last executing test programs: 17m41.557522889s ago: executing program 0 (id=503): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x119003, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x7, 0x5, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0x104, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}}) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x0, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) r5 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(r5, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x2) mmap$auto(0x0, 0x40000b, 0x2, 0x9b72, 0x2, 0x800008002) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r7, r7, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r6, 0x3314, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r4, 0x7, r2) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 17m40.347170907s ago: executing program 0 (id=508): socket(0x29, 0xa, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c09, 0x0) mmap$auto(0x0, 0x8, 0xe2, 0xeb1, 0x69a5, 0xa800000000000000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/sequencer2\x00', 0xafefa9ff3f069676, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r2 = socket(0x25, 0x1, 0x0) setsockopt$auto(r2, 0x10000114, 0x7f, 0x0, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 17m40.076763636s ago: executing program 0 (id=510): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x44302, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, 0x0) 17m39.877120472s ago: executing program 0 (id=512): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xbc, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000009, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89fb, 0x24) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x10) setsockopt$auto(0x3, 0x3, 0x21, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/nr6/statistics/rx_packets\x00', 0x101840, 0x0) write$auto(r4, &(0x7f0000000000)='+\x00d\t\x00\x00\x00\x00\x00\x00\x00(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) io_uring_setup$auto(0x809, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xa2042, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) 17m38.926297692s ago: executing program 0 (id=516): unshare$auto(0x40000080) setrlimit$auto(0xb, 0x0) r0 = getpid() rt_tgsigqueueinfo$auto(r0, 0x0, 0x21, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x200400, 0x0) ioctl$auto_RTC_IRQP_READ(r3, 0x8008700b, 0x0) ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x8, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) bpf$auto(0x5, 0x0, 0x9) writev$auto(0xffffffffffffffff, 0x0, 0x5) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x73, 0x7, 0x0, 0x0) 17m23.850053096s ago: executing program 32 (id=516): unshare$auto(0x40000080) setrlimit$auto(0xb, 0x0) r0 = getpid() rt_tgsigqueueinfo$auto(r0, 0x0, 0x21, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x200400, 0x0) ioctl$auto_RTC_IRQP_READ(r3, 0x8008700b, 0x0) ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x8, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) bpf$auto(0x5, 0x0, 0x9) writev$auto(0xffffffffffffffff, 0x0, 0x5) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x73, 0x7, 0x0, 0x0) 12m59.997993546s ago: executing program 2 (id=1807): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) (async, rerun: 32) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd5100fbcbdf25010000000400016f072e0180ca4c949bd171b6ff98"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) (async) r3 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) (async) ioctl$auto(r3, 0x6f2d, r3) mmap$auto(0x0, 0x200, 0x4, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x0, 0x155) (async) mseal$auto(0x0, 0x7dd8, 0xffff) setresuid$auto(0x0, 0x7, 0x0) setfsuid$auto(0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x4c800, 0x0) (async) socket(0x2, 0x2, 0x0) r4 = socket(0x22, 0x1, 0x1000000) writev$auto(0xffffffffffffffff, 0x0, 0x3) (async, rerun: 64) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) (async, rerun: 64) bind$auto(r4, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$auto(0x3, 0x8905, 0x38) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) shmctl$auto(0x5, 0x4, &(0x7f0000000280)={{0xe, 0xffffffffffffffff, 0xee00, 0x50a, 0xc, 0x401, 0x4}, 0x1, 0x5, 0x81, 0x2, @raw=0x9, @inferred, 0xd155, 0x0, &(0x7f0000000040)="b5ed6907cbb8717e9a4f3a4ab10c2f17f8d2e3bf069b5b42d5188ab1e4cbf487471bd6f5effecb7432239eadcc2f4f1d3ec792b7d5dbddefbebde021daab0105fcd712b520445ef52494da4d8a6e3f304ef210891d", &(0x7f0000000180)="31af3cb1df60fe8f6516924d358b08cc3200360f289557830b99c49955b7feb5d00a70f020799ec1c586df4d4988a0e014cdf66c9d600aa9da1a3f16b51c64aa07aad022a631b3dbd07418aab49b5d817db05b1e0e75081ff41b5ab4e658a6f6cf41fe0502136aab7b77fb7140e6285e9f8208b26725a0db185e3770bb7192e9575947785bb0acd094fef9e031"}) 12m59.630176765s ago: executing program 2 (id=1811): get_mempolicy$auto(0x0, &(0x7f0000000140)=0x100000000001fb, 0x2, 0x400000000000085, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x3, 0x8}, 0x6f4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r0) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r1, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) ioctl$auto_FIOQSIZE(r0, 0x5460, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x48, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [@nested={0x25, 0xcf, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @u32=0x80}, @generic="54d80139de2728990e0c3ccdc8268c09b08c312ca4f13fb733"]}]}]}, 0x48}}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x22c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_CONFIG={0x70, 0x23, 0x0, 0x1, [@typed={0xc, 0xe0, 0x0, 0x0, @u64=0x4}, @generic="fab8d86632e413861ca28b137f4f592ab5d89a261ba4ce11e772a91ef2829f14106770f12cd0467af482da8a9da77ed12092b3221881cbc338a68bd454df1c2e3a0e691cebb9285b41a37ff60ed454730299a9e14ca5d9688e51c36237c4cbf7"]}, @NL80211_ATTR_FILS_CACHE_ID={0x11, 0xfd, "ce35e97e881fbc2ea7e359209d"}, @NL80211_ATTR_KEY={0x185, 0x50, 0x0, 0x1, [@nested={0x8, 0xb2, 0x0, 0x1, [@nested={0x4, 0x84}]}, @generic="d46a5f4660da09353f74ee36287220f947d18fa05d94aa3da4b51910b63ac9550a484f1a36f545b622db6465befc96e7b836c517b8a5d0816ebc829836a34e4019ce7ec05c39d2ee4aa2bb138bec921f36623f3e1adaf02fb4a19cbce89c70ba62d39be3b7e3738e929028bbb75cc5c3ecd6cefb33aed42f61423e34195332afe25ee4549003e22e0dfdc333f54edce3091c5b0598f69288bf4f45caf66e755e12", @typed={0xc, 0xaa, 0x0, 0x0, @u64=0x2}, @generic="3685a30d4d12259e9cb1e49f55993c581b35d5d4f6a469e70c30051f1e62e53178f78b06544a80f4d563e9c08e5d469e221070e8710999", @generic="164f8792c4b0c80e8e26b2397e435faadb2e310d9ed5dbe7c23bef042b787099e91fb5669ce0b0c05fce5a747de2cec5aff1358630c2f2dc62004777c2f6f90ee0434efe2965788012a6d2b830a568815ff80c0297087f99960a8f3b341dc263aba51c23a7d51ae03a0f9588d03bc8a0d89f921d40313a903fbe42239666a7f44489cf37e62f5df352be7e1696dfdc818c32e50dd8"]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1ff}]}, 0x22c}, 0x1, 0x0, 0x0, 0x48}, 0x800) setsockopt$auto(r0, 0x7, 0x6, &(0x7f0000000000)='IPVS\x00', 0x7fffffff) 12m59.08814831s ago: executing program 2 (id=1815): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x400000008000) landlock_restrict_self$auto(0xffffffffffffffff, 0x56) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x2, 0x7, &(0x7f0000000000)='%]+e\x00', &(0x7f0000000040)=0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000280)="cb21f6408c1b4ceea1d131d3475b27b26e0b415b58c2991bc6c5a7bfcc65bd29cd2488ff05e174ef5617fd845cb0a69ccf92f173bd551becea08e25c48c2bd0c65dceb4c3692f113cc2f2d194a198ae2f4b4d9c2957ced6e759a8256b6de378aa0fc8f551c4a7c8c8e5c25ad6fe803a15c7d01d345b16fb2aea832035288d6b83c4c3b6605ed153521e92bde4338fda486fcac9519187e449545f4330b2ac5815ec3804839f862c18769ee497da18ffe333f671a8ab44f271718cc80f574af0f4a82") close_range$auto(0xffffffffffffffff, r0, 0x1) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x6, 0x4, 0x4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) fgetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x6) (async) fgetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x6) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$auto(0x3, 0xc0303e03, r1) prctl$auto(0x6, 0x6, 0x0, 0x10, 0xb) (async) prctl$auto(0x6, 0x6, 0x0, 0x10, 0xb) socket(0x2c, 0x1, 0x0) (async) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x4601, 0x0, 0x4, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8953, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8953, 0x0) io_uring_setup$auto(0x59, 0x0) 12m58.650185664s ago: executing program 2 (id=1818): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0) mq_timedreceive$auto(r1, &(0x7f0000000000)='ethtool\x00', 0x8, &(0x7f0000000040)=0x6, &(0x7f0000000080)={0x2, 0xc}) select$auto(0x9, &(0x7f00000000c0)={[0x2, 0x7, 0x0, 0x0, 0xffffffffffffc748, 0x2, 0x4, 0x7fffffff, 0x100000000, 0x1, 0x2, 0x2, 0xc9fd, 0x3, 0x3, 0x4]}, &(0x7f0000000140)={[0x3, 0x3, 0x5, 0xabb, 0x8, 0x7, 0x9, 0x5f2a, 0x7, 0x4, 0xb, 0x3, 0x1, 0x3, 0x9, 0x30]}, &(0x7f00000001c0)={[0x2, 0x8, 0x33, 0x8, 0x40, 0x6, 0x3, 0x8, 0x1, 0x743, 0xffffffffffffffff, 0x400, 0x6, 0x5, 0x7, 0x8]}, &(0x7f0000000240)={0x8, 0x9}) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r4, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) 12m58.389679463s ago: executing program 2 (id=1820): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101300, 0x0) copy_file_range$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) read$auto_lsm_ops_inode(0xffffffffffffffff, &(0x7f0000000040)=""/149, 0x95) mmap$auto(0x0, 0x8, 0x200000000008c2, 0x18, r0, 0x3) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC0\x00', 0x400000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000140)={0x4, 0x2, [0x5, 0x80000001, 0x0, 0x0, 0xfffffe01, 0x2, 0x2, 0x204]}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r2, 0x11, 0x1, 0x0, 0x8) mmap$auto(0x1, 0x100, 0x80000e1, 0xffffffffffffffff, 0x401, 0x3) modify_ldt$auto(0x3, 0x0, 0x80) sysfs$auto(0x2, 0x0, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) socket(0x18, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb0, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x400, 0x7}, 0x1000000000000009, 0x10001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0x0, 0x0, 0x2, 0x4, 0x80000008041000a, 0x40000402, 0x10000, 0x8, 0xffffffff80000000, 0xe0, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r3 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) r4 = socket(0x2, 0x3, 0x1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r4, 0x0, 0x20000000) execveat$auto(r4, 0x0, &(0x7f0000000400)=&(0x7f00000003c0)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x0, 0x8000) 12m58.203790286s ago: executing program 2 (id=1823): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x8208ae63, 0x38) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x40049409, 0x0) socketpair$auto(0x1, 0x100008, 0x10007, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x88) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0xffd6) recvfrom$auto(0x3, 0x0, 0x200800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) splice$auto(r0, &(0x7f0000000040)=0x5, r0, &(0x7f00000000c0)=0x80, 0x8001, 0x8) 12m43.086534917s ago: executing program 33 (id=1823): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x8208ae63, 0x38) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x40049409, 0x0) socketpair$auto(0x1, 0x100008, 0x10007, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x88) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0xffd6) recvfrom$auto(0x3, 0x0, 0x200800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) splice$auto(r0, &(0x7f0000000040)=0x5, r0, &(0x7f00000000c0)=0x80, 0x8001, 0x8) 9m26.352719634s ago: executing program 5 (id=2730): bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x59, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80802, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) 9m25.616264684s ago: executing program 5 (id=2734): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)="3318cb") readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x189002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) sendfile$auto(r3, r3, 0x0, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000380), r4) r6 = getpid() ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000680)={"690e05108331298684be6664c682eef0b193eaed0fe1f0d13219265a2888dec1", 0x9, 0x8, 0xf8d, 0xffff, 0x3, r6}) shmctl$auto_IPC_INFO(0xe63, 0x3, &(0x7f0000000500)={{0x7, 0xee00, 0x0, 0x10, 0xc11c, 0x8, 0x6c09}, 0xa22, 0xb39, 0xdfcc, 0x0, @inferred=r7, @raw=0x9, 0x7, 0x0, &(0x7f00000003c0), &(0x7f0000000400)="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"}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x8}, @OVS_PACKET_ATTR_KEY={0x38, 0x2, 0x0, 0x1, [@typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x93, 0x0, 0x0, @pid=r6}, @typed={0x8, 0xd2, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x5e, 0x0, 0x0, @str='(*.\x00'}, @typed={0x8, 0x9f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x5}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xfff}]}, 0x6c}}, 0x80) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) write$auto(r2, 0x0, 0x6) 9m24.718415201s ago: executing program 5 (id=2736): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000180)="f971e96818c919924749ce21135ba5a5edbb2ee8f10ad531770da0b6530488c9ce2b9103bf747d540b8db2485b314b3ca4abe93d28ac1951cf2ce5cedb409642d49e2b3a126a15f382f0cb5728d17b650eaa8b5a88efb788c6eef58dc3698e31e8c8adce242d0a7e699b0f7549f579ed5d2248ec8b8702a63e") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7fff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r1 = open(0x0, 0xcd1e23e41b02d660, 0x154) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) rseq$auto(&(0x7f0000000300)={0xe, 0x7, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) personality$auto(0x8) 9m23.804960118s ago: executing program 5 (id=2742): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffffd, 0x9, 0xdf, 0x12, 0x40000000000a5, 0xfffffffffffffffb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000fa03"], 0x5f}, 0x1, 0x0, 0x0, 0x40040094}, 0x40) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) 9m23.154785498s ago: executing program 5 (id=2748): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x3, 0x29, 0x2d, 0x0, 0x88) mmap$auto(0x0, 0x2020009, 0x9, 0x40000000000eb1, 0xffffffffffffffff, 0xffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper\x00', 0x80302, 0x0) mmap$auto(0x0, 0x400005, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) mprotect$auto(0x0, 0x4, 0x6) sendfile$auto(r0, r0, 0x0, 0xd15) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) 9m22.932904547s ago: executing program 5 (id=2749): mmap$auto(0x0, 0x2000000000000008, 0x8004000080000df, 0x40eb2, 0x401, 0x300100000000) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x1eb082, 0x0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x2, r1, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r3) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) 9m7.174600124s ago: executing program 34 (id=2749): mmap$auto(0x0, 0x2000000000000008, 0x8004000080000df, 0x40eb2, 0x401, 0x300100000000) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x1eb082, 0x0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x2, r1, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r3) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) 3m53.221862084s ago: executing program 1 (id=3642): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0xe3}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x10000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m52.85749108s ago: executing program 1 (id=3644): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x4, 0x9, 0x818) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2470ab00f377018de9712f9fa5cf9fc86758dcf36f7e0cb5fe4c034260f5f5ba9842d6767961e78c9117910928455c5a51dd56f4b21ede347db27843cdcb44fd99460be441fe1c7bfcf8d81f01f4811f556efb3049b774dedeea0f24e96ac54ef10f5b98db6f3fc14c3a0c24b46e10b59c682d44a8d3faf6d7920afe3aee42b0a0053dff9a08bf4c7ecfb31338f651", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250200000008000300850000000800010002000000"], 0x24}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00B\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000fddbff2503000000040008000c000371f1c19f17790485908286dd000004000280", @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) 3m51.256805526s ago: executing program 1 (id=3647): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xf59df989b2898001, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) connect$auto(0x3, 0x0, 0x58) (async) r1 = socket(0x10, 0x6, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) read$auto(r1, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) (async) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) (async) writev$auto(r0, &(0x7f0000000340)={&(0x7f0000000140)="99b9bfd302457606013b14541a0d4c6275256cb7fbe80bd32b0279d16c7b41032efc915411fe322c0e89db24a0879202da490456359d13690300000000000000e657f6b648b9f3cdf93db962a0cdb742e541098a5708b520ed1d6dec8704063e6f4a33", 0x8}, 0xb) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x77a, 0xffffffffffffffff, 0xffffbffffffffffe) (async) madvise$auto(0x100000000, 0x5, 0x5f65) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) capset$auto(0x0, 0x0) (async) bind$auto(0x3, 0x0, 0x2) mmap$auto(0x7f, 0x202000c, 0x3f15, 0xeb2, r0, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kcore\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0xfa, 0x40, 0xffffffffffffffff, 0x5, 0xc9) (async) getpeername$auto(0x3, 0x0, 0x0) (async) preadv$auto(r3, &(0x7f00000002c0)={0x0, 0x8010000}, 0x5, 0xfb, 0x8100000001) 3m50.665885908s ago: executing program 1 (id=3650): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x6, 0x103) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x1290c0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f00000020c0)="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", 0x1000) getsockopt$auto(r0, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x1e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/zram0/initstate\x00', 0x42000, 0x0) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x5, 0x0, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001080)=""/4143, 0x102f) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/geneve0/ioam6_id_wide\x00', 0x1c9082, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x400000000008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = socket(0x2, 0x2, 0x1) setsockopt$auto(r4, 0x0, 0x80, 0x0, 0x77) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x5, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x800000], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x2000007f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x2008, 0x100000000}}) madvise$auto(0x0, 0x268, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 3m50.363757801s ago: executing program 1 (id=3651): write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB="01"], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x20058894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r1) mkdir$auto(&(0x7f0000000300)='./cgroup\x00', 0xfffd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/split_deferred\x00', 0x80404, 0x0) read$auto(r2, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000000), 0x2}, 0x2) 3m50.166102755s ago: executing program 1 (id=3652): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x1, 0x5760, 0x100000101) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x6cc0, 0x4, 0x0) r0 = socket(0x22, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty53\x00', 0xe8843, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty37\x00', 0x800, 0x0) ioctl$auto(r2, 0x560a, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c040) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000fc0), r3) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r3) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000011c0)={0x18, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x864) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) setsockopt$auto_SO_BUF_LOCK(r1, 0xcd, 0x48, &(0x7f0000000100)='/dev/snd/midiC2D3\x00', 0x1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r8 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$auto_UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{0x6, 0xf2bb, 0x1, 0x5}, "4f6dec90b59a155517660d9a525bb7d9601c0d8d48dd34ca11b1e1332d430cec9a43bfce5fad6f50160faab3b42c07c7998298828f33188e64e1e77d461b5ee8bf7665415f1e3fc57c759f87b129f8b2", 0x3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg\x00'}) 3m34.923284667s ago: executing program 35 (id=3652): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x1, 0x5760, 0x100000101) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x6cc0, 0x4, 0x0) r0 = socket(0x22, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty53\x00', 0xe8843, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty37\x00', 0x800, 0x0) ioctl$auto(r2, 0x560a, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c040) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000fc0), r3) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r3) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000011c0)={0x18, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x864) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) setsockopt$auto_SO_BUF_LOCK(r1, 0xcd, 0x48, &(0x7f0000000100)='/dev/snd/midiC2D3\x00', 0x1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r8 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$auto_UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{0x6, 0xf2bb, 0x1, 0x5}, "4f6dec90b59a155517660d9a525bb7d9601c0d8d48dd34ca11b1e1332d430cec9a43bfce5fad6f50160faab3b42c07c7998298828f33188e64e1e77d461b5ee8bf7665415f1e3fc57c759f87b129f8b2", 0x3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg\x00'}) 2m28.518312562s ago: executing program 4 (id=3932): r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/ns/cgroup\x00', 0x80, 0x0) mmap$auto(0x10000, 0xb915000, 0xffffffffffffc0b8, 0x10011, r0, 0x186d) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x300) dup2$auto(r0, r0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty15\x00', 0x201, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b000100640b"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x8000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x10000000008000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x3, 0x6) r6 = socket(0xa, 0x1, 0x84) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r6, 0x84, 0x85, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x2040, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x401c5820, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) 2m27.867808566s ago: executing program 4 (id=3934): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pnp0/00:05/wakeup/wakeup9/expire_count\x00', 0x8de2, 0x0) ioctl$auto_BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) write$auto(r0, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0) sendfile$auto(r1, r1, 0x0, 0x7) 2m27.738541607s ago: executing program 4 (id=3935): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0xdd, 0x1a, 0x5) r1 = socket(0x25, 0x1, 0x0) sendto$auto(r1, 0x0, 0x0, 0x0, 0x0, 0x3) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8400) (async) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) sendfile$auto(r3, r3, 0x0, 0x8) (async) setpriority$auto(0x2, 0x8, 0x8) (async) mmap$auto(0x100, 0x4, 0xffffffffffff8001, 0x18, r2, 0xd3d) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af23, r4) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x2, 0x1, 0x106) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 2m25.825842608s ago: executing program 4 (id=3941): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2a, 0x2, 0xb) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r0, 0x5, 0x6) r1 = socket(0x2, 0x5, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) r3 = gettid() rt_sigsuspend$auto(&(0x7f0000000040)={0x8}, 0x8) tkill$auto(r3, 0x7) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m25.585119122s ago: executing program 4 (id=3943): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0xfffffc96) 2m25.236816156s ago: executing program 4 (id=3944): r0 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x4, 0x2, 0xffffffffffffffff, 0xecf3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000000}, 0x800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/interrupts/gpe_all\x00', 0x103042, 0x0) write$auto_proc_uid_map_operations_base(r0, &(0x7f0000000100)="5867861cf9e52c1792b114e07e64366bfeb6d07d3d743b5ad381beffb8c2", 0x1e) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) sendfile$auto(r3, r3, 0x0, 0x1000000000001bf) 2m9.863804781s ago: executing program 36 (id=3944): r0 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x4, 0x2, 0xffffffffffffffff, 0xecf3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000000}, 0x800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/interrupts/gpe_all\x00', 0x103042, 0x0) write$auto_proc_uid_map_operations_base(r0, &(0x7f0000000100)="5867861cf9e52c1792b114e07e64366bfeb6d07d3d743b5ad381beffb8c2", 0x1e) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) sendfile$auto(r3, r3, 0x0, 0x1000000000001bf) 2m3.497158138s ago: executing program 7 (id=4009): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_SETSIGMASK(0x420b, r2, 0x4000000000008, 0xa) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000002680)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400a010}, 0x40440c0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x5, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x3, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) 2m2.131173535s ago: executing program 7 (id=4014): mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x5000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram1/integrity/tag_size\x00', 0x68e00, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0xdb) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r1 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8955, 0x0) socket(0x2a, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8}]}, 0x1c}}, 0xd4) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) link$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 2m0.450401519s ago: executing program 7 (id=4018): mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x10000, 0xfffffffffffffffe) (async) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x8801, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000800)={"fda25684", 0x0, 0x6, 0x3, 0x9b4, 0x9, "e919df43f641bff500000000000010", '\x00', "00010247", '\x00', ["22dfffffffefffff480400", "080000ea385d2cd706e10301", "b06f8c66ee00006f17c800", "5f0600000091148db1ca2a92"]}) 2m0.209812051s ago: executing program 7 (id=4019): r0 = timerfd_create$auto(0x8, 0x800) read$auto(r0, 0x0, 0x800001) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="5052f9bc000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf257c000000080009000600000008009f00050000000500d200e10000000c002c800800010005000000830015019e38d959b246004d1109764440fc70147043fb4b41662796fc7f60364554e39e43842ee28f265e8b9ec39e4b9a3130e9e1fc1f7b5b59e5c9389d61d5a67df3899df8f8d38507149f63ac9c920b2cb686d257921f2beac38beb6e16eb8fd4345d4832fa5b5abaae46ef51e6c90e21f2b1465bccfbc6425e796123887876a3e800"], 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x46090) read$auto_wakeup_sources_stats_fops_wakeup(r0, &(0x7f0000000080)=""/52, 0x34) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x14, 0x0, 0x21, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r2) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd27, 0x25dfdc02, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x11, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pimreg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r12, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000001}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000010) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x160, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffff9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10001}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x88}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xd5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x80080}, 0x80) r17 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r18 = socket(0xa, 0x5, 0x0) r19 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r19, @ANYRES8=r18], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r17, &(0x7f0000000000)='-\x00', 0xfdef) 1m59.947181676s ago: executing program 7 (id=4021): mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000280)='\x00\x00tr\x12R\x00\x00\x7f\x1c\x8b\x98\xbb\xbb\xc7}A#\xf7\xa7\x95\xe3;!\xc8`\xcf \xa0\xfd#\xc4\bAhj>po\xdf\xfa\xc6z\x12]\xfe\xc5\xcfY\x89\x9b\xc8\xb8B\'n\x17\xfe\xe3\xf6\x0f\xc9\xfbu\x00\x03mMv\x1c\x04\xa0&\x9d\xe7\xad|\xdc\xb2\x18\x93\x18\xc50u\xcd\xdc\xdd\xea\xf1\xd0$\xe1\x87\t\x1eC\x94m\xb5f\xf16\xcf\xdd\x992t\xde\x87*\xe4C\x12,\xe2\xe7\x1f\x96\xbe*\x1c\x18\xc4 \xb0\tZ\xc3\xa8\xb3\xcc\xbb\xa92\xa0\xc00\b\xc9\x94\xeb4\x0fr\x88\x12;u\xc8-\xcf*\x92\rOd\x03\xa8\xf8:3\xef%\x9d\xb6\x9ab\xa2\xc9\x04\x8ch\x9a\x1d\x00\x00\x00\x00\x00\x00\x00{8j\xc2\x1f=w\x8ce\x1f\x99H\xbb\xd6\x98\x99\xb3\xe2J\x86\xa2\x97a\x0e;\xd0\a\x1f\xc7&y\xcd\x900P\xcf\xdb\x10\xe3Q\xfd>X)\xd6\x9c\xc2p:8Y\x8d\xc9\xd0J,xx1\xff\xde\x15\xbe\xa9\x12UJ\x1c\xb4r s,\xcb\x15\xe0\x1f\x04\x82D\x0f0vp\x9d\xf67\x13\xc5\xed\xf7+.W\xf5\xaa\xb8\xc9M\xb2\x87\x04D@\xedJ\x85~E\xde\x81\xfc\x17\x12\xcf\xb1g;N\xa4\x14\xf0\r-\xa9Q\xccSI\xa75\xf7\n\x85\xa9\x87\xa7\xba\xf5\xa6V\xdf\xec\xc56\xca\x10\x89\xa3') openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) 1m59.707757264s ago: executing program 7 (id=4022): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0xfffff000, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) 1m44.473183474s ago: executing program 37 (id=4022): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0xfffff000, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) 32.819041755s ago: executing program 9 (id=4296): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd14\x00', 0xe0040, 0x0) pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x20000001, 0x2, 0x3, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(0x0) 30.30988165s ago: executing program 9 (id=4303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x3850c2, 0x0) read$auto(r2, 0x0, 0x4) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) getxattrat$auto(0xffffffffffffffff, 0x0, 0x201, 0x0, 0x0, 0x7) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000f80)=ANY=[@ANYRESHEX=r3, @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x0, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb701, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x1ff, 0x9, 0x100) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x7) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000}) 29.522196582s ago: executing program 9 (id=4306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002980)=ANY=[@ANYBLOB="71ce0600", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20004804) mmap$auto(0xc, 0x400008, 0x4, 0x40009b72, 0xffffffffffffffff, 0x7) r2 = open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x154) r3 = fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0xc01) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x38e903, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) r4 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x2, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x4001, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x6, 0x4) write$auto(0x1, 0x0, 0x80000000) munmap$auto(0x8000, 0xffffffff) 28.604987779s ago: executing program 9 (id=4310): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) (async) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="0000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0xfffffe02) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)="7f07d3") (async) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)="7f07d3") ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r6) (async) ioctl$auto(0x3, 0xae41, r6) 26.67809265s ago: executing program 9 (id=4314): socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0xa) r0 = socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r0, 0x84, 0x7c, 0x0, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x384, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram1/integrity/tag_size\x00', 0x68e00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/112, 0x70) poll$auto(0x0, 0x5, 0x400) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x40, 0x5, 0x8000000008012, r2, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1) lseek$auto(r3, 0x9, 0x0) getdents$auto(r3, 0x0, 0x62d4) 25.562663921s ago: executing program 9 (id=4319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x48041, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r3, 0x0, 0x5) write$auto(r2, 0x0, 0x2) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) 9.787138414s ago: executing program 38 (id=4319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x48041, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r3, 0x0, 0x5) write$auto(r2, 0x0, 0x2) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) 5.544811935s ago: executing program 3 (id=4388): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) timerfd_create$auto(0xd, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x121042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x3c9901, 0x0) read$auto(r1, 0x0, 0x3) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x600103, 0x0) write$auto(0x3, 0x0, 0xfdef) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x8003) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r2 = inotify_init1$auto(0x800) read$auto(r2, 0x0, 0x1002) mmap$auto(0x0, 0xb9f, 0x8, 0x9b72, 0xffffffffffffffff, 0xc) prctl$auto(0x3f, 0x1, 0x4, 0x8000000000000000, 0x7) mmap$auto(0x0, 0x20089, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x5054c2, 0x0) unshare$auto(0x40008088) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xd, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x55ea, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="ffa727bd7000fedbdf250800000005000280f1000000"], 0x1c}}, 0x40010) 4.934635065s ago: executing program 8 (id=4390): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x10, 0xd, 0xfffffffffffffffb, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x1000000040, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) r1 = socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(r1, &(0x7f00000018c0)=@generic={0x2}, 0x59) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0x3, 0x0, 0xfdef) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) write$auto(0x6, 0x0, 0x100000001) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000080)="1c") 4.722732041s ago: executing program 3 (id=4391): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x4}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000080}, 0x20040888) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) 4.594196476s ago: executing program 6 (id=4392): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) futex_waitv$auto(0x0, 0x81, 0x0, &(0x7f0000000340)={0x92, 0x6}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) getsockopt$auto(0xffffffffffffffff, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) write$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) connect$auto(0x3, 0x0, 0x55) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) getsockopt$auto(0x4, 0x6, 0x1e, 0xfffffffffffffffd, 0x0) 4.134189469s ago: executing program 3 (id=4393): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(&(0x7f0000000000)={0x4, 0x0}, &(0x7f0000000040)={0xffffffff, 0xfd35}) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) fcntl$auto_F_OFD_SETLK(r1, 0x25, 0x101) openat$auto(r1, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x7ff) prctl$auto(0x1c85a39b, 0x1, r0, 0x5, 0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fa, &(0x7f0000001800)}) mq_notify$auto(r2, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r2, 0x1, @_sigev_thread={0x0, 0x0}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r4, 0x0, 0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x3, 0x1ffe1, 0x7, 0x2, 0xf7fffffffffffffe, 0x7fd, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0xfffffffe, 0x2001, 0x203, 0x0, 0x20e9d17c, 0x400300000000000, 0x0, 0x0, 0x80000000, 0xf04, [0x1, 0x0, 0x2, 0xfffffffffffffffc, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x1, 0x0, 0x80, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5a, 0xc72, 0x0, 0x9, 0x1, 0x66, 0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x80000, 0x9, 0x0, 0x10000, 0x0, 0x9, 0x0, 0x3, 0xe8, 0x8c]}, 0x2, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x22}, 0x1, 0x0, 0x0, 0x48044}, 0x10011) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) madvise$auto(0x0, 0x200007, 0x19) 3.602815684s ago: executing program 6 (id=4394): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SG_SET_TIMEOUT2(r0, 0x2201, 0x0) mmap$auto(0x4, 0x20009, 0x445b, 0xeb1, 0x401, 0x2) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) read$auto(r1, 0x0, 0x7ff) write$auto(0x3, 0x0, 0x5c8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) write$auto(0x3, 0x0, 0x100082) 2.931841955s ago: executing program 8 (id=4395): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) shmctl$auto_IPC_STAT(0xfffffffe, 0x2, &(0x7f0000000040)={{0xa, 0xee00, 0xffffffffffffffff, 0x4ed, 0xd, 0x8, 0x3}, 0x9, 0x1000, 0x4447, 0x1000, @raw=0x8, @raw=0x3fa4, 0x1, 0x0, &(0x7f0000000140)="219fb22e51f8287c5361c638d09d1b78b0145cac8d763299ea102289637d6fb246152c0847e08b04712d5d5dd1f6abee3f6422204be44e0c27f1f5ef3e6d6525bacbf8e9757418e4c17805100185a9efc64edcf5ce8eb76797495426cddd6ee94eeeb0ceec0d275fe4abd3e56508d2e2e9aa0bd59f0771dd2b2ebdbbea00b399a90cbba1ffb3c9d7487fd453f3f9b3a22d67e79fa9d5582fb3ad93831e41aea3156d852c4fc05a458dae3062d73c7406912ba4e104f476ce56283c4f311dd3351e396bffb36dd704436aae92c968cbe6e05f2013", &(0x7f0000000240)="03f97989e5f9acd3aac2d63183abb281d1b7a106a6c4e14ac86071867c56c3f361509d3fceef70a7418ad26330a8093fe769f57c1cb99f711682eeddc1d92761c3584258e0fe8a7cf9f1ab8d6e592428ae8a90ca8aabab113c8e7d444ef4da885af90cd3e566ff423117b941320af253729d97794a0383dd1634e902438708b1289e4341d9b1d18610e4618062f053d30f3afe03152e616fe11d0880d1d782c05f9c94261e61d539f2603a6c2516ce9551e3197787395a5a01f1960c174fd501e1a3e3834d1bb6972daba38bf260"}) shmctl$auto_IPC_INFO(0x3, 0x3, &(0x7f0000000400)={{0x1, r1, 0xee01, 0x2, 0x8, 0x9, 0x3ff}, 0x0, 0x100000000, 0x4, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x33e7, 0x0, 0x0, 0x0}) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x18}, 0x8) 2.930639855s ago: executing program 6 (id=4396): write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) clock_settime$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) pwritev$auto(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)="fb437d50c4ea04595c67042df976af078b370ecc671d2b0a76ad8cf5e31f2a", 0x68}, 0x4, 0xe559, 0xb) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x10000) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x280, 0x0) setresuid$auto(0x0, 0x8, 0x8000) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4b, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) shmctl$auto_IPC_STAT(0xffffffff, 0x2, &(0x7f0000000300)={{0xe7, 0xffffffffffffffff, 0x0, 0x8, 0xe, 0x3, 0xffff}, 0x0, 0x6622f5e7, 0x0, 0x2, @raw=0x5, @inferred=0xffffffffffffffff, 0xfbcc, 0x0, &(0x7f0000000200)="7351f466de46568899690362686acaae59b406338477e8df8e088ea3bd7b85d0e0693784f64adb878c716e03dd1b7d15253b8803bfd32071c0ca1c58d69ed4e8db221ec966d2421ec4d9592cb3c56a9bc058fdfcfc17684479597fa09d53fa7ebe17112ec0b422b680d64bf6808c38e40a98d33fffea85f5a99d760f11a53973f60b2b27b5139d0935ebe0bb1cc2deddc8977378c006fff06d1bd738031212b275ad437b3d48d1cfcac8d9450a1262d9f6da983433a71ba5966136747bfefda82908f555e2ea86f5c462f191228e4495b9b2e6c707c09cab1a6277", &(0x7f0000000100)="a61bc754114c6f063cbd649ef634795246bbf003c401a84bd0d0f7650852541bdc78fa4f8b93962c3d1fc9855ea55c47767570e678d8f70f24526ba3bb52f47695341dbab6c5b83bde4c0cb6811b72e8033c435d050560ca5974b1eef3d01882ab6038cd4a8df45272"}) setpriority$auto(0xd7, r1, 0x94aa) prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe43) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r3, 0x1, 0x19, &(0x7f0000000500)='macvlan1\x00', 0x8001) read$auto_mon_fops_binary_mon_bin(r2, 0x0, 0x0) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) 2.925267921s ago: executing program 3 (id=4397): select$auto(0x32, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x10000, 0xffff, 0x79a7, 0x6, 0xfffffffffffffffd, 0x1, 0x4, 0x8, 0xfffffffffbfffff9, 0x4, 0x10, 0x2, 0x0, 0xa, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = socket(0x10, 0x2, 0x0) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfd7e, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000880}, 0x8001) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000001, 0x2}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e00fee1", @ANYRES16=0x0, @ANYBLOB="90022dbd7000fedbdf2501000000080001000200000004000500080009"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r2 = socket(0x27, 0x5, 0x106) (async, rerun: 32) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x180000000) (async, rerun: 32) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 32) connect$auto(0x3, 0x0, 0x54) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (rerun: 64) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) (async, rerun: 32) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) (rerun: 32) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000001540)={{&(0x7f0000000300)="671ff3193279767f2fb42479d375b8a01f26e4f8808da56e127d97c28c4fc81f26ee794d93c4d9ba3a4decb16823bb05da719c02b4a9398b1d6208acdadb66885bd51eb160a4edc4667cac50d664f49f64fdfc6ce9d4c53ecb54b0aa2cba38770a7ef3a9ca0ef615e63cd87acc7270272e7791da563c53ebd88769ad0f26763c4993e21e916619e85630cd6587310e5454283c0fecb24225891f3a97625e014184ea69e14c56c44799f614cc950aaf9b9b0cbdef1845642a2caee1079f47e700e8b7b4f964349283c8198a6a27499b4aa23e38a91f2295c7a2f62454df3dffae108e9e41c9e3e8054af483dc41053a3c344cfff0", 0x1, &(0x7f0000000140)={&(0x7f0000000440)="7a89614202c9b66e2b8c2551fbe3ce486c56b8829b18369244ba57b4a3a778b0a527973473310410adea79f77b35a8f0eac2bd6d63c8a2980ee441a623e973b488134194b0e4cc12ad3892664d4de5b9c9a1e0a0948214e50539bf40d8c880c4cadae15f430e444e220eea226a5a3c75556351de3f207addae6ba3448c24ce31443cc99c5737c838e483e4d46bb38fa34d6a48aa8b663add0696b137c49990ccaadd8804ba95ba0fc96b0e9db34522b3d97ca5aa1d2ec7dc677affbd89d94462552b3cb260a91d930227b99bf4fcfc7dbc8e35a9ae9673eb4f1b5ebd4a28312c985301db08f10bebced4e1b3414a48005c98adc1d1", 0x80000000}, 0x1, &(0x7f0000000540)="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", 0x9, 0x6}}, 0x7fffffff, 0x7) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.501154171s ago: executing program 8 (id=4398): socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x8, 0xe2, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.359080867s ago: executing program 8 (id=4399): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sg0\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r1, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4b, r2) 2.173906178s ago: executing program 8 (id=4400): stat$auto(0x0, &(0x7f0000000140)={0x2, 0x0, 0x80, 0x7, 0xffffffffffffffff, 0xee00, 0x0, 0xd3, 0x6, 0x7fffffff, 0x0, 0xa82, 0x0, 0x7, 0x6, 0x200, 0x7}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) mmap$auto(0x0, 0xf569, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x10, 0x810001, 0xffb, 0x8000000008010, 0x3, 0x8000) madvise$auto(0x0, 0x8, 0xe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r2, 0x11, 0x64, 0x0, 0x8) read$auto(r0, 0x0, 0xc44d) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.903333512s ago: executing program 6 (id=4401): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r1, &(0x7f0000000200)=@generic={0x11, "0000000000000000d29e006300"}, 0x80) ioctl$auto(0x3, 0x89e0, 0x91) 1.781874852s ago: executing program 3 (id=4402): mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xc, 0xeb1, 0xffffffffffffffff, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) kill$auto(r0, 0x11) syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) shutdown$auto(0x200000003, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x28000000) 1.618966882s ago: executing program 6 (id=4403): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) (async) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.227675119s ago: executing program 6 (id=4404): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x10, 0xd, 0xfffffffffffffffb, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x1000000040, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) r1 = socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(r1, &(0x7f00000018c0)=@generic={0x2}, 0x59) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0x3, 0x0, 0xfdef) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) write$auto(0x6, 0x0, 0x100000001) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000080)="1c") 599.140308ms ago: executing program 0 (id=4373): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r0, 0x80045430, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x6, 0x0, 0x3) unshare$auto(0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r1, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) (async) bind$auto(r1, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) (async) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400000000400008, 0x9, 0xf1, 0x2, 0x18000) (async) mmap$auto(0x0, 0x400000000400008, 0x9, 0xf1, 0x2, 0x18000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r2, &(0x7f000000b040)='\x00', 0x7, 0x6) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r4, r4, 0x0, 0x3) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r5, 0x0) (async) close_range$auto(0x2, r5, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x17a, 0x9, 0x1}]}) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) (async) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x22000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 18.1706ms ago: executing program 3 (id=4405): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_unlink$auto(0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/igmp\x00', 0x7b78c3, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2402, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000b, 0x10, r1, 0xffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x40800) futex$auto(&(0x7f0000000000)=0x7, 0x9, 0x7, 0x0, &(0x7f0000000080)=0x6f5, 0x4) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r3, 0x0, 0xb, 0x4cbd5d) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r4 = socket(0x29, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r4, 0x8971, 0x24) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x81, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) 0s ago: executing program 8 (id=4406): r0 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_dump\x00', 0x101000, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1, 0x9, 0x7, 0x7, 0xee01, 0xee01, 0x0, 0x1, 0x5, 0x2, 0x6, 0x0, 0xffffffffffffffff, 0x1, 0x80, 0x7, 0x3}, 0x9) fchown$auto(r0, r1, 0xffffffffffffffff) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x2) mmap$auto(0x0, 0x9, 0x4, 0xb47f, r0, 0x0) r2 = socket(0x2, 0x0, 0x2fd5701c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000180), r2) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0xc28, 0x0, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4c008000) getsockopt$auto_SO_COOKIE(r3, 0x8, 0x39, &(0x7f0000000280)='\x00', &(0x7f00000002c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/sr_mod/parameters/xa_test\x00', 0x80000, 0x0) socket(0x0, 0x808, 0x1) r5 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/clk/clk_dump\x00', 0x105100, 0x0) r6 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x4) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000003c0), r3) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000400)={0x7fff, 0x6, 0x4, 0x1, 0x101, 0x0}) sendmsg$auto_IPVS_CMD_ZERO(r6, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)={0x468, r7, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff1c}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xea2}, @IPVS_CMD_ATTR_DAEMON={0xdb, 0x3, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@loopback}, @generic="cdbf48325dbc28e4e67bfc0e1fcdfd86fdcad1e82cc79eea32cea574f054b710f5add06d6eca01bfd02c853fbc3d4e381ee95d5bd8419bb330e57508b5a55acff39905a91a815cbc64853e58d04007939c82fbbad22200b901084e94b5fd650c8a8f569c672d9e91d0fe0ddbfe99cfa82e0491ce3bc1ea51df60edacd851306a2cb279d4914963dfe260024bfdec18b88dc658022c4217cd5246ec845682d859dc615d78bbae43f165ee7bab9a5c00d3e4455efbb448f37da8d2327ff89fdd184abf5d"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4cf}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@nested={0x50, 0x106, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @u32=0x2bdb}, @typed={0x8, 0xb6, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x133}, @nested={0x4, 0x11d}, @nested={0x4, 0x65}, @nested={0x4, 0x31}, @typed={0x2a, 0x115, 0x0, 0x0, @str='/sys/module/sr_mod/parameters/xa_test\x00'}]}, @nested={0xc, 0xc4, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @fd=r5}]}]}, @IPVS_CMD_ATTR_SERVICE={0x67, 0x1, 0x0, 0x1, [@generic="efd5d739a650d6df52ca4526dc4e0a9bac30bf30ea7b572497d7b14955d56322a95bca692dabf1d082d3d5cc548cd6fa3b3f12f1d3cc61", @nested={0x29, 0xc8, 0x0, 0x1, [@typed={0x8, 0x13b, 0x0, 0x0, @pid=r8}, @generic="01afa0a5034d6c0d6c1688eb4239e87b940380790a3753486508a7b701"]}]}, @IPVS_CMD_ATTR_SERVICE={0x28c, 0x1, 0x0, 0x1, [@typed={0x7c, 0x4a, 0x0, 0x0, @binary="ed5ab103a4941e2ee00fd5ffea444f24235500138c7d7dd0a3526a8af2deab731b726d1e3374f51bb26fa0a89f195aa71177d747e7eb648125983cef441cad72b879e2f579103f54086b3c2fa603a03130c0a5a69665e5d2dd64c52cf1b74683b0c03910289b1f3621ecedfd7e239a4182f2aff2e5080648"}, @generic="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", @typed={0x8, 0xde, 0x0, 0x0, @uid=r1}, @nested={0xfb, 0x154, 0x0, 0x1, [@typed={0x5, 0x46, 0x0, 0x0, @str='\x00'}, @generic="788a0117591fa584a3d90e270da72d0e4c7b13ec28ff7dcbf324560ba38133aed51afd4ef17b2f80bc7737e6c3de941417642b3c7c22c2def4d81e0be4ec64f5c954ec230e1b916daf29941a9d2d2fdd497bd20f06a0d2d21a922f5c8497d23cebf505d6a2b675b890ae3310f9a8a024abe22408172c9fba0315ee04dbb48ef1c03e19c4dce3bcf1bf707578dcf602e0dfa4219b35b8a375c4fdbeae36336ce3d1f05d502f0b3cc9bbe735cb5071b1251787e301dcfae79998ab2d956245dcf568b23fd7b8c16a3f850cba433990c3e4ebebf1a8ce88d678639b6c2a1cd1852b47894940dc65500dba86a0778049d4"]}, @typed={0xc, 0x116, 0x0, 0x0, @u64=0x2}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000940), r9) move_pages$auto(r8, 0x2, &(0x7f0000000a40)=&(0x7f0000000980)="56e8648d0fd4d0f04eac747e35e38ba6f1c38a18b49c75191fa706bbf2b26ca036b05aed3e0fcd7b3204b95635adfd1f77dce0da2c10c3906fd1b9d51452f1191aa91e85ce1284c53cf58c7b69de0d970266fb52bcf434e50c7ab46fd6d82e1c5a552cd35c735f3ec899ac9424f4df22bb3a4609232de6766a994d05d5ff560df471a6e4a75f1de8e0d890bc6fa69d4366fc3bb51326d1fa3cf4edb5949e63da055e43acf8ad62fbeffe3467125cd03f339159955fac5a1180f1", &(0x7f0000000a80)=0x1, &(0x7f0000000ac0)=0x1, 0x6) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r10, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x89}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6d}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x4}, @IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "cde8845c60bf98aa6d1fab5144d2ae90518fe16363279c29673209"}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd6b}]}, 0x78}, 0x1, 0x0, 0x0, 0x4005}, 0x4800) mount$auto(&(0x7f0000000c40)='pimreg\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)=']\x00', 0x7, &(0x7f0000000d00)) sched_get_priority_min$auto_SCHED_IDLE(0x5) fcntl$auto_F_SETLKW(r3, 0x7, 0x3) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x210000, 0x10, 0x1e}, 0x18) renameat2$auto(r11, &(0x7f0000000dc0)='./file0\x00', r6, &(0x7f0000000e00)='./file0\x00', 0x5) r12 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000e80), r9) r13 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000ec0), 0x24800, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001680)={&(0x7f0000000f00)={0x758, r12, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x4}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x8}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x9cd}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x8}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0xffffffff}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0xd}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x420, 0x14, 0x0, 0x1, [@nested={0x23b, 0x4c, 0x0, 0x1, [@nested={0x4, 0x18}, @typed={0x87, 0xec, 0x0, 0x0, @binary="ac74f1de5f33163ed695c6c4db6585d9a325458442ad64d190daad51b3110dc0be57804a87f5a7630754a6be0b9e87230ceec58ea1c76de979774f3392013957db4ca6be5efed78ecf83fb63bdaf43fac64fe2172eb5b6971922035fa7459c138de4abbce35a9863c5344861a5b99aee0f32b567df582b44d69bb36295069c45c44b5f"}, @generic="842ac9169c450c7669a9732b06ebc89a26def90c1958f75305f3402a4d09d738785e2c175bbe291063529acd835574c37c1856572482e84385eda8d5cad0eaaac1fc12884d3cde14c7155e2c21", @nested={0x4, 0xfa}, @typed={0x8, 0x13d, 0x0, 0x0, @uid=r1}, @typed={0x8, 0xf8, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x9b}, @generic="5a0cbe1a22259bfd3047c3d096c9155bf42220bc11b5daad3728f1601d7544f7168578", @generic="f49cc11baab050f6e7a4b4d8e94150bfe3aaf4f284fedcb526f88c79664e9d582680af69363f9f62e69b72c09cc290a72b0e67186d8c93cc44fcf1b8c74bb103bc4bd344c7fc4eb76f7b76c0aebb555d24493c575eb57e5bb6e8abac8d14f396a6c847e9b899071ccdad66e7526e06ac40ceace5a042b0952716026a86f746cbc9760329e3a546ec0cfcad7b2c64bcf7adea98e0d60d70d85c86fb7f142a3e4714d3a5341c192fb60bcfc6223d54c75bf280d145ed6d88532d75c584f7561c4718bb2edc130030632732c2d90a35fb5668606ed1792b12ceeb167a0e248d18", @generic="3b5e20f9833504a0fa7322974b0502a11d0622f56a01c83ef2e901bf72460950f5d50e594d4647f2bc11bf9eb0981afd4202cf3a2647fe643154b4981b1fc7675769e363"]}, @generic="402b2902de0024d4afbb824dc6b82c4c6ded75a1b4ecccbe99b7138873a803465f85", @generic="e058c10a569e152558f4ee0fe24e57977b2489fd1d147d3345b82fa7f0d1a2daa18f96ccd0c8bdd365c789ebb2164b48535b90915d260b2e8bdc37b2e79dff66b78536de4b859e1751d2492e8ef9c393f3afe43f7bf2c34717d480aade40da8c21490fde904435a1d46aed003661e0b3e9d3d7382d98d65d04ae3ee3246d770642cc912faecdb4b89cf5", @typed={0x5, 0x119, 0x0, 0x0, @binary="dc"}, @nested={0xa8, 0x11a, 0x0, 0x1, [@generic="cdfee650bef09ec33218bcc371bab15e6a91cdee5c1d6f1999c6af28746858e13b1c820bc2be25b83bf827a6a35d63d14e8025975d26b31208c530f4bf2af5373226718c3c6350c5ff0f47e7a5458497a8bbdb4c097fa24f4feb15bd1fb72d58808a2d7c7b43654bec4cfc02725a4c86b9d931de2f5fa232028b6ea988d9d33a75bfbf1f7d4549f723890bc5d56c32af594525634b7c594259b06cc91d24296b072043a3"]}, @typed={0xc, 0x142, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x4}, @nested={0x6d, 0xe5, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xea}, @generic="7e2a38affe751ca2353174932123a4854c9043035da931fa0eded33016c544796488d4c8a3c228a5cb7f14fdf58d41bd158e18a9c9a0d2b52c4ee8c98e4a2475f39f56432351ed425f", @typed={0x6, 0xd4, 0x0, 0x0, @str='#\x00'}, @nested={0x4, 0x14a}, @generic]}]}, @THERMAL_GENL_ATTR_CDEV={0x2f2, 0xe, 0x0, 0x1, [@nested={0x3a, 0x122, 0x0, 0x1, [@typed={0x8, 0x128, 0x0, 0x0, @uid=r1}, @typed={0x8, 0xee, 0x0, 0x0, @uid=r1}, @nested={0x4, 0xfc}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@empty}, @generic="ee64226a5165404f8832", @nested={0x4, 0xc3}]}, @generic="f060d040f4f24cc897", @nested={0x11a, 0x13d, 0x0, 0x1, [@typed={0xc, 0xb8, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0x17}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x87}, @nested={0x4, 0xa}, @generic="cedcefdfbb9d89c1d492cb24a9059a8139dbfd69af4696d113e72cf9bd7e5984c24b9b6a22e186248e6eb0dfa48a01fa7c955f734e6d358c6f4e3991cd475eab40e4177770d6f228a06af1ca0f838b0c295d882eca4db47b031d1bc611d01f629a6c47373f2f04ff05ef62b442d29b12f3106df944e48ebdae892d264187e1e68e23a1c136a56e62ef56fb017eedab800685de0e08dbe121fee8b0c9ad839faf9b5d64d993f740440520fcc69c0edc23c9b6acdb62d30d85faacfb128f6c1a85072d7490ecbf7275fdb12f3f3d05b4cb9bbb7fbc79c6ef2ecc9da0333898af9e288fc7de568567c3b273bbdfc19c", @typed={0x8, 0x128, 0x0, 0x0, @fd=r13}]}, @generic="359fb9bb31f5677a7e6ce3ff6413ac6824", @nested={0x17a, 0x66, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @pid=r8}, @nested={0x4, 0xef}, @nested={0x4, 0x10e}, @nested={0x4, 0x43}, @generic="cbedd3644ca90c144553c6fe591fde17d89fb0b1ba68fbfbba24d369c22ea10dc30e6cd01001e106043940e7306464f6ff701f37025ae8c70a9e88f4acadcd47f7c355ac384d7898fdff8781582f5f9d41d6e5d24a68533e3296c006793295f23a7d67178cf36243b726fe3ebb5e6908a71e55b115c1f29d69d68c0555a2ea14de7817f9492e58d96632ea6570690c517b679d1e50ab5c35738dd6856373d2794c30d850b57f4c", @generic="fd8d9979da7c0833389fb7812a93adfba62b827a3213070aaf966b4529c311dd4a3b423d3a2844d1cda67a5ea4dc519e50c34fef53816ac9cf0b82ea818d34db0b6b736f4957f8b0afb85ecbd27d3a2013fbc0f3dae1dcfc326212e8ed4fde08f7b2c7b92ab7f26758f645d2cd9a83f6326a885a195bac3812ff1ff0f46b49f3b5a1b120d9e2f1db86dca6022a8270f503506abc708d54889fe985b6d6ebe525649ac4cb1068b43efa94db3d4d7e8860b3ca54f44253aeaed02ab7"]}]}]}, 0x758}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r2, &(0x7f0000001940)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f0000001780)={0x144, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0xfb, 0x2e, 0x0, 0x1, [@generic="314e2fdec431185aa2cfe9051cd309dc36ccbd0cd8206677d0593118326fdd3f670e6aa379f5122d6b483f055c13338b5e3fc53e9653059061df11c0eefe848eaf2f888e7a2cd6d945f0a99a867522f4943bc81293ea98fc0a810620c258530008c5d728d457d5786016602910b5cb4c5bac2a3dfc3b3c9ab1ee9cc7ed4faa7f70c3b05da912bd70560754f105c1adb1e9da6fc540b972dc5587a3463de75192d24e5e0dea330c1bf25e608b93b3d4df269bc97f302f68dc3283ab4f9f9e00598bda9a58e1905ededfadbe2fb875beec8f0e0e4ce6563d4948c6ef8af86a226f5d81e451b7d2eaceaceefa8d67459c62eca27618998770"]}, @NL802154_ATTR_WPAN_PHY_NAME={0x7, 0x2, '{^\x00'}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xa4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x63e00feb}]}, 0x144}, 0x1, 0x0, 0x0, 0x20020000}, 0x1) kernel console output (not intermixed with test programs): pact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.476127][T24260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.564126][T24349] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3725'. [ 1060.642779][T24349] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r&y*"-y–L [ 1060.667710][T24260] hsr_slave_0: entered promiscuous mode [ 1060.703560][T24260] hsr_slave_1: entered promiscuous mode [ 1060.740927][T24260] debugfs: 'hsr0' already exists in 'hsr' [ 1060.770358][T24260] Cannot create hsr debugfs directory [ 1060.866957][T24347] zswap: compressor not available [ 1060.901126][T24353] queue_state_write: operation too long [ 1061.006869][T24353] queue_state_write: use 'run', 'start' or 'kick' [ 1061.153533][T18649] Bluetooth: hci4: command tx timeout [ 1061.708229][T24368] netlink: 346 bytes leftover after parsing attributes in process `syz.6.3732'. [ 1061.767661][T24368] netlink: 'syz.6.3732': attribute type 1 has an invalid length. [ 1061.815225][T24368] netlink: 306 bytes leftover after parsing attributes in process `syz.6.3732'. [ 1061.860947][T24260] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1061.961528][T24260] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1062.035579][T24260] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1062.136962][T24260] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1062.711285][T24260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.792932][T24260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.892108][T18678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.899273][T18678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.966307][T18678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.973503][T18678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.176417][T24403] ptrace attach of "./syz-executor exec"[20451] was attempted by "./syz-executor exec"[24403] [ 1063.231254][T18649] Bluetooth: hci4: command tx timeout [ 1063.459973][T24401] ptrace attach of "./syz-executor exec"[20451] was attempted by "./syz-executor exec"[24401] [ 1063.710026][T24410] input: 9%vJ,6 as /devices/virtual/input/input36 [ 1063.828260][T24260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.497091][T24420] zswap: compressor not available [ 1064.915422][T24439] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1065.012704][T24440] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1065.108245][T24260] veth0_vlan: entered promiscuous mode [ 1065.171704][T24260] veth1_vlan: entered promiscuous mode [ 1065.455441][T24260] veth0_macvtap: entered promiscuous mode [ 1065.517179][T24260] veth1_macvtap: entered promiscuous mode [ 1065.693301][T24260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.745699][T24260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.863085][T19039] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.910756][T19039] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.136534][T24451] can: request_module (can-proto-0) failed. [ 1066.191250][T19039] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.230994][T19039] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.244616][T24457] futex_wake_op: syz.6.3749 tries to shift op by -2048; fix this program [ 1066.296831][T24457] futex_wake_op: syz.6.3749 tries to shift op by -2048; fix this program [ 1066.334536][T24457] 0x000000000001-0x000000020000 : "" [ 1066.369034][T24454] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1066.405872][T24457] ftl_cs: FTL header corrupt! [ 1066.460808][T24454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1066.595933][T24454] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1066.633965][T24454] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1066.662946][T24454] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1066.719158][T24454] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1066.845774][T24454] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1066.861495][T24464] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3750'. [ 1066.894150][T24465] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3750'. [ 1067.248057][T18681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.292728][T18681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.366934][T24474] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1067.499769][T24471] zswap: compressor not available [ 1067.773804][T18678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.811548][T18678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.433844][T18649] Bluetooth: hci0: command 0x0c1a tx timeout [ 1068.521408][T18649] Bluetooth: hci2: command 0x0c1a tx timeout [ 1068.672412][T18649] Bluetooth: hci4: command 0x0c1a tx timeout [ 1068.678482][T18649] Bluetooth: hci5: command 0x0c1a tx timeout [ 1068.685130][T24056] Bluetooth: hci1: command 0x041b tx timeout [ 1070.353997][T24545] netlink: 'syz.3.3763': attribute type 1 has an invalid length. [ 1070.643832][T24545] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3763'. [ 1070.736769][T24544] zswap: compressor not available [ 1070.753338][T18649] Bluetooth: hci4: command 0x0c1a tx timeout [ 1071.502196][T24562] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1072.834505][T18649] Bluetooth: hci4: command 0x0c1a tx timeout [ 1072.891731][T24579] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3773'. [ 1073.929933][T24591] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1073.997576][T24591] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1074.093120][T24594] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1074.379507][T24600] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1074.497321][T24594] zswap: compressor not available [ 1075.349827][T24633] FAULT_INJECTION: forcing a failure. [ 1075.349827][T24633] name failslab, interval 1, probability 393216, space 0, times 0 [ 1075.543390][T24633] CPU: 0 UID: 0 PID: 24633 Comm: syz.3.3784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.543419][T24633] Tainted: [L]=SOFTLOCKUP [ 1075.543425][T24633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1075.543436][T24633] Call Trace: [ 1075.543441][T24633] [ 1075.543448][T24633] dump_stack_lvl+0x100/0x190 [ 1075.543471][T24633] should_fail_ex.cold+0x5/0xa [ 1075.543497][T24633] should_failslab+0xc2/0x120 [ 1075.543518][T24633] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1075.543540][T24633] ? xas_split_alloc+0x11c/0x4a0 [ 1075.543561][T24633] ? xas_split_alloc+0x11c/0x4a0 [ 1075.543578][T24633] xas_split_alloc+0x11c/0x4a0 [ 1075.543600][T24633] __folio_split+0x739/0x1b60 [ 1075.543623][T24633] ? __pfx___folio_split+0x10/0x10 [ 1075.543638][T24633] ? find_held_lock+0x2b/0x80 [ 1075.543652][T24633] ? folio_alloc_swap+0x59b/0x1080 [ 1075.543671][T24633] ? folio_alloc_swap+0x59b/0x1080 [ 1075.543694][T24633] ? folio_alloc_swap+0x647/0x1080 [ 1075.543725][T24633] shmem_writeout+0x6e1/0x1520 [ 1075.543747][T24633] ? __pfx_shmem_writeout+0x10/0x10 [ 1075.543764][T24633] ? __pfx_try_to_unmap+0x10/0x10 [ 1075.543781][T24633] ? find_held_lock+0x2b/0x80 [ 1075.543797][T24633] ? inode_to_bdi+0x9e/0x160 [ 1075.543817][T24633] ? folio_clear_dirty_for_io+0x178/0x820 [ 1075.543843][T24633] shrink_folio_list+0x3b72/0x6000 [ 1075.543867][T24633] ? __pfx_shrink_folio_list+0x10/0x10 [ 1075.543885][T24633] ? __lock_acquire+0x4a5/0x2630 [ 1075.543906][T24633] ? lock_acquire+0x17c/0x330 [ 1075.543929][T24633] ? lock_acquire+0x17c/0x330 [ 1075.543948][T24633] ? find_held_lock+0x2b/0x80 [ 1075.543962][T24633] ? is_bpf_text_address+0x8a/0x1a0 [ 1075.543985][T24633] ? is_bpf_text_address+0x8a/0x1a0 [ 1075.544024][T24633] ? __lock_acquire+0x4a5/0x2630 [ 1075.544045][T24633] reclaim_folio_list+0xdc/0x5a0 [ 1075.544061][T24633] ? __lock_acquire+0x4a5/0x2630 [ 1075.544082][T24633] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1075.544106][T24633] ? lru_gen_update_size+0x431/0xe40 [ 1075.544125][T24633] ? lru_gen_del_folio+0x382/0x5f0 [ 1075.544142][T24633] reclaim_pages+0x428/0x5e0 [ 1075.544162][T24633] ? __pfx_reclaim_pages+0x10/0x10 [ 1075.544177][T24633] ? madvise_cold_or_pageout_pte_range+0x2243/0x2710 [ 1075.544202][T24633] ? folio_isolate_lru+0xd5/0xaa0 [ 1075.544222][T24633] madvise_cold_or_pageout_pte_range+0x14e2/0x2710 [ 1075.544253][T24633] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1075.544278][T24633] ? __pfx_stack_trace_save+0x10/0x10 [ 1075.544297][T24633] ? css_rstat_updated+0x1ce/0x5a0 [ 1075.544314][T24633] ? look_up_lock_class+0x64/0x120 [ 1075.544333][T24633] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1075.544357][T24633] walk_pgd_range+0xc04/0x1eb0 [ 1075.544388][T24633] ? __pfx_walk_pgd_range+0x10/0x10 [ 1075.544408][T24633] ? folios_put_refs+0x66d/0x840 [ 1075.544430][T24633] __walk_page_range+0x163/0x820 [ 1075.544457][T24633] walk_page_range_vma_unsafe+0x23f/0x960 [ 1075.544480][T24633] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1075.544503][T24633] ? find_held_lock+0x2b/0x80 [ 1075.544517][T24633] ? mlock_drain_local+0x254/0x4e0 [ 1075.544534][T24633] ? mlock_drain_local+0x254/0x4e0 [ 1075.544555][T24633] walk_page_range_vma+0x63/0x90 [ 1075.544576][T24633] madvise_pageout+0x259/0x540 [ 1075.544598][T24633] ? __pfx_madvise_pageout+0x10/0x10 [ 1075.544618][T24633] ? lock_acquire+0x17c/0x330 [ 1075.544636][T24633] ? find_held_lock+0x2b/0x80 [ 1075.544659][T24633] ? mtree_range_walk+0x6ce/0xcd0 [ 1075.544677][T24633] madvise_vma_behavior+0x3d8/0x2a40 [ 1075.544704][T24633] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1075.544725][T24633] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1075.544748][T24633] ? mas_prev+0x9b/0xf0 [ 1075.544766][T24633] ? __pfx_mas_prev+0x10/0x10 [ 1075.544790][T24633] ? find_vma_prev+0xd8/0x150 [ 1075.544813][T24633] ? __pfx_find_vma_prev+0x10/0x10 [ 1075.544840][T24633] ? __futex_wait+0x256/0x300 [ 1075.544858][T24633] madvise_walk_vmas+0x2fe/0xa90 [ 1075.544884][T24633] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1075.544912][T24633] madvise_do_behavior+0x1ea/0x510 [ 1075.544936][T24633] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1075.544959][T24633] ? down_read+0x13b/0x460 [ 1075.544987][T24633] do_madvise+0x195/0x240 [ 1075.545009][T24633] ? __pfx_do_madvise+0x10/0x10 [ 1075.545030][T24633] ? do_futex+0x192/0x350 [ 1075.545062][T24633] ? xfd_validate_state+0x129/0x190 [ 1075.545089][T24633] __x64_sys_madvise+0xa9/0x110 [ 1075.545111][T24633] ? lockdep_hardirqs_on+0x78/0x100 [ 1075.545129][T24633] do_syscall_64+0xc9/0xf80 [ 1075.545148][T24633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.545164][T24633] RIP: 0033:0x7fed8819aeb9 [ 1075.545177][T24633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.545192][T24633] RSP: 002b:00007fed8911e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1075.545207][T24633] RAX: ffffffffffffffda RBX: 00007fed88416090 RCX: 00007fed8819aeb9 [ 1075.545217][T24633] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000 [ 1075.545227][T24633] RBP: 00007fed88208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1075.545237][T24633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.545246][T24633] R13: 00007fed88416128 R14: 00007fed88416090 R15: 00007ffc58c39198 [ 1075.545267][T24633] [ 1077.967175][T24656] aoe: invalid device specification [ 1079.171295][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880341e9000: rx timeout, send abort [ 1079.181700][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880341e9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1079.704937][T24706] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 1080.792944][T24725] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3803'. [ 1081.505882][T24746] FAULT_INJECTION: forcing a failure. [ 1081.505882][T24746] name failslab, interval 1, probability 393216, space 0, times 0 [ 1081.539172][T24730] zswap: compressor not available [ 1081.634514][T24746] CPU: 0 UID: 0 PID: 24746 Comm: syz.3.3808 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.634543][T24746] Tainted: [L]=SOFTLOCKUP [ 1081.634549][T24746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1081.634559][T24746] Call Trace: [ 1081.634565][T24746] [ 1081.634571][T24746] dump_stack_lvl+0x100/0x190 [ 1081.634597][T24746] should_fail_ex.cold+0x5/0xa [ 1081.634622][T24746] should_failslab+0xc2/0x120 [ 1081.634644][T24746] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 1081.634664][T24746] ? rcu_is_watching+0x12/0xc0 [ 1081.634679][T24746] ? key_alloc+0x423/0x1310 [ 1081.634706][T24746] ? kmemdup_noprof+0x29/0x60 [ 1081.634725][T24746] kmemdup_noprof+0x29/0x60 [ 1081.634744][T24746] key_alloc+0x423/0x1310 [ 1081.634771][T24746] ? trace_kmalloc+0x83/0xb0 [ 1081.634791][T24746] ? __pfx_key_alloc+0x10/0x10 [ 1081.634818][T24746] keyring_alloc+0x44/0xc0 [ 1081.634835][T24746] install_thread_keyring_to_cred+0xc1/0x140 [ 1081.634858][T24746] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 1081.634879][T24746] __do_sys_keyctl+0x316/0x5a0 [ 1081.634900][T24746] do_syscall_64+0xc9/0xf80 [ 1081.634923][T24746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.634939][T24746] RIP: 0033:0x7fed8819aeb9 [ 1081.634953][T24746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.634969][T24746] RSP: 002b:00007fed8911e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1081.634985][T24746] RAX: ffffffffffffffda RBX: 00007fed88416090 RCX: 00007fed8819aeb9 [ 1081.634995][T24746] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1081.635004][T24746] RBP: 00007fed88208c1f R08: 0000000000000008 R09: 0000000000000000 [ 1081.635013][T24746] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 1081.635022][T24746] R13: 00007fed88416128 R14: 00007fed88416090 R15: 00007ffc58c39198 [ 1081.635041][T24746] [ 1082.383288][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1082.393382][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1083.932210][T24796] FAULT_INJECTION: forcing a failure. [ 1083.932210][T24796] name failslab, interval 1, probability 393216, space 0, times 0 [ 1084.083428][T24796] CPU: 0 UID: 0 PID: 24796 Comm: syz.3.3818 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.083457][T24796] Tainted: [L]=SOFTLOCKUP [ 1084.083462][T24796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1084.083472][T24796] Call Trace: [ 1084.083478][T24796] [ 1084.083484][T24796] dump_stack_lvl+0x100/0x190 [ 1084.083509][T24796] should_fail_ex.cold+0x5/0xa [ 1084.083534][T24796] should_failslab+0xc2/0x120 [ 1084.083556][T24796] kmem_cache_alloc_noprof+0x83/0x780 [ 1084.083575][T24796] ? key_alloc+0x3b4/0x1310 [ 1084.083596][T24796] ? key_alloc+0x3c5/0x1310 [ 1084.083621][T24796] ? key_alloc+0x3c5/0x1310 [ 1084.083642][T24796] key_alloc+0x3c5/0x1310 [ 1084.083669][T24796] ? trace_kmalloc+0x83/0xb0 [ 1084.083690][T24796] ? __pfx_key_alloc+0x10/0x10 [ 1084.083717][T24796] keyring_alloc+0x44/0xc0 [ 1084.083734][T24796] install_thread_keyring_to_cred+0xc1/0x140 [ 1084.083757][T24796] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 1084.083778][T24796] __do_sys_keyctl+0x316/0x5a0 [ 1084.083798][T24796] do_syscall_64+0xc9/0xf80 [ 1084.083818][T24796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.083834][T24796] RIP: 0033:0x7fed8819aeb9 [ 1084.083848][T24796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.083862][T24796] RSP: 002b:00007fed8911e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1084.083878][T24796] RAX: ffffffffffffffda RBX: 00007fed88416090 RCX: 00007fed8819aeb9 [ 1084.083888][T24796] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1084.083897][T24796] RBP: 00007fed88208c1f R08: 0000000000000008 R09: 0000000000000000 [ 1084.083906][T24796] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 1084.083915][T24796] R13: 00007fed88416128 R14: 00007fed88416090 R15: 00007ffc58c39198 [ 1084.083934][T24796] [ 1088.068959][T24870] zswap: compressor not available [ 1088.307357][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1088.360251][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1088.393071][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1088.409097][ T30] audit: type=1800 audit(4294967307.389:37): pid=24886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3839" name="features" dev="configfs" ino=195567 res=0 errno=0 [ 1088.537616][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1088.578968][T24889] hub 1-0:1.0: USB hub found [ 1088.619805][T24893] FAULT_INJECTION: forcing a failure. [ 1088.619805][T24893] name failslab, interval 1, probability 393216, space 0, times 0 [ 1088.650627][T24889] hub 1-0:1.0: 1 port detected [ 1088.676258][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1088.733424][T24893] CPU: 0 UID: 0 PID: 24893 Comm: syz.4.3841 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.733452][T24893] Tainted: [L]=SOFTLOCKUP [ 1088.733459][T24893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1088.733468][T24893] Call Trace: [ 1088.733474][T24893] [ 1088.733481][T24893] dump_stack_lvl+0x100/0x190 [ 1088.733506][T24893] should_fail_ex.cold+0x5/0xa [ 1088.733531][T24893] should_failslab+0xc2/0x120 [ 1088.733552][T24893] ? sctp_bind_addrs_to_raw+0x12b/0x3b0 [ 1088.733571][T24893] ? sctp_bind_addrs_to_raw+0x12b/0x3b0 [ 1088.733588][T24893] __kmalloc_noprof+0xf6/0x9c0 [ 1088.733603][T24893] ? sctp_assoc_add_peer+0x765/0x14f0 [ 1088.733617][T24893] ? sctp_connect_new_asoc+0x1f8/0x770 [ 1088.733632][T24893] ? sctp_sendmsg+0x171a/0x22b0 [ 1088.733645][T24893] ? ____sys_sendmsg+0x9ad/0xc30 [ 1088.733665][T24893] ? sctp_bind_addrs_to_raw+0x12b/0x3b0 [ 1088.733683][T24893] sctp_bind_addrs_to_raw+0x12b/0x3b0 [ 1088.733706][T24893] ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10 [ 1088.733742][T24893] sctp_make_init+0x148/0xda0 [ 1088.733763][T24893] ? is_bpf_text_address+0x8a/0x1a0 [ 1088.733788][T24893] ? bpf_ksym_find+0x124/0x1c0 [ 1088.733807][T24893] ? __pfx_sctp_make_init+0x10/0x10 [ 1088.733826][T24893] ? kernel_text_address+0x8d/0x100 [ 1088.733852][T24893] ? unwind_get_return_address+0x59/0xa0 [ 1088.733871][T24893] ? arch_stack_walk+0xa6/0xf0 [ 1088.733889][T24893] ? sctp_sm_lookup_event+0x10e/0x520 [ 1088.733908][T24893] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 1088.733929][T24893] sctp_sf_do_prm_asoc+0xbf/0x360 [ 1088.733952][T24893] ? __pfx_sctp_pname+0x10/0x10 [ 1088.733969][T24893] sctp_do_sm+0x17a/0x5be0 [ 1088.733990][T24893] ? kasan_save_stack+0x3f/0x50 [ 1088.734007][T24893] ? kasan_save_stack+0x30/0x50 [ 1088.734024][T24893] ? kasan_save_track+0x14/0x30 [ 1088.734042][T24893] ? __pfx_sctp_do_sm+0x10/0x10 [ 1088.734057][T24893] ? sctp_sendmsg+0x1185/0x22b0 [ 1088.734071][T24893] ? ____sys_sendmsg+0x9ad/0xc30 [ 1088.734086][T24893] ? ___sys_sendmsg+0x190/0x1e0 [ 1088.734101][T24893] ? __sys_sendmmsg+0x205/0x430 [ 1088.734121][T24893] ? __x64_sys_sendmmsg+0x9c/0x100 [ 1088.734141][T24893] ? do_syscall_64+0xc9/0xf80 [ 1088.734178][T24893] ? __sk_mem_raise_allocated+0x789/0x1540 [ 1088.734206][T24893] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 1088.734224][T24893] sctp_sendmsg_to_asoc+0xa6a/0x1c50 [ 1088.734246][T24893] ? __asan_memmove+0x10/0x60 [ 1088.734262][T24893] ? sctp_assoc_set_primary+0x276/0x310 [ 1088.734286][T24893] ? sctp_assoc_add_peer+0x252/0x14f0 [ 1088.734303][T24893] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1088.734324][T24893] ? sctp_connect_new_asoc+0x41e/0x770 [ 1088.734340][T24893] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1088.734360][T24893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1088.734378][T24893] sctp_sendmsg+0x1185/0x22b0 [ 1088.734398][T24893] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1088.734412][T24893] ? __lock_acquire+0x4a5/0x2630 [ 1088.734434][T24893] ? aa_sk_perm+0x2de/0xb40 [ 1088.734459][T24893] ? __pfx_aa_sk_perm+0x10/0x10 [ 1088.734485][T24893] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1088.734501][T24893] inet_sendmsg+0x11c/0x140 [ 1088.734521][T24893] ____sys_sendmsg+0x9ad/0xc30 [ 1088.734539][T24893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1088.734558][T24893] ? futex_unqueue+0x133/0x2c0 [ 1088.734577][T24893] ? futex_unqueue+0x133/0x2c0 [ 1088.734600][T24893] ___sys_sendmsg+0x190/0x1e0 [ 1088.734619][T24893] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.734636][T24893] ? __pfx___futex_wait+0x10/0x10 [ 1088.734670][T24893] __sys_sendmmsg+0x205/0x430 [ 1088.734694][T24893] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1088.734727][T24893] ? __pfx_do_futex+0x10/0x10 [ 1088.734747][T24893] ? __pfx_do_sys_openat2+0x10/0x10 [ 1088.734779][T24893] ? xfd_validate_state+0x129/0x190 [ 1088.734808][T24893] __x64_sys_sendmmsg+0x9c/0x100 [ 1088.734829][T24893] ? lockdep_hardirqs_on+0x78/0x100 [ 1088.734847][T24893] do_syscall_64+0xc9/0xf80 [ 1088.734866][T24893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.734881][T24893] RIP: 0033:0x7fc5d5f9aeb9 [ 1088.734896][T24893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.734910][T24893] RSP: 002b:00007fc5d41f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1088.734926][T24893] RAX: ffffffffffffffda RBX: 00007fc5d6215fa0 RCX: 00007fc5d5f9aeb9 [ 1088.734936][T24893] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000005 [ 1088.734946][T24893] RBP: 00007fc5d6008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1088.734956][T24893] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 1088.734966][T24893] R13: 00007fc5d6216038 R14: 00007fc5d6215fa0 R15: 00007fff6c9edfc8 [ 1088.734986][T24893] [ 1089.687119][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.725999][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.759005][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.787168][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.796309][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.848201][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.856607][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.897194][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.905381][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.949995][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.967189][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.975941][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.018258][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.048190][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.056376][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.107114][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.144182][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.167736][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.202657][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.238165][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.257178][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.265617][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.329978][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.358642][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.387162][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.395297][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.447808][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1090.455958][T24887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1091.649490][T24908] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3844'. [ 1091.950729][T24908] hsr_slave_0 (unregistering): left promiscuous mode [ 1092.795457][T24928] netlink: 'syz.6.3849': attribute type 1 has an invalid length. [ 1093.043369][T24937] futex_wake_op: syz.7.3851 tries to shift op by -2048; fix this program [ 1093.138030][T24937] futex_wake_op: syz.7.3851 tries to shift op by -2048; fix this program [ 1093.217549][T24941] ubi1: attaching mtd0 [ 1093.222690][T24941] ubi1: scanning is finished [ 1093.276203][T24937] usb usb36: usbfs: process 24937 (syz.7.3851) did not claim interface 0 before use [ 1093.338559][T24941] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 1093.531014][T24941] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1093.892526][T18649] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1095.835532][T24987] FAULT_INJECTION: forcing a failure. [ 1095.835532][T24987] name failslab, interval 1, probability 393216, space 0, times 0 [ 1096.062538][T24987] CPU: 0 UID: 0 PID: 24987 Comm: syz.6.3862 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.062565][T24987] Tainted: [L]=SOFTLOCKUP [ 1096.062570][T24987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1096.062580][T24987] Call Trace: [ 1096.062586][T24987] [ 1096.062592][T24987] dump_stack_lvl+0x100/0x190 [ 1096.062617][T24987] should_fail_ex.cold+0x5/0xa [ 1096.062642][T24987] should_failslab+0xc2/0x120 [ 1096.062663][T24987] ? __register_sysctl_table+0xbe4/0x1650 [ 1096.062686][T24987] __kmalloc_noprof+0xf6/0x9c0 [ 1096.062701][T24987] ? __register_sysctl_table+0xbc8/0x1650 [ 1096.062724][T24987] ? __register_sysctl_table+0xbc8/0x1650 [ 1096.062751][T24987] ? __register_sysctl_table+0xbe4/0x1650 [ 1096.062773][T24987] __register_sysctl_table+0xbe4/0x1650 [ 1096.062800][T24987] ? __pfx___register_sysctl_table+0x10/0x10 [ 1096.062822][T24987] ? is_module_address+0x69/0xf0 [ 1096.062852][T24987] ? register_net_sysctl_sz+0x222/0x430 [ 1096.062877][T24987] ? __asan_memcpy+0x3c/0x60 [ 1096.062896][T24987] sctp_sysctl_net_register+0x15e/0x200 [ 1096.062920][T24987] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1096.062940][T24987] sctp_defaults_init+0x6d2/0xd90 [ 1096.062962][T24987] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1096.062982][T24987] ops_init+0x1e2/0x5f0 [ 1096.063008][T24987] setup_net+0x118/0x3a0 [ 1096.063021][T24987] ? __pfx_setup_net+0x10/0x10 [ 1096.063042][T24987] ? lockdep_init_map_type+0x5c/0x250 [ 1096.063064][T24987] ? mutex_init_lockep+0x110/0x150 [ 1096.063088][T24987] copy_net_ns+0x46f/0x7c0 [ 1096.063105][T24987] create_new_namespaces+0x3ea/0xab0 [ 1096.063127][T24987] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1096.063145][T24987] ksys_unshare+0x455/0xab0 [ 1096.063168][T24987] ? __pfx_ksys_unshare+0x10/0x10 [ 1096.063188][T24987] ? xfd_validate_state+0x129/0x190 [ 1096.063217][T24987] __x64_sys_unshare+0x31/0x40 [ 1096.063237][T24987] do_syscall_64+0xc9/0xf80 [ 1096.063257][T24987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.063272][T24987] RIP: 0033:0x7ff54579aeb9 [ 1096.063287][T24987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.063301][T24987] RSP: 002b:00007ff5466f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1096.063317][T24987] RAX: ffffffffffffffda RBX: 00007ff545a16090 RCX: 00007ff54579aeb9 [ 1096.063328][T24987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1096.063338][T24987] RBP: 00007ff545808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1096.063348][T24987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.063357][T24987] R13: 00007ff545a16128 R14: 00007ff545a16090 R15: 00007ffc231717c8 [ 1096.063377][T24987] [ 1096.063385][T24987] sysctl could not get directory: /net/sctp -12 [ 1097.229920][T19654] Bluetooth: hci4: hcon ffff8880694b8000 sent 1 < count 256 [ 1098.228238][T25008] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1099.260515][T24999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1099.304307][T24999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1099.350019][T24999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1099.390661][T24999] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1099.431072][T24999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1099.482858][T24999] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1101.316943][T18649] Bluetooth: hci2: command 0x0c1a tx timeout [ 1101.323254][T19654] Bluetooth: hci0: command 0x0c1a tx timeout [ 1101.399660][T18649] Bluetooth: hci5: command 0x0c1a tx timeout [ 1101.406299][T19654] Bluetooth: hci1: command 0x041b tx timeout [ 1101.476936][T18649] Bluetooth: hci4: command 0x0c1a tx timeout [ 1103.557299][T18649] Bluetooth: hci4: command 0x0c1a tx timeout [ 1104.371817][T25038] binder: 25034:25038 ioctl c00c620f 2000000000c0 returned -22 [ 1104.439381][T25043] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1104.711086][T25051] ======================================================= [ 1104.711086][T25051] WARNING: The mand mount option has been deprecated and [ 1104.711086][T25051] and is ignored by this kernel. Remove the mand [ 1104.711086][T25051] option from the mount to silence this warning. [ 1104.711086][T25051] ======================================================= [ 1106.019517][T25069] FAULT_INJECTION: forcing a failure. [ 1106.019517][T25069] name failslab, interval 1, probability 393216, space 0, times 0 [ 1106.100393][T25069] CPU: 0 UID: 0 PID: 25069 Comm: syz.7.3881 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.100421][T25069] Tainted: [L]=SOFTLOCKUP [ 1106.100426][T25069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1106.100436][T25069] Call Trace: [ 1106.100442][T25069] [ 1106.100448][T25069] dump_stack_lvl+0x100/0x190 [ 1106.100472][T25069] should_fail_ex.cold+0x5/0xa [ 1106.100498][T25069] should_failslab+0xc2/0x120 [ 1106.100519][T25069] __kmalloc_cache_noprof+0x80/0x810 [ 1106.100536][T25069] ? sctp_auth_shkey_create+0x9e/0x210 [ 1106.100561][T25069] ? sctp_auth_shkey_create+0x9e/0x210 [ 1106.100582][T25069] sctp_auth_shkey_create+0x9e/0x210 [ 1106.100604][T25069] sctp_endpoint_new+0x589/0xb20 [ 1106.100629][T25069] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1106.100653][T25069] ? lockdep_init_map_type+0x5c/0x250 [ 1106.100673][T25069] ? lockdep_init_map_type+0x5c/0x250 [ 1106.100696][T25069] sctp_init_sock+0xe2b/0x1300 [ 1106.100716][T25069] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1106.100738][T25069] sctp_v6_init_sock+0x16/0x70 [ 1106.100757][T25069] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1106.100777][T25069] inet6_create+0xb2f/0x12c0 [ 1106.100800][T25069] ? inet6_create+0x7f/0x12c0 [ 1106.100823][T25069] __sock_create+0x339/0x860 [ 1106.100844][T25069] inet_ctl_sock_create+0x94/0x230 [ 1106.100863][T25069] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 1106.100880][T25069] ? timer_init_key+0x14c/0x2c0 [ 1106.100901][T25069] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 1106.100921][T25069] sctp_ctrlsock_init+0x40/0xd0 [ 1106.100941][T25069] ops_init+0x1e2/0x5f0 [ 1106.100966][T25069] setup_net+0x118/0x3a0 [ 1106.100980][T25069] ? __pfx_setup_net+0x10/0x10 [ 1106.101009][T25069] ? lockdep_init_map_type+0x5c/0x250 [ 1106.101030][T25069] ? mutex_init_lockep+0x110/0x150 [ 1106.101055][T25069] copy_net_ns+0x46f/0x7c0 [ 1106.101072][T25069] create_new_namespaces+0x3ea/0xab0 [ 1106.101095][T25069] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1106.101114][T25069] ksys_unshare+0x455/0xab0 [ 1106.101136][T25069] ? __pfx_ksys_unshare+0x10/0x10 [ 1106.101157][T25069] ? xfd_validate_state+0x129/0x190 [ 1106.101185][T25069] __x64_sys_unshare+0x31/0x40 [ 1106.101205][T25069] do_syscall_64+0xc9/0xf80 [ 1106.101226][T25069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.101241][T25069] RIP: 0033:0x7f533af9aeb9 [ 1106.101255][T25069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.101269][T25069] RSP: 002b:00007f533bebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1106.101285][T25069] RAX: ffffffffffffffda RBX: 00007f533b216090 RCX: 00007f533af9aeb9 [ 1106.101294][T25069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1106.101304][T25069] RBP: 00007f533b008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1106.101313][T25069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.101322][T25069] R13: 00007f533b216128 R14: 00007f533b216090 R15: 00007ffe5a7e81d8 [ 1106.101342][T25069] [ 1107.499825][T25090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3886'. [ 1107.617585][T25093] netlink: 186 bytes leftover after parsing attributes in process `syz.6.3883'. [ 1107.702532][T25094] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3887'. [ 1109.064615][T25113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3892'. [ 1110.779005][T25126] FAULT_INJECTION: forcing a failure. [ 1110.779005][T25126] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1110.926988][T25126] CPU: 0 UID: 0 PID: 25126 Comm: syz.3.3896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.927016][T25126] Tainted: [L]=SOFTLOCKUP [ 1110.927022][T25126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1110.927032][T25126] Call Trace: [ 1110.927038][T25126] [ 1110.927044][T25126] dump_stack_lvl+0x100/0x190 [ 1110.927068][T25126] should_fail_ex.cold+0x5/0xa [ 1110.927090][T25126] ? prepare_alloc_pages+0x16d/0x5f0 [ 1110.927115][T25126] should_fail_alloc_page+0xeb/0x140 [ 1110.927137][T25126] prepare_alloc_pages+0x1f0/0x5f0 [ 1110.927159][T25126] ? rcu_is_watching+0x12/0xc0 [ 1110.927177][T25126] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1110.927196][T25126] ? __lock_acquire+0x4a5/0x2630 [ 1110.927224][T25126] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1110.927242][T25126] ? do_raw_spin_lock+0x128/0x260 [ 1110.927265][T25126] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1110.927287][T25126] ? find_held_lock+0x2b/0x80 [ 1110.927308][T25126] ? __lock_acquire+0x4a5/0x2630 [ 1110.927328][T25126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1110.927345][T25126] ? policy_nodemask+0xed/0x4f0 [ 1110.927368][T25126] alloc_pages_mpol+0x1fb/0x550 [ 1110.927390][T25126] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1110.927410][T25126] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1110.927431][T25126] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1110.927455][T25126] folio_alloc_mpol_noprof+0x36/0x340 [ 1110.927479][T25126] shmem_alloc_folio+0x135/0x160 [ 1110.927495][T25126] shmem_alloc_and_add_folio+0x371/0xd40 [ 1110.927518][T25126] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1110.927537][T25126] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1110.927570][T25126] shmem_get_folio_gfp+0x6ab/0x1900 [ 1110.927592][T25126] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1110.927612][T25126] ? filemap_map_pages+0x9e0/0x2110 [ 1110.927635][T25126] shmem_fault+0x1f9/0xa20 [ 1110.927653][T25126] ? __lock_acquire+0x4a5/0x2630 [ 1110.927673][T25126] ? __pfx_shmem_fault+0x10/0x10 [ 1110.927695][T25126] ? __pfx_filemap_map_pages+0x10/0x10 [ 1110.927719][T25126] __do_fault+0x10d/0x550 [ 1110.927741][T25126] do_fault+0xaf9/0x1990 [ 1110.927767][T25126] __handle_mm_fault+0x1807/0x2b50 [ 1110.927786][T25126] ? mt_find+0x45e/0x8e0 [ 1110.927806][T25126] ? __pfx___handle_mm_fault+0x10/0x10 [ 1110.927821][T25126] ? __pfx_mt_find+0x10/0x10 [ 1110.927850][T25126] ? find_vma+0xbf/0x140 [ 1110.927869][T25126] ? __pfx_find_vma+0x10/0x10 [ 1110.927890][T25126] handle_mm_fault+0x36d/0xa20 [ 1110.927912][T25126] do_user_addr_fault+0x74c/0x12f0 [ 1110.927934][T25126] exc_page_fault+0x6f/0xd0 [ 1110.927952][T25126] asm_exc_page_fault+0x26/0x30 [ 1110.927967][T25126] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1110.927991][T25126] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1110.928006][T25126] RSP: 0018:ffffc9000453f428 EFLAGS: 00050202 [ 1110.928019][T25126] RAX: 0000000000000001 RBX: 000000000000ff04 RCX: 0000000000008f04 [ 1110.928029][T25126] RDX: 0000000000000001 RSI: 0000000000007000 RDI: ffff88808f4a7010 [ 1110.928038][T25126] RBP: ffffc9000453fb40 R08: 0000000000000001 R09: ffffed1011e95fe2 [ 1110.928048][T25126] R10: ffff88808f4aff13 R11: 0000000000000000 R12: 0000000000000000 [ 1110.928057][T25126] R13: 0000000000000000 R14: 000000000000ff04 R15: ffffc9000453fb48 [ 1110.928076][T25126] _copy_from_iter+0x498/0x1690 [ 1110.928104][T25126] ? __pfx__copy_from_iter+0x10/0x10 [ 1110.928125][T25126] ? sctp_addto_chunk+0xfa/0x2a0 [ 1110.928145][T25126] ? __asan_memcpy+0x3c/0x60 [ 1110.928161][T25126] ? sctp_make_datafrag_empty+0x1a4/0x230 [ 1110.928181][T25126] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1110.928204][T25126] sctp_user_addto_chunk+0x84/0x240 [ 1110.928226][T25126] sctp_datamsg_from_user+0x60b/0x1360 [ 1110.928253][T25126] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 1110.928275][T25126] ? __asan_memmove+0x10/0x60 [ 1110.928292][T25126] ? sctp_assoc_set_primary+0x276/0x310 [ 1110.928315][T25126] ? sctp_assoc_add_peer+0x252/0x14f0 [ 1110.928332][T25126] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1110.928354][T25126] ? sctp_connect_new_asoc+0x41e/0x770 [ 1110.928370][T25126] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1110.928389][T25126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1110.928408][T25126] sctp_sendmsg+0x1185/0x22b0 [ 1110.928428][T25126] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1110.928442][T25126] ? __lock_acquire+0x4a5/0x2630 [ 1110.928464][T25126] ? aa_sk_perm+0x2de/0xb40 [ 1110.928488][T25126] ? __pfx_aa_sk_perm+0x10/0x10 [ 1110.928514][T25126] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1110.928530][T25126] inet_sendmsg+0x11c/0x140 [ 1110.928557][T25126] ____sys_sendmsg+0x9ad/0xc30 [ 1110.928577][T25126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1110.928595][T25126] ? futex_unqueue+0x133/0x2c0 [ 1110.928615][T25126] ? futex_unqueue+0x133/0x2c0 [ 1110.928638][T25126] ___sys_sendmsg+0x190/0x1e0 [ 1110.928657][T25126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.928674][T25126] ? __pfx___futex_wait+0x10/0x10 [ 1110.928709][T25126] __sys_sendmmsg+0x205/0x430 [ 1110.928734][T25126] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1110.928761][T25126] ? __pfx_do_futex+0x10/0x10 [ 1110.928779][T25126] ? __pfx_do_sys_openat2+0x10/0x10 [ 1110.928811][T25126] ? xfd_validate_state+0x129/0x190 [ 1110.928839][T25126] __x64_sys_sendmmsg+0x9c/0x100 [ 1110.928860][T25126] ? lockdep_hardirqs_on+0x78/0x100 [ 1110.928878][T25126] do_syscall_64+0xc9/0xf80 [ 1110.928897][T25126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.928912][T25126] RIP: 0033:0x7fed8819aeb9 [ 1110.928926][T25126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.928940][T25126] RSP: 002b:00007fed8913f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1110.928954][T25126] RAX: ffffffffffffffda RBX: 00007fed88415fa0 RCX: 00007fed8819aeb9 [ 1110.928965][T25126] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 0000000000000007 [ 1110.928975][T25126] RBP: 00007fed88208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1110.928984][T25126] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 1110.928993][T25126] R13: 00007fed88416038 R14: 00007fed88415fa0 R15: 00007ffc58c39198 [ 1110.929014][T25126] [ 1112.898159][T25126] zswap: compressor not available [ 1113.670788][T18649] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1113.670815][T18649] Bluetooth: hci2: unexpected subevent 0x03 length: 725 > 9 [ 1113.849037][T25160] random: crng reseeded on system resumption [ 1114.179005][T25144] kexec: Could not allocate control_code_buffer [ 1114.722019][T25181] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 1115.340465][T25193] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3909'. [ 1115.438523][T25192] zswap: compressor not available [ 1115.851777][T25189] zswap: compressor not available [ 1116.848095][T25230] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3916'. [ 1116.954485][T25232] netlink: 'syz.3.3917': attribute type 5 has an invalid length. [ 1116.985186][T25230] ima: policy update failed [ 1117.086156][ T30] audit: type=1802 audit(4294967336.059:38): pid=25230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3916" res=0 errno=0 [ 1118.295329][T25252] zswap: compressor not available [ 1118.424793][T25254] netlink: 504 bytes leftover after parsing attributes in process `syz.7.3922'. [ 1118.633855][T25274] netlink: 'syz.4.3925': attribute type 1 has an invalid length. [ 1118.692536][T25274] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3925'. [ 1118.762653][T25278] ima: policy update failed [ 1118.815216][ T30] audit: type=1802 audit(4294967337.779:39): pid=25278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3925" res=0 errno=0 [ 1119.085651][T25287] FAULT_INJECTION: forcing a failure. [ 1119.085651][T25287] name failslab, interval 1, probability 393216, space 0, times 0 [ 1119.130256][T25287] CPU: 0 UID: 0 PID: 25287 Comm: syz.3.3930 Tainted: G L syzkaller #0 PREEMPT(full) [ 1119.130285][T25287] Tainted: [L]=SOFTLOCKUP [ 1119.130290][T25287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1119.130299][T25287] Call Trace: [ 1119.130305][T25287] [ 1119.130312][T25287] dump_stack_lvl+0x100/0x190 [ 1119.130335][T25287] should_fail_ex.cold+0x5/0xa [ 1119.130360][T25287] should_failslab+0xc2/0x120 [ 1119.130382][T25287] ? tomoyo_encode2+0xfb/0x3c0 [ 1119.130396][T25287] __kmalloc_noprof+0xf6/0x9c0 [ 1119.130417][T25287] ? tomoyo_encode2+0xfb/0x3c0 [ 1119.130430][T25287] tomoyo_encode2+0xfb/0x3c0 [ 1119.130447][T25287] tomoyo_encode+0x29/0x50 [ 1119.130460][T25287] tomoyo_realpath_from_path+0x18c/0x690 [ 1119.130480][T25287] tomoyo_mkdev_perm+0x231/0x570 [ 1119.130501][T25287] ? tomoyo_mkdev_perm+0x21d/0x570 [ 1119.130523][T25287] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1119.130552][T25287] ? do_raw_spin_unlock+0x145/0x1e0 [ 1119.130584][T25287] ? __pfx_current_check_access_path+0x10/0x10 [ 1119.130609][T25287] ? simple_lookup+0x105/0x1d0 [ 1119.130628][T25287] tomoyo_path_mknod+0xe2/0x190 [ 1119.130646][T25287] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1119.130664][T25287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1119.130684][T25287] security_path_mknod+0x161/0x300 [ 1119.130701][T25287] do_mknodat+0x247/0x7a0 [ 1119.130720][T25287] ? __pfx_do_mknodat+0x10/0x10 [ 1119.130735][T25287] ? strncpy_from_user+0x19d/0x2d0 [ 1119.130758][T25287] ? getname_flags.part.0+0x1c5/0x540 [ 1119.130782][T25287] __x64_sys_mknod+0x118/0x170 [ 1119.130801][T25287] do_syscall_64+0xc9/0xf80 [ 1119.130827][T25287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.130842][T25287] RIP: 0033:0x7fed8819aeb9 [ 1119.130856][T25287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.130870][T25287] RSP: 002b:00007fed8913f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1119.130885][T25287] RAX: ffffffffffffffda RBX: 00007fed88415fa0 RCX: 00007fed8819aeb9 [ 1119.130895][T25287] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1119.130904][T25287] RBP: 00007fed88208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1119.130913][T25287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.130922][T25287] R13: 00007fed88416038 R14: 00007fed88415fa0 R15: 00007ffc58c39198 [ 1119.130941][T25287] [ 1119.130957][T25287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1119.757833][T25295] FAULT_INJECTION: forcing a failure. [ 1119.757833][T25295] name failslab, interval 1, probability 393216, space 0, times 0 [ 1119.795456][T25295] CPU: 0 UID: 0 PID: 25295 Comm: syz.7.3931 Tainted: G L syzkaller #0 PREEMPT(full) [ 1119.795483][T25295] Tainted: [L]=SOFTLOCKUP [ 1119.795488][T25295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1119.795498][T25295] Call Trace: [ 1119.795504][T25295] [ 1119.795510][T25295] dump_stack_lvl+0x100/0x190 [ 1119.795534][T25295] should_fail_ex.cold+0x5/0xa [ 1119.795559][T25295] should_failslab+0xc2/0x120 [ 1119.795581][T25295] kmem_cache_alloc_noprof+0x83/0x780 [ 1119.795601][T25295] ? vm_area_dup+0x27/0x8e0 [ 1119.795640][T25295] ? vm_area_dup+0x27/0x8e0 [ 1119.795654][T25295] ? trace_ignore_this_task+0xbc/0x100 [ 1119.795670][T25295] vm_area_dup+0x27/0x8e0 [ 1119.795687][T25295] __split_vma+0x18c/0xe30 [ 1119.795705][T25295] ? lock_acquire+0x17c/0x330 [ 1119.795725][T25295] ? __pfx___split_vma+0x10/0x10 [ 1119.795740][T25295] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1119.795757][T25295] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1119.795777][T25295] ? lockdep_hardirqs_on+0x78/0x100 [ 1119.795800][T25295] ? finish_task_switch.isra.0+0x204/0xb70 [ 1119.795821][T25295] vma_modify+0x1127/0x2330 [ 1119.795843][T25295] ? __pfx_vma_modify+0x10/0x10 [ 1119.795864][T25295] vma_modify_flags+0x257/0x3d0 [ 1119.795882][T25295] ? __pfx_vma_modify_flags+0x10/0x10 [ 1119.795915][T25295] mlock_fixup+0x2fd/0xee0 [ 1119.795935][T25295] ? __pfx_mlock_fixup+0x10/0x10 [ 1119.795957][T25295] apply_vma_lock_flags+0x256/0x370 [ 1119.795977][T25295] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1119.795995][T25295] ? __pfx___might_resched+0x10/0x10 [ 1119.796023][T25295] ? __pfx_down_write_killable+0x10/0x10 [ 1119.796045][T25295] ? do_futex+0x192/0x350 [ 1119.796067][T25295] do_mlock+0x261/0x7f0 [ 1119.796087][T25295] ? __pfx_do_mlock+0x10/0x10 [ 1119.796102][T25295] ? __x64_sys_futex+0x34f/0x4d0 [ 1119.796121][T25295] ? __x64_sys_futex+0x358/0x4d0 [ 1119.796144][T25295] ? xfd_validate_state+0x129/0x190 [ 1119.796166][T25295] ? safesetid_task_fix_setgid+0x70/0x220 [ 1119.796188][T25295] __x64_sys_mlock+0x59/0x80 [ 1119.796206][T25295] do_syscall_64+0xc9/0xf80 [ 1119.796225][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.796241][T25295] RIP: 0033:0x7f533af9aeb9 [ 1119.796254][T25295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.796268][T25295] RSP: 002b:00007f533bedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1119.796283][T25295] RAX: ffffffffffffffda RBX: 00007f533b215fa0 RCX: 00007f533af9aeb9 [ 1119.796293][T25295] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 1119.796302][T25295] RBP: 00007f533b008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1119.796311][T25295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.796320][T25295] R13: 00007f533b216038 R14: 00007f533b215fa0 R15: 00007ffe5a7e81d8 [ 1119.796339][T25295] [ 1120.634640][T25301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'. [ 1121.174328][T25302] tipc: Started in network mode [ 1121.189131][T25302] tipc: Node identity ffffffff, cluster identity 4711 [ 1121.206457][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.216215][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.258780][T25302] tipc: Node number set to 4294967295 [ 1121.460848][T25314] random: crng reseeded on system resumption [ 1123.296872][T25335] netlink: 'syz.4.3941': attribute type 4 has an invalid length. [ 1126.415804][T25365] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1128.987800][T25418] FAULT_INJECTION: forcing a failure. [ 1128.987800][T25418] name failslab, interval 1, probability 393216, space 0, times 0 [ 1129.046789][T25418] CPU: 0 UID: 0 PID: 25418 Comm: syz.3.3960 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.046818][T25418] Tainted: [L]=SOFTLOCKUP [ 1129.046824][T25418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1129.046834][T25418] Call Trace: [ 1129.046840][T25418] [ 1129.046847][T25418] dump_stack_lvl+0x100/0x190 [ 1129.046870][T25418] should_fail_ex.cold+0x5/0xa [ 1129.046897][T25418] should_failslab+0xc2/0x120 [ 1129.046918][T25418] kmem_cache_alloc_noprof+0x83/0x780 [ 1129.046938][T25418] ? key_alloc+0x3b4/0x1310 [ 1129.046960][T25418] ? key_alloc+0x3c5/0x1310 [ 1129.046986][T25418] ? key_alloc+0x3c5/0x1310 [ 1129.047008][T25418] key_alloc+0x3c5/0x1310 [ 1129.047035][T25418] ? trace_kmalloc+0x83/0xb0 [ 1129.047055][T25418] ? __pfx_key_alloc+0x10/0x10 [ 1129.047082][T25418] keyring_alloc+0x44/0xc0 [ 1129.047099][T25418] install_thread_keyring_to_cred+0xc1/0x140 [ 1129.047122][T25418] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 1129.047144][T25418] __do_sys_keyctl+0x316/0x5a0 [ 1129.047165][T25418] do_syscall_64+0xc9/0xf80 [ 1129.047186][T25418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.047203][T25418] RIP: 0033:0x7fed8819aeb9 [ 1129.047217][T25418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.047231][T25418] RSP: 002b:00007fed8911e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1129.047257][T25418] RAX: ffffffffffffffda RBX: 00007fed88416090 RCX: 00007fed8819aeb9 [ 1129.047268][T25418] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1129.047278][T25418] RBP: 00007fed88208c1f R08: 0000000000000008 R09: 0000000000000000 [ 1129.047288][T25418] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 1129.047298][T25418] R13: 00007fed88416128 R14: 00007fed88416090 R15: 00007ffc58c39198 [ 1129.047318][T25418] [ 1129.429638][T25420] delete_channel: no stack [ 1130.212785][T25426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3963'. [ 1130.319002][T25426] veth1_macvtap: left promiscuous mode [ 1130.392792][T25424] zswap: compressor not available [ 1131.851852][T25453] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1131.852215][T25453] ima: policy update failed [ 1131.932445][ T30] audit: type=1802 audit(4294967350.909:40): pid=25453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3969" res=0 errno=0 [ 1132.091199][T25451] bridge0: port 3(netdevsim0) entered blocking state [ 1132.127030][T25451] bridge0: port 3(netdevsim0) entered disabled state [ 1132.210328][T25451] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1132.248228][T25451] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1132.328860][T25451] FAULT_INJECTION: forcing a failure. [ 1132.328860][T25451] name failslab, interval 1, probability 393216, space 0, times 0 [ 1132.470649][T25451] CPU: 0 UID: 0 PID: 25451 Comm: syz.6.3968 Tainted: G L syzkaller #0 PREEMPT(full) [ 1132.470685][T25451] Tainted: [L]=SOFTLOCKUP [ 1132.470692][T25451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1132.470702][T25451] Call Trace: [ 1132.470707][T25451] [ 1132.470714][T25451] dump_stack_lvl+0x100/0x190 [ 1132.470739][T25451] should_fail_ex.cold+0x5/0xa [ 1132.470765][T25451] should_failslab+0xc2/0x120 [ 1132.470787][T25451] __kmalloc_cache_noprof+0x80/0x810 [ 1132.470806][T25451] ? vlan_vid_add+0x514/0x730 [ 1132.470831][T25451] ? vlan_vid_add+0x514/0x730 [ 1132.470851][T25451] vlan_vid_add+0x514/0x730 [ 1132.470875][T25451] __vlan_add+0x266f/0x2dd0 [ 1132.470903][T25451] ? __pfx___vlan_add+0x10/0x10 [ 1132.470926][T25451] nbp_vlan_add+0x258/0x3e0 [ 1132.470947][T25451] nbp_vlan_init+0x373/0x500 [ 1132.470966][T25451] ? __pfx_nbp_vlan_init+0x10/0x10 [ 1132.470989][T25451] ? __local_bh_enable_ip+0x9e/0x120 [ 1132.471008][T25451] ? lockdep_hardirqs_on+0x78/0x100 [ 1132.471025][T25451] ? br_fdb_add_local+0x43/0x60 [ 1132.471041][T25451] ? __local_bh_enable_ip+0x9e/0x120 [ 1132.471062][T25451] br_add_if+0xf79/0x1b40 [ 1132.471087][T25451] add_del_if+0x114/0x160 [ 1132.471109][T25451] br_dev_siocdevprivate+0x8ac/0x1650 [ 1132.471131][T25451] ? __lock_acquire+0x4a5/0x2630 [ 1132.471150][T25451] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1132.471177][T25451] ? do_raw_spin_lock+0x128/0x260 [ 1132.471209][T25451] ? mark_held_locks+0x40/0x70 [ 1132.471231][T25451] ? netdev_name_node_lookup+0x107/0x150 [ 1132.471251][T25451] ? __mutex_lock+0x26a/0x1b90 [ 1132.471272][T25451] dev_ifsioc+0xc15/0x1eb0 [ 1132.471294][T25451] ? __pfx_dev_ifsioc+0x10/0x10 [ 1132.471314][T25451] ? __pfx___mutex_lock+0x10/0x10 [ 1132.471338][T25451] ? dev_load+0x8e/0x240 [ 1132.471356][T25451] ? dev_load+0x8e/0x240 [ 1132.471380][T25451] dev_ioctl+0x70e/0x1070 [ 1132.471401][T25451] sock_ioctl+0x494/0x6b0 [ 1132.471420][T25451] ? __pfx_sock_ioctl+0x10/0x10 [ 1132.471444][T25451] ? __pfx_sock_ioctl+0x10/0x10 [ 1132.471462][T25451] __x64_sys_ioctl+0x18e/0x210 [ 1132.471488][T25451] do_syscall_64+0xc9/0xf80 [ 1132.471507][T25451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.471523][T25451] RIP: 0033:0x7ff54579aeb9 [ 1132.471537][T25451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.471551][T25451] RSP: 002b:00007ff546711028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1132.471567][T25451] RAX: ffffffffffffffda RBX: 00007ff545a15fa0 RCX: 00007ff54579aeb9 [ 1132.471577][T25451] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 1132.471587][T25451] RBP: 00007ff545808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1132.471596][T25451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.471605][T25451] R13: 00007ff545a16038 R14: 00007ff545a15fa0 R15: 00007ffc231717c8 [ 1132.471626][T25451] [ 1133.742641][T25451] netdevsim netdevsim6 netdevsim0: failed to initialize vlan filtering on this port [ 1133.784459][T25451] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1134.309910][T25461] : Can't lookup blockdev [ 1135.680158][T25470] nvme_fcloop: unknown parameter or missing value '7' [ 1136.977506][T25513] FAULT_INJECTION: forcing a failure. [ 1136.977506][T25513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.069994][T25513] CPU: 0 UID: 0 PID: 25513 Comm: syz.7.3981 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.070022][T25513] Tainted: [L]=SOFTLOCKUP [ 1137.070028][T25513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1137.070038][T25513] Call Trace: [ 1137.070044][T25513] [ 1137.070051][T25513] dump_stack_lvl+0x100/0x190 [ 1137.070074][T25513] should_fail_ex.cold+0x5/0xa [ 1137.070100][T25513] _copy_to_user+0x32/0xd0 [ 1137.070124][T25513] ksys_shmctl.constprop.0+0x2f1/0x390 [ 1137.070140][T25513] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 1137.070159][T25513] ? __pfx_do_futex+0x10/0x10 [ 1137.070180][T25513] ? do_fcntl+0x811/0x1670 [ 1137.070204][T25513] ? __x64_sys_futex+0x34f/0x4d0 [ 1137.070235][T25513] do_syscall_64+0xc9/0xf80 [ 1137.070255][T25513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.070271][T25513] RIP: 0033:0x7f533af9aeb9 [ 1137.070284][T25513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.070300][T25513] RSP: 002b:00007f533bedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 1137.070315][T25513] RAX: ffffffffffffffda RBX: 00007f533b215fa0 RCX: 00007f533af9aeb9 [ 1137.070325][T25513] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000006 [ 1137.070341][T25513] RBP: 00007f533b008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1137.070350][T25513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.070359][T25513] R13: 00007f533b216038 R14: 00007f533b215fa0 R15: 00007ffe5a7e81d8 [ 1137.070379][T25513] [ 1138.056314][T25529] FAULT_INJECTION: forcing a failure. [ 1138.056314][T25529] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1138.228056][T25529] CPU: 0 UID: 0 PID: 25529 Comm: syz.3.3984 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.228085][T25529] Tainted: [L]=SOFTLOCKUP [ 1138.228091][T25529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1138.228101][T25529] Call Trace: [ 1138.228107][T25529] [ 1138.228113][T25529] dump_stack_lvl+0x100/0x190 [ 1138.228136][T25529] should_fail_ex.cold+0x5/0xa [ 1138.228170][T25529] get_futex_key+0x1d2/0x1620 [ 1138.228193][T25529] ? __pfx_get_futex_key+0x10/0x10 [ 1138.228213][T25529] ? trace_pid_list_is_set+0x11a/0x390 [ 1138.228237][T25529] ? trace_pid_list_is_set+0x22c/0x390 [ 1138.228263][T25529] futex_wait_setup+0x81/0x500 [ 1138.228283][T25529] __futex_wait+0x19f/0x300 [ 1138.228299][T25529] ? __pfx___futex_wait+0x10/0x10 [ 1138.228312][T25529] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1138.228328][T25529] ? lockdep_hardirqs_on+0x78/0x100 [ 1138.228347][T25529] ? __pfx_futex_wake_mark+0x10/0x10 [ 1138.228373][T25529] ? find_held_lock+0x2b/0x80 [ 1138.228389][T25529] ? futex_wake+0x456/0x530 [ 1138.228417][T25529] futex_wait+0xed/0x380 [ 1138.228431][T25529] ? __pfx_futex_wait+0x10/0x10 [ 1138.228449][T25529] ? vfs_write+0x15d/0x1070 [ 1138.228466][T25529] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1138.228493][T25529] do_futex+0x1ef/0x350 [ 1138.228513][T25529] ? __pfx_do_futex+0x10/0x10 [ 1138.228538][T25529] __x64_sys_futex+0x34f/0x4d0 [ 1138.228559][T25529] ? fput+0x79/0x100 [ 1138.228579][T25529] ? __pfx___x64_sys_futex+0x10/0x10 [ 1138.228600][T25529] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1138.228623][T25529] do_syscall_64+0xc9/0xf80 [ 1138.228642][T25529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.228658][T25529] RIP: 0033:0x7fed8819aeb9 [ 1138.228671][T25529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.228685][T25529] RSP: 002b:00007fed8911e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1138.228700][T25529] RAX: ffffffffffffffda RBX: 00007fed88416098 RCX: 00007fed8819aeb9 [ 1138.228710][T25529] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fed88416098 [ 1138.228720][T25529] RBP: 00007fed88416090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.228729][T25529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.228738][T25529] R13: 00007fed88416128 R14: 00007ffc58c390b0 R15: 00007ffc58c39198 [ 1138.228757][T25529] [ 1138.740228][T25535] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1139.334054][T25546] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 1139.412071][T25546] CIFS mount error: No usable UNC path provided in device string! [ 1139.412071][T25546] [ 1139.481423][T25548] FAULT_INJECTION: forcing a failure. [ 1139.481423][T25548] name failslab, interval 1, probability 393216, space 0, times 0 [ 1139.564766][T25546] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1139.620966][T25548] CPU: 0 UID: 0 PID: 25548 Comm: syz.6.3989 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.620994][T25548] Tainted: [L]=SOFTLOCKUP [ 1139.621000][T25548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1139.621010][T25548] Call Trace: [ 1139.621015][T25548] [ 1139.621027][T25548] dump_stack_lvl+0x100/0x190 [ 1139.621051][T25548] should_fail_ex.cold+0x5/0xa [ 1139.621076][T25548] should_failslab+0xc2/0x120 [ 1139.621099][T25548] kmem_cache_alloc_noprof+0x83/0x780 [ 1139.621119][T25548] ? __kernfs_new_node+0xd2/0x960 [ 1139.621143][T25548] ? __kernfs_new_node+0xd2/0x960 [ 1139.621162][T25548] __kernfs_new_node+0xd2/0x960 [ 1139.621184][T25548] ? __pfx___kernfs_new_node+0x10/0x10 [ 1139.621210][T25548] ? find_held_lock+0x2b/0x80 [ 1139.621224][T25548] ? kernfs_root+0xee/0x2a0 [ 1139.621243][T25548] ? kernfs_root+0xee/0x2a0 [ 1139.621267][T25548] kernfs_new_node+0x11b/0x1a0 [ 1139.621292][T25548] __kernfs_create_file+0x53/0x350 [ 1139.621311][T25548] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1139.621335][T25548] internal_create_group+0x593/0xf40 [ 1139.621361][T25548] ? __pfx_internal_create_group+0x10/0x10 [ 1139.621385][T25548] ? kernfs_create_link+0x1bd/0x240 [ 1139.621404][T25548] internal_create_groups+0x9d/0x150 [ 1139.621426][T25548] device_add+0x7c8/0x1950 [ 1139.621449][T25548] ? __pfx_device_add+0x10/0x10 [ 1139.621470][T25548] ? lockdep_init_map_type+0x5c/0x250 [ 1139.621490][T25548] ? __init_waitqueue_head+0xca/0x150 [ 1139.621517][T25548] netdev_register_kobject+0x1a9/0x3d0 [ 1139.621536][T25548] register_netdevice+0x12b3/0x21d0 [ 1139.621553][T25548] ? idr_alloc+0xdd/0x130 [ 1139.621571][T25548] ? __pfx_register_netdevice+0x10/0x10 [ 1139.621593][T25548] ? net_generic+0xea/0x2a0 [ 1139.621617][T25548] ppp_dev_configure+0x986/0xcb0 [ 1139.621640][T25548] ppp_ioctl+0x985/0x2800 [ 1139.621659][T25548] ? find_held_lock+0x2b/0x80 [ 1139.621674][T25548] ? __pfx_ppp_ioctl+0x10/0x10 [ 1139.621697][T25548] ? __fget_files+0x21f/0x3d0 [ 1139.621717][T25548] ? __pfx_ppp_ioctl+0x10/0x10 [ 1139.621736][T25548] __x64_sys_ioctl+0x18e/0x210 [ 1139.621761][T25548] do_syscall_64+0xc9/0xf80 [ 1139.621780][T25548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.621796][T25548] RIP: 0033:0x7ff54579aeb9 [ 1139.621810][T25548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.621825][T25548] RSP: 002b:00007ff5466f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.621841][T25548] RAX: ffffffffffffffda RBX: 00007ff545a16090 RCX: 00007ff54579aeb9 [ 1139.621851][T25548] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000009 [ 1139.621861][T25548] RBP: 00007ff545808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1139.621870][T25548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.621880][T25548] R13: 00007ff545a16128 R14: 00007ff545a16090 R15: 00007ffc231717c8 [ 1139.621901][T25548] [ 1140.613012][T25559] device-mapper: ioctl: Invalid ioctl structure: name , dev 400000 [ 1140.664331][T25559] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 1141.149748][T19654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1141.163986][T19654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1141.172526][T19654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1141.185298][T19654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1141.193000][T19654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1142.998784][T25563] chnl_net:caif_netlink_parms(): no params data found [ 1143.149701][T25607] Invalid ELF header magic: != ELF [ 1143.216388][T25563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.238875][T19654] Bluetooth: hci3: command tx timeout [ 1143.266981][T25563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.305716][T25563] bridge_slave_0: entered allmulticast mode [ 1143.336420][T25563] bridge_slave_0: entered promiscuous mode [ 1143.371655][T25563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.409141][T25563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.439536][T25563] bridge_slave_1: entered allmulticast mode [ 1143.463513][T25563] bridge_slave_1: entered promiscuous mode [ 1143.601370][T25563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.654303][T25563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.783429][T25563] team0: Port device team_slave_0 added [ 1143.816223][T25618] netlink: 'syz.7.4006': attribute type 11 has an invalid length. [ 1143.836083][T25563] team0: Port device team_slave_1 added [ 1145.091907][T25627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4008'. [ 1145.112726][T25624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4008'. [ 1145.317082][T19654] Bluetooth: hci3: command tx timeout [ 1145.426116][T25563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.450166][T25563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.660964][T25563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.727253][T25563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.764900][T25563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.907489][T25563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.953040][T25624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.966717][T25624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.038890][T25624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.066840][T25624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.346622][T25563] hsr_slave_0: entered promiscuous mode [ 1146.418885][T25563] hsr_slave_1: entered promiscuous mode [ 1146.425390][T25563] debugfs: 'hsr0' already exists in 'hsr' [ 1146.506825][T25563] Cannot create hsr debugfs directory [ 1146.920990][T25651] perf: Dynamic interrupt throttling disabled, can hang your system! [ 1147.398256][T19654] Bluetooth: hci3: command tx timeout [ 1147.948094][T25563] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1148.051045][T25563] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1148.245375][T25563] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1148.317879][T25563] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1148.839036][T25563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.914110][T25563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.018688][T24530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.025800][T24530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.116220][T24530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.123364][T24530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.316340][T25563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.477296][T19654] Bluetooth: hci3: command tx timeout [ 1150.075590][T25563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.087332][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.233946][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.356309][T25734] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.483553][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.535704][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.577891][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.617768][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.647363][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.689034][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.727314][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.774103][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.818780][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.870607][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.885676][T25563] veth0_vlan: entered promiscuous mode [ 1150.904085][T25730] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1150.955533][T25563] veth1_vlan: entered promiscuous mode [ 1151.066052][T25563] veth0_macvtap: entered promiscuous mode [ 1151.135054][T25563] veth1_macvtap: entered promiscuous mode [ 1151.209613][T25563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.268587][T25563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.325941][T21970] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.362673][T21970] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.399000][T21970] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.434318][T21970] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.507463][T25748] netlink: 'syz.6.4027': attribute type 1 has an invalid length. [ 1151.732782][T25699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.767953][T25699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.852992][T21970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.911298][T21970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.592247][T25765] FAULT_INJECTION: forcing a failure. [ 1152.592247][T25765] name failslab, interval 1, probability 393216, space 0, times 0 [ 1152.713445][T25765] CPU: 0 UID: 0 PID: 25765 Comm: syz.8.3988 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.713475][T25765] Tainted: [L]=SOFTLOCKUP [ 1152.713481][T25765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1152.713491][T25765] Call Trace: [ 1152.713497][T25765] [ 1152.713504][T25765] dump_stack_lvl+0x100/0x190 [ 1152.713528][T25765] should_fail_ex.cold+0x5/0xa [ 1152.713556][T25765] should_failslab+0xc2/0x120 [ 1152.713577][T25765] kmem_cache_alloc_noprof+0x83/0x780 [ 1152.713596][T25765] ? key_alloc+0x3b4/0x1310 [ 1152.713618][T25765] ? key_alloc+0x3c5/0x1310 [ 1152.713644][T25765] ? key_alloc+0x3c5/0x1310 [ 1152.713666][T25765] key_alloc+0x3c5/0x1310 [ 1152.713693][T25765] ? trace_kmalloc+0x83/0xb0 [ 1152.713713][T25765] ? __pfx_key_alloc+0x10/0x10 [ 1152.713740][T25765] keyring_alloc+0x44/0xc0 [ 1152.713757][T25765] install_thread_keyring_to_cred+0xc1/0x140 [ 1152.713781][T25765] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 1152.713802][T25765] __do_sys_keyctl+0x316/0x5a0 [ 1152.713822][T25765] do_syscall_64+0xc9/0xf80 [ 1152.713843][T25765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.713860][T25765] RIP: 0033:0x7fd125d9aeb9 [ 1152.713875][T25765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.713890][T25765] RSP: 002b:00007fd123fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1152.713905][T25765] RAX: ffffffffffffffda RBX: 00007fd126016090 RCX: 00007fd125d9aeb9 [ 1152.713916][T25765] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1152.713925][T25765] RBP: 00007fd125e08c1f R08: 0000000000000008 R09: 0000000000000000 [ 1152.713935][T25765] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 1152.713943][T25765] R13: 00007fd126016128 R14: 00007fd126016090 R15: 00007fffe64c02d8 [ 1152.714064][T25765] [ 1153.721408][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4035'. [ 1154.494614][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4037'. [ 1155.788937][T25823] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1158.837837][T19654] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1159.787019][T25853] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4051'. [ 1159.954036][T25853] vlan1: entered promiscuous mode [ 1160.000775][T25861] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1160.056773][T25853] vlan1: entered allmulticast mode [ 1160.133938][T25853] veth0_vlan: entered allmulticast mode [ 1160.153639][T25870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1160.461973][T25868] zswap: compressor not available [ 1160.664981][T25870] hsr_slave_0 (unregistering): left promiscuous mode [ 1160.713632][T25864] zswap: compressor not available [ 1161.549843][T25884] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1161.584458][T25884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1161.614958][T25884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1161.649701][T25884] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1161.667121][T25884] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1161.711503][T25884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1161.736982][T25884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1161.836083][T25884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1162.065707][T25897] futex_wake_op: syz.6.4056 tries to shift op by -2048; fix this program [ 1163.628990][T19654] Bluetooth: hci1: command 0x041b tx timeout [ 1163.635474][T18649] Bluetooth: hci2: command 0x0c1a tx timeout [ 1163.642013][T18649] Bluetooth: hci0: command 0x0c1a tx timeout [ 1163.679875][T25913] FAULT_INJECTION: forcing a failure. [ 1163.679875][T25913] name failslab, interval 1, probability 393216, space 0, times 0 [ 1163.708423][T19654] Bluetooth: hci4: command 0x0c1a tx timeout [ 1163.714446][T19654] Bluetooth: hci5: command 0x0c1a tx timeout [ 1163.790995][T19654] Bluetooth: hci3: command 0x0c1a tx timeout [ 1163.876066][T25913] CPU: 0 UID: 0 PID: 25913 Comm: syz.3.4058 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.876095][T25913] Tainted: [L]=SOFTLOCKUP [ 1163.876101][T25913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1163.876111][T25913] Call Trace: [ 1163.876117][T25913] [ 1163.876124][T25913] dump_stack_lvl+0x100/0x190 [ 1163.876149][T25913] should_fail_ex.cold+0x5/0xa [ 1163.876175][T25913] should_failslab+0xc2/0x120 [ 1163.876196][T25913] kmem_cache_alloc_noprof+0x83/0x780 [ 1163.876216][T25913] ? key_alloc+0x3b4/0x1310 [ 1163.876239][T25913] ? key_alloc+0x3c5/0x1310 [ 1163.876263][T25913] ? key_alloc+0x3c5/0x1310 [ 1163.876283][T25913] key_alloc+0x3c5/0x1310 [ 1163.876311][T25913] ? trace_kmalloc+0x83/0xb0 [ 1163.876331][T25913] ? __pfx_key_alloc+0x10/0x10 [ 1163.876358][T25913] keyring_alloc+0x44/0xc0 [ 1163.876375][T25913] install_thread_keyring_to_cred+0xc1/0x140 [ 1163.876397][T25913] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 1163.876418][T25913] __do_sys_keyctl+0x316/0x5a0 [ 1163.876439][T25913] do_syscall_64+0xc9/0xf80 [ 1163.876459][T25913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.876475][T25913] RIP: 0033:0x7fed8819aeb9 [ 1163.876488][T25913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.876502][T25913] RSP: 002b:00007fed8911e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1163.876518][T25913] RAX: ffffffffffffffda RBX: 00007fed88416090 RCX: 00007fed8819aeb9 [ 1163.876528][T25913] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1163.876537][T25913] RBP: 00007fed88208c1f R08: 0000000000000008 R09: 0000000000000000 [ 1163.876546][T25913] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 1163.876556][T25913] R13: 00007fed88416128 R14: 00007fed88416090 R15: 00007ffc58c39198 [ 1163.876576][T25913] [ 1164.934411][T24056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1164.966057][T24056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1164.976546][T24056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1164.985509][T24056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1164.993385][T24056] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1165.361972][T25918] FAULT_INJECTION: forcing a failure. [ 1165.361972][T25918] name failslab, interval 1, probability 393216, space 0, times 0 [ 1165.430063][T25918] CPU: 0 UID: 0 PID: 25918 Comm: syz.8.4060 Tainted: G L syzkaller #0 PREEMPT(full) [ 1165.430091][T25918] Tainted: [L]=SOFTLOCKUP [ 1165.430097][T25918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1165.430107][T25918] Call Trace: [ 1165.430112][T25918] [ 1165.430119][T25918] dump_stack_lvl+0x100/0x190 [ 1165.430143][T25918] should_fail_ex.cold+0x5/0xa [ 1165.430168][T25918] should_failslab+0xc2/0x120 [ 1165.430190][T25918] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1165.430209][T25918] ? lockdep_init_map_type+0x5c/0x250 [ 1165.430235][T25918] ? __d_alloc+0x34/0xa80 [ 1165.430262][T25918] ? __d_alloc+0x34/0xa80 [ 1165.430278][T25918] __d_alloc+0x34/0xa80 [ 1165.430298][T25918] d_alloc_pseudo+0x1c/0xc0 [ 1165.430321][T25918] alloc_file_pseudo+0xcf/0x230 [ 1165.430343][T25918] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1165.430365][T25918] ? alloc_fd+0x476/0x790 [ 1165.430385][T25918] sock_alloc_file+0x50/0x210 [ 1165.430409][T25918] __sys_socket+0x1c0/0x260 [ 1165.430425][T25918] ? fput+0x79/0x100 [ 1165.430444][T25918] ? __pfx___sys_socket+0x10/0x10 [ 1165.430461][T25918] ? xfd_validate_state+0x129/0x190 [ 1165.430488][T25918] __x64_sys_socket+0x72/0xb0 [ 1165.430505][T25918] ? lockdep_hardirqs_on+0x78/0x100 [ 1165.430523][T25918] do_syscall_64+0xc9/0xf80 [ 1165.430542][T25918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.430557][T25918] RIP: 0033:0x7fd125d9aeb9 [ 1165.430570][T25918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.430585][T25918] RSP: 002b:00007fd123ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1165.430600][T25918] RAX: ffffffffffffffda RBX: 00007fd126015fa0 RCX: 00007fd125d9aeb9 [ 1165.430611][T25918] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1165.430620][T25918] RBP: 00007fd125e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1165.430629][T25918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.430639][T25918] R13: 00007fd126016038 R14: 00007fd126015fa0 R15: 00007fffe64c02d8 [ 1165.430658][T25918] [ 1165.981317][T19654] Bluetooth: hci3: command 0x0c1a tx timeout [ 1166.558445][T25915] chnl_net:caif_netlink_parms(): no params data found [ 1167.056904][T19654] Bluetooth: hci6: command tx timeout [ 1167.652517][T25915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.682356][T25915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.715055][T25915] bridge_slave_0: entered allmulticast mode [ 1167.723452][T25952] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 1167.773498][T25915] bridge_slave_0: entered promiscuous mode [ 1167.823809][T25915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.866194][T25915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.910924][T25915] bridge_slave_1: entered allmulticast mode [ 1167.962567][T25915] bridge_slave_1: entered promiscuous mode [ 1168.009366][T19654] Bluetooth: hci3: command 0x0c1a tx timeout [ 1168.161791][T25915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.297845][T25915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.513644][T25915] team0: Port device team_slave_0 added [ 1168.570762][T25915] team0: Port device team_slave_1 added [ 1168.726618][T25915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.781973][T25915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.891059][T25915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.953393][T25915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.960699][T25915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.121160][T19654] Bluetooth: hci6: command tx timeout [ 1169.154021][T25965] openvswitch: netlink: IP tunnel dst address not specified [ 1169.177584][T25915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.472836][T25915] hsr_slave_0: entered promiscuous mode [ 1169.507024][T25915] hsr_slave_1: entered promiscuous mode [ 1169.567140][T25915] debugfs: 'hsr0' already exists in 'hsr' [ 1169.614709][T25915] Cannot create hsr debugfs directory [ 1169.687327][T25973] zswap: compressor not available [ 1170.879231][T25915] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1171.001143][T25915] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1171.064632][T25915] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1171.190358][T19654] Bluetooth: hci6: command tx timeout [ 1171.211427][T25915] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1171.559953][T25915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.662443][T25915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.739510][T21970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.746669][T21970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.812634][T25706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.819846][T25706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.981141][T25915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1172.787139][T25915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.259329][T19654] Bluetooth: hci6: command tx timeout [ 1173.899057][T25915] veth0_vlan: entered promiscuous mode [ 1174.654367][T25915] veth1_vlan: entered promiscuous mode [ 1175.271296][T25915] veth0_macvtap: entered promiscuous mode [ 1175.343529][T25915] veth1_macvtap: entered promiscuous mode [ 1175.448935][T25915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.536929][T25915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.593492][T24530] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.634787][T24530] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.727936][T24530] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.775568][T24530] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.334819][T24530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.390162][T24530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.843289][T24530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.882784][T24530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.626127][T26072] snd_virmidi snd_virmidi.0: control 61678:131081:3:y>o[k<:0 is already present [ 1182.295694][ T30] audit: type=1800 audit(4294969449.383:41): pid=26136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4097" name="lu_gp_id" dev="configfs" ino=202974 res=0 errno=0 [ 1182.506502][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.513134][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.802044][T26139] FAULT_INJECTION: forcing a failure. [ 1182.802044][T26139] name failslab, interval 1, probability 393216, space 0, times 0 [ 1182.884079][T26139] CPU: 0 UID: 0 PID: 26139 Comm: syz.9.4098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.884106][T26139] Tainted: [L]=SOFTLOCKUP [ 1182.884111][T26139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1182.884121][T26139] Call Trace: [ 1182.884126][T26139] [ 1182.884132][T26139] dump_stack_lvl+0x100/0x190 [ 1182.884155][T26139] should_fail_ex.cold+0x5/0xa [ 1182.884181][T26139] should_failslab+0xc2/0x120 [ 1182.884202][T26139] kmem_cache_alloc_noprof+0x83/0x780 [ 1182.884222][T26139] ? security_file_alloc+0x34/0x2c0 [ 1182.884249][T26139] ? security_file_alloc+0x34/0x2c0 [ 1182.884271][T26139] security_file_alloc+0x34/0x2c0 [ 1182.884295][T26139] init_file+0x93/0x4c0 [ 1182.884322][T26139] alloc_empty_file+0x73/0x1c0 [ 1182.884345][T26139] path_openat+0xe8/0x3120 [ 1182.884362][T26139] ? getname_flags+0x93/0xf0 [ 1182.884376][T26139] ? do_sys_openat2+0xc5/0x220 [ 1182.884397][T26139] ? __x64_sys_openat+0x12d/0x210 [ 1182.884418][T26139] ? do_syscall_64+0xc9/0xf80 [ 1182.884435][T26139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.884455][T26139] ? __pfx_path_openat+0x10/0x10 [ 1182.884479][T26139] do_filp_open+0x1f7/0x420 [ 1182.884498][T26139] ? __pfx_do_filp_open+0x10/0x10 [ 1182.884528][T26139] ? _raw_spin_unlock+0x28/0x50 [ 1182.884543][T26139] ? alloc_fd+0x476/0x790 [ 1182.884564][T26139] do_sys_openat2+0x12e/0x220 [ 1182.884587][T26139] ? __pfx_do_sys_openat2+0x10/0x10 [ 1182.884611][T26139] ? __sys_sendmsg+0x18f/0x220 [ 1182.884637][T26139] __x64_sys_openat+0x12d/0x210 [ 1182.884660][T26139] ? __pfx___x64_sys_openat+0x10/0x10 [ 1182.884682][T26139] ? xfd_validate_state+0x129/0x190 [ 1182.884712][T26139] do_syscall_64+0xc9/0xf80 [ 1182.884732][T26139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.884747][T26139] RIP: 0033:0x7f877079aeb9 [ 1182.884760][T26139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.884774][T26139] RSP: 002b:00007f8771699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1182.884790][T26139] RAX: ffffffffffffffda RBX: 00007f8770a15fa0 RCX: 00007f877079aeb9 [ 1182.884799][T26139] RDX: 0000000000000100 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1182.884809][T26139] RBP: 00007f8770808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1182.884818][T26139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.884827][T26139] R13: 00007f8770a16038 R14: 00007f8770a15fa0 R15: 00007ffece0c4508 [ 1182.884846][T26139] [ 1183.974119][T26150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4099'. [ 1187.795412][T26190] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1191.316839][T26243] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1194.290398][T26296] can: request_module (can-proto-0) failed. [ 1197.305828][T26352] FAULT_INJECTION: forcing a failure. [ 1197.305828][T26352] name failslab, interval 1, probability 393216, space 0, times 0 [ 1197.504830][T26356] nbd: must specify at least one socket [ 1197.530742][T26352] CPU: 0 UID: 0 PID: 26352 Comm: syz.3.4145 Tainted: G L syzkaller #0 PREEMPT(full) [ 1197.530771][T26352] Tainted: [L]=SOFTLOCKUP [ 1197.530777][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1197.530787][T26352] Call Trace: [ 1197.530793][T26352] [ 1197.530800][T26352] dump_stack_lvl+0x100/0x190 [ 1197.530825][T26352] should_fail_ex.cold+0x5/0xa [ 1197.530852][T26352] should_failslab+0xc2/0x120 [ 1197.530875][T26352] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1197.530897][T26352] ? __d_alloc+0x34/0xa80 [ 1197.530917][T26352] ? __d_alloc+0x34/0xa80 [ 1197.530935][T26352] __d_alloc+0x34/0xa80 [ 1197.530952][T26352] ? stack_trace_save+0x8e/0xc0 [ 1197.530971][T26352] d_alloc_parallel+0x111/0x14e0 [ 1197.530998][T26352] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1197.531025][T26352] ? lockdep_init_map_type+0x5c/0x250 [ 1197.531048][T26352] ? lockdep_init_map_type+0x5c/0x250 [ 1197.531072][T26352] __lookup_slow+0x193/0x460 [ 1197.531098][T26352] ? __pfx___lookup_slow+0x10/0x10 [ 1197.531130][T26352] ? __d_lookup+0x266/0x4a0 [ 1197.531148][T26352] lookup_slow+0x50/0x70 [ 1197.531169][T26352] link_path_walk+0x1377/0x1cc0 [ 1197.531191][T26352] path_openat+0x1be/0x3120 [ 1197.531208][T26352] ? getname_flags+0x93/0xf0 [ 1197.531222][T26352] ? do_sys_openat2+0xc5/0x220 [ 1197.531243][T26352] ? __x64_sys_openat+0x12d/0x210 [ 1197.531264][T26352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.531284][T26352] ? __pfx_path_openat+0x10/0x10 [ 1197.531309][T26352] do_filp_open+0x1f7/0x420 [ 1197.531328][T26352] ? __pfx_do_filp_open+0x10/0x10 [ 1197.531358][T26352] ? _raw_spin_unlock+0x28/0x50 [ 1197.531374][T26352] ? alloc_fd+0x476/0x790 [ 1197.531396][T26352] do_sys_openat2+0x12e/0x220 [ 1197.531419][T26352] ? __pfx_do_sys_openat2+0x10/0x10 [ 1197.531450][T26352] __x64_sys_openat+0x12d/0x210 [ 1197.531474][T26352] ? __pfx___x64_sys_openat+0x10/0x10 [ 1197.531495][T26352] ? xfd_validate_state+0x129/0x190 [ 1197.531525][T26352] do_syscall_64+0xc9/0xf80 [ 1197.531545][T26352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.531560][T26352] RIP: 0033:0x7fed8819aeb9 [ 1197.531574][T26352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.531589][T26352] RSP: 002b:00007fed8911e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1197.531604][T26352] RAX: ffffffffffffffda RBX: 00007fed88416090 RCX: 00007fed8819aeb9 [ 1197.531615][T26352] RDX: 0000000000111900 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1197.531625][T26352] RBP: 00007fed88208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1197.531636][T26352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.531645][T26352] R13: 00007fed88416128 R14: 00007fed88416090 R15: 00007ffc58c39198 [ 1197.531665][T26352] [ 1198.333876][T26363] nvme_fabrics: missing parameter 'transport=%s' [ 1198.388201][T26363] nvme_fabrics: missing parameter 'nqn=%s' [ 1198.623485][T26372] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1201.050849][T26394] aoe: could not set interface list: too many interfaces [ 1201.858310][T26428] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1203.397836][T26470] FAULT_INJECTION: forcing a failure. [ 1203.397836][T26470] name failslab, interval 1, probability 393216, space 0, times 0 [ 1203.667508][T26470] CPU: 0 UID: 0 PID: 26470 Comm: syz.8.4170 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.667548][T26470] Tainted: [L]=SOFTLOCKUP [ 1203.667554][T26470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1203.667564][T26470] Call Trace: [ 1203.667570][T26470] [ 1203.667577][T26470] dump_stack_lvl+0x100/0x190 [ 1203.667600][T26470] should_fail_ex.cold+0x5/0xa [ 1203.667626][T26470] should_failslab+0xc2/0x120 [ 1203.667647][T26470] kmem_cache_alloc_noprof+0x83/0x780 [ 1203.667667][T26470] ? vm_area_alloc+0x1f/0x160 [ 1203.667686][T26470] ? vm_area_alloc+0x1f/0x160 [ 1203.667701][T26470] vm_area_alloc+0x1f/0x160 [ 1203.667716][T26470] __mmap_region+0x101e/0x2820 [ 1203.667734][T26470] ? set_next_entity+0x11a/0x9b0 [ 1203.667756][T26470] ? __pfx___mmap_region+0x10/0x10 [ 1203.667777][T26470] ? find_held_lock+0x2b/0x80 [ 1203.667791][T26470] ? trace_ignore_this_task+0xbc/0x100 [ 1203.667808][T26470] ? trace_ignore_this_task+0xbc/0x100 [ 1203.667831][T26470] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1203.667848][T26470] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1203.667874][T26470] ? __schedule+0xff6/0x5e10 [ 1203.667889][T26470] ? trace_ignore_this_task+0xbc/0x100 [ 1203.667905][T26470] ? trace_ignore_this_task+0xbc/0x100 [ 1203.667944][T26470] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1203.667967][T26470] ? rcu_is_watching+0x12/0xc0 [ 1203.667986][T26470] mmap_region+0x180/0x3e0 [ 1203.668007][T26470] do_mmap+0xc63/0x12f0 [ 1203.668032][T26470] ? __pfx_do_mmap+0x10/0x10 [ 1203.668054][T26470] ? __pfx_down_write_killable+0x10/0x10 [ 1203.668077][T26470] vm_mmap_pgoff+0x29e/0x470 [ 1203.668103][T26470] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1203.668125][T26470] ? __do_sys_capget+0x109/0x540 [ 1203.668144][T26470] ? __x64_sys_futex+0x34f/0x4d0 [ 1203.668163][T26470] ? __x64_sys_futex+0x358/0x4d0 [ 1203.668186][T26470] ksys_mmap_pgoff+0x7d/0x5b0 [ 1203.668209][T26470] __x64_sys_mmap+0x125/0x190 [ 1203.668227][T26470] do_syscall_64+0xc9/0xf80 [ 1203.668246][T26470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.668261][T26470] RIP: 0033:0x7fd125d9aeb9 [ 1203.668292][T26470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.668307][T26470] RSP: 002b:00007fd123fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1203.668323][T26470] RAX: ffffffffffffffda RBX: 00007fd126016180 RCX: 00007fd125d9aeb9 [ 1203.668333][T26470] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1203.668343][T26470] RBP: 00007fd125e08c1f R08: 0000000000000401 R09: 0000000000008000 [ 1203.668353][T26470] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1203.668363][T26470] R13: 00007fd126016218 R14: 00007fd126016180 R15: 00007fffe64c02d8 [ 1203.668383][T26470] [ 1205.104470][T26496] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1205.579186][ T30] audit: type=1800 audit(4294969472.784:42): pid=26518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4179" name="lu_gp_id" dev="configfs" ino=205399 res=0 errno=0 [ 1207.662947][T26560] zswap: compressor not available [ 1208.079979][T26577] netlink: 'syz.6.4189': attribute type 29 has an invalid length. [ 1208.151056][T26577] netlink: 'syz.6.4189': attribute type 30 has an invalid length. [ 1208.200760][T26577] netlink: 'syz.6.4189': attribute type 31 has an invalid length. [ 1208.314643][T26577] netlink: 'syz.6.4189': attribute type 32 has an invalid length. [ 1208.395654][T26577] netlink: 'syz.6.4189': attribute type 33 has an invalid length. [ 1208.443295][T26577] netlink: 'syz.6.4189': attribute type 35 has an invalid length. [ 1208.543355][T26577] netlink: 'syz.6.4189': attribute type 37 has an invalid length. [ 1208.620066][T26577] netlink: 18 bytes leftover after parsing attributes in process `syz.6.4189'. [ 1210.431400][T26631] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1211.517387][T26649] aoe: could not set interface list: too many interfaces [ 1213.238444][T26667] zswap: compressor not available [ 1213.958643][T26681] FAULT_INJECTION: forcing a failure. [ 1213.958643][T26681] name failslab, interval 1, probability 393216, space 0, times 0 [ 1214.317235][T26681] CPU: 0 UID: 0 PID: 26681 Comm: syz.6.4210 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.317263][T26681] Tainted: [L]=SOFTLOCKUP [ 1214.317269][T26681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1214.317279][T26681] Call Trace: [ 1214.317285][T26681] [ 1214.317291][T26681] dump_stack_lvl+0x100/0x190 [ 1214.317315][T26681] should_fail_ex.cold+0x5/0xa [ 1214.317345][T26681] should_failslab+0xc2/0x120 [ 1214.317366][T26681] ? tomoyo_encode2+0xfb/0x3c0 [ 1214.317381][T26681] __kmalloc_noprof+0xf6/0x9c0 [ 1214.317402][T26681] ? tomoyo_encode2+0xfb/0x3c0 [ 1214.317416][T26681] tomoyo_encode2+0xfb/0x3c0 [ 1214.317433][T26681] tomoyo_encode+0x29/0x50 [ 1214.317448][T26681] tomoyo_realpath_from_path+0x18c/0x690 [ 1214.317468][T26681] tomoyo_path_number_perm+0x23c/0x580 [ 1214.317495][T26681] ? tomoyo_path_number_perm+0x22e/0x580 [ 1214.317521][T26681] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1214.317564][T26681] ? current_check_access_path+0x27a/0x460 [ 1214.317590][T26681] ? __pfx_current_check_access_path+0x10/0x10 [ 1214.317620][T26681] tomoyo_path_mknod+0x164/0x190 [ 1214.317637][T26681] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1214.317657][T26681] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1214.317676][T26681] security_path_mknod+0x161/0x300 [ 1214.317694][T26681] lookup_open.isra.0+0xc93/0x1890 [ 1214.317714][T26681] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1214.317733][T26681] ? __pfx___might_resched+0x10/0x10 [ 1214.317756][T26681] ? mnt_get_write_access+0x52/0x2f0 [ 1214.317781][T26681] ? __pfx_down_write+0x10/0x10 [ 1214.317800][T26681] ? mnt_get_write_access+0x1e9/0x2f0 [ 1214.317825][T26681] path_openat+0x117d/0x3120 [ 1214.317850][T26681] ? __pfx_path_openat+0x10/0x10 [ 1214.317875][T26681] do_filp_open+0x1f7/0x420 [ 1214.317895][T26681] ? __pfx_do_filp_open+0x10/0x10 [ 1214.317927][T26681] ? _raw_spin_unlock+0x28/0x50 [ 1214.317941][T26681] ? alloc_fd+0x476/0x790 [ 1214.317963][T26681] do_sys_openat2+0x12e/0x220 [ 1214.317986][T26681] ? __pfx_do_sys_openat2+0x10/0x10 [ 1214.318010][T26681] ? __fget_files+0x21f/0x3d0 [ 1214.318030][T26681] __x64_sys_openat+0x12d/0x210 [ 1214.318053][T26681] ? __pfx___x64_sys_openat+0x10/0x10 [ 1214.318075][T26681] ? xfd_validate_state+0x129/0x190 [ 1214.318106][T26681] do_syscall_64+0xc9/0xf80 [ 1214.318125][T26681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.318140][T26681] RIP: 0033:0x7ff54579aeb9 [ 1214.318154][T26681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.318168][T26681] RSP: 002b:00007ff5466cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1214.318183][T26681] RAX: ffffffffffffffda RBX: 00007ff545a16180 RCX: 00007ff54579aeb9 [ 1214.318193][T26681] RDX: 0000000000141040 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1214.318202][T26681] RBP: 00007ff545808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1214.318211][T26681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.318221][T26681] R13: 00007ff545a16218 R14: 00007ff545a16180 R15: 00007ffc231717c8 [ 1214.318241][T26681] [ 1214.964800][T26690] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4210'. [ 1215.001510][T26681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1216.662159][T26694] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1216.716715][T26694] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1216.844086][T26694] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1217.133000][T26739] FAULT_INJECTION: forcing a failure. [ 1217.133000][T26739] name failslab, interval 1, probability 393216, space 0, times 0 [ 1217.231251][T26739] CPU: 0 UID: 0 PID: 26739 Comm: syz.6.4221 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.231279][T26739] Tainted: [L]=SOFTLOCKUP [ 1217.231285][T26739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1217.231296][T26739] Call Trace: [ 1217.231301][T26739] [ 1217.231308][T26739] dump_stack_lvl+0x100/0x190 [ 1217.231333][T26739] should_fail_ex.cold+0x5/0xa [ 1217.231358][T26739] should_failslab+0xc2/0x120 [ 1217.231381][T26739] kmem_cache_alloc_noprof+0x83/0x780 [ 1217.231400][T26739] ? key_alloc+0x3b4/0x1310 [ 1217.231423][T26739] ? key_alloc+0x3c5/0x1310 [ 1217.231447][T26739] ? key_alloc+0x3c5/0x1310 [ 1217.231468][T26739] key_alloc+0x3c5/0x1310 [ 1217.231495][T26739] ? trace_kmalloc+0x83/0xb0 [ 1217.231516][T26739] ? __pfx_key_alloc+0x10/0x10 [ 1217.231543][T26739] keyring_alloc+0x44/0xc0 [ 1217.231560][T26739] install_thread_keyring_to_cred+0xc1/0x140 [ 1217.231583][T26739] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 1217.231605][T26739] __do_sys_keyctl+0x316/0x5a0 [ 1217.231625][T26739] do_syscall_64+0xc9/0xf80 [ 1217.231646][T26739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.231661][T26739] RIP: 0033:0x7ff54579aeb9 [ 1217.231675][T26739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.231690][T26739] RSP: 002b:00007ff5466f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1217.231705][T26739] RAX: ffffffffffffffda RBX: 00007ff545a16090 RCX: 00007ff54579aeb9 [ 1217.231716][T26739] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1217.231725][T26739] RBP: 00007ff545808c1f R08: 0000000000000008 R09: 0000000000000000 [ 1217.231733][T26739] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 1217.231742][T26739] R13: 00007ff545a16128 R14: 00007ff545a16090 R15: 00007ffc231717c8 [ 1217.231761][T26739] [ 1218.249882][T26744] netlink: 93 bytes leftover after parsing attributes in process `syz.6.4222'. [ 1218.364281][T26746] netlink: 93 bytes leftover after parsing attributes in process `syz.6.4222'. [ 1218.417623][T26742] netlink: 93 bytes leftover after parsing attributes in process `syz.6.4222'. [ 1221.656621][T26798] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4239'. [ 1223.704384][T26825] FAULT_INJECTION: forcing a failure. [ 1223.704384][T26825] name failslab, interval 1, probability 393216, space 0, times 0 [ 1223.875907][T26825] CPU: 0 UID: 0 PID: 26825 Comm: syz.9.4241 Tainted: G L syzkaller #0 PREEMPT(full) [ 1223.875935][T26825] Tainted: [L]=SOFTLOCKUP [ 1223.875941][T26825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1223.875951][T26825] Call Trace: [ 1223.875957][T26825] [ 1223.875963][T26825] dump_stack_lvl+0x100/0x190 [ 1223.875986][T26825] should_fail_ex.cold+0x5/0xa [ 1223.876018][T26825] should_failslab+0xc2/0x120 [ 1223.876040][T26825] __kmalloc_cache_noprof+0x80/0x810 [ 1223.876057][T26825] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 1223.876074][T26825] ? get_mem_cgroup_from_mm+0x132/0x600 [ 1223.876093][T26825] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 1223.876107][T26825] __do_sys_fanotify_init+0x5cf/0xe50 [ 1223.876125][T26825] do_syscall_64+0xc9/0xf80 [ 1223.876145][T26825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.876161][T26825] RIP: 0033:0x7f877079aeb9 [ 1223.876175][T26825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.876189][T26825] RSP: 002b:00007f8771657028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1223.876204][T26825] RAX: ffffffffffffffda RBX: 00007f8770a16180 RCX: 00007f877079aeb9 [ 1223.876219][T26825] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000200 [ 1223.876228][T26825] RBP: 00007f8770808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1223.876237][T26825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.876246][T26825] R13: 00007f8770a16218 R14: 00007f8770a16180 R15: 00007ffece0c4508 [ 1223.876265][T26825] [ 1224.493234][T26838] zswap: compressor not available [ 1224.587276][T26862] bridge0: port 3(batadv0) entered blocking state [ 1224.604929][T26862] bridge0: port 3(batadv0) entered disabled state [ 1224.746166][T26862] batadv0: entered allmulticast mode [ 1224.831587][ T30] audit: type=1800 audit(4294969492.144:43): pid=26875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4254" name="lu_gp_id" dev="configfs" ino=207219 res=0 errno=0 [ 1224.860458][T26862] batadv0: entered promiscuous mode [ 1224.880368][T26067] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1224.889626][T26067] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1224.968587][T26862] bridge0: port 3(batadv0) entered blocking state [ 1224.975199][T26862] bridge0: port 3(batadv0) entered forwarding state [ 1226.167701][T26887] zswap: compressor not available [ 1226.469558][T26912] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1226.851125][T26919] openvswitch: netlink: IP tunnel dst address not specified [ 1228.848080][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4271'. [ 1228.865422][T26955] Invalid ELF header magic: != ELF [ 1228.955301][T26962] blktrace: Concurrent blktraces are not allowed on loop2 [ 1229.195903][T26962] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1229.510382][T26966] netlink: 330 bytes leftover after parsing attributes in process `syz.8.4273'. [ 1229.934654][T26984] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1234.656200][T27035] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1235.433396][T27052] random: crng reseeded on system resumption [ 1235.638519][T27051] Restarting kernel threads ... [ 1235.740937][T27051] Done restarting kernel threads. [ 1236.408994][T27064] Invalid ELF header magic: != ELF [ 1237.423759][T27080] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1237.585052][T27080] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1238.979269][T27093] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4304'. [ 1239.140407][T27093] : renamed from bridge_slave_1 (while UP) [ 1239.311001][T27093] bridge0: port 2() entered disabled state [ 1240.545814][T27120] [U] [ 1240.548656][T27120] [U] [ 1240.551328][T27120] [U] [ 1240.553996][T27120] [U] [ 1240.619085][T27118] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4310'. [ 1240.647051][T27120] [U] [ 1240.649767][T27120] [U] .6o!- J/)b JDJNn;hZ։k0gs`OkY V8ȸ [ 1240.659806][T27120] [U] m [ 1240.662647][T27120] [U] l?)(:Z%R9k_?$ŘOw)ǛC9NyۊЗOY~XpsAYÈ`#{W&z9+$:h`E\X.\Ӏ͊@WOiKe @LU2`NeY$ l`J[I~xXQR9qF00"Àӎ} Ei`لSA26@Y!)˪ނE'!\}$^ߝ33b=SQgz۝Kn[4+f|ꊐ܊1ln<^/OiA ڏ8y03w )oվ?Py*K{&KCR2wؒv师+8S5C\p4Ȋ2|>] [ 1240.701270][T27120] [U] V8֛įՒ%`F? [" )Jj8O? (MCvNuзnp`U}^)f|~Gmu<A}" XqHU͆?VWy-=];P44Aq:= ɐj ?BP{޲t8lí1t v V4L-^-΃H<?1aq<bvDPpnQY(J(G].D1s״qңL=ƣK5_{ZWIJf%QBG<'i|35٦j BRhi(Kuj?Ax [ 1240.734759][T27120] [U] glepDK`#Lm5TZG2V [ 1240.740548][T27120] [U] [a${uq֜n},q [ 1240.745206][T27120] [U] "`@ 8r @frڳT%ΥMN-II8ݚV ,.wӯ(Qu4l 6®Eb5]'5z~~VT/ [ 1240.757154][T27120] [U] &0~i巟E!ە*ۢ0#Pzēb [ 1241.410026][T27120] [U] {P2$O)Lƴt [ 1241.455945][T27135] FAULT_INJECTION: forcing a failure. [ 1241.455945][T27135] name failslab, interval 1, probability 393216, space 0, times 0 [ 1241.473170][T27119] nfs: Unknown parameter 'nl802154' [ 1241.597196][T27135] CPU: 0 UID: 0 PID: 27135 Comm: syz.3.4313 Tainted: G L syzkaller #0 PREEMPT(full) [ 1241.597224][T27135] Tainted: [L]=SOFTLOCKUP [ 1241.597230][T27135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1241.597240][T27135] Call Trace: [ 1241.597245][T27135] [ 1241.597252][T27135] dump_stack_lvl+0x100/0x190 [ 1241.597287][T27135] should_fail_ex.cold+0x5/0xa [ 1241.597314][T27135] should_failslab+0xc2/0x120 [ 1241.597335][T27135] kmem_cache_alloc_noprof+0x83/0x780 [ 1241.597355][T27135] ? __pfx_map_id_range_down+0x10/0x10 [ 1241.597370][T27135] ? security_inode_alloc+0x3b/0x2c0 [ 1241.597393][T27135] ? security_inode_alloc+0x3b/0x2c0 [ 1241.597412][T27135] security_inode_alloc+0x3b/0x2c0 [ 1241.597433][T27135] inode_init_always_gfp+0xced/0x1040 [ 1241.597455][T27135] alloc_inode+0x8e/0x250 [ 1241.597476][T27135] sock_alloc+0x44/0x280 [ 1241.597489][T27135] ? security_socket_create+0x7f/0x250 [ 1241.597509][T27135] __sock_create+0xc2/0x860 [ 1241.597529][T27135] __sys_socket+0x14d/0x260 [ 1241.597546][T27135] ? __pfx_task_work_run+0x10/0x10 [ 1241.597569][T27135] ? __pfx___sys_socket+0x10/0x10 [ 1241.597585][T27135] ? xfd_validate_state+0x129/0x190 [ 1241.597612][T27135] __x64_sys_socket+0x72/0xb0 [ 1241.597629][T27135] ? lockdep_hardirqs_on+0x78/0x100 [ 1241.597646][T27135] do_syscall_64+0xc9/0xf80 [ 1241.597665][T27135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.597681][T27135] RIP: 0033:0x7fed8819aeb9 [ 1241.597699][T27135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.597713][T27135] RSP: 002b:00007fed8913f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1241.597728][T27135] RAX: ffffffffffffffda RBX: 00007fed88415fa0 RCX: 00007fed8819aeb9 [ 1241.597738][T27135] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1241.597748][T27135] RBP: 00007fed88208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1241.597757][T27135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1241.597767][T27135] R13: 00007fed88416038 R14: 00007fed88415fa0 R15: 00007ffc58c39198 [ 1241.597787][T27135] [ 1241.597811][T27135] socket: no more sockets [ 1242.505827][T27140] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1243.619855][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.632957][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.404019][T27175] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1244.833643][T27187] FAULT_INJECTION: forcing a failure. [ 1244.833643][T27187] name failslab, interval 1, probability 393216, space 0, times 0 [ 1244.900887][T27187] CPU: 0 UID: 0 PID: 27187 Comm: syz.8.4328 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.900914][T27187] Tainted: [L]=SOFTLOCKUP [ 1244.900920][T27187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1244.900930][T27187] Call Trace: [ 1244.900937][T27187] [ 1244.900944][T27187] dump_stack_lvl+0x100/0x190 [ 1244.900968][T27187] should_fail_ex.cold+0x5/0xa [ 1244.900995][T27187] should_failslab+0xc2/0x120 [ 1244.901017][T27187] ? handler_new_ref+0x1ab/0xc60 [ 1244.901035][T27187] __kmalloc_noprof+0xf6/0x9c0 [ 1244.901056][T27187] ? handler_new_ref+0x1ab/0xc60 [ 1244.901074][T27187] ? handler_new_ref+0x82f/0xc60 [ 1244.901091][T27187] handler_new_ref+0x1ab/0xc60 [ 1244.901116][T27187] v4l2_ctrl_new+0xe67/0x2340 [ 1244.901142][T27187] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1244.901169][T27187] v4l2_ctrl_new_std+0x1bb/0x290 [ 1244.901194][T27187] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1244.901214][T27187] ? rcu_is_watching+0x12/0xc0 [ 1244.901229][T27187] ? trace_kmalloc+0x83/0xb0 [ 1244.901249][T27187] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 1244.901268][T27187] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1244.901290][T27187] ? media_request_object_init+0x100/0x180 [ 1244.901311][T27187] vicodec_open+0x1b2/0xf70 [ 1244.901332][T27187] ? kobject_get_unless_zero+0x156/0x200 [ 1244.901357][T27187] v4l2_open+0x1d2/0x490 [ 1244.901376][T27187] ? __pfx_v4l2_open+0x10/0x10 [ 1244.901395][T27187] chrdev_open+0x234/0x6a0 [ 1244.901414][T27187] ? __pfx_apparmor_file_open+0x10/0x10 [ 1244.901434][T27187] ? __pfx_chrdev_open+0x10/0x10 [ 1244.901454][T27187] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1244.901477][T27187] do_dentry_open+0x73e/0x1570 [ 1244.901495][T27187] ? __pfx_chrdev_open+0x10/0x10 [ 1244.901513][T27187] ? security_inode_permission+0xbf/0x250 [ 1244.901539][T27187] vfs_open+0x82/0x3f0 [ 1244.901562][T27187] path_openat+0x21dc/0x3120 [ 1244.901587][T27187] ? __pfx_path_openat+0x10/0x10 [ 1244.901612][T27187] do_filp_open+0x1f7/0x420 [ 1244.901630][T27187] ? __pfx_do_filp_open+0x10/0x10 [ 1244.901661][T27187] ? _raw_spin_unlock+0x28/0x50 [ 1244.901676][T27187] ? alloc_fd+0x476/0x790 [ 1244.901699][T27187] do_sys_openat2+0x12e/0x220 [ 1244.901721][T27187] ? __pfx_do_sys_openat2+0x10/0x10 [ 1244.901744][T27187] ? __fget_files+0x21f/0x3d0 [ 1244.901764][T27187] __x64_sys_openat+0x12d/0x210 [ 1244.901787][T27187] ? __pfx___x64_sys_openat+0x10/0x10 [ 1244.901809][T27187] ? xfd_validate_state+0x129/0x190 [ 1244.901840][T27187] do_syscall_64+0xc9/0xf80 [ 1244.901859][T27187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.901875][T27187] RIP: 0033:0x7fd125d9aeb9 [ 1244.901897][T27187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.901912][T27187] RSP: 002b:00007fd123ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1244.901927][T27187] RAX: ffffffffffffffda RBX: 00007fd126015fa0 RCX: 00007fd125d9aeb9 [ 1244.901939][T27187] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1244.901949][T27187] RBP: 00007fd125e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1244.901959][T27187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.901968][T27187] R13: 00007fd126016038 R14: 00007fd126015fa0 R15: 00007fffe64c02d8 [ 1244.901988][T27187] [ 1246.663665][T27197] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4332'. [ 1249.486085][T27238] nbd: must specify at least one socket [ 1251.209119][T27275] __sock_release: fasync list not empty! [ 1252.453281][T27306] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1253.555589][T27320] netlink: 186 bytes leftover after parsing attributes in process `syz.8.4354'. [ 1254.308446][T27326] zswap: compressor  not available [ 1258.430534][T27411] zswap: compressor not available [ 1258.496135][T27417] FAULT_INJECTION: forcing a failure. [ 1258.496135][T27417] name failslab, interval 1, probability 393216, space 0, times 0 [ 1258.573881][T27417] CPU: 0 UID: 0 PID: 27417 Comm: syz.8.4372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.573909][T27417] Tainted: [L]=SOFTLOCKUP [ 1258.573915][T27417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1258.573926][T27417] Call Trace: [ 1258.573932][T27417] [ 1258.573938][T27417] dump_stack_lvl+0x100/0x190 [ 1258.573962][T27417] should_fail_ex.cold+0x5/0xa [ 1258.573988][T27417] should_failslab+0xc2/0x120 [ 1258.574009][T27417] ? udpv6_init_sock+0x24e/0x450 [ 1258.574027][T27417] __kmalloc_noprof+0xf6/0x9c0 [ 1258.574047][T27417] ? udpv6_init_sock+0x24e/0x450 [ 1258.574064][T27417] udpv6_init_sock+0x24e/0x450 [ 1258.574082][T27417] ? __pfx_udpv6_init_sock+0x10/0x10 [ 1258.574102][T27417] inet6_create+0xb2f/0x12c0 [ 1258.574124][T27417] ? inet6_create+0x7f/0x12c0 [ 1258.574147][T27417] __sock_create+0x339/0x860 [ 1258.574169][T27417] __sys_socket+0x14d/0x260 [ 1258.574185][T27417] ? fput+0x79/0x100 [ 1258.574204][T27417] ? __pfx___sys_socket+0x10/0x10 [ 1258.574221][T27417] ? xfd_validate_state+0x129/0x190 [ 1258.574249][T27417] __x64_sys_socket+0x72/0xb0 [ 1258.574266][T27417] ? lockdep_hardirqs_on+0x78/0x100 [ 1258.574283][T27417] do_syscall_64+0xc9/0xf80 [ 1258.574302][T27417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.574317][T27417] RIP: 0033:0x7fd125d9aeb9 [ 1258.574330][T27417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.574344][T27417] RSP: 002b:00007fd123ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1258.574359][T27417] RAX: ffffffffffffffda RBX: 00007fd126015fa0 RCX: 00007fd125d9aeb9 [ 1258.574369][T27417] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 1258.574378][T27417] RBP: 00007fd125e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1258.574387][T27417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.574396][T27417] R13: 00007fd126016038 R14: 00007fd126015fa0 R15: 00007fffe64c02d8 [ 1258.574415][T27417] [ 1259.543335][ T30] audit: type=1800 audit(4294969526.985:44): pid=27427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4375" name="members" dev="configfs" ino=210557 res=0 errno=0 [ 1259.581076][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1259.785857][T24056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1259.804749][T24056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1259.828432][T24056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1259.839248][T24056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1259.847058][T24056] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1260.433656][T27446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1260.503931][T27452] FAULT_INJECTION: forcing a failure. [ 1260.503931][T27452] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1260.618413][T27452] CPU: 0 UID: 0 PID: 27452 Comm: syz.6.4380 Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.618441][T27452] Tainted: [L]=SOFTLOCKUP [ 1260.618447][T27452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1260.618456][T27452] Call Trace: [ 1260.618462][T27452] [ 1260.618469][T27452] dump_stack_lvl+0x100/0x190 [ 1260.618493][T27452] should_fail_ex.cold+0x5/0xa [ 1260.618518][T27452] get_futex_key+0x1d2/0x1620 [ 1260.618541][T27452] ? __pfx_get_futex_key+0x10/0x10 [ 1260.618560][T27452] ? bpf_lsm_bpf+0x9/0x10 [ 1260.618584][T27452] ? __sys_bpf+0x173/0x5050 [ 1260.618603][T27452] futex_wake+0xea/0x530 [ 1260.618624][T27452] ? __pfx___sys_bpf+0x10/0x10 [ 1260.618641][T27452] ? __pfx_futex_wait+0x10/0x10 [ 1260.618655][T27452] ? __pfx_futex_wake+0x10/0x10 [ 1260.618680][T27452] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1260.618701][T27452] do_futex+0x32b/0x350 [ 1260.618721][T27452] ? __pfx_do_futex+0x10/0x10 [ 1260.618755][T27452] __x64_sys_futex+0x34f/0x4d0 [ 1260.618779][T27452] ? __pfx___x64_sys_futex+0x10/0x10 [ 1260.618800][T27452] ? xfd_validate_state+0x129/0x190 [ 1260.618830][T27452] do_syscall_64+0xc9/0xf80 [ 1260.618850][T27452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.618865][T27452] RIP: 0033:0x7ff54579aeb9 [ 1260.618878][T27452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.618893][T27452] RSP: 002b:00007ff5467110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1260.618908][T27452] RAX: ffffffffffffffda RBX: 00007ff545a15fa8 RCX: 00007ff54579aeb9 [ 1260.618918][T27452] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff545a15fac [ 1260.618927][T27452] RBP: 00007ff545a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.618936][T27452] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1260.618945][T27452] R13: 00007ff545a16038 R14: 00007ffc231716e0 R15: 00007ffc231717c8 [ 1260.618965][T27452] [ 1261.054770][T27452] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4380'. [ 1261.092916][T27452] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4380'. [ 1261.393766][T27432] chnl_net:caif_netlink_parms(): no params data found [ 1261.753632][T27432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.790081][T27432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.829929][T27432] bridge_slave_0: entered allmulticast mode [ 1261.860914][T27432] bridge_slave_0: entered promiscuous mode [ 1261.891732][T27432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.916281][T27432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.948978][T24056] Bluetooth: hci7: command tx timeout [ 1261.972607][T27432] bridge_slave_1: entered allmulticast mode [ 1261.991323][T27432] bridge_slave_1: entered promiscuous mode [ 1262.176626][T27432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.227337][T27432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.382079][T27432] team0: Port device team_slave_0 added [ 1262.600563][T27432] team0: Port device team_slave_1 added [ 1262.844954][T27432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.911722][T27432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.110650][T27432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.293986][T27432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.333357][T27432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.474782][T27432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.864348][T27432] hsr_slave_0: entered promiscuous mode [ 1263.901575][T27432] hsr_slave_1: entered promiscuous mode [ 1263.925396][T27432] debugfs: 'hsr0' already exists in 'hsr' [ 1263.953949][T27432] Cannot create hsr debugfs directory [ 1263.989274][T24056] Bluetooth: hci7: command tx timeout [ 1264.868925][T27432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1264.921714][T27432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1264.963823][T27432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1264.985933][T27512] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1265.012611][T27432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1265.169845][T27523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4393'. [ 1265.385012][T27432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.506335][T27432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.558392][T27503] [U] ^\ [ 1265.575572][T27529] FAULT_INJECTION: forcing a failure. [ 1265.575572][T27529] name failslab, interval 1, probability 393216, space 0, times 0 [ 1265.605816][T25700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.613012][T25700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.695446][T27529] CPU: 0 UID: 0 PID: 27529 Comm: syz.6.4394 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.695475][T27529] Tainted: [L]=SOFTLOCKUP [ 1265.695481][T27529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1265.695491][T27529] Call Trace: [ 1265.695497][T27529] [ 1265.695504][T27529] dump_stack_lvl+0x100/0x190 [ 1265.695528][T27529] should_fail_ex.cold+0x5/0xa [ 1265.695554][T27529] should_failslab+0xc2/0x120 [ 1265.695575][T27529] __kmalloc_cache_noprof+0x80/0x810 [ 1265.695591][T27529] ? __kthread_create_on_node+0xce/0x3f0 [ 1265.695614][T27529] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 1265.695637][T27529] ? __kthread_create_on_node+0xce/0x3f0 [ 1265.695656][T27529] __kthread_create_on_node+0xce/0x3f0 [ 1265.695676][T27529] ? __pfx___kthread_create_on_node+0x10/0x10 [ 1265.695704][T27529] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 1265.695725][T27529] kthread_create_on_node+0xc7/0x100 [ 1265.695744][T27529] ? __pfx_kthread_create_on_node+0x10/0x10 [ 1265.695762][T27529] ? lockdep_hardirqs_on+0x78/0x100 [ 1265.695782][T27529] ? find_held_lock+0x2b/0x80 [ 1265.695796][T27529] ? tomoyo_notify_gc+0xc6/0x480 [ 1265.695822][T27529] tomoyo_notify_gc+0x102/0x480 [ 1265.695842][T27529] ? ima_iint_find+0xe9/0x130 [ 1265.695860][T27529] ? __pfx_tomoyo_release+0x10/0x10 [ 1265.695876][T27529] tomoyo_release+0x31/0x40 [ 1265.695890][T27529] __fput+0x3ff/0xb40 [ 1265.695912][T27529] ? _raw_spin_unlock_irq+0x23/0x50 [ 1265.695929][T27529] task_work_run+0x150/0x240 [ 1265.695952][T27529] ? __pfx_task_work_run+0x10/0x10 [ 1265.695989][T27529] exit_to_user_mode_loop+0x100/0x4b0 [ 1265.696011][T27529] ? rcu_is_watching+0x12/0xc0 [ 1265.696027][T27529] do_syscall_64+0x4ea/0xf80 [ 1265.696048][T27529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.696063][T27529] RIP: 0033:0x7ff54579aeb9 [ 1265.696076][T27529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.696091][T27529] RSP: 002b:00007ff546711028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1265.696108][T27529] RAX: 0000000000000000 RBX: 00007ff545a15fa0 RCX: 00007ff54579aeb9 [ 1265.696117][T27529] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1265.696126][T27529] RBP: 00007ff545808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1265.696135][T27529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.696143][T27529] R13: 00007ff545a16038 R14: 00007ff545a15fa0 R15: 00007ffc231717c8 [ 1265.696162][T27529] [ 1266.092604][T27432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1266.104057][T27432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1266.121656][T25700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.128796][T25700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.233779][T27538] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input46 [ 1266.251152][T24056] Bluetooth: hci7: command tx timeout [ 1266.719674][T27432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.863435][T27432] veth0_vlan: entered promiscuous mode [ 1266.899971][T27432] veth1_vlan: entered promiscuous mode [ 1267.021485][T27432] veth0_macvtap: entered promiscuous mode [ 1267.115978][T27432] veth1_macvtap: entered promiscuous mode [ 1267.222279][T27432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.275770][T27432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.385429][T18677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.448884][T18677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.509535][T27565] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4403'. [ 1267.546653][T18677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.583308][T18677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.933895][T18648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.982870][T18648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.138604][T18677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.205190][T18677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.285420][T24056] Bluetooth: hci7: command tx timeout [ 1268.805710][T27561] kexec: Could not allocate control_code_buffer [ 1269.082879][ T31] INFO: task syz.4.3944:25348 blocked for more than 143 seconds. [ 1269.097386][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1269.142927][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1269.236372][ T31] task:syz.4.3944 state:D stack:27176 pid:25348 tgid:25346 ppid:20451 task_flags:0x400140 flags:0x00080002 [ 1269.349984][ T31] Call Trace: [ 1269.353293][ T31] [ 1269.406935][T27568] [U] ^\ [ 1269.412747][ T31] ? __schedule+0xf65/0x5e10 [ 1269.477557][ T31] __schedule+0xfe4/0x5e10 [ 1269.511710][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1269.566588][ T31] ? __pfx___schedule+0x10/0x10 [ 1269.640522][ T31] ? find_held_lock+0x2b/0x80 [ 1269.645238][ T31] ? schedule+0x2bf/0x390 [ 1269.734990][ T31] schedule+0xdd/0x390 [ 1269.780475][ T31] schedule_preempt_disabled+0x13/0x30 [ 1269.838199][ T31] __mutex_lock+0xc9a/0x1b90 [ 1269.842833][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1269.927306][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1269.932378][ T31] ? net_generic+0xea/0x2a0 [ 1269.975717][ T31] ? net_generic+0xea/0x2a0 [ 1269.980331][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1270.035415][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1270.040997][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1270.085488][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1270.130969][ T31] ? genl_get_cmd+0x3ef/0x720 [ 1270.149845][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1270.154550][ T31] ? security_capable+0x80/0x260 [ 1270.176122][ T31] genl_rcv_msg+0x560/0x800 [ 1270.180668][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.245843][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1270.252509][ T31] netlink_rcv_skb+0x159/0x420 [ 1270.338255][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.343319][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1270.383548][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1270.388865][ T31] genl_rcv+0x28/0x40 [ 1270.436845][ T31] netlink_unicast+0x5aa/0x870 [ 1270.441657][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1270.468967][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1270.493029][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.498355][ T31] ? __import_iovec+0x1d2/0x640 [ 1270.522814][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1270.528483][ T31] ____sys_sendmsg+0xa54/0xc30 [ 1270.555253][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.573098][ T31] ? try_to_wake_up+0x644/0x1a60 [ 1270.579361][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1270.598725][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.610336][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 1270.622729][ T31] ? find_held_lock+0x2b/0x80 [ 1270.627433][ T31] __sys_sendmsg+0x170/0x220 [ 1270.632017][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1270.655184][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1270.675143][ T31] do_syscall_64+0xc9/0xf80 [ 1270.680975][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.696786][ T31] RIP: 0033:0x7fc5d5f9aeb9 [ 1270.701212][ T31] RSP: 002b:00007fc5d41f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.731702][ T31] RAX: ffffffffffffffda RBX: 00007fc5d6215fa0 RCX: 00007fc5d5f9aeb9 [ 1270.739697][ T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1270.760894][ T31] RBP: 00007fc5d6008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1270.782544][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.790544][ T31] R13: 00007fc5d6216038 R14: 00007fc5d6215fa0 R15: 00007fff6c9edfc8 [ 1270.822292][ T31] [ 1270.922683][ T31] INFO: task syz.4.3944:25350 blocked for more than 145 seconds. [ 1270.970493][ T31] Tainted: G L syzkaller #0 [ 1270.977017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1271.009000][ T31] task:syz.4.3944 state:D stack:27960 pid:25350 tgid:25346 ppid:20451 task_flags:0x400140 flags:0x00080002 [ 1271.040632][ T31] Call Trace: [ 1271.043933][ T31] [ 1271.046854][ T31] ? __schedule+0xf65/0x5e10 [ 1271.059978][ T31] __schedule+0xfe4/0x5e10 [ 1271.064416][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1271.087139][ T31] ? __pfx___schedule+0x10/0x10 [ 1271.099928][ T31] ? find_held_lock+0x2b/0x80 [ 1271.112629][ T31] ? schedule+0x2bf/0x390 [ 1271.116982][ T31] schedule+0xdd/0x390 [ 1271.129566][ T31] schedule_preempt_disabled+0x13/0x30 [ 1271.135046][ T31] __mutex_lock+0xc9a/0x1b90 [ 1271.161378][ T31] ? trace_kmalloc+0x83/0xb0 [ 1271.166002][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7a0 [ 1271.182240][ T31] ? __alloc_skb+0x186/0x410 [ 1271.186861][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1271.205882][ T31] ? skb_put+0x138/0x180 [ 1271.210393][ T31] ? genlmsg_put+0x258/0x2d0 [ 1271.230624][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7a0 [ 1271.236362][ T31] nfsd_nl_threads_get_doit+0x1c6/0x7a0 [ 1271.250316][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1271.271569][ T31] ? kmem_cache_free+0x143/0x720 [ 1271.276536][ T31] ? netdev_pick_tx+0x4ab/0xe50 [ 1271.288814][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 1271.307842][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1271.322821][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1271.341084][ T31] ? genl_get_cmd+0x3ef/0x720 [ 1271.345786][ T31] ? __dev_queue_xmit+0x7fd/0x46f0 [ 1271.359881][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 1271.365190][ T31] genl_rcv_msg+0x560/0x800 [ 1271.388335][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1271.398384][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1271.404469][ T31] netlink_rcv_skb+0x159/0x420 [ 1271.428033][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1271.433672][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1271.450216][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1271.458449][ T31] genl_rcv+0x28/0x40 [ 1271.462446][ T31] netlink_unicast+0x5aa/0x870 [ 1271.467210][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1271.494601][ T31] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1271.515793][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1271.527523][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1271.532831][ T31] ? __import_iovec+0x1d2/0x640 [ 1271.548596][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1271.554257][ T31] ____sys_sendmsg+0xa54/0xc30 [ 1271.575828][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1271.589116][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 1271.594343][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1271.613382][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1271.635447][ T31] ? tomoyo_path_number_perm+0x188/0x580 [ 1271.641988][ T31] ? find_held_lock+0x2b/0x80 [ 1271.646771][ T31] __sys_sendmsg+0x170/0x220 [ 1271.669207][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1271.674347][ T31] ? kcov_ioctl+0x162/0x720 [ 1271.686778][ T31] ? kcov_ioctl+0x162/0x720 [ 1271.691310][ T31] ? kcov_ioctl+0x16a/0x720 [ 1271.695799][ T31] ? fput+0x79/0x100 [ 1271.722123][ T31] do_syscall_64+0xc9/0xf80 [ 1271.736443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.742982][ T31] RIP: 0033:0x7fc5d5f9aeb9 [ 1271.756549][ T31] RSP: 002b:00007fc5d41d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1271.778667][ T31] RAX: ffffffffffffffda RBX: 00007fc5d6216090 RCX: 00007fc5d5f9aeb9 [ 1271.796156][ T31] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1271.821025][ T31] RBP: 00007fc5d6008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1271.835992][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1271.856018][ T31] R13: 00007fc5d6216128 R14: 00007fc5d6216090 R15: 00007fff6c9edfc8 [ 1271.875768][ T31] [ 1271.925681][ T31] [ 1271.925681][ T31] Showing all locks held in the system: [ 1271.933431][ T31] 1 lock held by khungtaskd/31: [ 1271.983323][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1272.023738][ T31] 1 lock held by syz.5.2749/19554: [ 1272.044966][ T31] 2 locks held by syz.1.3652/24011: [ 1272.050179][ T31] #0: ffffffff904a2690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1272.085219][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 1272.122816][ T31] 2 locks held by syz-executor/24260: [ 1272.146513][ T31] #0: ffff8880295040e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1272.194097][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1272.203708][ T31] 2 locks held by syz.4.3944/25348: [ 1272.243815][ T31] #0: ffffffff904a2690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1272.276681][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1272.313451][ T31] 2 locks held by syz.4.3944/25350: [ 1272.318666][ T31] #0: ffffffff904a2690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1272.346343][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c6/0x7a0 [ 1272.372102][ T31] 2 locks held by syz-executor/25563: [ 1272.380080][ T31] #0: ffffffff903f5828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1272.402990][ T31] #1: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1272.428338][ T31] 4 locks held by kworker/u11:20/25701: [ 1272.442769][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1272.462671][ T31] #1: ffffc9000b587c98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1272.482856][ T31] #2: ffffffff903dcef0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 1272.513382][ T31] #3: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1272.530406][ T31] 2 locks held by syz-executor/25915: [ 1272.542270][ T31] #0: ffff888034bf40e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1272.564792][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1272.592056][ T31] 2 locks held by getty/26240: [ 1272.597765][ T31] #0: ffff8880360550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1272.621846][ T31] #1: ffffc9000ba4e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1272.651720][ T31] 2 locks held by syz.6.4362/27380: [ 1272.657577][ T31] #0: ffff8880293900e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1272.691559][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1272.713991][ T31] 4 locks held by syz.0.4373/27572: [ 1272.720563][ T31] #0: ffff888085a84ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1272.751264][ T31] #1: ffff888085a840c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1272.771262][ T31] #2: ffffffff9068e8e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1272.791517][ T31] #3: ffff888070ed5b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 1272.811619][ T31] 2 locks held by syz.3.4405/27586: [ 1272.841641][ T31] #0: ffff8880493960e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1272.870579][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1272.880193][ T31] 1 lock held by dhcpcd/27594: [ 1272.900158][ T31] #0: ffff88806dc6e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1272.920928][ T31] 1 lock held by dhcpcd/27595: [ 1272.925718][ T31] #0: ffff8880616ec260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1272.960095][ T31] [ 1273.010016][ T31] ============================================= [ 1273.010016][ T31] [ 1273.018461][ T31] NMI backtrace for cpu 0 [ 1273.018478][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.018499][ T31] Tainted: [L]=SOFTLOCKUP [ 1273.018504][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1273.018513][ T31] Call Trace: [ 1273.018519][ T31] [ 1273.018525][ T31] dump_stack_lvl+0x100/0x190 [ 1273.018548][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1273.018569][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1273.018593][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1273.018619][ T31] sys_info+0x141/0x190 [ 1273.018638][ T31] watchdog+0xcc3/0xfe0 [ 1273.018659][ T31] ? __pfx_watchdog+0x10/0x10 [ 1273.018675][ T31] ? __kthread_parkme+0x18c/0x230 [ 1273.018693][ T31] ? __pfx_watchdog+0x10/0x10 [ 1273.018710][ T31] ? __pfx_watchdog+0x10/0x10 [ 1273.018724][ T31] kthread+0x3b3/0x730 [ 1273.018745][ T31] ? __pfx_kthread+0x10/0x10 [ 1273.018764][ T31] ? ret_from_fork+0x79/0xaf0 [ 1273.018778][ T31] ? ret_from_fork+0x79/0xaf0 [ 1273.018791][ T31] ? rcu_is_watching+0x12/0xc0 [ 1273.018806][ T31] ? __pfx_kthread+0x10/0x10 [ 1273.018827][ T31] ret_from_fork+0x754/0xaf0 [ 1273.018841][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1273.018857][ T31] ? __switch_to+0x7b9/0x10c0 [ 1273.018876][ T31] ? __pfx_kthread+0x10/0x10 [ 1273.018897][ T31] ret_from_fork_asm+0x1a/0x30 [ 1273.018926][ T31] [ 1273.528669][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1273.535539][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.546201][ T31] Tainted: [L]=SOFTLOCKUP [ 1273.550508][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1273.560544][ T31] Call Trace: [ 1273.563806][ T31] [ 1273.566720][ T31] dump_stack_lvl+0x100/0x190 [ 1273.571389][ T31] vpanic+0x20d/0x630 [ 1273.575356][ T31] panic+0xd1/0xd1 [ 1273.579065][ T31] ? __pfx_panic+0x10/0x10 [ 1273.583466][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1273.589614][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1273.595762][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1273.601924][ T31] ? watchdog.cold+0x198/0x1ca [ 1273.606674][ T31] ? watchdog+0xcd3/0xfe0 [ 1273.610987][ T31] watchdog.cold+0x1a9/0x1ca [ 1273.615568][ T31] ? __pfx_watchdog+0x10/0x10 [ 1273.620313][ T31] ? __kthread_parkme+0x18c/0x230 [ 1273.625325][ T31] ? __pfx_watchdog+0x10/0x10 [ 1273.630014][ T31] ? __pfx_watchdog+0x10/0x10 [ 1273.634673][ T31] kthread+0x3b3/0x730 [ 1273.638752][ T31] ? __pfx_kthread+0x10/0x10 [ 1273.643369][ T31] ? ret_from_fork+0x79/0xaf0 [ 1273.648029][ T31] ? ret_from_fork+0x79/0xaf0 [ 1273.652688][ T31] ? rcu_is_watching+0x12/0xc0 [ 1273.657435][ T31] ? __pfx_kthread+0x10/0x10 [ 1273.662025][ T31] ret_from_fork+0x754/0xaf0 [ 1273.666625][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1273.671732][ T31] ? __switch_to+0x7b9/0x10c0 [ 1273.676402][ T31] ? __pfx_kthread+0x10/0x10 [ 1273.680982][ T31] ret_from_fork_asm+0x1a/0x30 [ 1273.685742][ T31] [ 1273.688808][ T31] Kernel Offset: disabled [ 1273.693118][ T31] Rebooting in 86400 seconds..