last executing test programs: 2m39.686447045s ago: executing program 0 (id=1545): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x9, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r7, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007d0180e1f80bd434dd3988069363ddfe7be3f387b551f770e3cdbe8e2098ca9aaf9a818ed644aa6eb004c001021d91dcee77d829423b84d54e5dfebb83492fe6f9506a88cf5335e6fb61929969efcf94bfa38d5bcbc4ece49bb977a66a5a9206a2693af8b13e1ead10779676d933ee886b0ab9bb1f1801f342aa41cc2eaeca31588c8fda7d7c047a6974b343c1699ba7ab91cb4cc9cb4005a2e528eab19d0a"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf252c0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="070002007b3a000008000300070000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270310000", @ANYRES32=0x0, @ANYBLOB="0800030006000000080241df", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300ffff000008000300000000003400018008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r9, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 2m39.101530743s ago: executing program 0 (id=1548): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = open(0x0, 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x9) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000300)={0x7f, 0x3b, 0x9, 0x1e4, 0x5, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfae, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) 2m38.837102919s ago: executing program 0 (id=1551): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x5, 0x0, 0x3, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8931, 0x24) 2m37.763393199s ago: executing program 0 (id=1553): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x9, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r7, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007d0180e1f80bd434dd3988069363ddfe7be3f387b551f770e3cdbe8e2098ca9aaf9a818ed644aa6eb004c001021d91dcee77d829423b84d54e5dfebb83492fe6f9506a88cf5335e6fb61929969efcf94bfa38d5bcbc4ece49bb977a66a5a9206a2693af8b13e1ead10779676d933ee886b0ab9bb1f1801f342aa41cc2eaeca31588c8fda7d7c047a6974b343c1699ba7ab91cb4cc9cb4005a2e528eab19d0a"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf252c0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="070002007b3a000008000300070000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270310000000000000000", @ANYRES32=0x0, @ANYBLOB="0800030006000000080241df", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300ffff000008000300000000003400018008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r9, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 2m36.919884441s ago: executing program 0 (id=1558): mmap$auto(0x8, 0x5, 0xdb, 0x91e, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3b) socket(0x2, 0x2, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) open(0x0, 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) 2m35.863940832s ago: executing program 0 (id=1560): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'nr0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r7 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r7, 0x84, 0x7d, 0x0, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r6, &(0x7f0000000000)="595bae370780597d6d11ce1cf26595df30afd04662bf8f211b25349a1de367f1313a0e28598a5ebfa88de1fa992bac1b8d13eacce851da942c", 0x39) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m29.821850802s ago: executing program 1 (id=1581): socket(0xa, 0x2, 0x73) getpeername$auto(0x3, 0xfffffffffffffffe, 0x0) mq_notify$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xa, 0x9b72, 0xc, 0x800008000) writev$auto(0x4, 0x0, 0x1) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/dri/vkms/vkms_config\x00', 0x80ab01, 0x0) lseek$auto(r0, 0x9, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) copy_file_range$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000002, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) prctl$auto(0x21, 0xfffffffffffffffd, 0x2, 0x0, 0x0) timer_settime$auto(0x5, 0x2, &(0x7f0000000580)={{0x5, 0x4}, {0xfff, 0x5}}, &(0x7f00000005c0)={{0x0, 0x10001}, {0x6, 0x80}}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x105000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250100000006000a0029250000040007800c0002000400000000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) 2m28.498094122s ago: executing program 1 (id=1585): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0xffffffffffffff27, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0600253d7000fdfbffffff00a800"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) prctl$auto(0x50, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto(r3, 0x89f0, r2) 2m28.110453891s ago: executing program 1 (id=1587): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x9, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r7, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007d0180e1f80bd434dd3988069363ddfe7be3f387b551f770e3cdbe8e2098ca9aaf9a818ed644aa6eb004c001021d91dcee77d829423b84d54e5dfebb83492fe6f9506a88cf5335e6fb61929969efcf94bfa38d5bcbc4ece49bb977a66a5a9206a2693af8b13e1ead10779676d933ee886b0ab9bb1f1801f342aa41cc2eaeca31588c8fda7d7c047a6974b343c1699ba7ab91cb4cc9cb4005a2e528eab19d0a"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf252c0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="070002007b3a000008000300070000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d72703100000000000000000000080001", @ANYRES32=0x0, @ANYBLOB="0800030006000000080241df", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300ffff000008000300000000003400018008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r9, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 2m26.531128182s ago: executing program 1 (id=1591): prctl$auto(0x8, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x20048880) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x9, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd602078dbdf250100000008000200", @ANYBLOB="11000100c2000000000000000a39acce00000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)={0x24, r3, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4, 0x4, 0x0, 0x1, [@generic]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 2m25.419725717s ago: executing program 1 (id=1595): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) getpid() unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x14be02, 0x0) mmap$auto(0xffffffffffffffff, 0x4, 0x5, 0xecb8, r0, 0x354e) prctl$auto(0x1b, 0x6, 0x0, 0xd13, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x400, 0x7, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x4, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x200000000000008, 0xdf, 0x9b72, 0x2, 0x7fff) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x20000) prctl$auto_PR_GET_AUXV(0x41555856, 0x5400000000000000, 0x5, 0x0, 0x5) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) pidfd_open$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) open$dir(0x0, 0x10000, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x6, 0x403) 2m23.960017211s ago: executing program 1 (id=1601): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = getpid() unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x14be02, 0x0) mmap$auto(0xffffffffffffffff, 0x4, 0x5, 0xecb8, 0xffffffffffffffff, 0x354e) prctl$auto(0x1b, 0x6, 0x0, 0xd13, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x400, 0x7, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x4, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x200000000000008, 0xdf, 0x9b72, 0x2, 0x7fff) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mousedev/uevent\x00', 0x2b8ee3, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) unshare$auto(0x20000) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) open$dir(0x0, 0x10000, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x6, 0x403) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(0xffffffffffffffff, 0x60020000) process_vm_readv$auto(r0, 0x0, 0x800000001, 0x0, 0x6, 0x0) 2m20.701490353s ago: executing program 32 (id=1560): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'nr0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r7 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r7, 0x84, 0x7d, 0x0, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r6, &(0x7f0000000000)="595bae370780597d6d11ce1cf26595df30afd04662bf8f211b25349a1de367f1313a0e28598a5ebfa88de1fa992bac1b8d13eacce851da942c", 0x39) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m8.674261653s ago: executing program 33 (id=1601): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = getpid() unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x14be02, 0x0) mmap$auto(0xffffffffffffffff, 0x4, 0x5, 0xecb8, 0xffffffffffffffff, 0x354e) prctl$auto(0x1b, 0x6, 0x0, 0xd13, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x400, 0x7, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x4, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x200000000000008, 0xdf, 0x9b72, 0x2, 0x7fff) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mousedev/uevent\x00', 0x2b8ee3, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) unshare$auto(0x20000) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) open$dir(0x0, 0x10000, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x6, 0x403) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(0xffffffffffffffff, 0x60020000) process_vm_readv$auto(r0, 0x0, 0x800000001, 0x0, 0x6, 0x0) 2m5.313246044s ago: executing program 4 (id=1644): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x24b42, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/kvm/nested_run\x00', 0x42, 0x0) write$auto(r3, &(0x7f0000000180)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\xe5\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\xb2^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dT\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xdc*\x1dV', 0x5) r4 = socket(0xa, 0x1, 0x0) mknod$auto(&(0x7f0000000140)=':,\x00', 0xc3, 0xfffffffa) listen$auto(r4, 0x1) listen$auto(0x3, 0x81) r5 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x20280, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r2) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r5, &(0x7f0000001080)=""/4096, 0x1000) r6 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000040)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, 0x4, 0xb90, r5, 0x5}, 0x5) sendfile$auto(r6, r0, 0x0, 0x7ff) 2m4.438221696s ago: executing program 4 (id=1648): socket(0x2, 0x2, 0x1) setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) mq_open$auto(&(0x7f0000000280)='\xef\a\xf1\x985', 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsopen$auto(0x0, 0x1) r2 = epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) epoll_ctl$auto(r2, 0x40008, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.reset_stats\x00', 0xa801, 0x0) write$auto(r3, &(0x7f00000000c0)='7\x00\\\xa0\x04\xfa\b\x1c\xc7k', 0x9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x80140, 0x0) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/audio1\x00', 0x8a02, 0x0) 2m3.135316585s ago: executing program 4 (id=1651): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x9, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r7, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007d0180e1f80bd434dd3988069363ddfe7be3f387b551f770e3cdbe8e2098ca9aaf9a818ed644aa6eb004c001021d91dcee77d829423b84d54e5dfebb83492fe6f9506a88cf5335e6fb61929969efcf94bfa38d5bcbc4ece49bb977a66a5a9206a2693af8b13e1ead10779676d933ee886b0ab9bb1f1801f342aa41cc2eaeca31588c8fda7d7c047a6974b343c1699ba7ab91cb4cc9cb4005a2e528eab19d0a"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf252c0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="070002007b3a000008000300070000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400020064766d7270310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030006000000080241df", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300ffff000008000300000000003400018008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r9, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 2m2.521700555s ago: executing program 4 (id=1653): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) getpid() unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x14be02, 0x0) mmap$auto(0xffffffffffffffff, 0x4, 0x5, 0xecb8, r0, 0x354e) prctl$auto(0x1b, 0x6, 0x0, 0xd13, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x400, 0x7, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x4, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x200000000000008, 0xdf, 0x9b72, 0x2, 0x7fff) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x20000) prctl$auto_PR_GET_AUXV(0x41555856, 0x5400000000000000, 0x5, 0x0, 0x5) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) pidfd_open$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) open$dir(0x0, 0x10000, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x6, 0x403) 2m2.472657821s ago: executing program 2 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0xf) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x448c0}, 0x8000) pread64$auto(r2, &(0x7f0000000080)='nbd\x00', 0x9, 0x4000000) 2m2.24071348s ago: executing program 2 (id=1655): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8040) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon17\x00', 0x3814c2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c884}, 0x240dc094) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0xa, 0xb2) capget$auto(&(0x7f0000000080)={0x1e}, &(0x7f00000000c0)={0x3, 0x6, 0x2}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r1, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0xd3b8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) read$auto(r2, 0x0, 0x20) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000380)="c6311ea32ffbb512aa46d3e2a5835332dd304957d2ef83a32bdf8f305eff91261e69008bbd788886cb88b0107cb7ecf64fe1451ba4fa52d0be7e95b49045c5c486410176abbedd122508b214d8e32efda2e1f36d7924b03e7018bb6a6f2446f273d42f84e04a16284c03ed054cf3bd0e3fd55847c00e3cbaf209561328225161fda772d165a2c1ff0bedc0721c5a3feb7a4b1e62cd8a1316d079d8c925cf93538fb925162f52e3c6d0ecaaaf45f5808399eaa3968e93c557ee32af430db94206a53aeb90b7a2e8970713b3faa2f2980948ecc4f3b91d1225efa58e2fae6b5b2b5afedcc248c401a56ebb60cdcb21f62ef67a1bdd2e5572e54eb82bdf2641ec806b121bbe453d652089d5be30b0d0e8049d2841a51f8b26bde35c176143a12324186ddefc4295918e0917bb05baab429e747b27b88893c3492ea332540f8d1cb2fd9c2ef9102ede34373b0c6de555d0853ba9dca4d131d6869c0ed27a7e931620c4767f44236e7d1714d5fb61b25ddf59fd6567164126943397fae1db4b319cd180f7bd34f41f07b9d56f4f78e109468e631e8d2cc232f0d20673098a86dc774b5c42ebb7b33535491d360ba01670568553d2a9f8ab3131fa099562a68c663643abc6ff417d11675da7f9fdcad19b1693af4f4ea2d3bc26fcf4b619e5ff249d54f65c5c9aae9131e6c0ff6a3922edaa044a5da8dc44f224dc8df1c164196bec7a3e1f64a54fcbda309da05fcef864eba398783961178411e8da5ec119c724feb214bfae87d0be744a8c7d28343ce0af4b8e97a703106b4b40cfca3b262dfbb106edca4cc9019560ab1b4c8525bbc5c7d3cc02a6afdcafd43b6c03afee36606997b65a4d0ca0864380cd70f077fdd2c6f4510dcd5134a712a9f7a3055a604384fec3fdf1248fc9ac5fbc480a5d923828ebb2c612622e46efc6386b23e0bea7cecccf649438ea9f4515dab987e26db5da192d50b065db6473a661d9a17ac45c62ca5a82568943c1597dfef69bae994a757618040dc04fbacb5a67fd0c26ec23fc133a2220b44495bc32eab52935403f10179f14bf2a25c1a8026099c98f08b6403abe7074d82e28b8f4c838a107599aee8664e2b6f3391522c8624de46d883b6b90de8408f003ff1b18fc8e58630b5f2e479ed8b368a5e2e363ef1aacd7a0980b0a496a59efc71210b9fb309807472429a88108a87b1e747aaf64472bab66a84632e5e8c1eced42d05d102b345fbe1f6407c0f7006c98c64427dde5d2341921f6df622f0910e6c5351bc0b3a9bf06a3e2f879eab679b75212da02ee9d19ebafea2588e1c023910d7a260144d809358e2d0a76ac096569c026e123ad33067584d59e8fac94d4d4587c887b5d3a53d8a3b65f30c19898b0d7f4f177dfd1e7df351bf66dd63801df5774a1c9b676ee3033b15f32c74ee2e73468c2a5f33fb012b78b6d5a8bcc735f5a0bc5386b39df005f3b930c67681f096023c28a2ade2e6d90dd9a4c64233304a073cac26018b5089fce1bdf2c26dcad29fc10cf15745887a8b324a4fa7261fad6c9a4635a54cec44a9d5567f2479ee1ecee9eabbd94b272349e68c7e6aef846f9a4184fc3162410514bdeab1f49d870ff2baabbd245fb84bdd178c66f7fd02a0c11d0a405190e14c86c84760932197b310505e6fcd9d6bbb7aacfc2c5b4b70e18fd2e27881458dfb382b7282f919dd26549e72ab0330f699f26e365c3b9a9ecad41f352142430d83b7827ab5dfec87be602732b81b89b965ca2795c21e627615c36b039813d64200821cebc80396747cf1dac0cec963496ff0080c4c6ff39822c4a427b2dd6ad65edd1b8bd0af0a7d7d3006d9fd9e6fd3c622a961563f1abe063dd21b926d97778e206f69e592473eed0fadac7cf8705d804b2083e00e16a71695ce6c6f84bb49798c0533963259722a2d8293e2dea5d8504855bc5dbca75c69ae1b6d64cc4ee4c61ba034a7ddae70d69c2076634309e5f7ce22962b40f4dd88b1727381335505bb205705079d724b30e7001eb51ddb9a71fd3b6efcff8fa2b8ceb01357f0321fbe4602cd86b41d32c89c7617553337a0025e668a0e91b7fdfa2c25a135f10f22fcda6e6db652f517030d41ed824493d52ce1adb56b56ee58eb002c327d541be3f79541b64129b9d797437399fd69b28130b2daaaf7ca4ca75c2f51ff1e5f6ccc3c309762dcd2b69faa80e6ef0ae334b313b8b606451dfc400545b7bcad92dbea1f3c15a58aefca183d55455008a0eb8ad93d974cdd75a03cb6272c3903ebdb7388a63e4d08de3c89fd92b01da06a85e6c22051bde05d784f12d681195770ceabcc09891c22efad4d5ea5c6ce1b47a317e29fb06676eb1de87803384687ee9383d2d98c1568990bc77d59ce63dac6cbdf90fd6a96bc3dad1fa7db2d35b3f1fa20444753aa8366ddae71a2a96beca3175559a4d2712866387ccd0a117258c7744cc4c049187e9c28b7e0b4d7d2c585a94af01466d555a365a5d81017824f2325d06be5391e488cfe91693b6e8bf00acfc76e94817e119caa9b677a25ec2b32e7adc96c255d9411a7730bea920d024f55f6ce9a66e3ae67718163b9b608314df0c87aa6237be621a5aaa02c787fd8375c41a436c1e7c3ed65efeba858ed73def2ec1cf6195f5063ea2d2e90f7eb0277354b6380b28abd0c665f5ea1ca72fb1b30e4b3ddbc226cfacaf57f29a07eb7b75494ce657aef5b3dadb38b30b1592ba2cf21485209a608ce19faf815afb53ef84c23df036d6c237f40225d3bc62df89610355ba63100d905afd74d3a7f100459ca4a7899f3b1573ac3474c8d001e382b87dd6109e97a4ec6d70f08ed8074b562ad6c0ae76674597379b179633869161a9b646b47296e62d7ee969cd83ecc901acda7cd9744360dc83fb760295eb67c221a7e1d615218223ecf6327ed918b2f62e2fa0c2fe623ff5c0f919f218bd7fe016252d12d082d46a37e848eb597485cc5231dba285b9ed2c47a80badc5ee5c3e41b43d6f5fd13117dc50d235f3256473660239ee79111299d1b464c8080064a6f43617c0af38f6d639c10e03580c5663fce54ad69e40140593ad03b26e65e1183a173c0e41af5cf1555db08d090ca0a073da86edfaed71ba8fac022145eb3911a7bc4ca1d50763a6ff94dc51d5976888e7cd265bd64215e4154c2adce43c680d3059653f1b62691048821ed134b2b55db437a7d216060656cbf5f123134086358e68045870ccf0d653ae70b37d7032fd1fa3c61d5edd59c1ff79661ba1de2ce9a3b11ef1141d79ceb76a15a19953b5993877422efe28a7e5aab8c7d495ffa4293afa7ba453864c02803f0567704415da74c626738026dc0ac4956a4a637d67b82959f02f336a42bc165e3cc19585ef083ab89e868641eafcc192c87594b5d993ee4399fc4453532c1002720ee9d8245a066020be2fe91e6def50fcaa64db21356f848fac0e5ca32e5f3eafcb396be856dc545ba92dbded334f5317361be14a90cf34a9e883eff4b05d629611a0f513ac655df557c980d72a0cf47ef9f804481b96320a021efc11c2946c3fc5e4cfb8de577d40bded111544eb803629e7c76ce250c9bdc76c7792e7f67a774b1e66300af7cc593b2f3304e5d979812d155cf99301755d292e6c6eb4bf734c0d0ca224c88e4a3abe2c299026022b33e6a27cd66e160e87e0c6a21415569a479fdbe155cffffba8f10c991d839d98d538ed02a6be90bb7a980a66535bf32d63ed362d7f1392a63365729347c5b88c61d1adfd4710b01b8eb4a70964d6f3f411a18d46ac07c38e05985f844813262af48bcb68b93b7f3373f04003545655383b561ee9a874674b261566fc88ead76beb75ba96a92a0b1ac3bb7b5ed4c98322890b5b8055b192082322f99688c564c12b9e12059c07e37c1ea590bf5711ec1af8d6064f674500e009a9423202a46f971fad2ac5e8f2f5938b816c4a026aa19c0e40368868dfbcd7b7b7b5dd322194f89bbc375778d7c7446d2f4293d90479b5ca57c47de4e16128d0346b43508401ea50314a75af5422f48a56209639d9a921fd679858da8ba5bee19ee6ccf9e00b47be5ae06116e338045419befc6f71320e4b52a920ffc66157d9d976642852d55a4904cb621723c4b0984782ec61fe30cd2dfa2562968088f2498cdc4fef0f8fbbc8a7a03270e6013e33581eab86c9522b9165cfe0422d01a6a6f3171d0d19ecbf829fd486a2d1cd587a597fa8b89e49132c81faa99ee3e2a9a04afd655b955c4c971ec1351443f42c0467764cc398c7d6d01477375fa268033a4d8fae2d4761e8c55db22784d7c9908d1805e56162e31f625918131cc547513db93f597d52beb9d229228018371466bf3ba6a98e8f842b0a3bb24b04dd35bc9c37b019bde6f9f7afc35c0d997b146c2aee317c06e4f040af3400025406d162b1776836da2559df4be42f043a2b5562864d1578b4ef5a8293dcc1106c0eb0913f834cc3e148eab43c61aea2b4013bbf800745e518e7c6226856a6f02ba66dff6ec4701313642963b3d077fcd0ad8e0fd20f2ff06545a9d75ba488f60170e1aa303ff23c2f236128647f67769fd3e97c3fb05a6a7901474fadb8cd5399347800bdededc66d712babe5da7e42ba4ffe715d4753613c4e896dee25646d3cd7d1f9c463ebbe60eac3bc619b7d3072dfd5dbf47b50e305837f9d3fe3475b9bec23efa6f3148ed038cdce941cefc13d27df0b0cb8181323017447c42ea97731aa3f3789b8d12f6ff251afc91d404e52e75a53622cf6082baa01f2ceb512c4529a5c1d156d213321767c10eddaf9e9f54a9a5de41ec16ba17cc16720816c97e4f6020c193b2b479a49e7f63ecb3439e833521dc1821625c75bfeb50b01df9384152a0cf3ec4b96691ad11653b2cc56454d9af7568f5baaecbc8527ca4b285188766b70adb8db28d0708d67323b059fd9397436c3ef3c61ad6232ad7a0d9f673c002bc255b61483bd4e5b9054791be4765ee4104740da4fc49d3e59a60b3c14c2424148fd39974270cc0a52148f57d5533e160552e20f7287b3155521317cc05e73857ccf0b995dfcf143013c136ae92d69459e49269ccd2d1a4cfa4f8ec68ea520d18055091d73a97f4d0c658663bdba25d7449eff0595c737c921c44154a0f1bbeb95a0f1db244f8c93c64f81dd979c1b2bea351a5282950495de6906ee15ae3c9bd71623783ebd5f359491420184cff85cc147c0e5b9d61e74f232f11639171df0ef54719bd40cc052ad79670e780f988155fb2468517b5a5a814a54b5205d17b04c6fbec536d0469cd00bfa50627cddd9f2bdc23190182bf22144f34c72ad89cbb4b910b21eaa98166e0f29b0536878c0abc99b9b2d6b8371c3e7fb69478ae45e53d5b854edb3ee00f2291d080dc1505113582d2afc881aa365f69d85584535e94745441e3f96e9db7ad489a81b9347efc52d2976125e4341f0ba0967041da569038c36ec0a3e58c532d4cdd080dda4912ec7a96b5ac233ed3b31caf3a0958c1f9ba78abd667f8bf32bbc4172c780c697e010f1d4e0a7ce29d2aa97dc7884bf0bd1de4aa822bb63d329fb58c82b3c8e47a88f2f369b4032a6fac33bb9322f0f30e57a19ef54ac27cd3d0f733f69207170521b4b79c77e0db320638c2c60136cb596c21c588ac7f76a485c433daa6bf775946a302966b292aebc51789235597feaf22ee909cbd9002131ec792d34a500a78c36d0367a79a94d226feebd34689384b398143105473c99c475b451af9525dcb4e2306341a93916cb3e516e90842dc1ffcc34") madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x3, 0x20009, 0x4000000000df, 0x14, r4, 0x8000) madvise$auto(0xfe7, 0x9, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r4, &(0x7f0000000340)={{&(0x7f0000000080), 0xffff, &(0x7f0000000200)={&(0x7f0000000140)="4e86ca325b00b93bbd8281e37986643cee1f8988610f877b5b2a07d0b2d18e60fc9fd0e68fadb3ebc2a10a65ebdb75894c430d4d5cbdb8fcd64ac0a8d7a9a4ff", 0x7}, 0x1, &(0x7f0000000240), 0x22a, 0x1}, 0x3}, 0x6, 0x4) r5 = open(0x0, 0x595002, 0x408) write$auto(r5, 0x0, 0xfffffdf1) pwrite64$auto(r5, 0x0, 0x32e, 0x8) close_range$auto(0x2, 0x8, 0x0) 2m0.77176451s ago: executing program 4 (id=1656): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x8000001, 0x0, 0x1, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x620482, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000240), 0x581a00, 0x0) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x7fff) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec1\x00', 0x8e140, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0xb2c40, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0x8000200000000004, &(0x7f0000000780)="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") lseek$auto(r2, 0x8000000000000003, 0xfffffff8) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) close_range$auto(0x0, r1, 0x2) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x6, &(0x7f0000000400)="09dc5afc7177db290b50bdad0302a33bb52221c8ee45dfd89b79a5eea8f34a3e5a4cfbaff041c25046549d30c76825e71ec4993374297864a73af8a2d58face08c1e4b1f83d83f3d239770c7cc9e58ae3eca529d29393602dcd601118ccff5ffcd0e1899c215fcb49a") bpf$auto(0x18, &(0x7f00000002c0)=@bpf_attr_0={0x2, 0x1010, 0x1, 0xe, 0x9, r0, 0xa, "00001200", 0x0, 0xffffffffffffffff, 0x400, 0x7d37, 0x20000ff, 0x9}, 0x10000) chdir$auto(&(0x7f0000000480)='}[,&*}\x00') r4 = open(&(0x7f0000000180)='}[,&*}\x00', 0x0, 0x18a) lseek$auto(r4, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x15e060, 0x0) r5 = getpid() sched_setaffinity$auto(r5, 0x5, &(0x7f0000000000)=0x7) r6 = getpid() sched_setaffinity$auto(r6, 0x8, &(0x7f0000000740)=0x9) 1m59.455945024s ago: executing program 2 (id=1658): unshare$auto(0x6c000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000040)={0x17, 0x8, 0x1, 0x91, 0x1, 0x6, 0x2, 0x8000000000000000, 0x3, 0x3, 0x7, 0x40, 0x2, 0x200, 0x2}) set_robust_list$auto(&(0x7f0000000280)={{&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x4, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0)={&(0x7f0000000180)}}}}, 0x3) mmap$auto(0x10000000000000, 0x0, 0x4000000000e3, 0x40eb2, 0xd, 0x8) mremap$auto(0x200003000000, 0x7, 0x3fd6, 0x3, 0x200000) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000300)={0x7f, 0x3b, 0x9, 0x1e4, 0x5, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfae, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) 1m59.36864761s ago: executing program 4 (id=1659): fchown$auto(0x2, 0xffffffff, 0xa1a9) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000200), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/zswap/reject_compress_fail\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029217000fbdbdf2503000000040008000c0001800800148000800000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000000)='MAC80211_HWSIM\x00', 0x7ffe, 0x1) madvise$auto(0x9, 0xf, 0xa) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) ioperm$auto(0x7, 0x6, 0x80) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) write$auto(r5, 0x0, 0xfffffdf1) linkat$auto(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f0000000280)='&&\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) 1m58.861645197s ago: executing program 2 (id=1660): sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, r0, [0xffffffff], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0xfffffffc, 0xd, 0x2}, {0xfff7ffff, 0x1, 0x52, 0x8, 0x10001, 0xece, 0x76c5, 0x8, 0x8000000000000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x101, 0x402000c, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x2, 0x22, 0x0) socket(0x15, 0x5, 0x1) setsockopt$auto(0x3, 0x114, 0x3f, 0x0, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, 0x0, 0x24004045) ioctl$auto(0x1, 0x541b, 0x8) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000500)="173e8bb6c0") r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) sendto$auto(r2, &(0x7f00000004c0)="4cc35357da26902c842d7eaf6c92da7d0ae36f71c6c19942cf3353989ae3b07375085bdc5030fd4a8045d256bafa9acac507c2eb23824a2deb8a17000000004444623c099301b28f26c78efa32150554da6b10570c9fe6ceba61646366e54c1d386c2bd497d9e3ef0e44d483ec028ed1a1d055cd30d584a7fab012b5d50a0c45dc61854f847704cb8df99c673465d100", 0x1, 0x8, &(0x7f0000000040)=@hci={0x1f, 0x3, 0x3}, 0xff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 1m57.264964418s ago: executing program 2 (id=1663): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x200000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0xc) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) fgetxattr$auto(r0, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x5) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x7) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0x1775387, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) fcntl$auto_F_SETOWN_EX(r3, 0xf, 0x9) r4 = memfd_secret$auto(0x0) ftruncate$auto(r4, 0x1) ftruncate$auto(0x3, 0x700) socket(0x2, 0x2, 0x7) io_uring_setup$auto(0x7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x8402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) 1m55.624746032s ago: executing program 2 (id=1665): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000080), 0x705e02, 0x0) unshare$auto(0x20000080) 1m45.682150431s ago: executing program 5 (id=1687): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x9, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r7, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007d0180e1f80bd434dd3988069363ddfe7be3f387b551f770e3cdbe8e2098ca9aaf9a818ed644aa6eb004c001021d91dcee77d829423b84d54e5dfebb83492fe6f9506a88cf5335e6fb61929969efcf94bfa38d5bcbc4ece49bb977a66a5a9206a2693af8b13e1ead10779676d933ee886b0ab9bb1f1801f342aa41cc2eaeca31588c8fda7d7c047a6974b343c1699ba7ab91cb4cc9cb4005a2e528eab19d0a"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf252c0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="070002007b3a000008000300070000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030006000000080241df", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300ffff000008000300000000003400018008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r9, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 1m45.213294838s ago: executing program 5 (id=1688): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0xd}]}, 0x20}, 0x1, 0x0, 0x0, 0x2a239d1e00a6689b}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r2, &(0x7f0000000180), 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x4, 0x6, 0x4000000000df, 0x13, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r4, 0x40086602, &(0x7f0000000100)) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@[5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd5m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x6) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1m44.328699022s ago: executing program 34 (id=1659): fchown$auto(0x2, 0xffffffff, 0xa1a9) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000200), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/zswap/reject_compress_fail\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029217000fbdbdf2503000000040008000c0001800800148000800000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000000)='MAC80211_HWSIM\x00', 0x7ffe, 0x1) madvise$auto(0x9, 0xf, 0xa) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) ioperm$auto(0x7, 0x6, 0x80) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) write$auto(r5, 0x0, 0xfffffdf1) linkat$auto(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f0000000280)='&&\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) 1m44.299415208s ago: executing program 5 (id=1690): rseq$auto(&(0x7f00000001c0)={0xb4d6, 0x8403, 0xfffffffffffffffa, 0x6, 0x83, 0x2}, 0x20, 0x0, 0xe) msync$auto(0x110c23fff5, 0x200001, 0x6) 1m44.094702432s ago: executing program 5 (id=1691): openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c02, 0x0) r0 = waitid$auto(0x2, 0xffffffffffffffff, &(0x7f0000000380)={@_si_pad}, 0x100, &(0x7f0000000400)={{0xfffffffffffffbff, 0x100000001}, {0x0, 0x2}, 0x101, 0x200, 0xfffffffffffffaaa, 0x6, 0x8000, 0x4, 0x4, 0x81, 0x4a8, 0x7, 0x9, 0x61, 0x3, 0x4}) r1 = prctl$auto_PR_SET_MM_ENV_END(0x6000, 0xb, r0, 0xd8a0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/pci_bus/0000:00/cpuaffinity\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/179, 0xb3) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) chmod$auto(&(0x7f0000000280)='./file0\x00', 0x79bc) prctl$auto(0x2f, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYBLOB="f75461b624fc069cc79908fe67e55dfb64fd306631b27ff92a5130df19e09b049c7919bf6a481a26b9b34cc9659665cf303e1fdfeeaf9e1ee05a5f67d0769a6c3cd850e1d3f908ebeb4301efbe655e14a5e5d21fd41290c05ceefe406358f85c8ca1c2ce9f253587db3ae54853d68152484733ef80616293791b6b7478199f03676d193853e1939c591ab1b7ba7f0ad26ac1cc6c5cf39fe901ca197e4615512256fe6cef31974d460c", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x200040d0) r5 = socket(0x2, 0x3, 0xfffffff7) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c097}, 0x800) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000002c0)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)=' \f', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="52010000", @ANYBLOB="180027"], 0x1ac}}, 0x6048044) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) socket(0x11, 0x3, 0x2) getpeername$auto(0x3, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="10020008001001d073000000000000000000000000000000280000"], 0x1c}, 0x1, 0x0, 0x0, 0x10000851}, 0x10) 1m43.72479111s ago: executing program 5 (id=1692): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x9, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r7, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007d0180e1f80bd434dd3988069363ddfe7be3f387b551f770e3cdbe8e2098ca9aaf9a818ed644aa6eb004c001021d91dcee77d829423b84d54e5dfebb83492fe6f9506a88cf5335e6fb61929969efcf94bfa38d5bcbc4ece49bb977a66a5a9206a2693af8b13e1ead10779676d933ee886b0ab9bb1f1801f342aa41cc2eaeca31588c8fda7d7c047a6974b343c1699ba7ab91cb4cc9cb4005a2e528eab19d0a"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf252c0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="070002007b3a000008000300070000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030006000000080241df", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300ffff000008000300000000003400018008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r9, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 1m43.199876037s ago: executing program 5 (id=1695): fchown$auto(0x2, 0xffffffff, 0xa1a9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/zswap/reject_compress_fail\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x9, 0xf, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200800, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x58) umount2$auto(&(0x7f0000000000)='\x00', 0x4) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m40.177742344s ago: executing program 35 (id=1665): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000080), 0x705e02, 0x0) unshare$auto(0x20000080) 1m28.096393686s ago: executing program 36 (id=1695): fchown$auto(0x2, 0xffffffff, 0xa1a9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/zswap/reject_compress_fail\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x9, 0xf, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200800, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x58) umount2$auto(&(0x7f0000000000)='\x00', 0x4) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 27.513791003s ago: executing program 3 (id=1859): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x5, 0x0, 0x3, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89b1, 0x24) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_register$auto(0x2, 0x14, 0x0, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x181002, 0x0) 26.805340707s ago: executing program 6 (id=1861): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_INCOMING_CPU(r1, 0x6, 0x31, &(0x7f0000000040)='[\x00', 0xb22) io_uring_register$auto(0x2, 0x5, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 26.341091694s ago: executing program 3 (id=1863): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x9, 0x0, 0x17) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a20030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000200)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) write$auto(r0, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x0) 24.294732854s ago: executing program 3 (id=1865): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_VHOST_SET_VRING_BASE2(r0, 0x4008af12, &(0x7f0000000040)={0xa, 0x4}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040440}, 0x800) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfffffffe, 0x802, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='\x80\xfb\xd8o`AG,>^\xd6e\xe1[\x8d\xb4\xfeQ\x06\x9b\x12\x90B\x1c\xeb/Y\xd1\xbc\x16v\t\xb4^\x9a\xa4z\xbb\xdd\n\xdbB\x1d\xbc\x06\x94\xaf\x91\x111\xf2\n\x84\xed\xab\x93~,\xd4\xfc\x97(\xa8\x1d\xdfb\xc2\xa2\x8aocpIr>\v\xeep,CfM\xf7\xee\x893&\xba^>,\xbc\x1a2\x91\x88\t\x18\a\xd6\x18\xbefW\xc0y\x8c\xc13W\xb1\xa9\xe1\'WS\xad0\x1e:\x1f\xa4X\x99\x94_\xb4=\x04C\xe5\x86l\x13\x88\x01\x9e\xad6 \xd2|\x88L\xde\x9dA\xcfL\xc5E\x1cz\xdc\x86\xc8\xff\xeb{\x1a\xaa\xad{\xdf.\x9b\xbd\a\xb6$\x82\xcc\x12\xac\xe2\xe4C\xa7\xdd\x82;\xa0\xc8Yw\x0f=', 0x100081) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) fallocate$auto(r1, 0xe, 0x4, 0x7) 23.046035009s ago: executing program 3 (id=1867): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x600006, 0x2, 0x406b1, 0xffffffffffffffff, 0x300000000000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0xa, 0x0, 0x4) mmap$auto(0x4, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x94003, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x763880, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff001) mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0xffffffffffffffff, 0x8) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e20, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0xfffffffffffffff0, 0xf, 0x2, 0x1e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) 22.926480609s ago: executing program 6 (id=1868): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14b402, 0x0) mmap$auto(0x0, 0x810004, 0x4, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x1e00000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a801, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x11, 0x800004, 0x8}) 21.812180848s ago: executing program 3 (id=1871): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x82041, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, 0x0, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/023/001\x00', 0x101a42, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0xe02, 0x1, 0x8, 0x103, &(0x7f0000000080)}) select$auto(0xfffffffb, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x400000000000005, 0x5, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') socket(0x2d, 0x2, 0x0) setsockopt$auto(0x3, 0x11d, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) read$auto(0x3, 0x0, 0x8080) madvise$auto(0xffffffff, 0x6d, 0x4) 21.609032232s ago: executing program 6 (id=1872): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x51bb00, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40000, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0xfffffffffffffff7, 0xd, 0x8, 0x10, r1, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000000)="2dc2f4045de01fe67fa93d2c44e76f", 0xf) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x1a9002, 0x0) mmap$auto(0x0, 0x9, 0x4000000000dd, 0xeb1, r3, 0x99) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) madvise$auto(0x0, 0x2003f0, 0x15) mlockall$auto(0x7) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x800, 0x0) 18.218861796s ago: executing program 6 (id=1875): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0xfff, 0xeb1, 0xffffffffffffffff, 0x0) madvise$auto(0x12, 0x400000004000000c, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0xe01, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000100)="437f4f232f05e8eae313b6b8b0724b43ddf5f888b07d8221d437fca7dd63eaebd82836af4f9665c9e87b74780ddd2212281b9db90ba54be070432524311142aa8fd8c42c615b97aa6fc4913f20c251d64646c762fe5e5e0d637b5ce463097733038af2d72c26f5d5c5783c0dc2fc3b1be64d3ca090f365b5efe85fbb998bbb1c3f2fbc47732ae729963c70a06fcdc40aa4d65cfef05faad407cc8b022f13f79b120cfdd66bc29d1951d6fc7cad4fdd254b01cb33b50ec69e184f88bfd8b67d4581b72ef47cd11d626ff8397cce29381832239fdb3c67f7e7247e15e40346a7df82656f1a9aeb5714") keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) setfsuid$auto(0xee00) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = setfsuid$auto(0xee01) keyctl$auto(0x1ff, 0xffffffffffffffff, r1, 0x0, 0x200000000000075) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2a742, 0x0) epoll_create$auto(0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x100000, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x40002) epoll_create1$auto(0x3) 17.121244717s ago: executing program 3 (id=1878): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x1c1041, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r1, 0x400454ca, 0x38) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyw4/dev\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80002, 0x73) r4 = socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r5}, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r6 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r6, 0x6, 0x25, &(0x7f0000000040)='(\x00', 0x7) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000001c00)=""/4111, 0x100f) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r9, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '#'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) 11.756759478s ago: executing program 6 (id=1885): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose12/link_mode\x00', 0x715000, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/vfs_cache_pressure\x00', 0x40000, 0x0) read$auto(r0, 0x0, 0x1ff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0xa, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0xa, 0x80000, 0xffffffff) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3b4a44cc6499ce8ef4d7dc355efc08fb9f4e1ceebbe1acf38f40862fc7a5aae23fcbbf8bc44eae84cab1a812369b701f367a94f56d05197a85420188b864569a0349d5237d98b9a56a9c2d2433f740", @ANYRES64, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2004c082) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x80201, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={0x800, 0x5, 0x400, 0xf0a, 0xffffffffffffffff, 0xee01, 0x0, 0x200, 0xfffffffffffffff6, 0x8, 0x2, 0x1, 0x4, 0xa35a, 0x2, 0xfffffffffffffbff, 0xdf1}, 0x60a) capget$auto(&(0x7f00000004c0)={0xffff8001}, &(0x7f0000000500)={0x8, 0x2c, 0x81}) sendmsg$auto_NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000009ceb6fa1da421e8ba11e22644ded8118b8e24fa0f573bce98b50ea41f8dafc8b62f38b11920f7fd67fb779f930418624890a0f9fbd9c058d23ba834dd0ff12f8b6c752a2ecc1df7e65c3812e027b0fa14f6a7a6278c3d0121f4ef7fcc2082f7ab031a81e3a04f17ac4c4074b7a4fac5c2fc8", @ANYRES16, @ANYBLOB="100000000000fcdbdf250400000004001400"], 0x18}, 0x1, 0x0, 0x0, 0x400c011}, 0x20) writev$auto(r2, &(0x7f0000005f00)={0x0, 0x4}, 0x6) 11.391360724s ago: executing program 6 (id=1886): openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c02, 0x0) r0 = waitid$auto(0x2, 0xffffffffffffffff, &(0x7f0000000380)={@_si_pad}, 0x100, &(0x7f0000000400)={{0xfffffffffffffbff, 0x100000001}, {0x0, 0x2}, 0x101, 0x200, 0xfffffffffffffaaa, 0x6, 0x8000, 0x4, 0x4, 0x81, 0x4a8, 0x7, 0x9, 0x61, 0x3, 0x4}) prctl$auto_PR_SET_MM_ENV_END(0x6000, 0xb, r0, 0xd8a0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/pci_bus/0000:00/cpuaffinity\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/179, 0xb3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0x65, 0x7, 0x0, 0x4) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) chmod$auto(&(0x7f0000000280)='./file0\x00', 0x79bc) prctl$auto(0x2f, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf250c0000000400018004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x200040d0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c097}, 0x800) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000002c0)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)=' \f', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="52010000", @ANYBLOB="180027"], 0x1ac}}, 0x6048044) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) socket(0x11, 0x3, 0x2) getpeername$auto(0x3, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000851}, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd6\x00', 0x82000, 0x0) 6.120260731s ago: executing program 8 (id=1893): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0xaa340, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/pcm0c/sub7/sw_params\x00', 0x181800, 0x0) read$auto(r0, &(0x7f0000000000)='/proc/sc6\xe0\xf3\xb2\xf6\xe5F\x16&si/sg/devices\x00', 0x7) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x4) ioctl$auto(0x3, 0xffffffff40088a01, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000040), r2) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, "1ead596c0aa757cb532167db13fe36f59e21b6c2579133f068f408ca4ee8ad2c48de98951c19733a9287801a8bf5ff04632c90d9260d88e388b7b04a77896714bee0a844443ff9cdf683eaa10b8d431a483b214a1d5c0c656ead386801d7c5f0603cd96ff5b7bc86b3ae5c7784d0e734f5b892a5482f22502159b7"}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$auto(0x3, 0xae41, r3) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x1, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 5.542247373s ago: executing program 8 (id=1894): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) clock_getres$auto(0xfffffffd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x40003}, 0x4}}, 0x6a) getpid() r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r2, 0x0, 0x6000000000, 0x100000004) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r3, 0x80204d01, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r4, 0x0, 0x3, 0x0, 0x8000000000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r3, 0x8002) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84) 4.716483741s ago: executing program 7 (id=1896): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) fcntl$auto_F_DUPFD_CLOEXEC(r0, 0x406, r0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x41, 0x20148, 0x2bd}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400000008, 0x20000000000000da, 0x9b76, 0xffffffffffffffff, 0x20008000) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x24, 0x1001, 0x1, 0x717e, 0xc, 0x4, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0x2, 0x7, 0x6, 0x7f, 0x3ff, 0x2, 0xa, 0x1004, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, [0x2, 0x0, 0x10000000000200, 0x4000401, 0x0, 0x7, 0xffffffffffffff81, 0xffffffff80000000, 0x0, 0x42, 0x1, 0x3, 0x0, 0x80000000000000, 0x8, 0x4, 0x400, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff, 0x668, 0x0, 0x9, 0x0, 0x5, 0x14, 0xffffffffffffffff, 0xfffffe, 0x0, 0x1000000000000000, 0xfffffffffffffffc, 0x83, 0x400, 0x6, 0x0, 0x0, 0xb457195, 0x6, 0xffffffffffffffff, 0x2]}, 0x800000000001fe, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) read$auto(r2, 0x0, 0x10001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) epoll_ctl$auto(0x5, 0x2, r3, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket(0x1d, 0x2, 0x6) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) 4.266397992s ago: executing program 7 (id=1897): mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x4) r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x200, 0x0) preadv2$auto(r0, &(0x7f0000000100)={&(0x7f00000000c0)="d9ff136bb9fce9aa7d87173f5e2010be1a426697c4e833d343a55039c3559febb36e0f269d6d5214e5f49132b6718363aec06f8c91cd750f6fbf37", 0x72}, 0x5, 0x2, 0x5, 0x4) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x3, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0xca, 0x0, 0x7f) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x28000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) 3.876759201s ago: executing program 8 (id=1898): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x129800, 0x0) mmap$auto(0x8, 0x5, 0xdb, 0x91e, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3b) socket(0x2a, 0xa, 0xe) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) socket(0x2b, 0x1, 0x1) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) open(0x0, 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) mmap$auto(0x0, 0x3ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000020000000001) socket(0xa, 0x801, 0x84) 3.454494164s ago: executing program 8 (id=1899): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/drivers\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0xa2741, 0x0) semctl$auto(0x0, 0x9, 0x1, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) sendmmsg$auto(r3, &(0x7f00000012c0)={{&(0x7f0000000140)="7ff5daf650061fe41256b78d57cd1a295ddb993fa83e72958a30a1c183772b8114abdff5b0251d219062c410ce54dd659f2062b7a2b6dfd9a2f10b7b783c97b10ac6828025538d6edee46d52e201db929c89efacbd19afcef7228ce9f6b4679298671ef23f1c787ccc5b65a74a7b488a356f61385076c1b592c746982e6fb16ebff6de3d73920eacac567b3e4ab0fe22732249d38352cb", 0x5, &(0x7f0000001200)={&(0x7f0000000200)="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", 0xe}, 0x527, &(0x7f0000001240)="2d8bb977627abc15c1b3654e387da065fd315b7f122ab5e1b38e569bd1fc2ead47e643a6c308c3556e2040ffa25243124d74187790f2a6dabdfd92b278fbbe10fb28204d501cd7522cf1570b3bbdb8ba99f97c9b4fa8b93bb94dc712011afed73bba27f69e11da312081c20b73a0", 0x4, 0x81}, 0x1}, 0x3, 0x5) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000013c0)=""/172, 0xac) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setresuid$auto(0x8, 0x8, 0x0) 3.188036477s ago: executing program 7 (id=1900): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) clock_getres$auto(0xfffffffd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x40003}, 0x4}}, 0x6a) getpid() r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r2, 0x0, 0x6000000000, 0x100000004) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r3, 0x80204d01, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r4, 0x0, 0x3, 0x0, 0x8000000000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r3, 0x8002) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84) 2.285894892s ago: executing program 8 (id=1901): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x8d, 0x0, 0x2) r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) socket(0x11, 0x3, 0x9) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r2, 0x900064b0, 0x2000000000000c38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x7, 0x8, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x400, 0x5d8, 0x1000000000000009, 0x7, 0x6]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x4, 0xe05a, 0x4]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000084}, 0xdb444d247350d791) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) ioctl$auto(0x3, 0x5411, 0x10000000000402) mmap$auto(0x0, 0xe983, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$auto_VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000100)=0xe0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) acct$auto(&(0x7f0000000280)='/dev/net/tun\x00') 1.930907128s ago: executing program 37 (id=1878): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x1c1041, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r1, 0x400454ca, 0x38) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyw4/dev\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80002, 0x73) r4 = socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r5}, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r6 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r6, 0x6, 0x25, &(0x7f0000000040)='(\x00', 0x7) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000001c00)=""/4111, 0x100f) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r9, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '#'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) 1.8991805s ago: executing program 7 (id=1903): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x9, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r7, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007d0180e1f80bd434dd3988069363ddfe7be3f387b551f770e3cdbe8e2098ca9aaf9a818ed644aa6eb004c001021d91dcee77d829423b84d54e5dfebb83492fe6f9506a88cf5335e6fb61929969efcf94bfa38d5bcbc4ece49bb977a66a5a9206a2693af8b13e1ead10779676d933ee886b0ab9bb1f1801f342aa41cc2eaeca31588c8fda7d7c047a6974b343c1699ba7ab91cb4cc9cb4005a2e528eab19d0a"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf252c0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="070002007b3a000008000300070000005800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030006000000080241df", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300ffff000008000300000000003400018008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r9, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 886.002168ms ago: executing program 7 (id=1904): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) socket(0x21, 0x80000, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) r3 = epoll_create$auto(0x8800001) pipe2$auto(0x0, 0x0) epoll_ctl$auto(r3, 0x3, r1, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000240)=ANY=[@ANYBLOB="e7fdff8d44916c5dbbdd2310000056b103cfe0ed7b3b700442fbf598d28ed0553238b0023f51cd8a9d2df44ce666337d2e04000000000000b7a00ad9bc0046b3eb2f939f3d84dca30cd7b0b6b3ab0bff9bc793b415ef83f68700823d2d2e51b8e19744697dd98dff315a6a6b7794818c02ddb41abb348a4843fc4bccd111ac90afceb162fdee00c84be8872b0ff3f965180d736e81c95f7ea41ebf601f191cf3196494dba303676b4a98a0e446c89b2a566c72ec4b92681653ea44f41e8b7d67e949bff83502a37ade8248d052da08d44ee317c1f3a2ef0b1dfca63a5600561f251f1e06a6e136719549"]) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pidfd_open$auto(0x1, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0x2, 0x12, r0, 0x28000) 103.849068ms ago: executing program 8 (id=1905): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x2a461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)='-7', 0xfffffc49) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x121582, 0x0) fsmount$auto(r2, 0x4, 0x2) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffffb}, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000002080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f0000000940)=ANY=[@ANYBLOB="10130000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf255d00008a1e000100080000", @ANYBLOB="0d154b804b596e89f98aef0a678d3db390d67c171b2a6c002761ac21fb1576da7b9ff48e29d53573", @ANYBLOB="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"], 0x1310}, 0x1, 0x0, 0x0, 0x240040e4}, 0x24004880) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tee$auto(r2, r4, 0x0, 0x5) r5 = prctl$auto_PR_SET_MM_ENV_END(0x1, 0xb, 0xffffffffffffffff, 0x8, 0x80000000) r6 = fcntl$auto_F_UNLCK(r5, 0x5c5, 0x2) write$auto_hwsim_fops_rx_rssi_(r6, &(0x7f0000000000), 0x0) ioctl$auto(r2, 0x64c5, r2) 0s ago: executing program 7 (id=1906): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x2a461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)='-7', 0xfffffc49) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x121582, 0x0) fsmount$auto(r2, 0x4, 0x2) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffffb}, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000002080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f0000000940)=ANY=[@ANYBLOB="10130000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf255d00008a1e000100080000", @ANYBLOB="0d154b804b596e89f98aef0a678d3db390d67c171b2a6c002761ac21fb1576da7b9ff48e29d53573", @ANYBLOB="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"], 0x1310}, 0x1, 0x0, 0x0, 0x240040e4}, 0x24004880) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tee$auto(r2, r4, 0x0, 0x5) r5 = prctl$auto_PR_SET_MM_ENV_END(0x1, 0xb, 0xffffffffffffffff, 0x8, 0x80000000) r6 = fcntl$auto_F_UNLCK(r5, 0x5c5, 0x2) write$auto_hwsim_fops_rx_rssi_(r6, &(0x7f0000000000), 0x0) ioctl$auto(r2, 0x64c5, r2) kernel console output (not intermixed with test programs): cated SCSI ioctl, please convert it to SG_IO [ 300.111855][ T9007] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[9007] [ 300.196353][ T9010] FAULT_INJECTION: forcing a failure. [ 300.196353][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 300.270082][ T9010] CPU: 0 UID: 0 PID: 9010 Comm: syz.1.741 Not tainted syzkaller #0 PREEMPT(full) [ 300.270114][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.270129][ T9010] Call Trace: [ 300.270137][ T9010] [ 300.270146][ T9010] dump_stack_lvl+0x100/0x190 [ 300.270180][ T9010] should_fail_ex.cold+0x5/0xa [ 300.270211][ T9010] should_failslab+0xc2/0x120 [ 300.270256][ T9010] __kmalloc_noprof+0xfc/0x820 [ 300.270287][ T9010] ? rcu_is_watching+0x12/0xc0 [ 300.270317][ T9010] ? tomoyo_realpath_from_path+0xb6/0x690 [ 300.270358][ T9010] tomoyo_realpath_from_path+0xb6/0x690 [ 300.270398][ T9010] tomoyo_path_number_perm+0x23c/0x580 [ 300.270426][ T9010] ? tomoyo_path_number_perm+0x22e/0x580 [ 300.270456][ T9010] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 300.270513][ T9010] ? find_held_lock+0x2b/0x80 [ 300.270542][ T9010] ? __fget_files+0x215/0x3d0 [ 300.270562][ T9010] ? hook_file_ioctl_common+0x140/0x440 [ 300.270590][ T9010] ? __fget_files+0x215/0x3d0 [ 300.270616][ T9010] ? __fget_files+0x21f/0x3d0 [ 300.270642][ T9010] security_file_ioctl+0xd3/0x230 [ 300.270672][ T9010] __x64_sys_ioctl+0xb7/0x210 [ 300.270708][ T9010] do_syscall_64+0x115/0x840 [ 300.270729][ T9010] ? clear_bhb_loop+0x40/0x90 [ 300.270757][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.270780][ T9010] RIP: 0033:0x7f0ad579de59 [ 300.270800][ T9010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.270823][ T9010] RSP: 002b:00007f0ad662b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.270847][ T9010] RAX: ffffffffffffffda RBX: 00007f0ad5a26090 RCX: 00007f0ad579de59 [ 300.270863][ T9010] RDX: 0000000000000000 RSI: 0000000000005408 RDI: 0000000000000003 [ 300.270877][ T9010] RBP: 00007f0ad662b090 R08: 0000000000000000 R09: 0000000000000000 [ 300.270891][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.270904][ T9010] R13: 00007f0ad5a26128 R14: 00007f0ad5a26090 R15: 00007ffc79a52e48 [ 300.270933][ T9010] [ 300.270943][ T9010] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.639719][ T9007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 300.997305][ T9017] FAULT_INJECTION: forcing a failure. [ 300.997305][ T9017] name failslab, interval 1, probability 0, space 0, times 0 [ 301.052807][ T9017] CPU: 0 UID: 0 PID: 9017 Comm: syz.0.742 Not tainted syzkaller #0 PREEMPT(full) [ 301.052841][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.052856][ T9017] Call Trace: [ 301.052865][ T9017] [ 301.052874][ T9017] dump_stack_lvl+0x100/0x190 [ 301.052909][ T9017] should_fail_ex.cold+0x5/0xa [ 301.052942][ T9017] should_failslab+0xc2/0x120 [ 301.052977][ T9017] kmem_cache_alloc_noprof+0x91/0x6a0 [ 301.053006][ T9017] ? stack_trace_save+0x8e/0xc0 [ 301.053041][ T9017] ? alloc_empty_file+0x5b/0x1c0 [ 301.053078][ T9017] alloc_empty_file+0x5b/0x1c0 [ 301.053110][ T9017] path_openat+0xe7/0x4280 [ 301.053133][ T9017] ? __kasan_slab_alloc+0x89/0x90 [ 301.053173][ T9017] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 301.053202][ T9017] ? do_getname+0x35/0x390 [ 301.053230][ T9017] ? do_sys_openat2+0xc7/0x1e0 [ 301.053261][ T9017] ? __x64_sys_openat+0x12d/0x210 [ 301.053293][ T9017] ? do_syscall_64+0x115/0x840 [ 301.053314][ T9017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.053347][ T9017] ? __pfx_path_openat+0x10/0x10 [ 301.053380][ T9017] do_file_open+0x20e/0x430 [ 301.053408][ T9017] ? __pfx_do_file_open+0x10/0x10 [ 301.053454][ T9017] ? alloc_fd+0x471/0x7a0 [ 301.053480][ T9017] ? do_getname+0x191/0x390 [ 301.053513][ T9017] do_sys_openat2+0x10f/0x1e0 [ 301.053545][ T9017] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.053589][ T9017] __x64_sys_openat+0x12d/0x210 [ 301.053623][ T9017] ? __pfx___x64_sys_openat+0x10/0x10 [ 301.053667][ T9017] do_syscall_64+0x115/0x840 [ 301.053688][ T9017] ? clear_bhb_loop+0x40/0x90 [ 301.053717][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.053742][ T9017] RIP: 0033:0x7fd22c79de59 [ 301.053761][ T9017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.053785][ T9017] RSP: 002b:00007fd22d649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.053808][ T9017] RAX: ffffffffffffffda RBX: 00007fd22ca26270 RCX: 00007fd22c79de59 [ 301.053825][ T9017] RDX: 0000000000088000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 301.053840][ T9017] RBP: 00007fd22c833e6f R08: 0000000000000000 R09: 0000000000000000 [ 301.053855][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.053869][ T9017] R13: 00007fd22ca26308 R14: 00007fd22ca26270 R15: 00007ffcaabc38a8 [ 301.053899][ T9017] [ 301.846675][ T9022] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[9022] [ 301.972645][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 302.150447][ T9006] Process accounting resumed [ 302.781954][ T9040] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 302.825636][ T9040] netlink: 310 bytes leftover after parsing attributes in process `syz.3.750'. [ 303.008932][ T30] audit: type=1800 audit(2147483838.781:6): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.751" name="dbroot" dev="configfs" ino=32124 res=0 errno=0 [ 304.434841][ T9069] FAULT_INJECTION: forcing a failure. [ 304.434841][ T9069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.618225][ T9069] CPU: 0 UID: 0 PID: 9069 Comm: syz.1.756 Not tainted syzkaller #0 PREEMPT(full) [ 304.618258][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.618273][ T9069] Call Trace: [ 304.618281][ T9069] [ 304.618290][ T9069] dump_stack_lvl+0x100/0x190 [ 304.618325][ T9069] should_fail_ex.cold+0x5/0xa [ 304.618357][ T9069] strncpy_from_user+0x3b/0x2d0 [ 304.618394][ T9069] do_getname+0x78/0x390 [ 304.618429][ T9069] do_sys_openat2+0xc7/0x1e0 [ 304.618461][ T9069] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.618505][ T9069] __x64_sys_openat+0x12d/0x210 [ 304.618539][ T9069] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.618584][ T9069] do_syscall_64+0x115/0x840 [ 304.618605][ T9069] ? clear_bhb_loop+0x40/0x90 [ 304.618635][ T9069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.618660][ T9069] RIP: 0033:0x7f0ad579de59 [ 304.618679][ T9069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.618703][ T9069] RSP: 002b:00007f0ad65e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.618726][ T9069] RAX: ffffffffffffffda RBX: 00007f0ad5a26270 RCX: 00007f0ad579de59 [ 304.618742][ T9069] RDX: 0000000000088000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 304.618757][ T9069] RBP: 00007f0ad5833e6f R08: 0000000000000000 R09: 0000000000000000 [ 304.618772][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.618786][ T9069] R13: 00007f0ad5a26308 R14: 00007f0ad5a26270 R15: 00007ffc79a52e48 [ 304.618816][ T9069] [ 305.233258][ T9085] vhci_hcd vhci_hcd.2: invalid port number 16 [ 305.354327][ T9085] vhci_hcd vhci_hcd.2: invalid port number 16 [ 305.578883][ T9090] netlink: 342 bytes leftover after parsing attributes in process `syz.2.761'. [ 305.673704][ T9090] netlink: 342 bytes leftover after parsing attributes in process `syz.2.761'. [ 306.466632][ T9099] nbd: socks must be embedded in a SOCK_ITEM attr [ 307.173826][ T9127] FAULT_INJECTION: forcing a failure. [ 307.173826][ T9127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.401707][ T9127] CPU: 0 UID: 0 PID: 9127 Comm: syz.2.767 Not tainted syzkaller #0 PREEMPT(full) [ 307.401741][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.401756][ T9127] Call Trace: [ 307.401764][ T9127] [ 307.401774][ T9127] dump_stack_lvl+0x100/0x190 [ 307.401810][ T9127] should_fail_ex.cold+0x5/0xa [ 307.401843][ T9127] strncpy_from_user+0x3b/0x2d0 [ 307.401881][ T9127] do_getname+0x78/0x390 [ 307.401917][ T9127] do_sys_openat2+0xc7/0x1e0 [ 307.401951][ T9127] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.401995][ T9127] __x64_sys_openat+0x12d/0x210 [ 307.402029][ T9127] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.402074][ T9127] do_syscall_64+0x115/0x840 [ 307.402096][ T9127] ? clear_bhb_loop+0x40/0x90 [ 307.402125][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.402151][ T9127] RIP: 0033:0x7fe20299de59 [ 307.402171][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.402197][ T9127] RSP: 002b:00007fe2037ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.402221][ T9127] RAX: ffffffffffffffda RBX: 00007fe202c26270 RCX: 00007fe20299de59 [ 307.402237][ T9127] RDX: 0000000000088000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 307.402252][ T9127] RBP: 00007fe202a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 307.402267][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.402302][ T9127] R13: 00007fe202c26308 R14: 00007fe202c26270 R15: 00007fffeff953b8 [ 307.402332][ T9127] [ 309.220999][ T9156] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 309.320587][ T9161] netlink: 310 bytes leftover after parsing attributes in process `syz.0.774'. [ 311.978706][ T9193] Process accounting paused [ 314.054044][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.792'. [ 314.873693][ T9243] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[9243] [ 315.084919][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.795'. [ 315.289402][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.299507][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.813171][ T9317] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[9317] [ 319.974416][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.811'. [ 324.705423][ T9356] Process accounting paused [ 325.520364][ T9394] FAULT_INJECTION: forcing a failure. [ 325.520364][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 325.614703][ T9394] CPU: 0 UID: 0 PID: 9394 Comm: syz.1.826 Not tainted syzkaller #0 PREEMPT(full) [ 325.614737][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.614753][ T9394] Call Trace: [ 325.614762][ T9394] [ 325.614771][ T9394] dump_stack_lvl+0x100/0x190 [ 325.614809][ T9394] should_fail_ex.cold+0x5/0xa [ 325.614841][ T9394] should_failslab+0xc2/0x120 [ 325.614876][ T9394] __kmalloc_cache_noprof+0x91/0x6c0 [ 325.614901][ T9394] ? __lock_acquire+0x49f/0x1a40 [ 325.614924][ T9394] ? tty_open+0x139/0xfa0 [ 325.614960][ T9394] ? __pfx_tty_open+0x10/0x10 [ 325.614993][ T9394] tty_open+0x139/0xfa0 [ 325.615031][ T9394] ? __pfx_tty_open+0x10/0x10 [ 325.615063][ T9394] ? chrdev_open+0x10b/0x6a0 [ 325.615088][ T9394] ? chrdev_open+0x10b/0x6a0 [ 325.615116][ T9394] ? __pfx_tty_open+0x10/0x10 [ 325.615149][ T9394] chrdev_open+0x234/0x6a0 [ 325.615173][ T9394] ? __pfx_apparmor_file_open+0x10/0x10 [ 325.615200][ T9394] ? __pfx_chrdev_open+0x10/0x10 [ 325.615239][ T9394] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 325.615274][ T9394] do_dentry_open+0x6ab/0x14d0 [ 325.615298][ T9394] ? __pfx_chrdev_open+0x10/0x10 [ 325.615329][ T9394] vfs_open+0x82/0x3f0 [ 325.615364][ T9394] path_openat+0x2873/0x4280 [ 325.615401][ T9394] ? __pfx_path_openat+0x10/0x10 [ 325.615434][ T9394] do_file_open+0x20e/0x430 [ 325.615461][ T9394] ? __pfx_do_file_open+0x10/0x10 [ 325.615506][ T9394] ? alloc_fd+0x471/0x7a0 [ 325.615533][ T9394] ? do_getname+0x191/0x390 [ 325.615566][ T9394] do_sys_openat2+0x10f/0x1e0 [ 325.615602][ T9394] ? __pfx_do_sys_openat2+0x10/0x10 [ 325.615637][ T9394] ? do_raw_spin_lock+0x128/0x260 [ 325.615672][ T9394] __x64_sys_openat+0x12d/0x210 [ 325.615705][ T9394] ? __pfx___x64_sys_openat+0x10/0x10 [ 325.615750][ T9394] do_syscall_64+0x115/0x840 [ 325.615772][ T9394] ? clear_bhb_loop+0x40/0x90 [ 325.615802][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.615828][ T9394] RIP: 0033:0x7f0ad579de59 [ 325.615848][ T9394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.615873][ T9394] RSP: 002b:00007f0ad662b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 325.615897][ T9394] RAX: ffffffffffffffda RBX: 00007f0ad5a26090 RCX: 00007f0ad579de59 [ 325.615913][ T9394] RDX: 0000000000103e81 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 325.615928][ T9394] RBP: 00007f0ad5833e6f R08: 0000000000000000 R09: 0000000000000000 [ 325.615943][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.615957][ T9394] R13: 00007f0ad5a26128 R14: 00007f0ad5a26090 R15: 00007ffc79a52e48 [ 325.615987][ T9394] [ 325.902135][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 325.915948][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 327.264027][ T9404] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 327.839974][ T9417] ubi0: attaching mtd0 [ 327.937699][ T9417] ubi0: scanning is finished [ 327.964812][ T9417] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 328.384207][ T9417] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 328.929871][ T9423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.966112][ T9423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 328.999898][ T9423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.036265][ T9423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.062122][ T8084] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 330.158504][ T9446] FAULT_INJECTION: forcing a failure. [ 330.158504][ T9446] name failslab, interval 1, probability 0, space 0, times 0 [ 330.336459][ T9448] FAULT_INJECTION: forcing a failure. [ 330.336459][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 330.374804][ T9446] CPU: 0 UID: 0 PID: 9446 Comm: syz.2.836 Not tainted syzkaller #0 PREEMPT(full) [ 330.374838][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 330.374853][ T9446] Call Trace: [ 330.374861][ T9446] [ 330.374870][ T9446] dump_stack_lvl+0x100/0x190 [ 330.374905][ T9446] should_fail_ex.cold+0x5/0xa [ 330.374937][ T9446] should_failslab+0xc2/0x120 [ 330.374973][ T9446] kmem_cache_alloc_noprof+0x91/0x6a0 [ 330.375003][ T9446] ? stack_trace_save+0x8e/0xc0 [ 330.375039][ T9446] ? alloc_empty_file+0x5b/0x1c0 [ 330.375075][ T9446] alloc_empty_file+0x5b/0x1c0 [ 330.375108][ T9446] path_openat+0xe7/0x4280 [ 330.375132][ T9446] ? __kasan_slab_alloc+0x89/0x90 [ 330.375179][ T9446] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 330.375208][ T9446] ? do_getname+0x35/0x390 [ 330.375237][ T9446] ? do_sys_openat2+0xc7/0x1e0 [ 330.375270][ T9446] ? __x64_sys_openat+0x12d/0x210 [ 330.375301][ T9446] ? do_syscall_64+0x115/0x840 [ 330.375323][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.375370][ T9446] ? __pfx_path_openat+0x10/0x10 [ 330.375412][ T9446] do_file_open+0x20e/0x430 [ 330.375440][ T9446] ? __pfx_do_file_open+0x10/0x10 [ 330.375485][ T9446] ? alloc_fd+0x471/0x7a0 [ 330.375511][ T9446] ? do_getname+0x191/0x390 [ 330.375544][ T9446] do_sys_openat2+0x10f/0x1e0 [ 330.375577][ T9446] ? __pfx_do_sys_openat2+0x10/0x10 [ 330.375624][ T9446] __x64_sys_openat+0x12d/0x210 [ 330.375658][ T9446] ? __pfx___x64_sys_openat+0x10/0x10 [ 330.375702][ T9446] do_syscall_64+0x115/0x840 [ 330.375722][ T9446] ? clear_bhb_loop+0x40/0x90 [ 330.375751][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.375783][ T9446] RIP: 0033:0x7fe20299de59 [ 330.375926][ T9446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.375952][ T9446] RSP: 002b:00007fe20382e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.375976][ T9446] RAX: ffffffffffffffda RBX: 00007fe202c26090 RCX: 00007fe20299de59 [ 330.375993][ T9446] RDX: 0000000000000640 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 330.376008][ T9446] RBP: 00007fe202a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 330.376023][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.376038][ T9446] R13: 00007fe202c26128 R14: 00007fe202c26090 R15: 00007fffeff953b8 [ 330.376068][ T9446] [ 330.885790][ T9448] CPU: 0 UID: 0 PID: 9448 Comm: syz.0.837 Not tainted syzkaller #0 PREEMPT(full) [ 330.885824][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 330.885842][ T9448] Call Trace: [ 330.885851][ T9448] [ 330.885860][ T9448] dump_stack_lvl+0x100/0x190 [ 330.885896][ T9448] should_fail_ex.cold+0x5/0xa [ 330.885928][ T9448] should_failslab+0xc2/0x120 [ 330.885963][ T9448] kmem_cache_alloc_noprof+0x91/0x6a0 [ 330.885994][ T9448] ? __pfx_map_id_range_down+0x10/0x10 [ 330.886030][ T9448] ? security_inode_alloc+0x3b/0x2c0 [ 330.886062][ T9448] security_inode_alloc+0x3b/0x2c0 [ 330.886090][ T9448] inode_init_always_gfp+0xc77/0xfb0 [ 330.886120][ T9448] alloc_inode+0x8e/0x250 [ 330.886152][ T9448] new_inode+0x22/0x1c0 [ 330.886186][ T9448] debugfs_create_symlink+0xd1/0x220 [ 330.886224][ T9448] drm_debugfs_clients_add+0x199/0x210 [ 330.886257][ T9448] drm_file_alloc+0x5c6/0xb40 [ 330.886293][ T9448] drm_open_helper+0x1fc/0x540 [ 330.886336][ T9448] drm_open+0x1a0/0x3e0 [ 330.886369][ T9448] ? __pfx_drm_open+0x10/0x10 [ 330.886400][ T9448] drm_stub_open+0x20f/0x380 [ 330.886433][ T9448] ? __pfx_drm_stub_open+0x10/0x10 [ 330.886465][ T9448] chrdev_open+0x234/0x6a0 [ 330.886490][ T9448] ? __pfx_apparmor_file_open+0x10/0x10 [ 330.886516][ T9448] ? __pfx_chrdev_open+0x10/0x10 [ 330.886543][ T9448] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 330.886577][ T9448] do_dentry_open+0x6ab/0x14d0 [ 330.886620][ T9448] ? __pfx_chrdev_open+0x10/0x10 [ 330.886653][ T9448] vfs_open+0x82/0x3f0 [ 330.886688][ T9448] path_openat+0x2873/0x4280 [ 330.886727][ T9448] ? __pfx_path_openat+0x10/0x10 [ 330.886761][ T9448] do_file_open+0x20e/0x430 [ 330.886788][ T9448] ? __pfx_do_file_open+0x10/0x10 [ 330.886834][ T9448] ? alloc_fd+0x471/0x7a0 [ 330.886860][ T9448] ? do_getname+0x191/0x390 [ 330.886893][ T9448] do_sys_openat2+0x10f/0x1e0 [ 330.886926][ T9448] ? __pfx_do_sys_openat2+0x10/0x10 [ 330.886961][ T9448] ? __fget_files+0x21f/0x3d0 [ 330.886989][ T9448] __x64_sys_openat+0x12d/0x210 [ 330.887023][ T9448] ? __pfx___x64_sys_openat+0x10/0x10 [ 330.887067][ T9448] do_syscall_64+0x115/0x840 [ 330.887088][ T9448] ? clear_bhb_loop+0x40/0x90 [ 330.887117][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.887142][ T9448] RIP: 0033:0x7fd22c79de59 [ 330.887162][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.887186][ T9448] RSP: 002b:00007fd22d6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.887210][ T9448] RAX: ffffffffffffffda RBX: 00007fd22ca25fa0 RCX: 00007fd22c79de59 [ 330.887226][ T9448] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 330.887242][ T9448] RBP: 00007fd22c833e6f R08: 0000000000000000 R09: 0000000000000000 [ 330.887257][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.887271][ T9448] R13: 00007fd22ca26038 R14: 00007fd22ca25fa0 R15: 00007ffcaabc38a8 [ 330.887302][ T9448] [ 331.532393][ T8084] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.539601][ T8084] Bluetooth: hci3: command 0x0c1a tx timeout [ 331.546301][ T8084] Bluetooth: hci2: command 0x0c1a tx timeout [ 332.034454][ T9448] debugfs: out of free dentries, can not create symlink 'device' [ 332.939526][ T9467] Console: switching to colour VGA+ 80x25 [ 333.588037][ T9459] Process accounting paused [ 338.532898][ T9544] random: crng reseeded on system resumption [ 338.918036][ T9541] hub 1-0:1.0: USB hub found [ 338.959527][ T9541] hub 1-0:1.0: 1 port detected [ 342.773099][ T9606] FAULT_INJECTION: forcing a failure. [ 342.773099][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 342.849863][ T9606] CPU: 0 UID: 0 PID: 9606 Comm: syz.2.871 Not tainted syzkaller #0 PREEMPT(full) [ 342.849898][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.849913][ T9606] Call Trace: [ 342.849921][ T9606] [ 342.849930][ T9606] dump_stack_lvl+0x100/0x190 [ 342.849966][ T9606] should_fail_ex.cold+0x5/0xa [ 342.849998][ T9606] should_failslab+0xc2/0x120 [ 342.850034][ T9606] __kmalloc_noprof+0xfc/0x820 [ 342.850063][ T9606] ? kasan_save_track+0x14/0x30 [ 342.850094][ T9606] ? __kasan_kmalloc+0xaa/0xb0 [ 342.850124][ T9606] ? realloc_user_queue+0xe9/0x300 [ 342.850168][ T9606] realloc_user_queue+0xe9/0x300 [ 342.850208][ T9606] ? __pfx_snd_timer_user_open+0x10/0x10 [ 342.850255][ T9606] snd_timer_user_open+0xfc/0x180 [ 342.850294][ T9606] snd_open+0x201/0x450 [ 342.850329][ T9606] ? __pfx_snd_open+0x10/0x10 [ 342.850364][ T9606] chrdev_open+0x234/0x6a0 [ 342.850390][ T9606] ? __pfx_apparmor_file_open+0x10/0x10 [ 342.850416][ T9606] ? __pfx_chrdev_open+0x10/0x10 [ 342.850444][ T9606] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 342.850479][ T9606] do_dentry_open+0x6ab/0x14d0 [ 342.850504][ T9606] ? __pfx_chrdev_open+0x10/0x10 [ 342.850536][ T9606] vfs_open+0x82/0x3f0 [ 342.850571][ T9606] path_openat+0x2873/0x4280 [ 342.850613][ T9606] ? __pfx_path_openat+0x10/0x10 [ 342.850647][ T9606] do_file_open+0x20e/0x430 [ 342.850674][ T9606] ? __pfx_do_file_open+0x10/0x10 [ 342.850720][ T9606] ? alloc_fd+0x471/0x7a0 [ 342.850749][ T9606] ? do_getname+0x191/0x390 [ 342.850782][ T9606] do_sys_openat2+0x10f/0x1e0 [ 342.850815][ T9606] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.850850][ T9606] ? __fget_files+0x21f/0x3d0 [ 342.850878][ T9606] __x64_sys_openat+0x12d/0x210 [ 342.850912][ T9606] ? __pfx___x64_sys_openat+0x10/0x10 [ 342.850956][ T9606] do_syscall_64+0x115/0x840 [ 342.850978][ T9606] ? clear_bhb_loop+0x40/0x90 [ 342.851013][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.851039][ T9606] RIP: 0033:0x7fe20299de59 [ 342.851059][ T9606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.851084][ T9606] RSP: 002b:00007fe20382e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 342.851108][ T9606] RAX: ffffffffffffffda RBX: 00007fe202c26090 RCX: 00007fe20299de59 [ 342.851124][ T9606] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 342.851139][ T9606] RBP: 00007fe202a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 342.851154][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.851169][ T9606] R13: 00007fe202c26128 R14: 00007fe202c26090 R15: 00007fffeff953b8 [ 342.851200][ T9606] [ 345.581098][ T30] audit: type=1107 audit(2147483881.568:7): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 345.610102][ T9598] Process accounting resumed [ 345.674308][ T30] audit: type=1107 audit(2147483881.618:8): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 346.590812][ T9642] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[9642] [ 346.922643][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.878'. [ 351.060758][ T9666] zswap: compressor 000 not available [ 353.013991][ T30] audit: type=1800 audit(2147483899.051:9): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.891" name="lu_gp_id" dev="configfs" ino=36210 res=0 errno=0 [ 355.629782][ T9719] kexec: Could not allocate control_code_buffer [ 356.106193][ T9743] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[9743] [ 356.267248][ T9743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 356.283776][ T9722] Process accounting resumed [ 356.537897][ T9748] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 356.572814][ T9748] netlink: 310 bytes leftover after parsing attributes in process `syz.0.902'. [ 359.221102][ T9776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.907'. [ 359.794728][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.910'. [ 360.144135][ T9791] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[9791] [ 360.304606][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.911'. [ 362.965769][ T9816] sg_read: process 801 (syz.2.916) changed security contexts after opening file descriptor, this is not allowed. [ 364.001017][ T9832] Process accounting resumed [ 369.346674][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 369.631297][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 370.026664][ T9907] bond0: (slave bond_slave_0): Releasing backup interface [ 375.673886][T10000] Process accounting paused [ 375.803469][T10005] vivid-006: ================= START STATUS ================= [ 375.944327][T10005] vivid-006: Radio HW Seek Mode: Bounded [ 376.013276][T10005] vivid-006: Radio Programmable HW Seek: false [ 376.078211][T10005] vivid-006: RDS Rx I/O Mode: Block I/O [ 376.117253][T10005] vivid-006: Generate RBDS Instead of RDS: false [ 376.140037][T10005] vivid-006: RDS Reception: true [ 376.185688][T10005] vivid-006: RDS Program Type: 0 inactive [ 376.214406][T10005] vivid-006: RDS PS Name: inactive [ 376.245559][T10005] vivid-006: RDS Radio Text: inactive [ 376.268314][T10005] vivid-006: RDS Traffic Announcement: false inactive [ 376.298191][T10005] vivid-006: RDS Traffic Program: false inactive [ 376.321847][T10005] vivid-006: RDS Music: false inactive [ 376.343329][T10005] vivid-006: ================== END STATUS ================== [ 377.694359][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.706718][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.657804][T10045] No such timeout policy "" [ 380.332291][T10077] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 380.590701][T10083] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 381.175706][T10095] program syz.2.987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.632081][T10149] netlink: 286 bytes leftover after parsing attributes in process `syz.0.999'. [ 386.167220][T10163] Process accounting paused [ 390.526933][T10246] FAULT_INJECTION: forcing a failure. [ 390.526933][T10246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.675919][T10246] CPU: 0 UID: 0 PID: 10246 Comm: syz.0.1019 Not tainted syzkaller #0 PREEMPT(full) [ 390.675954][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.675970][T10246] Call Trace: [ 390.676050][T10246] [ 390.676060][T10246] dump_stack_lvl+0x100/0x190 [ 390.676112][T10246] should_fail_ex.cold+0x5/0xa [ 390.676161][T10246] strncpy_from_user+0x3b/0x2d0 [ 390.676307][T10246] do_getname+0x78/0x390 [ 390.676364][T10246] do_sys_openat2+0xc7/0x1e0 [ 390.676399][T10246] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.676450][T10246] __x64_sys_openat+0x12d/0x210 [ 390.676484][T10246] ? __pfx___x64_sys_openat+0x10/0x10 [ 390.676529][T10246] do_syscall_64+0x115/0x840 [ 390.676612][T10246] ? clear_bhb_loop+0x40/0x90 [ 390.676650][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.676677][T10246] RIP: 0033:0x7fd22c79de59 [ 390.676699][T10246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.676723][T10246] RSP: 002b:00007fd22d649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 390.676751][T10246] RAX: ffffffffffffffda RBX: 00007fd22ca26270 RCX: 00007fd22c79de59 [ 390.676767][T10246] RDX: 0000000000088000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 390.676783][T10246] RBP: 00007fd22c833e6f R08: 0000000000000000 R09: 0000000000000000 [ 390.676798][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.676813][T10246] R13: 00007fd22ca26308 R14: 00007fd22ca26270 R15: 00007ffcaabc38a8 [ 390.676847][T10246] [ 392.549562][T10282] type: 768 invalid [ 393.929994][T10302] random: crng reseeded on system resumption [ 394.351433][T10288] Process accounting paused [ 395.828288][T10327] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[10327] [ 395.970711][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1041'. [ 396.662343][T10352] vhci_hcd vhci_hcd.2: invalid port number 16 [ 396.751895][T10352] vhci_hcd vhci_hcd.2: invalid port number 16 [ 400.647739][T10410] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 400.782840][T10397] zswap: compressor 000 not available [ 401.270362][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 402.503703][T10425] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 402.562679][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 402.659082][T10435] netlink: 'syz.3.1064': attribute type 11 has an invalid length. [ 402.687331][T10435] netlink: 'syz.3.1064': attribute type 11 has an invalid length. [ 403.261276][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 403.930228][T10442] : entered promiscuous mode [ 404.498572][ T30] audit: type=1326 audit(2147483960.786:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.3.1070" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56d139de59 code=0x0 [ 406.223503][T10488] type: 768 invalid [ 408.498458][T10528] FAULT_INJECTION: forcing a failure. [ 408.498458][T10528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.584946][T10528] CPU: 0 UID: 0 PID: 10528 Comm: syz.1.1088 Not tainted syzkaller #0 PREEMPT(full) [ 408.584979][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.584993][T10528] Call Trace: [ 408.585003][T10528] [ 408.585012][T10528] dump_stack_lvl+0x100/0x190 [ 408.585046][T10528] should_fail_ex.cold+0x5/0xa [ 408.585077][T10528] _copy_to_user+0x32/0xd0 [ 408.585196][T10528] simple_read_from_buffer+0xcb/0x170 [ 408.585247][T10528] proc_fail_nth_read+0x1af/0x230 [ 408.585291][T10528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.585325][T10528] ? rw_verify_area+0xce/0x6d0 [ 408.585365][T10528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.585397][T10528] vfs_read+0x1e4/0xb40 [ 408.585421][T10528] ? __pfx_vfs_read+0x10/0x10 [ 408.585442][T10528] ? __fget_files+0x215/0x3d0 [ 408.585477][T10528] ? __fget_files+0x21f/0x3d0 [ 408.585507][T10528] ksys_read+0x12a/0x250 [ 408.585528][T10528] ? __pfx_ksys_read+0x10/0x10 [ 408.585558][T10528] do_syscall_64+0x115/0x840 [ 408.585580][T10528] ? clear_bhb_loop+0x40/0x90 [ 408.585609][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.585633][T10528] RIP: 0033:0x7f0ad575e68e [ 408.585652][T10528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.585676][T10528] RSP: 002b:00007f0ad664bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.585698][T10528] RAX: ffffffffffffffda RBX: 00007f0ad664c6c0 RCX: 00007f0ad575e68e [ 408.585713][T10528] RDX: 000000000000000f RSI: 00007f0ad664c0a0 RDI: 0000000000000003 [ 408.585727][T10528] RBP: 00007f0ad664c090 R08: 0000000000000000 R09: 0000000000000000 [ 408.585741][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.585755][T10528] R13: 00007f0ad5a26038 R14: 00007f0ad5a25fa0 R15: 00007ffc79a52e48 [ 408.585785][T10528] [ 412.777983][T10568] kexec: Could not allocate control_code_buffer [ 416.822558][T10634] Process accounting resumed [ 421.902569][T10705] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.3.667696), cmd(1) [ 421.957983][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 422.273971][T10709] : entered promiscuous mode [ 424.285060][T10747] ksmbd: Unknown IPC event: 14, ignore. [ 425.591196][T10744] Process accounting resumed [ 425.720851][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 426.088050][T10765] : entered promiscuous mode [ 426.394885][T10760] kexec: Could not allocate control_code_buffer [ 428.681262][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'. [ 429.047928][T10815] : entered promiscuous mode [ 431.598529][T10849] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 433.033537][T10865] random: crng reseeded on system resumption [ 434.533488][T10887] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[10887] [ 434.705102][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1163'. [ 438.821630][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.832222][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.977569][T10994] FAULT_INJECTION: forcing a failure. [ 444.977569][T10994] name failslab, interval 1, probability 0, space 0, times 0 [ 445.097685][T10994] CPU: 0 UID: 0 PID: 10994 Comm: syz.3.1187 Not tainted syzkaller #0 PREEMPT(full) [ 445.097719][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.097734][T10994] Call Trace: [ 445.097741][T10994] [ 445.097751][T10994] dump_stack_lvl+0x100/0x190 [ 445.097791][T10994] should_fail_ex.cold+0x5/0xa [ 445.097824][T10994] should_failslab+0xc2/0x120 [ 445.097894][T10994] kmem_cache_alloc_noprof+0x91/0x6a0 [ 445.097932][T10994] ? __pfx_map_id_range_down+0x10/0x10 [ 445.097969][T10994] ? security_inode_alloc+0x3b/0x2c0 [ 445.098068][T10994] security_inode_alloc+0x3b/0x2c0 [ 445.098096][T10994] inode_init_always_gfp+0xc77/0xfb0 [ 445.098126][T10994] alloc_inode+0x8e/0x250 [ 445.098158][T10994] sock_alloc+0x44/0x280 [ 445.098235][T10994] ? security_socket_create+0x7f/0x250 [ 445.098279][T10994] __sock_create+0xc2/0x860 [ 445.098321][T10994] __sys_socketpair+0x261/0x5b0 [ 445.098346][T10994] ? __pfx___sys_socketpair+0x10/0x10 [ 445.098376][T10994] ? __sys_socket+0xac/0x260 [ 445.098415][T10994] ? xfd_validate_state+0x129/0x190 [ 445.098453][T10994] __x64_sys_socketpair+0x96/0x100 [ 445.098476][T10994] ? lockdep_hardirqs_on+0x78/0x100 [ 445.098538][T10994] do_syscall_64+0x115/0x840 [ 445.098559][T10994] ? clear_bhb_loop+0x40/0x90 [ 445.098590][T10994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.098615][T10994] RIP: 0033:0x7f56d139de59 [ 445.098636][T10994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.098659][T10994] RSP: 002b:00007f56d21e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 445.098683][T10994] RAX: ffffffffffffffda RBX: 00007f56d1625fa0 RCX: 00007f56d139de59 [ 445.098701][T10994] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 445.098717][T10994] RBP: 00007f56d1433e6f R08: 0000000000000000 R09: 0000000000000000 [ 445.098732][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.098746][T10994] R13: 00007f56d1626038 R14: 00007f56d1625fa0 R15: 00007ffc7bb4a298 [ 445.098776][T10994] [ 445.098898][T10994] socket: no more sockets [ 447.927295][T11030] Process accounting paused [ 448.489568][T11060] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5640] was attempted by ""[11060] [ 448.820969][T11060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1201'. [ 452.366480][T11121] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[11121] [ 452.568122][T11128] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[11128] [ 452.619713][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 452.754825][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1214'. [ 453.012963][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 454.620813][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 455.644201][T11161] Process accounting paused [ 456.872642][T11188] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[11188] [ 457.229998][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1225'. [ 458.582886][T11207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 460.879588][T11234] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 461.157786][ T30] audit: type=1804 audit(2147484027.726:11): pid=11234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1236" name="/newroot/289/file0" dev="tmpfs" ino=1503 res=1 errno=0 [ 461.512516][T11250] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[11250] [ 461.662793][T11246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1238'. [ 462.402618][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 463.904054][T11278] FAULT_INJECTION: forcing a failure. [ 463.904054][T11278] name failslab, interval 1, probability 0, space 0, times 0 [ 463.922153][T11279] netlink: 286 bytes leftover after parsing attributes in process `syz.2.1242'. [ 463.953468][T11278] CPU: 0 UID: 0 PID: 11278 Comm: syz.3.1243 Not tainted syzkaller #0 PREEMPT(full) [ 463.953502][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.953520][T11278] Call Trace: [ 463.953529][T11278] [ 463.953539][T11278] dump_stack_lvl+0x100/0x190 [ 463.953576][T11278] should_fail_ex.cold+0x5/0xa [ 463.953609][T11278] should_failslab+0xc2/0x120 [ 463.953645][T11278] kmem_cache_alloc_noprof+0x91/0x6a0 [ 463.953676][T11278] ? __pfx_map_id_range_down+0x10/0x10 [ 463.953712][T11278] ? security_inode_alloc+0x3b/0x2c0 [ 463.953745][T11278] security_inode_alloc+0x3b/0x2c0 [ 463.953773][T11278] inode_init_always_gfp+0xc77/0xfb0 [ 463.953801][T11278] alloc_inode+0x8e/0x250 [ 463.953834][T11278] sock_alloc+0x44/0x280 [ 463.953866][T11278] ? security_socket_create+0x7f/0x250 [ 463.953892][T11278] __sock_create+0xc2/0x860 [ 463.953934][T11278] __sys_socket+0x14d/0x260 [ 463.953972][T11278] ? exc_page_fault+0x6f/0xd0 [ 463.954011][T11278] ? __pfx___sys_socket+0x10/0x10 [ 463.954095][T11278] __x64_sys_socket+0x72/0xb0 [ 463.954133][T11278] ? lockdep_hardirqs_on+0x78/0x100 [ 463.954171][T11278] do_syscall_64+0x115/0x840 [ 463.954193][T11278] ? clear_bhb_loop+0x40/0x90 [ 463.954229][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.954254][T11278] RIP: 0033:0x7f56d139f6c7 [ 463.954275][T11278] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.954300][T11278] RSP: 002b:00007f56d21e1f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 463.954322][T11278] RAX: ffffffffffffffda RBX: 00007f56d1625fa0 RCX: 00007f56d139f6c7 [ 463.954339][T11278] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 463.954359][T11278] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 463.954373][T11278] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 463.954388][T11278] R13: 00007f56d1626038 R14: 00007f56d1625fa0 R15: 00007ffc7bb4a298 [ 463.954418][T11278] [ 463.955576][T11278] socket: no more sockets [ 464.645806][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 464.677449][T11292] openvswitch: : Dropping previously announced user features [ 467.798941][T11326] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[11326] [ 468.114018][T11326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1252'. [ 472.827559][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'. [ 473.428817][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 474.274473][T11400] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 474.466952][ T30] audit: type=1804 audit(2147484041.114:12): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1269" name="/newroot/326/file0" dev="tmpfs" ino=1684 res=1 errno=0 [ 476.349796][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1278'. [ 476.630388][T11439] openvswitch: : Dropping previously announced user features [ 478.332421][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'. [ 479.143924][T11430] Process accounting resumed [ 482.018469][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 484.101490][T11525] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5640] was attempted by ""[11525] [ 484.312718][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1299'. [ 485.956100][T11529] Process accounting resumed [ 486.272961][T11537] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[11537] [ 486.392626][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1301'. [ 487.140504][T11551] netlink: 1224 bytes leftover after parsing attributes in process `syz.2.1305'. [ 490.308015][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 491.774672][T11608] FAULT_INJECTION: forcing a failure. [ 491.774672][T11608] name fail_futex, interval 1, probability 0, space 0, times 0 [ 491.986807][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.0.1317 Not tainted syzkaller #0 PREEMPT(full) [ 491.986841][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.986856][T11608] Call Trace: [ 491.986865][T11608] [ 491.986874][T11608] dump_stack_lvl+0x100/0x190 [ 491.986909][T11608] should_fail_ex.cold+0x5/0xa [ 491.986942][T11608] get_futex_key+0x1d2/0x14f0 [ 491.986971][T11608] ? __pfx_get_futex_key+0x10/0x10 [ 491.986995][T11608] ? find_held_lock+0x2b/0x80 [ 491.987028][T11608] ? futex_wake+0x4ea/0x5e0 [ 491.987067][T11608] futex_wake+0xf4/0x5e0 [ 491.987102][T11608] ? __pfx_futex_wake+0x10/0x10 [ 491.987138][T11608] ? iput.part.0+0x981/0x1050 [ 491.987179][T11608] do_futex+0x2b2/0x440 [ 491.987207][T11608] ? __pfx_do_futex+0x10/0x10 [ 491.987235][T11608] ? cap_task_prctl+0x104/0xa50 [ 491.987326][T11608] ? __pfx_sched_core_share_pid+0x10/0x10 [ 491.987364][T11608] __x64_sys_futex+0x34f/0x4d0 [ 491.987396][T11608] ? __pfx___x64_sys_futex+0x10/0x10 [ 491.987426][T11608] ? __pfx___do_sys_prctl+0x10/0x10 [ 491.987483][T11608] do_syscall_64+0x115/0x840 [ 491.987505][T11608] ? clear_bhb_loop+0x40/0x90 [ 491.987534][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.987561][T11608] RIP: 0033:0x7fd22c79de59 [ 491.987580][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.987604][T11608] RSP: 002b:00007fd22d6ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 491.987634][T11608] RAX: ffffffffffffffda RBX: 00007fd22ca25fa8 RCX: 00007fd22c79de59 [ 491.987650][T11608] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd22ca25fac [ 491.987665][T11608] RBP: 00007fd22ca25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 491.987680][T11608] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 491.987696][T11608] R13: 00007fd22ca26038 R14: 00007ffcaabc37c0 R15: 00007ffcaabc38a8 [ 491.987727][T11608] [ 492.695973][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 493.292573][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 497.626697][T11697] FAULT_INJECTION: forcing a failure. [ 497.626697][T11697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.705340][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.3.1339 Not tainted syzkaller #0 PREEMPT(full) [ 497.705373][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.705387][T11697] Call Trace: [ 497.705395][T11697] [ 497.705403][T11697] dump_stack_lvl+0x100/0x190 [ 497.705439][T11697] should_fail_ex.cold+0x5/0xa [ 497.705470][T11697] _copy_from_iter+0x1f4/0x1690 [ 497.705589][T11697] ? __asan_memset+0x23/0x50 [ 497.705617][T11697] ? __pfx__copy_from_iter+0x10/0x10 [ 497.705652][T11697] ? __pfx___alloc_skb+0x10/0x10 [ 497.705727][T11697] netlink_sendmsg+0x808/0xda0 [ 497.705813][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.705854][T11697] ? apparmor_socket_sendmsg+0x15b/0x270 [ 497.705911][T11697] ____sys_sendmsg+0xa4d/0xbe0 [ 497.705946][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.705986][T11697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.706034][T11697] ___sys_sendmsg+0x190/0x1e0 [ 497.706148][T11697] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.706186][T11697] ? __lock_acquire+0x49f/0x1a40 [ 497.706278][T11697] __sys_sendmsg+0x160/0x210 [ 497.706349][T11697] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.706393][T11697] do_syscall_64+0x115/0x840 [ 497.706416][T11697] ? clear_bhb_loop+0x40/0x90 [ 497.706445][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.706470][T11697] RIP: 0033:0x7f56d139de59 [ 497.706491][T11697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.706515][T11697] RSP: 002b:00007f56d21e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.706549][T11697] RAX: ffffffffffffffda RBX: 00007f56d1625fa0 RCX: 00007f56d139de59 [ 497.706566][T11697] RDX: 0000000024048084 RSI: 0000200000000440 RDI: 0000000000000003 [ 497.706580][T11697] RBP: 00007f56d21e3090 R08: 0000000000000000 R09: 0000000000000000 [ 497.706595][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.706608][T11697] R13: 00007f56d1626038 R14: 00007f56d1625fa0 R15: 00007ffc7bb4a298 [ 497.706639][T11697] [ 498.465466][T11701] capability: warning: `syz.3.1340' uses 32-bit capabilities (legacy support in use) [ 499.951041][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.961003][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.739312][T11749] ICMPv6: process `syz.0.1350' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 502.174595][T11755] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[11755] [ 502.462883][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1351'. [ 502.527172][ T30] audit: type=1800 audit(2147484069.306:13): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1354" name="dbroot" dev="configfs" ino=53262 res=0 errno=0 [ 507.773511][T11838] kexec: Could not allocate control_code_buffer [ 508.902275][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 509.005104][T11870] openvswitch: : Dropping previously announced user features [ 509.387299][T11858] Process accounting paused [ 510.201880][T11876] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 510.787706][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 510.832430][T11899] openvswitch: : Dropping previously announced user features [ 512.170862][ T8167] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 513.530588][T11944] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[11944] [ 513.704828][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 514.133532][T11952] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5640] was attempted by ""[11952] [ 514.200860][ T8084] Bluetooth: hci3: command 0x0c1a tx timeout [ 514.358237][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 515.894979][T11967] FAULT_INJECTION: forcing a failure. [ 515.894979][T11967] name failslab, interval 1, probability 0, space 0, times 0 [ 515.931387][T11967] CPU: 0 UID: 0 PID: 11967 Comm: syz.3.1397 Not tainted syzkaller #0 PREEMPT(full) [ 515.931421][T11967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.931435][T11967] Call Trace: [ 515.931444][T11967] [ 515.931453][T11967] dump_stack_lvl+0x100/0x190 [ 515.931490][T11967] should_fail_ex.cold+0x5/0xa [ 515.931522][T11967] should_failslab+0xc2/0x120 [ 515.931558][T11967] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 515.931604][T11967] ? start_dirop+0x79/0xb0 [ 515.931644][T11967] ? alloc_inode+0x68/0x250 [ 515.931677][T11967] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 515.931817][T11967] alloc_inode+0x68/0x250 [ 515.931849][T11967] new_inode+0x22/0x1c0 [ 515.931884][T11967] debugfs_create_symlink+0xd1/0x220 [ 515.931921][T11967] drm_debugfs_clients_add+0x199/0x210 [ 515.932010][T11967] drm_file_alloc+0x5c6/0xb40 [ 515.932082][T11967] drm_open_helper+0x1fc/0x540 [ 515.932126][T11967] drm_open+0x1a0/0x3e0 [ 515.932158][T11967] ? __pfx_drm_open+0x10/0x10 [ 515.932189][T11967] drm_stub_open+0x20f/0x380 [ 515.932223][T11967] ? __pfx_drm_stub_open+0x10/0x10 [ 515.932255][T11967] chrdev_open+0x234/0x6a0 [ 515.932280][T11967] ? __pfx_apparmor_file_open+0x10/0x10 [ 515.932308][T11967] ? __pfx_chrdev_open+0x10/0x10 [ 515.932334][T11967] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 515.932375][T11967] do_dentry_open+0x6ab/0x14d0 [ 515.932399][T11967] ? __pfx_chrdev_open+0x10/0x10 [ 515.932431][T11967] vfs_open+0x82/0x3f0 [ 515.932465][T11967] path_openat+0x2873/0x4280 [ 515.932503][T11967] ? __pfx_path_openat+0x10/0x10 [ 515.932536][T11967] do_file_open+0x20e/0x430 [ 515.932563][T11967] ? __pfx_do_file_open+0x10/0x10 [ 515.932609][T11967] ? alloc_fd+0x471/0x7a0 [ 515.932635][T11967] ? do_getname+0x191/0x390 [ 515.932669][T11967] do_sys_openat2+0x10f/0x1e0 [ 515.932702][T11967] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.932737][T11967] ? __fget_files+0x21f/0x3d0 [ 515.932766][T11967] __x64_sys_openat+0x12d/0x210 [ 515.932800][T11967] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.932845][T11967] do_syscall_64+0x115/0x840 [ 515.932867][T11967] ? clear_bhb_loop+0x40/0x90 [ 515.932896][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.932921][T11967] RIP: 0033:0x7f56d139de59 [ 515.932942][T11967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.932966][T11967] RSP: 002b:00007f56d21e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.932989][T11967] RAX: ffffffffffffffda RBX: 00007f56d1625fa0 RCX: 00007f56d139de59 [ 515.933005][T11967] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 515.933021][T11967] RBP: 00007f56d1433e6f R08: 0000000000000000 R09: 0000000000000000 [ 515.933037][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.933052][T11967] R13: 00007f56d1626038 R14: 00007f56d1625fa0 R15: 00007ffc7bb4a298 [ 515.933083][T11967] [ 516.233109][T11967] debugfs: out of free dentries, can not create symlink 'device' [ 516.269951][ T8167] Bluetooth: hci3: command 0x0c1a tx timeout [ 516.295171][T11966] Process accounting paused [ 516.803737][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 516.959987][T11980] mtrr: base(0x4000000) is not aligned on a size(0x0000) boundary [ 519.306638][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1409'. [ 519.385166][T12015] openvswitch: : Dropping previously announced user features [ 520.679311][T12035] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[12035] [ 521.010139][T12035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1413'. [ 522.389845][T12046] vivid-015: ================= START STATUS ================= [ 522.473404][T12046] vivid-015: Test Pattern: 75% Colorbar [ 522.565690][T12046] vivid-015: Fill Percentage of Frame: 100 [ 522.591218][T12046] vivid-015: Horizontal Movement: No Movement [ 522.658004][T12046] vivid-015: Vertical Movement: No Movement [ 522.688979][T12046] vivid-015: OSD Text Mode: All [ 522.731221][T12046] vivid-015: Show Border: false [ 522.756773][T12046] vivid-015: Show Square: false [ 522.783590][T12046] vivid-015: Sensor Flipped Horizontally: false [ 522.826223][T12046] vivid-015: Sensor Flipped Vertically: false [ 522.890707][T12045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 522.931768][T12046] vivid-015: Insert SAV Code in Image: false [ 522.973379][T12045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.013379][T12046] vivid-015: Insert EAV Code in Image: false [ 523.063339][T12045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 523.104973][T12046] vivid-015: Insert Video Guard Band: false [ 523.147886][T12045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 523.177281][T12046] vivid-015: Reduced Framerate: false [ 523.222529][T12046] vivid-015: HDMI 015-0 Is Connected To: Test Pattern Generator [ 523.265492][T12046] vivid-015: S-Video 015-0 Is Connected To: Test Pattern Generator [ 523.319575][T12046] vivid-015: Enable Capture Cropping: true [ 523.353697][T12046] vivid-015: Enable Capture Composing: true [ 523.382190][T12059] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[12059] [ 523.396014][T12046] vivid-015: Enable Capture Scaler: true [ 523.428421][T12046] vivid-015: Timestamp Source: End of Frame [ 523.448768][T12046] vivid-015: Colorspace: sRGB [ 523.469028][T12046] vivid-015: Transfer Function: Default [ 523.496639][T12046] vivid-015: Y'CbCr Encoding: Default [ 523.519712][T12046] vivid-015: HSV Encoding: Hue 0-179 [ 523.544337][T12046] vivid-015: Quantization: Default [ 523.563378][T12046] vivid-015: Apply Alpha To Red Only: false [ 523.570287][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1418'. [ 523.586084][T12046] vivid-015: Standard Aspect Ratio: 4x3 [ 523.600222][T12046] vivid-015: DV Timings Signal Mode: Current DV Timings inactive [ 523.634298][T12046] vivid-015: DV Timings: 640x480p59 inactive [ 523.667464][T12046] vivid-015: DV Timings Aspect Ratio: Source Width x Height [ 523.689985][T12046] vivid-015: Maximum EDID Blocks: 2 [ 523.714285][T12046] vivid-015: Limited RGB Range (16-235): false [ 523.739098][T12046] vivid-015: Rx RGB Quantization Range: Automatic [ 523.772537][T12046] vivid-015: Power Present: 0x00000001 [ 523.792727][T12046] tpg source WxH: 320x240 (Y'CbCr) [ 523.815891][T12046] tpg field: 1 [ 523.834385][T12046] tpg crop: (0,0)/320x240 [ 523.856748][T12046] tpg compose: (0,0)/320x240 [ 523.875887][T12046] tpg colorspace: 8 [ 523.894118][T12046] tpg transfer function: 0/0 [ 523.919739][T12046] tpg Y'CbCr encoding: 0/0 [ 523.942596][T12046] tpg quantization: 0/0 [ 523.961882][T12046] tpg RGB range: 0/2 [ 523.980306][T12046] vivid-015: ================== END STATUS ================== [ 524.303661][ T8084] Bluetooth: hci0: command 0x0c1a tx timeout [ 525.018911][ T8084] Bluetooth: hci1: command 0x0c1a tx timeout [ 525.098659][ T8084] Bluetooth: hci2: command 0x0c1a tx timeout [ 525.180681][ T8084] Bluetooth: hci3: command 0x0c1a tx timeout [ 528.809885][T12139] random: crng reseeded on system resumption [ 529.073042][T12138] hub 1-0:1.0: USB hub found [ 529.111687][T12138] hub 1-0:1.0: 1 port detected [ 529.308152][T12145] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1439'. [ 529.819808][T12150] FAULT_INJECTION: forcing a failure. [ 529.819808][T12150] name failslab, interval 1, probability 0, space 0, times 0 [ 529.906374][T12150] CPU: 0 UID: 0 PID: 12150 Comm: syz.2.1440 Not tainted syzkaller #0 PREEMPT(full) [ 529.906408][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.906423][T12150] Call Trace: [ 529.906431][T12150] [ 529.906440][T12150] dump_stack_lvl+0x100/0x190 [ 529.906476][T12150] should_fail_ex.cold+0x5/0xa [ 529.906511][T12150] should_failslab+0xc2/0x120 [ 529.906547][T12150] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 529.906584][T12150] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 529.906711][T12150] krealloc_node_align_noprof+0x321/0x3e0 [ 529.906748][T12150] snd_pcm_hw_rule_add+0x3b3/0x510 [ 529.906783][T12150] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 529.906894][T12150] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 529.906932][T12150] ? mutex_init_lockdep+0xf1/0x120 [ 529.906959][T12150] ? snd_pcm_attach_substream+0x287/0xd20 [ 529.906999][T12150] snd_pcm_open_substream+0x54a/0x1850 [ 529.907030][T12150] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 529.907058][T12150] ? rcu_is_watching+0x12/0xc0 [ 529.907093][T12150] snd_pcm_open+0x2a3/0x710 [ 529.907123][T12150] ? __pfx_snd_pcm_open+0x10/0x10 [ 529.907152][T12150] ? __pfx_default_wake_function+0x10/0x10 [ 529.907190][T12150] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 529.907217][T12150] snd_pcm_playback_open+0x86/0xe0 [ 529.907244][T12150] snd_open+0x201/0x450 [ 529.907322][T12150] ? __pfx_snd_open+0x10/0x10 [ 529.907355][T12150] chrdev_open+0x234/0x6a0 [ 529.907380][T12150] ? __pfx_apparmor_file_open+0x10/0x10 [ 529.907407][T12150] ? __pfx_chrdev_open+0x10/0x10 [ 529.907433][T12150] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 529.907468][T12150] do_dentry_open+0x6ab/0x14d0 [ 529.907494][T12150] ? __pfx_chrdev_open+0x10/0x10 [ 529.907527][T12150] vfs_open+0x82/0x3f0 [ 529.907562][T12150] path_openat+0x2873/0x4280 [ 529.907600][T12150] ? __pfx_path_openat+0x10/0x10 [ 529.907633][T12150] do_file_open+0x20e/0x430 [ 529.907661][T12150] ? __pfx_do_file_open+0x10/0x10 [ 529.907707][T12150] ? alloc_fd+0x471/0x7a0 [ 529.907733][T12150] ? do_getname+0x191/0x390 [ 529.907767][T12150] do_sys_openat2+0x10f/0x1e0 [ 529.907800][T12150] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.907843][T12150] __x64_sys_openat+0x12d/0x210 [ 529.907878][T12150] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.907912][T12150] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 529.907956][T12150] ? syscall_user_dispatch+0x76/0x130 [ 529.907989][T12150] do_syscall_64+0x115/0x840 [ 529.908017][T12150] ? clear_bhb_loop+0x40/0x90 [ 529.908047][T12150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.908073][T12150] RIP: 0033:0x7fe20299de59 [ 529.908094][T12150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.908118][T12150] RSP: 002b:00007fe20384f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.908141][T12150] RAX: ffffffffffffffda RBX: 00007fe202c25fa0 RCX: 00007fe20299de59 [ 529.908157][T12150] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 529.908173][T12150] RBP: 00007fe202a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 529.908188][T12150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.908203][T12150] R13: 00007fe202c26038 R14: 00007fe202c25fa0 R15: 00007fffeff953b8 [ 529.908234][T12150] [ 531.013125][T12166] FAULT_INJECTION: forcing a failure. [ 531.013125][T12166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 531.078207][T12166] CPU: 0 UID: 0 PID: 12166 Comm: syz.0.1444 Not tainted syzkaller #0 PREEMPT(full) [ 531.078239][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.078253][T12166] Call Trace: [ 531.078261][T12166] [ 531.078270][T12166] dump_stack_lvl+0x100/0x190 [ 531.078304][T12166] should_fail_ex.cold+0x5/0xa [ 531.078330][T12166] ? prepare_alloc_pages+0x16d/0x5f0 [ 531.078368][T12166] should_fail_alloc_page+0xeb/0x140 [ 531.078413][T12166] prepare_alloc_pages+0x1f0/0x5f0 [ 531.078448][T12166] ? is_bpf_text_address+0x8a/0x1a0 [ 531.078518][T12166] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 531.078547][T12166] ? is_bpf_text_address+0x94/0x1a0 [ 531.078582][T12166] ? kernel_text_address+0x8d/0x100 [ 531.078617][T12166] ? __pfx_widen_string+0x10/0x10 [ 531.078702][T12166] ? __kernel_text_address+0xd/0x30 [ 531.078737][T12166] ? unwind_get_return_address+0x59/0xa0 [ 531.078780][T12166] ? arch_stack_walk+0xa6/0xf0 [ 531.078823][T12166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 531.078855][T12166] ? __pfx_stack_trace_save+0x10/0x10 [ 531.078890][T12166] ? stack_depot_save_flags+0x27/0x9d0 [ 531.078932][T12166] ? __lock_acquire+0x49f/0x1a40 [ 531.078954][T12166] ? kasan_save_stack+0x30/0x50 [ 531.078986][T12166] ? security_file_ioctl+0xd3/0x230 [ 531.079014][T12166] ? do_syscall_64+0x115/0x840 [ 531.079040][T12166] ? __lock_acquire+0x49f/0x1a40 [ 531.079060][T12166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.079097][T12166] ? policy_nodemask+0xed/0x4f0 [ 531.079133][T12166] alloc_pages_mpol+0x1fb/0x540 [ 531.079169][T12166] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 531.079204][T12166] ? find_held_lock+0x2b/0x80 [ 531.079237][T12166] ? do_proc_control+0x204/0xe50 [ 531.079324][T12166] alloc_pages_noprof+0x1a/0x160 [ 531.079348][T12166] get_free_pages_noprof+0x10/0xb0 [ 531.079379][T12166] do_proc_control+0x210/0xe50 [ 531.079423][T12166] ? __might_fault+0xc5/0x140 [ 531.079451][T12166] ? __pfx_do_proc_control+0x10/0x10 [ 531.079497][T12166] usbdev_ioctl+0x1a28/0x3aa0 [ 531.079540][T12166] ? __pfx_usbdev_ioctl+0x10/0x10 [ 531.079584][T12166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.079621][T12166] ? do_vfs_ioctl+0x226/0x13e0 [ 531.079667][T12166] ? find_held_lock+0x2b/0x80 [ 531.079696][T12166] ? __fget_files+0x215/0x3d0 [ 531.079716][T12166] ? hook_file_ioctl_common+0x140/0x440 [ 531.079777][T12166] ? __fget_files+0x21f/0x3d0 [ 531.079803][T12166] ? __pfx_usbdev_ioctl+0x10/0x10 [ 531.079842][T12166] __x64_sys_ioctl+0x18e/0x210 [ 531.079878][T12166] do_syscall_64+0x115/0x840 [ 531.079898][T12166] ? clear_bhb_loop+0x40/0x90 [ 531.079927][T12166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.079952][T12166] RIP: 0033:0x7fd22c79de59 [ 531.079972][T12166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.079995][T12166] RSP: 002b:00007fd22d6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.080017][T12166] RAX: ffffffffffffffda RBX: 00007fd22ca25fa0 RCX: 00007fd22c79de59 [ 531.080033][T12166] RDX: 0000200000000240 RSI: 00000000c0185500 RDI: 0000000000000003 [ 531.080047][T12166] RBP: 00007fd22d6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 531.080062][T12166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.080076][T12166] R13: 00007fd22ca26038 R14: 00007fd22ca25fa0 R15: 00007ffcaabc38a8 [ 531.080106][T12166] [ 532.678446][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1446'. [ 532.972317][T12177] openvswitch: : Dropping previously announced user features [ 534.079959][T12183] Process accounting resumed [ 534.163366][T12192] ubi0: attaching mtd0 [ 534.270926][T12192] ubi0: scanning is finished [ 534.297785][T12192] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 534.491611][T12201] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 534.771129][T12192] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 536.051735][T12221] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[12221] [ 536.209529][T12229] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 536.221925][T12221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1458'. [ 536.537770][T12236] zswap: compressor not available [ 537.465556][T12232] kexec: Could not allocate control_code_buffer [ 539.385864][T12265] Process accounting resumed [ 539.837859][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 539.927569][T12276] openvswitch: : Dropping previously announced user features [ 540.218039][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 542.652741][T12331] netlink: 16128 bytes leftover after parsing attributes in process `syz.2.1485'. [ 542.921331][T12340] FAULT_INJECTION: forcing a failure. [ 542.921331][T12340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.026170][T12340] CPU: 0 UID: 0 PID: 12340 Comm: syz.0.1486 Not tainted syzkaller #0 PREEMPT(full) [ 543.026201][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.026216][T12340] Call Trace: [ 543.026223][T12340] [ 543.026232][T12340] dump_stack_lvl+0x100/0x190 [ 543.026266][T12340] should_fail_ex.cold+0x5/0xa [ 543.026298][T12340] _copy_to_user+0x32/0xd0 [ 543.026336][T12340] simple_read_from_buffer+0xcb/0x170 [ 543.026378][T12340] proc_fail_nth_read+0x1af/0x230 [ 543.026411][T12340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.026452][T12340] ? rw_verify_area+0xce/0x6d0 [ 543.026486][T12340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.026518][T12340] vfs_read+0x1e4/0xb40 [ 543.026543][T12340] ? __pfx_vfs_read+0x10/0x10 [ 543.026563][T12340] ? __fget_files+0x215/0x3d0 [ 543.026591][T12340] ? __fget_files+0x21f/0x3d0 [ 543.026621][T12340] ksys_read+0x12a/0x250 [ 543.026645][T12340] ? __pfx_ksys_read+0x10/0x10 [ 543.026674][T12340] do_syscall_64+0x115/0x840 [ 543.026696][T12340] ? clear_bhb_loop+0x40/0x90 [ 543.026726][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.026750][T12340] RIP: 0033:0x7fd22c75e68e [ 543.026769][T12340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.026791][T12340] RSP: 002b:00007fd22d648fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 543.026814][T12340] RAX: ffffffffffffffda RBX: 00007fd22d6496c0 RCX: 00007fd22c75e68e [ 543.026832][T12340] RDX: 000000000000000f RSI: 00007fd22d6490a0 RDI: 0000000000000004 [ 543.026846][T12340] RBP: 00007fd22d649090 R08: 0000000000000000 R09: 0000000000000000 [ 543.026861][T12340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.026874][T12340] R13: 00007fd22ca26308 R14: 00007fd22ca26270 R15: 00007ffcaabc38a8 [ 543.026904][T12340] [ 543.481130][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 543.570186][T12347] openvswitch: : Dropping previously announced user features [ 551.532479][ T8084] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 554.470992][T12498] FAULT_INJECTION: forcing a failure. [ 554.470992][T12498] name failslab, interval 1, probability 0, space 0, times 0 [ 554.583533][T12498] CPU: 0 UID: 0 PID: 12498 Comm: syz.2.1523 Not tainted syzkaller #0 PREEMPT(full) [ 554.583567][T12498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.583582][T12498] Call Trace: [ 554.583590][T12498] [ 554.583599][T12498] dump_stack_lvl+0x100/0x190 [ 554.583640][T12498] should_fail_ex.cold+0x5/0xa [ 554.583672][T12498] should_failslab+0xc2/0x120 [ 554.583709][T12498] __kmalloc_cache_noprof+0x91/0x6c0 [ 554.583734][T12498] ? drm_debugfs_clients_add+0xd0/0x210 [ 554.583767][T12498] ? drm_master_create+0x43/0x4d0 [ 554.583907][T12498] drm_master_create+0x43/0x4d0 [ 554.583940][T12498] drm_new_set_master+0xcc/0x430 [ 554.583977][T12498] drm_master_open+0x181/0x1f0 [ 554.584012][T12498] drm_open_helper+0x42b/0x540 [ 554.584049][T12498] drm_open+0x1a0/0x3e0 [ 554.584081][T12498] ? __pfx_drm_open+0x10/0x10 [ 554.584112][T12498] drm_stub_open+0x20f/0x380 [ 554.584144][T12498] ? __pfx_drm_stub_open+0x10/0x10 [ 554.584175][T12498] chrdev_open+0x234/0x6a0 [ 554.584201][T12498] ? __pfx_apparmor_file_open+0x10/0x10 [ 554.584229][T12498] ? __pfx_chrdev_open+0x10/0x10 [ 554.584256][T12498] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 554.584290][T12498] do_dentry_open+0x6ab/0x14d0 [ 554.584315][T12498] ? __pfx_chrdev_open+0x10/0x10 [ 554.584346][T12498] vfs_open+0x82/0x3f0 [ 554.584380][T12498] path_openat+0x2873/0x4280 [ 554.584418][T12498] ? __pfx_path_openat+0x10/0x10 [ 554.584450][T12498] do_file_open+0x20e/0x430 [ 554.584488][T12498] ? __pfx_do_file_open+0x10/0x10 [ 554.584534][T12498] ? alloc_fd+0x471/0x7a0 [ 554.584561][T12498] ? do_getname+0x191/0x390 [ 554.584595][T12498] do_sys_openat2+0x10f/0x1e0 [ 554.584628][T12498] ? __pfx_do_sys_openat2+0x10/0x10 [ 554.584663][T12498] ? __fget_files+0x21f/0x3d0 [ 554.584692][T12498] __x64_sys_openat+0x12d/0x210 [ 554.584725][T12498] ? __pfx___x64_sys_openat+0x10/0x10 [ 554.584770][T12498] do_syscall_64+0x115/0x840 [ 554.584792][T12498] ? clear_bhb_loop+0x40/0x90 [ 554.584821][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.584854][T12498] RIP: 0033:0x7fe20299de59 [ 554.584875][T12498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.584899][T12498] RSP: 002b:00007fe20384f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 554.584922][T12498] RAX: ffffffffffffffda RBX: 00007fe202c25fa0 RCX: 00007fe20299de59 [ 554.584938][T12498] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 554.584953][T12498] RBP: 00007fe202a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 554.584969][T12498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.584983][T12498] R13: 00007fe202c26038 R14: 00007fe202c25fa0 R15: 00007fffeff953b8 [ 554.585014][T12498] [ 558.663040][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 558.820568][T12544] openvswitch: : Dropping previously announced user features [ 561.090747][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.100618][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.379292][T12586] Ignoring unsupported numa_zonelist_order value: [ 561.413410][T12586] random: crng reseeded on system resumption [ 562.368400][ T8084] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 562.402205][T12596] FAULT_INJECTION: forcing a failure. [ 562.402205][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 562.645188][T12596] CPU: 0 UID: 0 PID: 12596 Comm: syz.0.1543 Not tainted syzkaller #0 PREEMPT(full) [ 562.645222][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.645237][T12596] Call Trace: [ 562.645245][T12596] [ 562.645254][T12596] dump_stack_lvl+0x100/0x190 [ 562.645292][T12596] should_fail_ex.cold+0x5/0xa [ 562.645325][T12596] should_failslab+0xc2/0x120 [ 562.645367][T12596] kmem_cache_alloc_noprof+0x91/0x6a0 [ 562.645400][T12596] ? sk_prot_alloc+0x60/0x2a0 [ 562.645440][T12596] sk_prot_alloc+0x60/0x2a0 [ 562.645477][T12596] sk_alloc+0x36/0xe80 [ 562.645504][T12596] inet_create+0x3a0/0x1060 [ 562.645618][T12596] ? inet_create+0x94/0x1060 [ 562.645648][T12596] __sock_create+0x339/0x860 [ 562.645691][T12596] __sys_socket+0x14d/0x260 [ 562.645730][T12596] ? __pfx___sys_socket+0x10/0x10 [ 562.645777][T12596] __x64_sys_socket+0x72/0xb0 [ 562.645814][T12596] ? lockdep_hardirqs_on+0x78/0x100 [ 562.645854][T12596] do_syscall_64+0x115/0x840 [ 562.645875][T12596] ? clear_bhb_loop+0x40/0x90 [ 562.645905][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.645930][T12596] RIP: 0033:0x7fd22c79de59 [ 562.645950][T12596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.645974][T12596] RSP: 002b:00007fd22d68b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 562.645998][T12596] RAX: ffffffffffffffda RBX: 00007fd22ca26090 RCX: 00007fd22c79de59 [ 562.646014][T12596] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 562.646029][T12596] RBP: 00007fd22c833e6f R08: 0000000000000000 R09: 0000000000000000 [ 562.646043][T12596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.646058][T12596] R13: 00007fd22ca26128 R14: 00007fd22ca26090 R15: 00007ffcaabc38a8 [ 562.646088][T12596] [ 563.463676][ T30] audit: type=1800 audit(2147484130.552:14): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1544" name="version" dev="configfs" ino=59428 res=0 errno=0 [ 564.019538][T12625] syz.2.1549 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 564.266782][T12607] Process accounting paused [ 566.017604][T12661] FAULT_INJECTION: forcing a failure. [ 566.017604][T12661] name failslab, interval 1, probability 0, space 0, times 0 [ 566.107646][T12661] CPU: 0 UID: 0 PID: 12661 Comm: syz.1.1559 Not tainted syzkaller #0 PREEMPT(full) [ 566.107680][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.107695][T12661] Call Trace: [ 566.107703][T12661] [ 566.107713][T12661] dump_stack_lvl+0x100/0x190 [ 566.107749][T12661] should_fail_ex.cold+0x5/0xa [ 566.107782][T12661] should_failslab+0xc2/0x120 [ 566.107818][T12661] __kmalloc_noprof+0xfc/0x820 [ 566.107847][T12661] ? trace_kmem_cache_alloc+0xdd/0x100 [ 566.107882][T12661] ? lsm_blob_alloc+0x68/0x90 [ 566.107925][T12661] lsm_blob_alloc+0x68/0x90 [ 566.107962][T12661] security_sk_alloc+0x2d/0x290 [ 566.107989][T12661] sk_prot_alloc+0x1d1/0x2a0 [ 566.108027][T12661] sk_alloc+0x36/0xe80 [ 566.108055][T12661] inet_create+0x3a0/0x1060 [ 566.108082][T12661] ? inet_create+0x94/0x1060 [ 566.108112][T12661] __sock_create+0x339/0x860 [ 566.108158][T12661] mptcp_subflow_create_socket+0xec/0xa30 [ 566.108265][T12661] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 566.108297][T12661] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 566.108394][T12661] ? find_held_lock+0x2b/0x80 [ 566.108427][T12661] ? tomoyo_check_inet_address+0x40d/0x6d0 [ 566.108487][T12661] __mptcp_nmpc_sk+0x17f/0x880 [ 566.108549][T12661] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 566.108593][T12661] mptcp_connect+0x7e/0xaf0 [ 566.108633][T12661] __inet_stream_connect+0x208/0xfa0 [ 566.108666][T12661] ? __pfx___inet_stream_connect+0x10/0x10 [ 566.108693][T12661] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 566.108725][T12661] ? __pfx_inet_stream_connect+0x10/0x10 [ 566.108752][T12661] ? __local_bh_enable_ip+0x9e/0x120 [ 566.108785][T12661] ? __pfx_inet_stream_connect+0x10/0x10 [ 566.108810][T12661] inet_stream_connect+0x57/0xa0 [ 566.108837][T12661] __sys_connect_file+0x141/0x1a0 [ 566.108866][T12661] __sys_connect+0x141/0x170 [ 566.108890][T12661] ? __pfx___sys_connect+0x10/0x10 [ 566.108933][T12661] __x64_sys_connect+0x72/0xb0 [ 566.108957][T12661] ? lockdep_hardirqs_on+0x78/0x100 [ 566.108995][T12661] do_syscall_64+0x115/0x840 [ 566.109016][T12661] ? clear_bhb_loop+0x40/0x90 [ 566.109046][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.109070][T12661] RIP: 0033:0x7f0ad579de59 [ 566.109090][T12661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.109115][T12661] RSP: 002b:00007f0ad664c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 566.109143][T12661] RAX: ffffffffffffffda RBX: 00007f0ad5a25fa0 RCX: 00007f0ad579de59 [ 566.109159][T12661] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 566.109174][T12661] RBP: 00007f0ad5833e6f R08: 0000000000000000 R09: 0000000000000000 [ 566.109188][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.109202][T12661] R13: 00007f0ad5a26038 R14: 00007f0ad5a25fa0 R15: 00007ffc79a52e48 [ 566.109234][T12661] [ 568.364775][ T8084] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 569.975039][T12721] FAULT_INJECTION: forcing a failure. [ 569.975039][T12721] name failslab, interval 1, probability 0, space 0, times 0 [ 570.042239][T12721] CPU: 0 UID: 0 PID: 12721 Comm: syz.3.1570 Not tainted syzkaller #0 PREEMPT(full) [ 570.042273][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.042296][T12721] Call Trace: [ 570.042305][T12721] [ 570.042314][T12721] dump_stack_lvl+0x100/0x190 [ 570.042350][T12721] should_fail_ex.cold+0x5/0xa [ 570.042382][T12721] should_failslab+0xc2/0x120 [ 570.042418][T12721] kmem_cache_alloc_noprof+0x91/0x6a0 [ 570.042450][T12721] ? vm_area_dup+0x27/0x8e0 [ 570.042478][T12721] vm_area_dup+0x27/0x8e0 [ 570.042504][T12721] dup_mmap+0x6f6/0x21b0 [ 570.042552][T12721] ? __pfx_dup_mmap+0x10/0x10 [ 570.042589][T12721] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 570.042716][T12721] ? __lock_acquire+0x49f/0x1a40 [ 570.042740][T12721] ? find_held_lock+0x2b/0x80 [ 570.042772][T12721] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 570.042856][T12721] copy_process+0x4588/0x8030 [ 570.042886][T12721] ? futex_unqueue+0x133/0x2c0 [ 570.042928][T12721] ? __pfx_copy_process+0x10/0x10 [ 570.042966][T12721] ? _copy_from_user+0x59/0xd0 [ 570.043005][T12721] kernel_clone+0x176/0x9d0 [ 570.043037][T12721] ? __pfx_kernel_clone+0x10/0x10 [ 570.043084][T12721] __do_sys_clone3+0x214/0x290 [ 570.043115][T12721] ? __pfx___do_sys_clone3+0x10/0x10 [ 570.043159][T12721] ? cleanup_mnt+0x263/0x450 [ 570.043220][T12721] do_syscall_64+0x115/0x840 [ 570.043241][T12721] ? clear_bhb_loop+0x40/0x90 [ 570.043270][T12721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.043302][T12721] RIP: 0033:0x7f56d139de59 [ 570.043322][T12721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.043346][T12721] RSP: 002b:00007f56d21e2ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 570.043370][T12721] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f56d139de59 [ 570.043386][T12721] RDX: 00007f56d21e2f10 RSI: 0000000000000058 RDI: 00007f56d21e2f10 [ 570.043402][T12721] RBP: 00007f56d1433e6f R08: 0000000000000000 R09: 0000000000000058 [ 570.043416][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.043431][T12721] R13: 00007f56d1626038 R14: 00007f56d1625fa0 R15: 00007ffc7bb4a298 [ 570.043462][T12721] [ 571.910784][T12771] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 573.275900][T12781] futex_wake_op: syz.1.1581 tries to shift op by -2048; fix this program [ 573.300306][T12781] 0x000000000001-0x000000020000 : "" [ 573.329616][T12781] ftl_cs: FTL header corrupt! [ 573.968380][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'. [ 573.994272][T12793] openvswitch: : Dropping previously announced user features [ 574.495562][T12800] FAULT_INJECTION: forcing a failure. [ 574.495562][T12800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.543423][T12800] CPU: 0 UID: 0 PID: 12800 Comm: syz.3.1586 Not tainted syzkaller #0 PREEMPT(full) [ 574.543458][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.543473][T12800] Call Trace: [ 574.543481][T12800] [ 574.543490][T12800] dump_stack_lvl+0x100/0x190 [ 574.543526][T12800] should_fail_ex.cold+0x5/0xa [ 574.543558][T12800] _copy_from_iter+0x1f4/0x1690 [ 574.543598][T12800] ? __asan_memset+0x23/0x50 [ 574.543627][T12800] ? __pfx__copy_from_iter+0x10/0x10 [ 574.543664][T12800] ? alloc_pages_noprof+0xf9/0x160 [ 574.543687][T12800] ? skb_page_frag_refill+0x309/0x4b0 [ 574.543715][T12800] ? sk_page_frag_refill+0x6c/0x340 [ 574.543742][T12800] tcp_sendmsg_locked+0xc8c/0x44d0 [ 574.543869][T12800] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 574.543903][T12800] ? do_raw_spin_lock+0x128/0x260 [ 574.543933][T12800] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.543968][T12800] ? __local_bh_enable_ip+0x9e/0x120 [ 574.544000][T12800] tcp_sendmsg+0x2e/0x50 [ 574.544029][T12800] ? __pfx_tcp_sendmsg+0x10/0x10 [ 574.544058][T12800] inet_sendmsg+0xb9/0x140 [ 574.544086][T12800] ____sys_sendmsg+0x9c9/0xbe0 [ 574.544120][T12800] ? __pfx_inet_sendmsg+0x10/0x10 [ 574.544150][T12800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.544193][T12800] ? plist_check_list+0x1b8/0x280 [ 574.544256][T12800] ? plist_del+0x308/0x510 [ 574.544291][T12800] ___sys_sendmsg+0x190/0x1e0 [ 574.544331][T12800] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.544368][T12800] ? __lock_acquire+0x49f/0x1a40 [ 574.544391][T12800] ? futex_wake+0x220/0x5e0 [ 574.544453][T12800] __sys_sendmsg+0x160/0x210 [ 574.544483][T12800] ? __pfx___sys_sendmsg+0x10/0x10 [ 574.544529][T12800] do_syscall_64+0x115/0x840 [ 574.544550][T12800] ? clear_bhb_loop+0x40/0x90 [ 574.544580][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.544605][T12800] RIP: 0033:0x7f56d139de59 [ 574.544626][T12800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.544649][T12800] RSP: 002b:00007f56d21e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.544673][T12800] RAX: ffffffffffffffda RBX: 00007f56d1625fa0 RCX: 00007f56d139de59 [ 574.544689][T12800] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 574.544704][T12800] RBP: 00007f56d1433e6f R08: 0000000000000000 R09: 0000000000000000 [ 574.544719][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.544734][T12800] R13: 00007f56d1626038 R14: 00007f56d1625fa0 R15: 00007ffc7bb4a298 [ 574.544765][T12800] [ 575.197954][T12815] FAULT_INJECTION: forcing a failure. [ 575.197954][T12815] name failslab, interval 1, probability 0, space 0, times 0 [ 575.247245][T12815] CPU: 0 UID: 0 PID: 12815 Comm: syz.3.1589 Not tainted syzkaller #0 PREEMPT(full) [ 575.247278][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.247293][T12815] Call Trace: [ 575.247301][T12815] [ 575.247335][T12815] dump_stack_lvl+0x100/0x190 [ 575.247371][T12815] should_fail_ex.cold+0x5/0xa [ 575.247404][T12815] should_failslab+0xc2/0x120 [ 575.247439][T12815] __kmalloc_noprof+0xfc/0x820 [ 575.247471][T12815] ? security_inode_init_security+0x113/0x370 [ 575.247516][T12815] security_inode_init_security+0x113/0x370 [ 575.247560][T12815] ? __pfx_shmem_initxattrs+0x10/0x10 [ 575.247625][T12815] ? __pfx_security_inode_init_security+0x10/0x10 [ 575.247668][T12815] ? make_vfsgid+0xf1/0x140 [ 575.247706][T12815] shmem_mknod+0x2ce/0x480 [ 575.247746][T12815] ? __pfx_shmem_mknod+0x10/0x10 [ 575.247790][T12815] vfs_mknod+0x3a5/0x7f0 [ 575.247831][T12815] filename_mknodat+0x5aa/0x7f0 [ 575.247862][T12815] ? __pfx_filename_mknodat+0x10/0x10 [ 575.247888][T12815] ? strncpy_from_user+0x19d/0x2d0 [ 575.247925][T12815] ? do_getname+0x191/0x390 [ 575.247958][T12815] __x64_sys_mknod+0x8f/0xc0 [ 575.247985][T12815] do_syscall_64+0x115/0x840 [ 575.248008][T12815] ? clear_bhb_loop+0x40/0x90 [ 575.248038][T12815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.248063][T12815] RIP: 0033:0x7f56d139de59 [ 575.248084][T12815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.248108][T12815] RSP: 002b:00007f56d21a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 575.248131][T12815] RAX: ffffffffffffffda RBX: 00007f56d1626180 RCX: 00007f56d139de59 [ 575.248147][T12815] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000000000000000 [ 575.248162][T12815] RBP: 00007f56d1433e6f R08: 0000000000000000 R09: 0000000000000000 [ 575.248177][T12815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.248192][T12815] R13: 00007f56d1626218 R14: 00007f56d1626180 R15: 00007ffc7bb4a298 [ 575.248223][T12815] [ 576.485226][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 576.561914][T12836] openvswitch: : Dropping previously announced user features [ 582.000439][ T5629] Process accounting paused [ 582.697105][ T8072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 582.711807][ T8072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 582.721185][ T8072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 582.733920][ T8072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 582.742160][ T8072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 583.213830][T12930] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1610'. [ 584.243019][T12949] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[12949] [ 584.372122][T12949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1615'. [ 584.819564][ T8072] Bluetooth: hci4: command tx timeout [ 585.266190][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.287456][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.311788][T12923] bridge_slave_0: entered allmulticast mode [ 585.335745][T12923] bridge_slave_0: entered promiscuous mode [ 585.373777][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.408355][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.436610][T12923] bridge_slave_1: entered allmulticast mode [ 585.451092][T12923] bridge_slave_1: entered promiscuous mode [ 585.646723][T12923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.678576][T12923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.786321][T12923] team0: Port device team_slave_0 added [ 585.822381][T12923] team0: Port device team_slave_1 added [ 585.916095][T12923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.947540][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.029378][T12923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.057516][T12923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.070246][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.106727][T12923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.317440][T12923] hsr_slave_0: entered promiscuous mode [ 586.333914][T12923] hsr_slave_1: entered promiscuous mode [ 586.356381][T12923] debugfs: 'hsr0' already exists in 'hsr' [ 586.378470][T12923] Cannot create hsr debugfs directory [ 586.891363][ T8072] Bluetooth: hci4: command tx timeout [ 587.366593][T12985] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[12985] [ 587.506605][T12989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1624'. [ 588.053940][T12923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 588.124403][T12923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.153608][T12923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 588.181489][T12923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.332006][T12923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 588.393999][T12923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.435419][T12923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 588.504539][T12923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.894669][T12923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.961088][ T8072] Bluetooth: hci4: command tx timeout [ 589.020607][T12923] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.067176][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.074567][ T8079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.137507][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.144773][ T8071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.030849][ T8072] Bluetooth: hci4: command tx timeout [ 591.073156][T12923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.745869][T12923] veth0_vlan: entered promiscuous mode [ 591.844800][T12923] veth1_vlan: entered promiscuous mode [ 591.984030][T12923] veth0_macvtap: entered promiscuous mode [ 592.018292][T12923] veth1_macvtap: entered promiscuous mode [ 592.067207][T12923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.111666][T12923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.149255][ T8095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.204692][ T8095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.272833][ T8071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.301089][ T8071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.599809][ T8374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.650068][ T8374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.715869][ T8095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.731417][ T8095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.116680][ T8084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 595.132243][ T8084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 595.143452][ T8084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 595.156411][ T8084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 595.164065][ T8084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 595.288590][T13090] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[12923] was attempted by ""[13090] [ 595.647902][T13067] Process accounting resumed [ 597.242612][ T8084] Bluetooth: hci5: command tx timeout [ 598.612127][T13136] blkio.reset_stats is deprecated [ 599.312692][ T8084] Bluetooth: hci5: command tx timeout [ 599.470682][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.517910][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.557855][T13091] bridge_slave_0: entered allmulticast mode [ 599.600853][T13091] bridge_slave_0: entered promiscuous mode [ 599.799008][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.823070][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.869221][T13091] bridge_slave_1: entered allmulticast mode [ 599.913753][T13091] bridge_slave_1: entered promiscuous mode [ 600.101102][T13091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.199469][T13091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.451846][T13091] team0: Port device team_slave_0 added [ 600.538143][T13091] team0: Port device team_slave_1 added [ 600.845861][T13091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.871239][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.967568][T13091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.050757][T13091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.084895][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.199230][T13091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.383170][ T8084] Bluetooth: hci5: command tx timeout [ 601.626135][T13091] hsr_slave_0: entered promiscuous mode [ 601.657523][T13091] hsr_slave_1: entered promiscuous mode [ 601.691421][T13091] debugfs: 'hsr0' already exists in 'hsr' [ 601.723758][T13091] Cannot create hsr debugfs directory [ 603.134057][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1657'. [ 603.260124][T13188] openvswitch: : Dropping previously announced user features [ 603.283153][T13091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 603.323356][T13091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.398660][T13091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 603.458146][ T8084] Bluetooth: hci5: command tx timeout [ 603.467024][T13091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 603.503787][T13091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.518215][T13091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 603.552904][T13091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 603.566042][T13091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.023353][T13091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.130740][T13091] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.179871][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.187207][ T8396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.274852][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.282190][ T8396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.733222][T13214] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[13214] [ 606.249439][T13091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.413947][T13091] veth0_vlan: entered promiscuous mode [ 607.486646][T13091] veth1_vlan: entered promiscuous mode [ 607.621959][T13091] veth0_macvtap: entered promiscuous mode [ 607.671197][T13091] veth1_macvtap: entered promiscuous mode [ 607.707831][T13249] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[13249] [ 607.740471][T13091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.797886][T13091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.859574][ T8095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.876066][ T8095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.912601][ T8095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.932411][ T8095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.186470][ T8079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.218087][ T8079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.332281][ T8071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.355588][ T8071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.017070][T13261] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 613.203531][T13330] nvme_fabrics: missing parameter 'transport=%s' [ 613.247703][T13330] nvme_fabrics: missing parameter 'nqn=%s' [ 615.572649][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 615.595513][T13355] openvswitch: : Dropping previously announced user features [ 618.664490][T13390] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 618.691875][T13390] netlink: 310 bytes leftover after parsing attributes in process `syz.5.1691'. [ 618.785923][ T8072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 618.801171][ T8072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 618.818339][ T8072] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 618.827401][ T8072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 618.840812][ T8072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 619.586590][T13408] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[13408] [ 619.819141][T13410] FAULT_INJECTION: forcing a failure. [ 619.819141][T13410] name failslab, interval 1, probability 0, space 0, times 0 [ 619.927570][T13410] CPU: 0 UID: 0 PID: 13410 Comm: syz.5.1695 Not tainted syzkaller #0 PREEMPT(full) [ 619.927606][T13410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 619.927622][T13410] Call Trace: [ 619.927630][T13410] [ 619.927639][T13410] dump_stack_lvl+0x100/0x190 [ 619.927676][T13410] should_fail_ex.cold+0x5/0xa [ 619.927708][T13410] should_failslab+0xc2/0x120 [ 619.927743][T13410] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 619.927775][T13410] ? _raw_spin_unlock+0x28/0x50 [ 619.927811][T13410] ? alloc_inode+0x183/0x250 [ 619.927848][T13410] alloc_inode+0x183/0x250 [ 619.927881][T13410] new_inode+0x22/0x1c0 [ 619.927911][T13410] ? dput.part.0+0x4f/0x240 [ 619.927945][T13410] simple_fill_super+0x2d9/0x680 [ 619.927976][T13410] ? __pfx_nfsd_fill_super+0x10/0x10 [ 619.928124][T13410] nfsd_fill_super+0x98/0x560 [ 619.928168][T13410] ? __pfx_nfsd_fill_super+0x10/0x10 [ 619.928204][T13410] get_tree_keyed+0x10e/0x1d0 [ 619.928244][T13410] vfs_get_tree+0x92/0x320 [ 619.928281][T13410] path_mount+0x7d0/0x23d0 [ 619.928315][T13410] ? __pfx_path_mount+0x10/0x10 [ 619.928342][T13410] ? lockdep_hardirqs_on+0x78/0x100 [ 619.928384][T13410] ? putname+0xb1/0x110 [ 619.928409][T13410] ? kmem_cache_free+0x127/0x6b0 [ 619.928444][T13410] ? __x64_sys_mount+0x293/0x310 [ 619.928471][T13410] __x64_sys_mount+0x293/0x310 [ 619.928501][T13410] ? __pfx___x64_sys_mount+0x10/0x10 [ 619.928540][T13410] do_syscall_64+0x115/0x840 [ 619.928561][T13410] ? clear_bhb_loop+0x40/0x90 [ 619.928590][T13410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.928615][T13410] RIP: 0033:0x7fe37259de59 [ 619.928635][T13410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.928660][T13410] RSP: 002b:00007fe3733ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 619.928683][T13410] RAX: ffffffffffffffda RBX: 00007fe372825fa0 RCX: 00007fe37259de59 [ 619.928699][T13410] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 619.928715][T13410] RBP: 00007fe372633e6f R08: 0000000000000000 R09: 0000000000000000 [ 619.928729][T13410] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 619.928744][T13410] R13: 00007fe372826038 R14: 00007fe372825fa0 R15: 00007ffd70607918 [ 619.928775][T13410] [ 620.893671][ T8072] Bluetooth: hci3: command tx timeout [ 621.287910][T13391] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.312078][T13391] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.335302][T13391] bridge_slave_0: entered allmulticast mode [ 621.367377][T13391] bridge_slave_0: entered promiscuous mode [ 621.400762][T13391] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.427909][T13391] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.455771][T13391] bridge_slave_1: entered allmulticast mode [ 621.476574][T13391] bridge_slave_1: entered promiscuous mode [ 621.609626][T13391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.665749][T13391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.766519][T13391] team0: Port device team_slave_0 added [ 621.793109][T13391] team0: Port device team_slave_1 added [ 621.871033][T13391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.890434][T13391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.954075][T13391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.987728][T13391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.001409][T13391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.062521][T13391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.174733][T13391] hsr_slave_0: entered promiscuous mode [ 622.194745][T13391] hsr_slave_1: entered promiscuous mode [ 622.209080][T13391] debugfs: 'hsr0' already exists in 'hsr' [ 622.223601][T13391] Cannot create hsr debugfs directory [ 622.250701][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.259357][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.948157][ T8084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 622.967738][ T8084] Bluetooth: hci3: command tx timeout [ 622.974169][ T8084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 622.984475][ T8084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 623.000525][ T8084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 623.011698][ T8084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 623.375316][T13391] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 623.407654][T13391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.436287][T13391] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 623.459308][T13391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.494355][T13391] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 623.546460][T13391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.590138][T13391] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 623.622027][T13391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.141869][T13391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.472716][T13391] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.641938][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.649219][ T8095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.808647][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.815903][ T8095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.035258][ T8084] Bluetooth: hci3: command tx timeout [ 625.114395][ T8084] Bluetooth: hci6: command tx timeout [ 625.767531][T13461] Process accounting paused [ 625.950851][ T8084] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 626.128318][T13436] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.171642][T13436] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.213211][T13436] bridge_slave_0: entered allmulticast mode [ 626.246681][T13436] bridge_slave_0: entered promiscuous mode [ 626.289969][T13436] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.323461][ T8084] Bluetooth: hci2: unexpected event 0x05 length: 6 > 4 [ 626.332877][T13436] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.391560][T13436] bridge_slave_1: entered allmulticast mode [ 626.421394][T13436] bridge_slave_1: entered promiscuous mode [ 626.574816][T13436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.604866][T13436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.743012][T13436] team0: Port device team_slave_0 added [ 626.791222][T13436] team0: Port device team_slave_1 added [ 626.892235][T13436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.915709][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.031859][T13436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.067577][T13436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.090742][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.118977][ T8084] Bluetooth: hci3: command tx timeout [ 627.136880][T13436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.184756][ T8084] Bluetooth: hci6: command tx timeout [ 627.357319][T13436] hsr_slave_0: entered promiscuous mode [ 627.381531][T13436] hsr_slave_1: entered promiscuous mode [ 627.407818][T13436] debugfs: 'hsr0' already exists in 'hsr' [ 627.429764][T13436] Cannot create hsr debugfs directory [ 627.458080][T13391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.984692][ T8072] Bluetooth: hci2: command 0x0c1a tx timeout [ 629.082708][T13436] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 629.158357][T13436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.200498][T13436] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 629.258106][ T8072] Bluetooth: hci6: command tx timeout [ 629.266455][T13436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.319661][T13436] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 629.361927][T13436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.400391][T13436] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 629.440070][T13436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.465597][T13391] veth0_vlan: entered promiscuous mode [ 629.586948][T13391] veth1_vlan: entered promiscuous mode [ 630.153555][T13391] veth0_macvtap: entered promiscuous mode [ 630.196778][T13391] veth1_macvtap: entered promiscuous mode [ 630.293839][T13391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.368796][T13436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.399119][T13391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.463157][ T8095] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.491883][ T8095] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.546050][ T8095] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.576909][ T8095] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.637458][T13436] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.731876][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.739201][ T8095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.838367][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.845569][ T8071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.142073][ T8079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.178610][ T8079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.280703][ T8374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.322454][ T8374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.330791][ T8072] Bluetooth: hci6: command tx timeout [ 633.404254][T13436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.144646][T13436] veth0_vlan: entered promiscuous mode [ 635.233500][T13436] veth1_vlan: entered promiscuous mode [ 635.369675][ T8084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 635.384211][ T8084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 635.397338][ T8084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 635.417931][ T8084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 635.425856][ T8084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 635.527832][T13436] veth0_macvtap: entered promiscuous mode [ 635.584171][T13436] veth1_macvtap: entered promiscuous mode [ 635.872783][T13436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.963214][T13436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.224438][ T8079] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.269794][ T8079] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.314151][ T8079] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.377355][ T8079] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.956711][ T8374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.024007][ T8374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.177285][ T8374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.231041][ T8374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.539947][ T8084] Bluetooth: hci7: command tx timeout [ 638.171373][T13647] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13391] was attempted by ""[13647] [ 639.440568][T13664] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 639.607407][ T8084] Bluetooth: hci7: command tx timeout [ 639.954162][T13603] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.000612][T13603] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.047475][T13603] bridge_slave_0: entered allmulticast mode [ 640.103800][T13603] bridge_slave_0: entered promiscuous mode [ 640.179823][T13603] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.233001][T13603] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.272965][T13603] bridge_slave_1: entered allmulticast mode [ 640.318505][T13603] bridge_slave_1: entered promiscuous mode [ 640.592340][T13683] random: crng reseeded on system resumption [ 640.650790][T13603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.757205][T13603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.305104][T13603] team0: Port device team_slave_0 added [ 641.356744][T13603] team0: Port device team_slave_1 added [ 641.679106][ T8084] Bluetooth: hci7: command tx timeout [ 641.816144][T13603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.860560][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.995840][T13603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.083036][T13603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.145352][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.323427][T13603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.714289][T13603] hsr_slave_0: entered promiscuous mode [ 642.782156][T13603] hsr_slave_1: entered promiscuous mode [ 642.852383][T13603] debugfs: 'hsr0' already exists in 'hsr' [ 642.910116][T13603] Cannot create hsr debugfs directory [ 643.748209][ T8084] Bluetooth: hci7: command tx timeout [ 644.314889][T13734] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13436] was attempted by ""[13734] [ 645.697337][T13603] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 645.749823][T13603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.896318][T13603] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 645.954955][T13603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.976658][T13603] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 645.995763][T13603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 646.024409][T13603] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 646.118951][T13603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 646.582220][T13753] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 646.673532][T13603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.812790][T13603] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.909458][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.916783][ T8079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.016950][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.024260][ T8374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.730461][ T8084] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 649.032400][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1738'. [ 649.192639][T13794] : entered promiscuous mode [ 649.211536][ T8084] Bluetooth: hci6: unexpected event 0x05 length: 6 > 4 [ 649.633050][T13603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.865975][ T8084] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 650.247742][ T8084] Bluetooth: hci6: unexpected event 0x05 length: 6 > 4 [ 650.758101][ T8072] Bluetooth: hci6: command 0x2016 tx timeout [ 651.344800][T13603] veth0_vlan: entered promiscuous mode [ 651.415656][T13603] veth1_vlan: entered promiscuous mode [ 651.600639][T13603] veth0_macvtap: entered promiscuous mode [ 651.658421][T13603] veth1_macvtap: entered promiscuous mode [ 651.767636][T13603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.864996][T13603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.975054][ T8078] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.037309][ T8078] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.102670][ T8078] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.177619][ T8078] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.250859][T13626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.314429][T13626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.766356][T13626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.811227][T13626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.998635][ T8084] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 657.235944][ T8072] Bluetooth: hci7: unexpected event 0x05 length: 6 > 4 [ 657.537918][T13872] Process accounting resumed [ 659.038220][ T8072] Bluetooth: hci7: command 0x2016 tx timeout [ 660.394248][T13933] loop6: detected capacity change from 0 to 2097152 [ 664.150192][T13986] futex_wake_op: syz.3.1772 tries to shift op by -2048; fix this program [ 664.225244][T13986] futex_wake_op: syz.3.1772 tries to shift op by -2048; fix this program [ 664.304419][T13987] 0x000000000001-0x000000020000 : "" [ 664.408970][T13987] ftl_cs: FTL header corrupt! [ 667.183697][T14027] loop6: detected capacity change from 0 to 2097152 [ 669.935645][T14046] FAULT_INJECTION: forcing a failure. [ 669.935645][T14046] name failslab, interval 1, probability 0, space 0, times 0 [ 670.185279][T14046] CPU: 0 UID: 0 PID: 14046 Comm: syz.8.1787 Not tainted syzkaller #0 PREEMPT(full) [ 670.185312][T14046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.185327][T14046] Call Trace: [ 670.185335][T14046] [ 670.185344][T14046] dump_stack_lvl+0x100/0x190 [ 670.185383][T14046] should_fail_ex.cold+0x5/0xa [ 670.185417][T14046] should_failslab+0xc2/0x120 [ 670.185454][T14046] __kmalloc_noprof+0xfc/0x820 [ 670.185507][T14046] ? cache_create_net+0x2b/0x1f0 [ 670.185624][T14046] ? cache_create_net+0xa2/0x1f0 [ 670.185656][T14046] cache_create_net+0xa2/0x1f0 [ 670.185687][T14046] gss_svc_init_net+0x11f/0x640 [ 670.185731][T14046] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 670.185807][T14046] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 670.185898][T14046] ops_init+0x1e2/0x5f0 [ 670.185956][T14046] setup_net+0x118/0x3a0 [ 670.185988][T14046] ? __pfx_setup_net+0x10/0x10 [ 670.186018][T14046] ? mutex_init_lockdep+0xf1/0x120 [ 670.186051][T14046] copy_net_ns+0x46f/0x7c0 [ 670.186112][T14046] create_new_namespaces+0x3ea/0xac0 [ 670.186148][T14046] unshare_nsproxy_namespaces+0xf2/0x220 [ 670.186178][T14046] ksys_unshare+0x438/0xab0 [ 670.186213][T14046] ? __pfx_ksys_unshare+0x10/0x10 [ 670.186256][T14046] __x64_sys_unshare+0x31/0x40 [ 670.186287][T14046] do_syscall_64+0x115/0x840 [ 670.186309][T14046] ? clear_bhb_loop+0x40/0x90 [ 670.186339][T14046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.186363][T14046] RIP: 0033:0x7f029839de59 [ 670.186384][T14046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.186408][T14046] RSP: 002b:00007f0299301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 670.186432][T14046] RAX: ffffffffffffffda RBX: 00007f0298626180 RCX: 00007f029839de59 [ 670.186448][T14046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 670.186463][T14046] RBP: 00007f0298433e6f R08: 0000000000000000 R09: 0000000000000000 [ 670.186478][T14046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.186492][T14046] R13: 00007f0298626218 R14: 00007f0298626180 R15: 00007ffea91af4e8 [ 670.186523][T14046] [ 672.210340][ T8072] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 672.458342][ T8084] Bluetooth: hci7: unexpected event 0x05 length: 6 > 4 [ 673.272034][T14090] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1801'. [ 674.257833][ T8072] Bluetooth: hci7: command 0x2016 tx timeout [ 677.744617][T14154] FAULT_INJECTION: forcing a failure. [ 677.744617][T14154] name failslab, interval 1, probability 0, space 0, times 0 [ 677.872739][T14154] CPU: 0 UID: 0 PID: 14154 Comm: syz.3.1814 Not tainted syzkaller #0 PREEMPT(full) [ 677.872773][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 677.872788][T14154] Call Trace: [ 677.872797][T14154] [ 677.872807][T14154] dump_stack_lvl+0x100/0x190 [ 677.872844][T14154] should_fail_ex.cold+0x5/0xa [ 677.872875][T14154] should_failslab+0xc2/0x120 [ 677.872911][T14154] __kmalloc_cache_noprof+0x91/0x6c0 [ 677.872938][T14154] ? snd_seq_pool_new+0x44/0x230 [ 677.873070][T14154] ? __pfx_snd_seq_open+0x10/0x10 [ 677.873103][T14154] snd_seq_pool_new+0x44/0x230 [ 677.873142][T14154] snd_seq_fifo_new+0x5a/0x270 [ 677.873167][T14154] snd_seq_open+0x3d2/0x540 [ 677.873199][T14154] ? __pfx_snd_seq_open+0x10/0x10 [ 677.873229][T14154] snd_open+0x201/0x450 [ 677.873264][T14154] ? __pfx_snd_open+0x10/0x10 [ 677.873298][T14154] chrdev_open+0x234/0x6a0 [ 677.873323][T14154] ? __pfx_apparmor_file_open+0x10/0x10 [ 677.873351][T14154] ? __pfx_chrdev_open+0x10/0x10 [ 677.873378][T14154] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 677.873413][T14154] do_dentry_open+0x6ab/0x14d0 [ 677.873437][T14154] ? __pfx_chrdev_open+0x10/0x10 [ 677.873475][T14154] vfs_open+0x82/0x3f0 [ 677.873513][T14154] path_openat+0x2873/0x4280 [ 677.873551][T14154] ? __pfx_path_openat+0x10/0x10 [ 677.873584][T14154] do_file_open+0x20e/0x430 [ 677.873612][T14154] ? __pfx_do_file_open+0x10/0x10 [ 677.873657][T14154] ? alloc_fd+0x471/0x7a0 [ 677.873684][T14154] ? do_getname+0x191/0x390 [ 677.873718][T14154] do_sys_openat2+0x10f/0x1e0 [ 677.873751][T14154] ? __pfx_do_sys_openat2+0x10/0x10 [ 677.873786][T14154] ? __fget_files+0x21f/0x3d0 [ 677.873814][T14154] __x64_sys_openat+0x12d/0x210 [ 677.873848][T14154] ? __pfx___x64_sys_openat+0x10/0x10 [ 677.873893][T14154] do_syscall_64+0x115/0x840 [ 677.873914][T14154] ? clear_bhb_loop+0x40/0x90 [ 677.873944][T14154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.873969][T14154] RIP: 0033:0x7f56d139de59 [ 677.873990][T14154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.874014][T14154] RSP: 002b:00007f56d21c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 677.874039][T14154] RAX: ffffffffffffffda RBX: 00007f56d1626090 RCX: 00007f56d139de59 [ 677.874055][T14154] RDX: 0000000000020000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 677.874072][T14154] RBP: 00007f56d1433e6f R08: 0000000000000000 R09: 0000000000000000 [ 677.874087][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.874101][T14154] R13: 00007f56d1626128 R14: 00007f56d1626090 R15: 00007ffc7bb4a298 [ 677.874133][T14154] [ 678.662450][T14172] random: crng reseeded on system resumption [ 678.897534][T14181] binder: 14165:14181 ioctl c018620c 200000000040 returned -22 [ 680.290284][T14206] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 680.799243][T14216] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13603] was attempted by ""[14216] [ 681.053272][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1825'. [ 683.410670][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.422560][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.936262][T14301] Process accounting paused [ 688.083202][ T8072] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 688.316768][T14316] futex_wake_op: syz.6.1844 tries to shift op by -2048; fix this program [ 688.396820][T14316] futex_wake_op: syz.6.1844 tries to shift op by -2048; fix this program [ 690.097961][ T8084] Bluetooth: hci6: command 0x2016 tx timeout [ 691.252032][T14358] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13436] was attempted by ""[14358] [ 691.430602][T14358] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1851'. [ 692.167192][ T8084] Bluetooth: hci6: command 0x2016 tx timeout [ 693.933561][T14378] netlink: 'syz.8.1854': attribute type 4 has an invalid length. [ 694.182608][T14385] netlink: 'syz.8.1854': attribute type 4 has an invalid length. [ 697.161232][T14432] futex_wake_op: syz.8.1862 tries to shift op by -2048; fix this program [ 697.435793][T14432] futex_wake_op: syz.8.1862 tries to shift op by -2048; fix this program [ 697.586725][T14425] 0x000000000001-0x000000020000 : "" [ 697.818683][T14425] ftl_cs: FTL header corrupt! [ 698.558908][ T8072] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 700.586248][ T8084] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 700.614208][ T8084] Bluetooth: hci2: command 0x0c1a tx timeout [ 702.597764][ T8084] Bluetooth: hci7: command 0x2016 tx timeout [ 702.684193][ T8084] Bluetooth: hci2: command 0x0c1a tx timeout [ 703.295043][T14496] bond0: option slaves: interface -]=,Do does not exist! [ 704.675141][ T8072] Bluetooth: hci7: command 0x2016 tx timeout [ 705.868638][T13438] Bluetooth: hci4: command 0x0406 tx timeout [ 706.200535][T14549] TCP: TCP_TX_DELAY enabled [ 711.525858][T14588] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 711.565092][T14588] netlink: 310 bytes leftover after parsing attributes in process `syz.6.1886'. [ 711.682899][T14579] bond0: invalid ARP target specified [ 712.871458][T14599] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1888'. [ 713.019064][T14599] ipvlan1: entered promiscuous mode [ 713.042468][T14599] ipvlan1: entered allmulticast mode [ 713.061686][T14599] veth0_vlan: entered allmulticast mode [ 714.924622][T14614] futex_wake_op: syz.8.1891 tries to shift op by -2048; fix this program [ 714.998958][T14614] futex_wake_op: syz.8.1891 tries to shift op by -2048; fix this program [ 715.059936][T14619] 0x000000000001-0x000000020000 : "" [ 715.156667][T14619] ftl_cs: FTL header corrupt! [ 716.791009][T14637] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1893'. [ 717.725499][T14646] futex_wake_op: syz.8.1894 tries to shift op by -2048; fix this program [ 717.751545][T14646] futex_wake_op: syz.8.1894 tries to shift op by -2048; fix this program [ 717.801516][T14647] 0x000000000001-0x000000020000 : "" [ 717.960609][T14647] ftl_cs: FTL header corrupt! [ 718.966572][T14670] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 719.033719][ T8084] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 719.950227][T14677] futex_wake_op: syz.7.1900 tries to shift op by -2048; fix this program [ 719.996697][T14677] futex_wake_op: syz.7.1900 tries to shift op by -2048; fix this program [ 720.138190][T14676] 0x000000000001-0x000000020000 : "" [ 720.164497][T14676] ftl_cs: FTL header corrupt! [ 720.690158][ T5639] Process accounting resumed [ 721.152129][ T8084] Bluetooth: hci5: command 0x0406 tx timeout [ 721.402856][ T8072] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 721.416037][ T8072] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 721.427172][ T8072] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 721.439189][ T8072] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 721.470331][T13438] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 722.480194][ T30] audit: type=1800 audit(2147503657.296:15): pid=14699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1904" name="lu_gp_id" dev="configfs" ino=75682 res=0 errno=0 [ 723.544811][T13438] Bluetooth: hci8: command tx timeout [ 723.552309][ T31] INFO: task syz.0.1560:12674 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 723.590563][ T31] Not tainted syzkaller #0 [ 723.631789][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 723.691924][ T31] task:syz.0.1560 state:D stack:27872 pid:12674 tgid:12669 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 723.776610][ T31] Call Trace: [ 723.801466][ T31] [ 723.836579][ T31] __schedule+0x125c/0x6730 [ 723.866385][ T31] ? do_raw_spin_lock+0x128/0x260 [ 723.908852][ T31] ? __pfx___schedule+0x10/0x10 [ 723.938846][ T31] ? find_held_lock+0x2b/0x80 [ 723.972527][ T31] ? schedule+0x225/0x2c0 [ 724.015604][ T31] schedule+0xdd/0x2c0 [ 724.042677][ T31] schedule_preempt_disabled+0x13/0x30 [ 724.081195][ T31] __mutex_lock+0xccc/0x1bd0 [ 724.115002][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 724.164480][ T31] ? __sys_sendmsg+0x160/0x210 [ 724.230533][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.296719][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 724.358855][ T31] ? __asan_memset+0x23/0x50 [ 724.400558][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 724.454734][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 724.496007][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 724.532344][ T31] ? rcu_is_watching+0x12/0xc0 [ 724.551438][ T31] ? trace_kmalloc+0xeb/0x110 [ 724.574151][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 724.595553][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 724.637499][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 724.662426][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 724.696462][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 724.712949][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 724.744450][ T31] ? genl_get_cmd+0x3e7/0x760 [ 724.752496][ T31] ? bpf_lsm_capable+0x9/0x10 [ 724.766109][ T31] ? security_capable+0x80/0x260 [ 724.776965][ T31] genl_rcv_msg+0x560/0x800 [ 724.785503][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 724.796225][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 724.815648][ T31] netlink_rcv_skb+0x159/0x420 [ 724.820537][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 724.835116][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 724.848119][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 724.858792][ T31] genl_rcv+0x28/0x40 [ 724.875803][ T31] netlink_unicast+0x585/0x850 [ 724.880725][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 724.895071][ T31] netlink_sendmsg+0x8b0/0xda0 [ 724.905849][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.916133][ T31] ? apparmor_socket_sendmsg+0x15b/0x270 [ 724.934676][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 724.941278][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.955154][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 724.965024][ T31] ? kasan_quarantine_put+0x104/0x240 [ 724.978337][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 724.996685][ T31] ? find_held_lock+0x2b/0x80 [ 725.001456][ T31] ___sys_sendmsg+0x190/0x1e0 [ 725.015158][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.021927][ T31] ? __lock_acquire+0x49f/0x1a40 [ 725.044151][ T31] __sys_sendmsg+0x160/0x210 [ 725.048928][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 725.074061][ T31] ? kcov_ioctl+0x17a/0x750 [ 725.079306][ T31] do_syscall_64+0x115/0x840 [ 725.087981][ T31] ? clear_bhb_loop+0x40/0x90 [ 725.106113][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.112228][ T31] RIP: 0033:0x7fd22c79de59 [ 725.124492][ T31] RSP: 002b:00007fd22d68b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.153609][ T31] RAX: ffffffffffffffda RBX: 00007fd22ca26090 RCX: 00007fd22c79de59 [ 725.163299][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 725.184305][ T31] RBP: 00007fd22c833e6f R08: 0000000000000000 R09: 0000000000000000 [ 725.203377][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.223325][ T31] R13: 00007fd22ca26128 R14: 00007fd22ca26090 R15: 00007ffcaabc38a8 [ 725.243921][ T31] [ 725.266296][ T31] INFO: task syz.1.1601:12893 blocked for more than 145 seconds. [ 725.360081][ T31] Not tainted syzkaller #0 [ 725.389981][ T31] Blocked by coredump. [ 725.414583][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.477835][ T31] task:syz.1.1601 state:D stack:27592 pid:12893 tgid:12889 ppid:5640 task_flags:0x40054c flags:0x00080001 [ 725.556192][ T31] Call Trace: [ 725.581365][ T31] [ 725.601338][ T31] __schedule+0x125c/0x6730 [ 725.612289][T13438] Bluetooth: hci8: command tx timeout [ 725.635460][ T31] ? do_raw_spin_lock+0x128/0x260 [ 725.679401][ T31] ? __pfx___schedule+0x10/0x10 [ 725.721015][ T31] ? find_held_lock+0x2b/0x80 [ 725.750871][ T31] ? schedule+0x225/0x2c0 [ 725.769716][ T31] schedule+0xdd/0x2c0 [ 725.797262][ T31] schedule_preempt_disabled+0x13/0x30 [ 725.825659][ T31] __mutex_lock+0xccc/0x1bd0 [ 725.861190][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 725.908326][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 725.947906][ T31] ? net_generic+0xea/0x2a0 [ 725.960921][ T31] ? net_generic+0xea/0x2a0 [ 725.986503][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 726.023628][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 726.058993][ T31] nfsd_umount+0x3b/0x60 [ 726.081885][ T31] deactivate_locked_super+0xc1/0x1b0 [ 726.117822][ T31] deactivate_super+0xe7/0x110 [ 726.145906][ T31] cleanup_mnt+0x21f/0x450 [ 726.170408][ T31] task_work_run+0x150/0x240 [ 726.196106][ T31] ? __pfx_task_work_run+0x10/0x10 [ 726.248213][ T31] do_exit+0x951/0x2ae0 [ 726.294113][ T31] ? __pfx_do_exit+0x10/0x10 [ 726.309467][ T31] ? do_raw_spin_lock+0x128/0x260 [ 726.322465][ T31] ? find_held_lock+0x2b/0x80 [ 726.333458][ T31] ? get_signal+0x7e0/0x21e0 [ 726.350007][ T31] do_group_exit+0xd5/0x2a0 [ 726.368205][ T31] get_signal+0x1ec7/0x21e0 [ 726.372935][ T31] ? __pfx_get_signal+0x10/0x10 [ 726.377828][ T31] ? do_futex+0x190/0x440 [ 726.397905][ T31] arch_do_signal_or_restart+0x91/0x7a0 [ 726.405176][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 726.427865][ T31] exit_to_user_mode_loop+0x139/0x6f0 [ 726.447698][ T31] ? rcu_is_watching+0x12/0xc0 [ 726.460116][ T31] do_syscall_64+0x652/0x840 [ 726.469653][ T31] ? clear_bhb_loop+0x40/0x90 [ 726.479293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.497507][ T31] RIP: 0033:0x7f0ad579de59 [ 726.502020][ T31] RSP: 002b:00007f0ad660a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 726.519118][ T31] RAX: fffffffffffffe00 RBX: 00007f0ad5a26188 RCX: 00007f0ad579de59 [ 726.540056][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0ad5a26188 [ 726.560228][ T31] RBP: 00007f0ad5a26180 R08: 0000000000000000 R09: 0000000000000000 [ 726.587028][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.596636][ T31] R13: 00007f0ad5a26218 R14: 00007ffc79a52d60 R15: 00007ffc79a52e48 [ 726.617197][ T31] [ 726.622842][ T31] [ 726.622842][ T31] Showing all locks held in the system: [ 726.689604][ T31] 1 lock held by khungtaskd/31: [ 726.705537][ T31] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 726.736349][ T31] 2 locks held by getty/5386: [ 726.742755][ T31] #0: ffff8880342c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 726.766216][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 726.791881][ T31] 2 locks held by syz-executor/5634: [ 726.807903][ T31] #0: ffff88807f0e40d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 726.827631][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 726.847518][ T31] 2 locks held by syz.0.1560/12670: [ 726.863026][ T31] #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 726.876918][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 726.904266][ T31] 2 locks held by syz.0.1560/12674: [ 726.925902][ T31] #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 726.934233][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 726.955595][ T31] 2 locks held by syz.1.1601/12893: [ 726.968433][ T31] #0: ffff888077a200d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 726.995170][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 727.015905][ T31] 2 locks held by syz-executor/12923: [ 727.027016][ T31] #0: ffff888032b4a0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 727.054905][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 727.074815][ T31] 2 locks held by syz.5.1695/13410: [ 727.084935][ T31] #0: ffff88807c6a80d8 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: sget_fc+0x3c8/0x1d80 [ 727.120423][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 727.139091][ T31] 1 lock held by syz.3.1878/14544: [ 727.154461][ T31] 2 locks held by syz.6.1886/14585: [ 727.162080][ T31] #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 727.184634][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x8a/0x2f0 [ 727.214224][ T31] 3 locks held by syz-executor/14694: [ 727.219774][ T31] #0: ffff88803de68ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 727.245152][ T31] #1: ffff88803de680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 727.265864][ T31] #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 727.293790][ T31] 5 locks held by syz.8.1905/14710: [ 727.303920][ T31] #0: ffff888045cccea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 727.323634][ T31] #1: ffff888045ccc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 727.354211][ T31] #2: ffffffff908cbc60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 727.376029][ T31] #3: ffff888069fb3af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 727.394855][ T31] #4: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 727.423236][ T31] 3 locks held by syz.7.1906/14716: [ 727.428570][ T31] #0: ffff888045e98ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 727.454647][ T31] #1: ffff888045e980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 727.482935][ T31] #2: ffffffff908cbc60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 727.502828][ T31] [ 727.512301][ T31] ============================================= [ 727.512301][ T31] [ 727.547045][ T31] NMI backtrace for cpu 0 [ 727.547067][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 727.547094][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.547109][ T31] Call Trace: [ 727.547116][ T31] [ 727.547126][ T31] dump_stack_lvl+0x100/0x190 [ 727.547159][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 727.547192][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 727.547223][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 727.547261][ T31] sys_info+0x141/0x190 [ 727.547287][ T31] watchdog+0xcb1/0x1030 [ 727.547328][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 727.547363][ T31] ? __pfx_watchdog+0x10/0x10 [ 727.547398][ T31] ? __kthread_parkme+0x18c/0x230 [ 727.547436][ T31] ? kthread+0x13a/0x450 [ 727.547466][ T31] ? __pfx_watchdog+0x10/0x10 [ 727.547498][ T31] kthread+0x370/0x450 [ 727.547529][ T31] ? __pfx_kthread+0x10/0x10 [ 727.547562][ T31] ret_from_fork+0x72b/0xd50 [ 727.547593][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 727.547624][ T31] ? __switch_to+0x800/0x10f0 [ 727.547644][ T31] ? __switch_to_asm+0x39/0x70 [ 727.547678][ T31] ? __pfx_kthread+0x10/0x10 [ 727.547711][ T31] ret_from_fork_asm+0x1a/0x30 [ 727.547758][ T31] [ 728.006216][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 728.013152][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 728.022332][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.032446][ T31] Call Trace: [ 728.036015][ T31] [ 728.038990][ T31] dump_stack_lvl+0x100/0x190 [ 728.043694][ T31] vpanic+0x552/0x970 [ 728.047696][ T31] ? __pfx_vpanic+0x10/0x10 [ 728.052330][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 728.058519][ T31] panic+0xd1/0xe0 [ 728.062284][ T31] ? __pfx_panic+0x10/0x10 [ 728.066719][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 728.073158][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 728.079334][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 728.085870][ T31] ? watchdog.cold+0x1ec/0x234 [ 728.090679][ T31] ? watchdog+0xcc1/0x1030 [ 728.095174][ T31] watchdog.cold+0x1fd/0x234 [ 728.099820][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 728.105682][ T31] ? __pfx_watchdog+0x10/0x10 [ 728.110424][ T31] ? __kthread_parkme+0x18c/0x230 [ 728.115507][ T31] ? kthread+0x13a/0x450 [ 728.119794][ T31] ? __pfx_watchdog+0x10/0x10 [ 728.124522][ T31] kthread+0x370/0x450 [ 728.128651][ T31] ? __pfx_kthread+0x10/0x10 [ 728.133305][ T31] ret_from_fork+0x72b/0xd50 [ 728.137946][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 728.143102][ T31] ? __switch_to+0x800/0x10f0 [ 728.147828][ T31] ? __switch_to_asm+0x39/0x70 [ 728.152634][ T31] ? __pfx_kthread+0x10/0x10 [ 728.157267][ T31] ret_from_fork_asm+0x1a/0x30 [ 728.162088][ T31] [ 728.165303][ T31] Kernel Offset: disabled [ 728.169669][ T31] Rebooting in 86400 seconds..