 [ 541.817138][T11565] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 541.817182][T11565] ? __d_alloc+0x35/0xa80 [ 541.817218][T11565] ? __d_alloc+0x35/0xa80 [ 541.817245][T11565] __d_alloc+0x35/0xa80 [ 541.817287][T11565] d_alloc_pseudo+0x1c/0xc0 [ 541.817325][T11565] alloc_file_pseudo+0xcf/0x230 [ 541.817363][T11565] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 541.817397][T11565] ? alloc_fd+0x471/0x7d0 [ 541.817450][T11565] sock_alloc_file+0x50/0x210 [ 541.817499][T11565] __sys_socket+0x1c0/0x260 [ 541.817530][T11565] ? fput+0x70/0xf0 [ 541.817560][T11565] ? __pfx___sys_socket+0x10/0x10 [ 541.817593][T11565] ? xfd_validate_state+0x61/0x180 [ 541.817621][T11565] ? __pfx_ksys_write+0x10/0x10 [ 541.817675][T11565] __x64_sys_socket+0x72/0xb0 [ 541.817707][T11565] ? lockdep_hardirqs_on+0x7c/0x110 [ 541.817755][T11565] do_syscall_64+0xcd/0xf80 [ 541.817785][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.817816][T11565] RIP: 0033:0x7fccab18f7c9 [ 541.817841][T11565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.817874][T11565] RSP: 002b:00007fccac0eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 541.817916][T11565] RAX: ffffffffffffffda RBX: 00007fccab3e5fa0 RCX: 00007fccab18f7c9 [ 541.817937][T11565] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 541.817957][T11565] RBP: 00007fccab213f91 R08: 0000000000000000 R09: 0000000000000000 [ 541.817977][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.817996][T11565] R13: 00007fccab3e6038 R14: 00007fccab3e5fa0 R15: 00007ffe2aaec498 [ 541.818040][T11565] [ 544.555644][T11595] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 544.609741][T11595] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 544.690896][T11595] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 546.073535][T11618] netlink: 'syz.6.1089': attribute type 4 has an invalid length. [ 546.081370][T11618] netlink: 314 bytes leftover after parsing attributes in process `syz.6.1089'. [ 546.090524][T11618] IPv6: NLM_F_CREATE should be specified when creating new route [ 546.359292][ T30] audit: type=1800 audit(1768505840.033:9): pid=11623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1091" name="version" dev="configfs" ino=40676 res=0 errno=0 [ 546.840605][T11620] FAULT_INJECTION: forcing a failure. [ 546.840605][T11620] name failslab, interval 1, probability 0, space 0, times 0 [ 546.879264][T11620] CPU: 1 UID: 0 PID: 11620 Comm: syz.4.1090 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.879320][T11620] Tainted: [L]=SOFTLOCKUP [ 546.879333][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.879353][T11620] Call Trace: [ 546.879364][T11620] [ 546.879377][T11620] dump_stack_lvl+0x16c/0x1f0 [ 546.879437][T11620] should_fail_ex+0x512/0x640 [ 546.879474][T11620] ? kmem_cache_alloc_noprof+0x62/0x770 [ 546.879520][T11620] should_failslab+0xc2/0x120 [ 546.879572][T11620] kmem_cache_alloc_noprof+0x83/0x770 [ 546.879613][T11620] ? __proc_create+0x2c8/0x8d0 [ 546.879665][T11620] ? __proc_create+0x2c8/0x8d0 [ 546.879707][T11620] __proc_create+0x2c8/0x8d0 [ 546.879753][T11620] ? __pfx___proc_create+0x10/0x10 [ 546.879796][T11620] ? proc_register+0x554/0x8b0 [ 546.879845][T11620] ? _raw_write_unlock+0x28/0x50 [ 546.879901][T11620] proc_create_reg+0x7d/0x180 [ 546.879959][T11620] proc_create_data+0x86/0x110 [ 546.880006][T11620] ? __pfx_proc_create_data+0x10/0x10 [ 546.880058][T11620] ? cache_register_net+0x137/0x5e0 [ 546.880100][T11620] cache_register_net+0x1e0/0x5e0 [ 546.880138][T11620] nfsd_idmap_init+0xb6/0x250 [ 546.880177][T11620] ? __pfx_nfsd_net_init+0x10/0x10 [ 546.880227][T11620] nfsd_net_init+0x69/0x3d0 [ 546.880281][T11620] ? __pfx_nfsd_net_init+0x10/0x10 [ 546.880332][T11620] ops_init+0x1e2/0x5f0 [ 546.880396][T11620] setup_net+0x11d/0x3a0 [ 546.880451][T11620] ? __pfx_setup_net+0x10/0x10 [ 546.880497][T11620] ? lockdep_init_map_type+0x5c/0x270 [ 546.880533][T11620] ? mutex_init_lockep+0x110/0x150 [ 546.880573][T11620] copy_net_ns+0x351/0x7c0 [ 546.880629][T11620] create_new_namespaces+0x3ea/0xab0 [ 546.880685][T11620] copy_namespaces+0x468/0x570 [ 546.880732][T11620] copy_process+0x2a70/0x7430 [ 546.880801][T11620] ? __pfx_copy_process+0x10/0x10 [ 546.880849][T11620] ? find_held_lock+0x2b/0x80 [ 546.880897][T11620] ? futex_private_hash_put+0x160/0x1b0 [ 546.880941][T11620] kernel_clone+0xfc/0x910 [ 546.881000][T11620] ? __pfx_kernel_clone+0x10/0x10 [ 546.881072][T11620] __do_sys_clone+0xce/0x120 [ 546.881122][T11620] ? __pfx___do_sys_clone+0x10/0x10 [ 546.881171][T11620] ? __sys_sendmsg+0x18c/0x220 [ 546.881235][T11620] ? syscall_user_dispatch+0x78/0x140 [ 546.881289][T11620] do_syscall_64+0xcd/0xf80 [ 546.881323][T11620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.881356][T11620] RIP: 0033:0x7f008e38f7c9 [ 546.881383][T11620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.881415][T11620] RSP: 002b:00007f008f262fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 546.881446][T11620] RAX: ffffffffffffffda RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 546.881468][T11620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 546.881488][T11620] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 546.881508][T11620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 546.881528][T11620] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 546.881572][T11620] [ 548.570192][T11646] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 548.742428][T11654] vhci_hcd vhci_hcd.2: invalid port number 252 [ 548.752249][T11654] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2 [ 550.030368][T11669] netlink: 'syz.6.1104': attribute type 11 has an invalid length. [ 550.088504][T11669] netlink: 'syz.6.1104': attribute type 11 has an invalid length. [ 550.117008][T11669] netlink: 'syz.6.1104': attribute type 11 has an invalid length. [ 551.350754][T11684] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1107'. [ 552.984179][T11712] netlink: 'syz.2.1113': attribute type 11 has an invalid length. [ 553.034744][T11712] netlink: 'syz.2.1113': attribute type 11 has an invalid length. [ 553.053066][T11712] netlink: 'syz.2.1113': attribute type 11 has an invalid length. [ 553.500799][T11717] binder: 11708:11717 ioctl c018620c 0 returned -1 [ 557.349994][T11763] netlink: 'syz.4.1124': attribute type 11 has an invalid length. [ 557.368573][T11763] netlink: 'syz.4.1124': attribute type 11 has an invalid length. [ 557.376538][T11763] netlink: 'syz.4.1124': attribute type 11 has an invalid length. [ 560.382785][T11800] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.412984][T11800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.438650][T11800] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 560.488680][T11800] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 560.537674][T11800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.769343][T11804] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1132'. [ 561.445724][T11815] random: crng reseeded on system resumption [ 561.995497][ T5842] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 561.998779][T11825] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 562.453387][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 562.471880][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 562.477998][T10032] Bluetooth: hci3: command 0x0c1a tx timeout [ 562.540237][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 562.546981][T10032] Bluetooth: hci0: command 0x0c1a tx timeout [ 562.567794][T11838] openvswitch: netlink: ct_state flags 0201010a unsupported [ 562.801092][T11839] bridge0: port 2(dummy0) entered blocking state [ 562.808821][T11839] bridge0: port 2(dummy0) entered disabled state [ 562.820404][T11839] dummy0: entered allmulticast mode [ 562.877435][T11839] dummy0: entered promiscuous mode [ 562.884544][T11839] bridge0: port 2(dummy0) entered blocking state [ 562.891087][T11839] bridge0: port 2(dummy0) entered forwarding state [ 565.267657][T11848] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.274168][T11848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 565.289121][T11848] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 565.336329][T11848] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 565.376971][T11848] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 565.743235][T11844] random: crng reseeded on system resumption [ 566.368665][T10032] Bluetooth: hci2: command 0x0c1a tx timeout [ 566.599247][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1153'. [ 566.857303][T10032] Bluetooth: hci5: unexpected event 0x23 length: 127 > 13 [ 566.973352][T11885] bond0: (slave bond_slave_1): Releasing backup interface [ 567.010588][T11885] bond_slave_1 (unregistering): left promiscuous mode [ 567.099342][T11885] bond_slave_1 (unregistering): left allmulticast mode [ 567.333420][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 567.340843][T10032] Bluetooth: hci5: command 0x0406 tx timeout [ 567.408790][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 567.414986][T10032] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.790043][T11901] NFSD: Failed to start, no listeners configured. [ 571.328812][T10032] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 573.417562][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.424063][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.305288][T12005] futex_wake_op: syz.2.1179 tries to shift op by -2048; fix this program [ 574.314676][T12005] futex_wake_op: syz.2.1179 tries to shift op by -2048; fix this program [ 575.188224][ T30] audit: type=1800 audit(1768505868.863:10): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1187" name="dbroot" dev="configfs" ino=41572 res=0 errno=0 [ 575.420013][T12023] NFSD: Failed to start, no listeners configured. [ 577.934203][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 578.027378][T12055] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1191'. [ 578.415870][T12065] FAULT_INJECTION: forcing a failure. [ 578.415870][T12065] name fail_futex, interval 1, probability 0, space 0, times 0 [ 578.429998][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.6.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.430047][T12065] Tainted: [L]=SOFTLOCKUP [ 578.430057][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.430075][T12065] Call Trace: [ 578.430085][T12065] [ 578.430097][T12065] dump_stack_lvl+0x16c/0x1f0 [ 578.430151][T12065] should_fail_ex+0x512/0x640 [ 578.430186][T12065] ? rcu_is_watching+0x12/0xc0 [ 578.430233][T12065] get_futex_key+0x1d0/0x15f0 [ 578.430272][T12065] ? __pfx_get_futex_key+0x10/0x10 [ 578.430309][T12065] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.430360][T12065] futex_wake+0xea/0x530 [ 578.430406][T12065] ? __pfx_futex_wake+0x10/0x10 [ 578.430467][T12065] do_futex+0x1e3/0x350 [ 578.430503][T12065] ? __pfx_do_futex+0x10/0x10 [ 578.430539][T12065] ? fput+0x70/0xf0 [ 578.430568][T12065] ? __sys_sendmsg+0x18c/0x220 [ 578.430613][T12065] __x64_sys_futex+0x1e0/0x4c0 [ 578.430655][T12065] ? __pfx___x64_sys_futex+0x10/0x10 [ 578.430707][T12065] do_syscall_64+0xcd/0xf80 [ 578.430745][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.430777][T12065] RIP: 0033:0x7f4ca518f7c9 [ 578.430802][T12065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.430833][T12065] RSP: 002b:00007f4ca5fce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 578.430863][T12065] RAX: ffffffffffffffda RBX: 00007f4ca53e6188 RCX: 00007f4ca518f7c9 [ 578.430885][T12065] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ca53e618c [ 578.430904][T12065] RBP: 00007f4ca53e6180 R08: 00007f4ca6011000 R09: 0000000000000000 [ 578.430924][T12065] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 578.430943][T12065] R13: 00007f4ca53e6218 R14: 00007ffe179bc510 R15: 00007ffe179bc5f8 [ 578.430992][T12065] [ 579.299727][T12082] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1197'. [ 581.177489][T12107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1203'. [ 584.339934][T12163] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1217'. [ 584.378208][T12163] ›: renamed from bond_slave_0 (while UP) [ 584.475117][T12170] tipc: Can't bind to reserved service type 0 [ 586.905197][T12197] NFSD: Failed to start, no listeners configured. [ 589.776390][T12249] FAULT_INJECTION: forcing a failure. [ 589.776390][T12249] name failslab, interval 1, probability 0, space 0, times 0 [ 589.814020][T12249] CPU: 0 UID: 0 PID: 12249 Comm: syz.7.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.814076][T12249] Tainted: [L]=SOFTLOCKUP [ 589.814084][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.814098][T12249] Call Trace: [ 589.814106][T12249] [ 589.814115][T12249] dump_stack_lvl+0x16c/0x1f0 [ 589.814158][T12249] should_fail_ex+0x512/0x640 [ 589.814184][T12249] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 589.814217][T12249] should_failslab+0xc2/0x120 [ 589.814253][T12249] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 589.814282][T12249] ? __d_lookup+0x25c/0x4a0 [ 589.814310][T12249] ? __d_alloc+0x35/0xa80 [ 589.814334][T12249] ? __d_alloc+0x35/0xa80 [ 589.814352][T12249] __d_alloc+0x35/0xa80 [ 589.814375][T12249] d_alloc+0x4a/0x1e0 [ 589.814397][T12249] lookup_one_qstr_excl+0x175/0x250 [ 589.814426][T12249] start_dirop+0x59/0xb0 [ 589.814458][T12249] simple_start_creating+0xf4/0x100 [ 589.814491][T12249] ? __pfx_simple_start_creating+0x10/0x10 [ 589.814522][T12249] ? do_raw_spin_unlock+0x172/0x230 [ 589.814551][T12249] ? simple_pin_fs+0xa3/0x190 [ 589.814581][T12249] debugfs_start_creating.part.0+0x86/0x1c0 [ 589.814622][T12249] __debugfs_create_file+0xb3/0x530 [ 589.814649][T12249] debugfs_create_file_full+0x41/0x60 [ 589.814675][T12249] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 589.814704][T12249] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 589.814759][T12249] ? lockdep_init_map_type+0x5c/0x270 [ 589.814786][T12249] preinit_net.part.0+0x437/0x8f0 [ 589.814822][T12249] copy_net_ns+0x4cd/0x7c0 [ 589.814861][T12249] create_new_namespaces+0x3ea/0xab0 [ 589.814906][T12249] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 589.814941][T12249] ksys_unshare+0x45b/0xa40 [ 589.814979][T12249] ? __pfx_ksys_unshare+0x10/0x10 [ 589.815017][T12249] ? xfd_validate_state+0x61/0x180 [ 589.815047][T12249] __x64_sys_unshare+0x31/0x40 [ 589.815066][T12249] do_syscall_64+0xcd/0xf80 [ 589.815089][T12249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.815112][T12249] RIP: 0033:0x7fccab18f7c9 [ 589.815130][T12249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.815152][T12249] RSP: 002b:00007fccac0eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.815173][T12249] RAX: ffffffffffffffda RBX: 00007fccab3e5fa0 RCX: 00007fccab18f7c9 [ 589.815188][T12249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 589.815202][T12249] RBP: 00007fccab213f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.815216][T12249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.815229][T12249] R13: 00007fccab3e6038 R14: 00007fccab3e5fa0 R15: 00007ffe2aaec498 [ 589.815259][T12249] [ 591.162977][T12270] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1236'. [ 594.738743][T12340] netlink: 'syz.7.1246': attribute type 11 has an invalid length. [ 594.746658][T12340] netlink: 'syz.7.1246': attribute type 11 has an invalid length. [ 594.808447][T12340] netlink: 'syz.7.1246': attribute type 11 has an invalid length. [ 598.936565][ T30] audit: type=1800 audit(1768505892.613:11): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1261" name="trace_pipe" dev="tracefs" ino=1103 res=0 errno=0 [ 601.367973][T12434] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1265'. [ 601.493666][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'. [ 601.894659][T12444] netlink: 'syz.6.1269': attribute type 11 has an invalid length. [ 601.952053][T12444] netlink: 'syz.6.1269': attribute type 11 has an invalid length. [ 602.002435][T12444] netlink: 'syz.6.1269': attribute type 11 has an invalid length. [ 602.073810][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 602.324840][T12453] FAULT_INJECTION: forcing a failure. [ 602.324840][T12453] name failslab, interval 1, probability 0, space 0, times 0 [ 602.338504][T12453] CPU: 0 UID: 0 PID: 12453 Comm: syz.6.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.338541][T12453] Tainted: [L]=SOFTLOCKUP [ 602.338549][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 602.338563][T12453] Call Trace: [ 602.338570][T12453] [ 602.338579][T12453] dump_stack_lvl+0x16c/0x1f0 [ 602.338621][T12453] should_fail_ex+0x512/0x640 [ 602.338647][T12453] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 602.338679][T12453] should_failslab+0xc2/0x120 [ 602.338715][T12453] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 602.338745][T12453] ? alloc_inode+0x64/0x240 [ 602.338776][T12453] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 602.338813][T12453] ? alloc_inode+0x64/0x240 [ 602.338836][T12453] alloc_inode+0x64/0x240 [ 602.338861][T12453] new_inode+0x22/0x1c0 [ 602.338889][T12453] __debugfs_create_file+0x105/0x530 [ 602.338916][T12453] debugfs_create_file_full+0x41/0x60 [ 602.338942][T12453] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 602.338972][T12453] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 602.339038][T12453] ? lockdep_init_map_type+0x5c/0x270 [ 602.339067][T12453] preinit_net.part.0+0x24e/0x8f0 [ 602.339102][T12453] copy_net_ns+0x4cd/0x7c0 [ 602.339141][T12453] create_new_namespaces+0x3ea/0xab0 [ 602.339179][T12453] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 602.339214][T12453] ksys_unshare+0x45b/0xa40 [ 602.339251][T12453] ? __pfx_ksys_unshare+0x10/0x10 [ 602.339289][T12453] ? xfd_validate_state+0x61/0x180 [ 602.339318][T12453] __x64_sys_unshare+0x31/0x40 [ 602.339338][T12453] do_syscall_64+0xcd/0xf80 [ 602.339360][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.339383][T12453] RIP: 0033:0x7f4ca518f7c9 [ 602.339401][T12453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.339425][T12453] RSP: 002b:00007f4ca6010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 602.339446][T12453] RAX: ffffffffffffffda RBX: 00007f4ca53e5fa0 RCX: 00007f4ca518f7c9 [ 602.339461][T12453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 602.339475][T12453] RBP: 00007f4ca5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 602.339489][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.339502][T12453] R13: 00007f4ca53e6038 R14: 00007f4ca53e5fa0 R15: 00007ffe179bc5f8 [ 602.339533][T12453] [ 602.339541][T12453] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888034620218' [ 605.198473][ T30] audit: type=1800 audit(1768505898.843:12): pid=12488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1277" name="dbroot" dev="configfs" ino=44750 res=0 errno=0 [ 605.672590][T12499] FAULT_INJECTION: forcing a failure. [ 605.672590][T12499] name failslab, interval 1, probability 0, space 0, times 0 [ 605.689206][T12499] CPU: 1 UID: 0 PID: 12499 Comm: syz.7.1281 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.689258][T12499] Tainted: [L]=SOFTLOCKUP [ 605.689269][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.689289][T12499] Call Trace: [ 605.689299][T12499] [ 605.689310][T12499] dump_stack_lvl+0x16c/0x1f0 [ 605.689368][T12499] should_fail_ex+0x512/0x640 [ 605.689403][T12499] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 605.689458][T12499] should_failslab+0xc2/0x120 [ 605.689510][T12499] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 605.689553][T12499] ? alloc_inode+0x64/0x240 [ 605.689596][T12499] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 605.689645][T12499] ? alloc_inode+0x64/0x240 [ 605.689678][T12499] alloc_inode+0x64/0x240 [ 605.689714][T12499] new_inode+0x22/0x1c0 [ 605.689753][T12499] __debugfs_create_file+0x105/0x530 [ 605.689793][T12499] debugfs_create_file_full+0x41/0x60 [ 605.689831][T12499] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 605.689871][T12499] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 605.689949][T12499] ? lockdep_init_map_type+0x5c/0x270 [ 605.689990][T12499] preinit_net.part.0+0x24e/0x8f0 [ 605.690039][T12499] copy_net_ns+0x4cd/0x7c0 [ 605.690101][T12499] create_new_namespaces+0x3ea/0xab0 [ 605.690157][T12499] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 605.690207][T12499] ksys_unshare+0x45b/0xa40 [ 605.690260][T12499] ? __pfx_ksys_unshare+0x10/0x10 [ 605.690311][T12499] ? xfd_validate_state+0x61/0x180 [ 605.690354][T12499] __x64_sys_unshare+0x31/0x40 [ 605.690383][T12499] do_syscall_64+0xcd/0xf80 [ 605.690416][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.690449][T12499] RIP: 0033:0x7fccab18f7c9 [ 605.690476][T12499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.690509][T12499] RSP: 002b:00007fccac0eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 605.690539][T12499] RAX: ffffffffffffffda RBX: 00007fccab3e5fa0 RCX: 00007fccab18f7c9 [ 605.690561][T12499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 605.690581][T12499] RBP: 00007fccab213f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.690601][T12499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.690620][T12499] R13: 00007fccab3e6038 R14: 00007fccab3e5fa0 R15: 00007ffe2aaec498 [ 605.690662][T12499] [ 605.690675][T12499] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888053ce0218' [ 610.479177][T12571] FAULT_INJECTION: forcing a failure. [ 610.479177][T12571] name failslab, interval 1, probability 0, space 0, times 0 [ 610.482082][ T30] audit: type=1107 audit(1768505904.153:13): pid=12572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 610.542326][T12571] CPU: 1 UID: 0 PID: 12571 Comm: syz.7.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.542382][T12571] Tainted: [L]=SOFTLOCKUP [ 610.542393][T12571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.542413][T12571] Call Trace: [ 610.542423][T12571] [ 610.542435][T12571] dump_stack_lvl+0x16c/0x1f0 [ 610.542494][T12571] should_fail_ex+0x512/0x640 [ 610.542530][T12571] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 610.542575][T12571] should_failslab+0xc2/0x120 [ 610.542625][T12571] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 610.542669][T12571] ? alloc_inode+0x64/0x240 [ 610.542719][T12571] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 610.542771][T12571] ? alloc_inode+0x64/0x240 [ 610.542804][T12571] alloc_inode+0x64/0x240 [ 610.542841][T12571] new_inode+0x22/0x1c0 [ 610.542881][T12571] __debugfs_create_file+0x105/0x530 [ 610.542920][T12571] debugfs_create_file_full+0x41/0x60 [ 610.542957][T12571] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 610.542998][T12571] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 610.543076][T12571] ? lockdep_init_map_type+0x5c/0x270 [ 610.543116][T12571] preinit_net.part.0+0x437/0x8f0 [ 610.543165][T12571] copy_net_ns+0x4cd/0x7c0 [ 610.543218][T12571] create_new_namespaces+0x3ea/0xab0 [ 610.543268][T12571] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 610.543317][T12571] ksys_unshare+0x45b/0xa40 [ 610.543370][T12571] ? __pfx_ksys_unshare+0x10/0x10 [ 610.543423][T12571] ? xfd_validate_state+0x61/0x180 [ 610.543464][T12571] __x64_sys_unshare+0x31/0x40 [ 610.543493][T12571] do_syscall_64+0xcd/0xf80 [ 610.543526][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.543559][T12571] RIP: 0033:0x7fccab18f7c9 [ 610.543585][T12571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.543617][T12571] RSP: 002b:00007fccac0eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 610.543648][T12571] RAX: ffffffffffffffda RBX: 00007fccab3e5fa0 RCX: 00007fccab18f7c9 [ 610.543669][T12571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 610.543688][T12571] RBP: 00007fccab213f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.543718][T12571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.543736][T12571] R13: 00007fccab3e6038 R14: 00007fccab3e5fa0 R15: 00007ffe2aaec498 [ 610.543780][T12571] [ 610.545034][T12571] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888053ce2850' [ 611.165839][T12581] FAULT_INJECTION: forcing a failure. [ 611.165839][T12581] name failslab, interval 1, probability 0, space 0, times 0 [ 611.183383][T12581] CPU: 1 UID: 0 PID: 12581 Comm: syz.6.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.183434][T12581] Tainted: [L]=SOFTLOCKUP [ 611.183446][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.183461][T12581] Call Trace: [ 611.183469][T12581] [ 611.183480][T12581] dump_stack_lvl+0x16c/0x1f0 [ 611.183526][T12581] should_fail_ex+0x512/0x640 [ 611.183563][T12581] should_failslab+0xc2/0x120 [ 611.183605][T12581] __kmalloc_cache_noprof+0x80/0x800 [ 611.183640][T12581] ? bdi_split_work_to_wbs+0x1c1/0xfc0 [ 611.183678][T12581] ? bdi_split_work_to_wbs+0x1c1/0xfc0 [ 611.183708][T12581] bdi_split_work_to_wbs+0x1c1/0xfc0 [ 611.183747][T12581] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 611.183798][T12581] ? __lock_acquire+0x436/0x2890 [ 611.183829][T12581] __writeback_inodes_sb_nr+0x200/0x2b0 [ 611.183864][T12581] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 611.183910][T12581] ? get_nr_dirty_inodes+0x170/0x1e0 [ 611.183948][T12581] ? __pfx_fs_bdev_sync+0x10/0x10 [ 611.183981][T12581] sync_filesystem+0xbb/0x290 [ 611.184004][T12581] ? __pfx_fs_bdev_sync+0x10/0x10 [ 611.184035][T12581] fs_bdev_sync+0x2c/0x40 [ 611.184070][T12581] blkdev_common_ioctl+0x2250/0x2b80 [ 611.184111][T12581] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 611.184156][T12581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 611.184206][T12581] ? do_vfs_ioctl+0x128/0x14f0 [ 611.184288][T12581] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 611.184339][T12581] ? find_held_lock+0x2b/0x80 [ 611.184390][T12581] blkdev_ioctl+0x2b5/0x6e0 [ 611.184427][T12581] ? __pfx_blkdev_ioctl+0x10/0x10 [ 611.184465][T12581] ? __pfx_blkdev_ioctl+0x10/0x10 [ 611.184498][T12581] __x64_sys_ioctl+0x18e/0x210 [ 611.184534][T12581] do_syscall_64+0xcd/0xf80 [ 611.184561][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.184591][T12581] RIP: 0033:0x7f4ca518f7c9 [ 611.184615][T12581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.184646][T12581] RSP: 002b:00007f4ca5fef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.184677][T12581] RAX: ffffffffffffffda RBX: 00007f4ca53e6090 RCX: 00007f4ca518f7c9 [ 611.184699][T12581] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000005 [ 611.184719][T12581] RBP: 00007f4ca5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 611.184740][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.184759][T12581] R13: 00007f4ca53e6128 R14: 00007f4ca53e6090 R15: 00007ffe179bc5f8 [ 611.184803][T12581] [ 611.869290][T12580] netlink: 'syz.2.1298': attribute type 1 has an invalid length. [ 613.703250][T12570] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 613.711142][T12570] #PF: supervisor instruction fetch in kernel mode [ 613.717680][T12570] #PF: error_code(0x0010) - not-present page [ 613.723705][T12570] PGD 80000000925c9067 P4D 80000000925c9067 PUD 89f1d067 PMD 8c726067 PTE 0 [ 613.732472][T12570] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 613.737976][T12570] CPU: 0 UID: 0 PID: 12570 Comm: syz.4.1295 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.748981][T12570] Tainted: [L]=SOFTLOCKUP [ 613.753329][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.763412][T12570] RIP: 0010:0x0 [ 613.766914][T12570] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 613.774301][T12570] RSP: 0018:ffffc9000bb07988 EFLAGS: 00010287 [ 613.780398][T12570] RAX: 00000000000008e8 RBX: 0000000000000000 RCX: ffffc9001a392000 [ 613.788406][T12570] RDX: 0000000000080000 RSI: ffffea0001601140 RDI: ffff88802a6df500 [ 613.796428][T12570] RBP: ffffea0001601140 R08: 0000000000000007 R09: 0000000000000000 [ 613.804441][T12570] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001760f32 [ 613.812710][T12570] R13: ffff88802a6df500 R14: 0000000000000000 R15: dffffc0000000000 [ 613.820795][T12570] FS: 00007f008f2636c0(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000 [ 613.829766][T12570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.836365][T12570] CR2: ffffffffffffffd6 CR3: 0000000076af2000 CR4: 00000000003526f0 [ 613.844352][T12570] Call Trace: [ 613.847635][T12570] [ 613.850575][T12570] filemap_read_folio+0xc8/0x2a0 [ 613.855543][T12570] ? __pfx_filemap_read_folio+0x10/0x10 [ 613.861115][T12570] do_read_cache_folio+0x266/0x5c0 [ 613.866253][T12570] freader_get_folio+0x33a/0x930 [ 613.871221][T12570] freader_fetch+0xbd/0x740 [ 613.875747][T12570] ? __asan_memset+0x23/0x50 [ 613.880359][T12570] __build_id_parse.isra.0+0xdd/0x6c0 [ 613.885764][T12570] ? query_matching_vma+0x48e/0x7d0 [ 613.891115][T12570] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 613.897144][T12570] do_procmap_query+0xb0e/0x1080 [ 613.902142][T12570] ? __pfx_do_procmap_query+0x10/0x10 [ 613.907547][T12570] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 613.913471][T12570] ? do_vfs_ioctl+0x128/0x14f0 [ 613.918265][T12570] ? __fget_files+0x20e/0x3c0 [ 613.923013][T12570] procfs_procmap_ioctl+0x9d/0xe0 [ 613.928071][T12570] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 613.933812][T12570] __x64_sys_ioctl+0x18e/0x210 [ 613.938600][T12570] do_syscall_64+0xcd/0xf80 [ 613.943113][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.949014][T12570] RIP: 0033:0x7f008e38f7c9 [ 613.953439][T12570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.973065][T12570] RSP: 002b:00007f008f263038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.981494][T12570] RAX: ffffffffffffffda RBX: 00007f008e5e5fa0 RCX: 00007f008e38f7c9 [ 613.989490][T12570] RDX: 00002000000001c0 RSI: 00000000c0686611 RDI: 0000000000000006 [ 613.997471][T12570] RBP: 00007f008e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 614.005451][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.013476][T12570] R13: 00007f008e5e6038 R14: 00007f008e5e5fa0 R15: 00007ffec4c86c98 [ 614.021475][T12570] [ 614.024498][T12570] Modules linked in: [ 614.028400][T12570] CR2: 0000000000000000 [ 614.032580][T12570] ---[ end trace 0000000000000000 ]--- [ 614.038039][T12570] RIP: 0010:0x0 [ 614.041598][T12570] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 614.048971][T12570] RSP: 0018:ffffc9000bb07988 EFLAGS: 00010287 [ 614.055059][T12570] RAX: 00000000000008e8 RBX: 0000000000000000 RCX: ffffc9001a392000 [ 614.063042][T12570] RDX: 0000000000080000 RSI: ffffea0001601140 RDI: ffff88802a6df500 [ 614.071027][T12570] RBP: ffffea0001601140 R08: 0000000000000007 R09: 0000000000000000 [ 614.079008][T12570] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001760f32 [ 614.087002][T12570] R13: ffff88802a6df500 R14: 0000000000000000 R15: dffffc0000000000 [ 614.094981][T12570] FS: 00007f008f2636c0(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000 [ 614.103922][T12570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.110520][T12570] CR2: ffffffffffffffd6 CR3: 0000000076af2000 CR4: 00000000003526f0 [ 614.118505][T12570] Kernel panic - not syncing: Fatal exception [ 614.125223][T12570] Kernel Offset: disabled [ 614.129580][T12570] Rebooting in 86400 seconds..