last executing test programs: 3m15.451920624s ago: executing program 1 (id=2148): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x640c5}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x804) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/190, 0xbe) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x8, 0x2000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) socket(0x11, 0x3, 0x0) r1 = open(0x0, 0x108242, 0x78e22799f4a46f8e) flock$auto(r1, 0x6) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) 3m15.135370164s ago: executing program 1 (id=2151): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x2, 0x0) fsopen$auto(0x0, 0x1) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x0, 0xc, 0x0, 0x4000fff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/options\x00', 0x20000, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x20000001005}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) rename$auto(0x0, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x81}, 0x5) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r4, &(0x7f0000000040)="713aa6185ac801fb61dd46a6683a08cb0142bc8db012bd0efd3f1d3a0e425091f23ace6d9b069efd7496d3abf7f03f05e2e796a1f7864693d17aab92b2bf3a75f505bc8218533e636f2c", 0x4a) 3m13.687931273s ago: executing program 1 (id=2156): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0) open(0x0, 0x8600, 0xe6) mmap$auto(0xfffffffffffffffa, 0x6bcb, 0xdf, 0xebe, r0, 0x4) socketpair$auto(0x1e, 0x6, 0x8, 0x0) r2 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c000}, 0x40854) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) kexec_load$auto(0xff, 0xd, &(0x7f0000000140)={@buf=&(0x7f00000000c0)="a4fc60c3cde5180ed6dc21253ad62d0090fd882763a3b9ac9585b08c1a24d3eb9af01273e4fe29f02292cb5746481f349463edfdedc2cdf1f84d059f7f446cc6627ac7f6c67aa84f193eeeebf8aacdc67263a7a116e6baef0d082e6234c97f1140955cab635ee98d6de0e180f081d0229975e43a", 0xfffffffffffffff8, 0x8, 0xffffffffffffff01}, 0x2) getsockopt$auto(r2, 0x11b, 0x8, 0x0, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xc1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x7) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000300)={0x6f8, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x6d9, 0xe, "d746c94ab0d671b83ca357eec2b26a0e88589f1569f3c3ff0949849c0c37065ae7f9b1f33344a5e784848f21aad6c852580c08b1bca21715919b3d076ee938881e3227bb4019353270e7bc6ae36dade74847cb861febce3b997323b2b5d88a3d4db2c6e56eda5bc99bd9afb226713303ef6a1ca0e179e2f1a87754959497d31ff38e8471658c08f82f8fca8ba0e4567371cb1b31022d7f11c7797b0fe3493a7d276b92fcdf0db7ad08e24ed5ef6c63b615d77a9d258c1697df29efb5742fc2152bebe5485b024ca7e3595b596d43a357a964e03d0b58b8a31ba81e07c7db29026f9af3510b0dd2938befe56a709098452fdd45f551b3df1f503afcbb4b08366d3710d60254bc306d92e38e2ac8e8bbb84e1502c8de673986ddd5e2d2bf00a4c1435540f97496431eef124df35c30ed8d2578b508c2e4ac8f44673b67df02244433cc8c0999948ae07cbb69a4ea163c74cc9529a16386c610e73407fdd3b5c5e7d0d3debb656f4c1af666e960890e998d26b3e62088106212c73936f63df13a03e84e810f2a3a734854e49b43f3d147b983c1e9380bd54eabe5e295f5cf444ec2a3958d558b52072af65ff98437f627b73cb31dcfd9f0d0c4a41be69c675ff2c99405a9818653a6d35fcb5069b9b59ceb6a888f756a320702dfa657907fc3836091049773334d1ab90db0b65bee6646e53e35b7ed894168380d4091813a0c2307c865e1194a84e8989f797d70eaa6a2f398c490b8213e144159c09e984a65dcb94cdf269a158b91b0d413aa62c5df3e0cda8c1ad2be1462339c0f28bd5fcefce5875b16d96e142b4f1bde5472a5a248eb047b974cc15c2b790722dc9132224814bb95e0d977d53f02b33e22c9b03dc44d3f70e848af286e55637a02f6978f688087d8a619652ef8e797565be0cd06449210f1003db1415004e391ec0a2c2c5a65ebaa7d2a514108be92a24c78637c2b97096e1cac405a8ea09e1912ae5dc133756903988ba935ba6c9e54ce0c0e9a63e133b0a58afb68444f4ab361e4018cd58f7aeefaf501722a3792aa32f875d636f52cad369aa0b25ee13389bf9aa529e36d51d03296fb40ef701b5c1580ee9ec238de420206a6601bc7c28e2ff2a0adbbcddf7d0cebbb6de6f89bb41a0cdbeebc861e2d1c32f2cd2eac58f31a723eeee1aea7cddd25df90a7ed22827a984ef7132bc2cd50688c4e347c8a1799a07adc0f7ffbdb7eeb08f2c9be5d964da57aeedb962abe5ebe40b15c1dd89611e1c954ff08a37f6a5ddef2465d68b06d5e26841c8df83ce069fe11bd3c4ed3be3be2f24b775f9cfa9ad23c21ccc04c35d62069a126fb144ce1b01752eff3999f1f2e2864fc6ae72a811c8d748407887a9bbcf64e5a284f23219c0c4781a6d44a0cfd489e4c30b4bfd0c46eb09933e6f754b649455851632706ca4f1e1019289f013cc398da8ab902c2eca7dd54412c0df690cce020216e9f0c87cb05948c01f97ce0e067563d88c4885a4d347a9312f8e8a83c9926556ff3761ec26fc69ef3459acf5e4e4e8bb5a04f7f0c873b5c0f4e09d885d41fe45ebb676747c9b52eb303b5a471ffdc90a4e69aec75e6d3f5088884461ccfa8438b939f2a1d34227ffb2e970a57a7287650587349d161313082f9d6c00860da94be5228714125e36d906ecd2d236aa4e80f154f7d2a60d81aa24563dd2bdd4ff3f7e8bcf7fdb629ee9dde68f8687d5cbcdbeec4b7f01a062e15634f5df276a46c532fd9a98be3d7fe097e112b2576d632ce69884f94f3dfd701b4181242dbaf3d31f171111473942a1ff0238111af3103cf8e7947d20eb0b366a0027e685ba249a766431c7a487b6e54da6ab8c3414a23bafa49414138a3e85a0e071744c19a07e312bff19e9c7f2ef4f7fa747dcc13145064f4e849fa0270d1ebba7006547bfbc1504101ddeebac41ca9f432bcf225f016f4b6a757b8e4124334f15367aade1e93aa8dfb073da96225fa293102eaaf2650774f0c1115cfd79a080985c6ddc65592824b41787eba244bf537c5a2b607a772e431b8192f4865e729bcc5414e2d713977a29db1a6ebf0b342c03fedabd82a71e3f1aec1bc14bf3b425856d4ffa71a1a9a2f75140df29c40f72da45dfb1924d6b00ecbf0e94b886c68a59548b26f131337689a0cd141b2963c970a5eb93b4c38cbc3ae33e033e160f6118d2238aa454fb03f9099c2014a5286ce2be264c589732882d191ff5004e8ef9761071e699a47db965589c2de7733670c50b690f14fc7b3d72ea237d0652649ad43bad61e773c562f430659142a10d2287d09e0de34fe833de9de3230e6d21239c013dc149490227b82adeb45e60bc015d2bbbde866e21c05da2f82d0bc5b0da265cb28401e19c695117cd7b4c31c34d768d414697cf6e20258c9b3dbc97354cdbc99c19a6663d94b7982ce5dfb689dce2ec41dded158d3631884859cf3793889dd0f95ef64be110d0f"}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x81}]}, 0x6f8}}, 0x40080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = setfsuid$auto(0xee01) setresuid$auto(0x0, r6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)={0x1404, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_CQM={0x289, 0x5e, 0x0, 0x1, [@nested={0x18, 0x137, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x93, 0x0, 0x0, @binary}, @typed={0x8, 0xa2, 0x0, 0x0, @pid=r5}]}, @generic="0c7bca135190d9ab29869a42a0b8325aa184c13dcbfd025d00ce8ed964bdba50d3a0f412d7599356c5cc79a20da377aeb1c5b355822032de3d90830dafdf0c7f4785afd7a4ddbc4f102acc38e4e0478378f772678789afbfb2b15a1981a23266e0a0305af035d9a33b727ce5cf6b552ee7c1eda2698bc7bebb3fdc0e1e1e25b3bbd518f759148dc552077bbed05c7f9269886acddc5aec0cdf01bca8b73b7e39383e06b2ffd7172d5dd4f6cc016638e6d69f27b839076e", @typed={0x5, 0xd0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x146, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="17c3f700f16ac22990636f47f0656f6b6936fc8a1a311cc455d80867b107ee05e7f9cdd618c2e567d7ecf79d31299e454638c353025f02993e34f49f359cae1d1331b7825f8a74589ed21b6bf747a9252fed8098c8060701628dea85a58d8050d1b0db4714d70e61993df7505679e7b251b63920a95758d755aebd9b840fae0921c213776a4b0aac279a66c35342d4d69c2e8d774dec61452cacf3c1091e8e81c0ffed25ea42cf900834b407ddd40572209af6d976d80aef5f2d28f64148ea7d16990f5b5bdddd37", @typed={0x8, 0x81, 0x0, 0x0, @uid=r6}, @generic="a628948c7a1e2e056a527b0dfa36b28f18abe1527d8e6ccfceffff4bcb81b8895328329cbf360938b2dd30306bad7ed61a33bbcda75632fbd8d568c61be4e204369afb563b49f34b897af9c6a6e82fd748c47bd71b6ea3f5797c4859c0c22a1d8f44c97cd017820f005ba1a3088f6debaca719ace433ee08ed36bc8a0ab6a37e7a4527018645c2a135e9a39e924155021d2da840fa0c90bd1d7a4dc883b5dcd3da7ad50b1279c247835ee799b7f72d7b783199985a1fc822c045f662eb7090b5cd947b7b20d2c02f69d61eb2647d6b65facf"]}, @NL80211_ATTR_CSA_IES={0x1124, 0xb9, 0x0, 0x1, [@nested={0x109d, 0x1f, 0x0, 0x1, [@generic="83762722cf3353b0cf177f0dacf2316636b2de6efe30116667f43b2d2ef5d4e77bf9d46456813e521ed1d5b66aae0cbee315d7bc133fd792d5d466190dc13abcda0d28221a46b5bedf6bc29b466f5d38ab9d364b26615e7c8dd485c253871192bb377f1c56f0e4cf8ecaba8f76b983e8760d1a4c7cc67bdb744f66e2e23b1afff0af49896d71a69b76ab4f025c41157da0925ee3cf09efdff0", @nested={0x4, 0x149}, @generic="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"]}, @nested={0x7c, 0xa6, 0x0, 0x1, [@generic="5a285b156f94665f1b967a257c1172d57974f133342edeb71c8389c0ae9da533cba7c9371cc32efe6b8e69f44a737ff4a95178b8db73e7d6a53e24bde27d58b33b75f243f586bc5688495dc162e43913cb060a6fd34347c0cc28ad4c9aa54d2cc4fa5214a446744a9859c9fb0965b8b52c0a33e233dceb84"]}, @typed={0x4, 0x77}]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x29, 0xba, "8a9740d55adcaefe50b1797cb10892da185b79bad7aa34bb51f0dc0fdd6ee03d6375f9a0d8"}, @NL80211_ATTR_KEY_DATA={0x14, 0x7, "9238fbc3514aef7e368d78f2f326c8bd"}]}, 0x1404}, 0x1, 0x0, 0x0, 0x80}, 0x0) shmctl$auto_SHM_STAT(0x0, 0xd, &(0x7f00000003c0)={{0x8, 0x0, 0xee00, 0x80000001, 0x57, 0x9, 0x1}, 0x3, 0x1a1, 0x1, 0x324c253e, @inferred, @inferred, 0x6, 0x0, &(0x7f0000000280)="955695ad9d440840f4325a262e572f68cfb74cadebccddf1bccfa0c9a4dd62cc1f6def06d0b5372911040c1549e55f19c841", &(0x7f0000000380)="5bd6c9145688f59be5"}) r8 = setfsuid$auto(0xee00) r9 = setfsuid$auto(0xee01) setresuid$auto(r8, r9, r8) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000540)={0x3d0, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xa4, 0x1, 0x0, 0x1, [@typed={0x8, 0x12d, 0x0, 0x0, @pid}, @nested={0x95, 0x145, 0x0, 0x1, [@typed={0xc, 0xd1, 0x0, 0x0, @u64=0xffff}, @generic="bfb6de73d474", @nested={0x4, 0x62}, @typed={0x8, 0x13f, 0x0, 0x0, @uid=r6}, @generic="eb86b179c7807155540048ee6c2b8bd0ea2c16020779347c0380c7b4ddab35fb08100aee46de8dacef5c3f0441b852e28e4a24252f55278a59065b6417e20154b82a3ffd674345e3931558fbf35c02267da56654430c9bd4c816afa04be43a1ea6bdc095e044e03d4bd58cd954582dc27ae043"]}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@nested={0x8, 0xde, 0x0, 0x1, [@nested={0x4, 0xb7}]}, @nested={0x8, 0x14b, 0x0, 0x1, [@nested={0x4, 0x66}]}, @typed={0x8, 0xea, 0x0, 0x0, @uid=r7}, @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x126, 0x0, 0x1, [@nested={0x4, 0x29}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xb4, 0x2, 0x0, 0x1, [@typed={0xad, 0x67, 0x0, 0x0, @str='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff'}]}, @IPVS_CMD_ATTR_DAEMON={0x21f, 0x3, 0x0, 0x1, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x10a, 0xce, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @uid=r8}, @generic="78da5e7cb8098223a700283b8e47c1b71161dc15dd1bbc3e075a6b119ee5655c4e468cbaabd6bf2fc8c6cc47f64de7442a249966fa5235832324c359c5f76f7f50722b0e22cbeb10aea5f389290b9a529ee423967fb09c259d5b6425fae12266ffeaae55130c52b92abeee59d31eb7b7e633e88f7b89831a533213aa86062daeee7094214b3013dacff32cae822677962221790b30d685320f67191601e442be9b4b1cb269d9ec2d2acc5178faa509973665b9773c77b3305b856fd1759852d1d0e9c7d74164f2dfa656bbe9b8895f719873a38db7206af822689b14a781fdacce9be9c3f125f6dc27ae103c148b831048aa", @nested={0x4, 0x74}, @typed={0x8, 0x115, 0x0, 0x0, @u32=0x1}]}, @generic="4dc6be8490346dfa7fff96b065a1c5b283e2636aa28ef7badf0b73409cefe16fc189345d24e1476b724cf97b0a0e02d08acfd11c0f4f0706a3e284d18027e8c9c4dc14880d12764b9466121644b9795abcd836ae329203b107fe3d8936a4fa1985a6668165c2359c9583116a1168a28487445e0949007ad1f0f0a1398c11a405e2c71c34166216f02db494a604f0ebbc0720cdca3348c5c3d1f8279b91a910e2b5fdcb6935af677b4ca79060b38a926d4a781835af87bb404d3fa1c74190790413855aa9676749ef13b96403f71c396696a548e6b995a9e8703d553ab3ba047030c1fa", @nested={0x18, 0xe6, 0x0, 0x1, [@generic="fa7f05356ef55e9ba4e0b1f089dd6d3e757af7e2", @generic]}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000) 3m13.232944653s ago: executing program 1 (id=2158): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) 3m13.084298362s ago: executing program 1 (id=2159): mmap$auto(0x20, 0x400008, 0xdf, 0x9b72, 0x2, 0x2) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x43, 0x0) fsopen$auto(0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) ioctl$auto(0x1, 0x541b, 0x8) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) setpgid$auto(0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x400000000001, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x4, 0x100000000000000c, 0x8, 0x7ffffffffffffffe, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xf400000000000000, 0x400008, 0xdf, 0x9b72, r1, 0x8000) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb4, r0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) 3m12.177810925s ago: executing program 1 (id=2165): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x800, 0xea14) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc9) fcntl$auto(0x8000000000000001, 0x25, 0x8) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x40002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) mknod$auto(0x0, 0x1001, 0x5) open(0x0, 0x8c81, 0x91) madvise$auto(0x0, 0x400053, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 2m57.090915233s ago: executing program 32 (id=2165): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x800, 0xea14) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc9) fcntl$auto(0x8000000000000001, 0x25, 0x8) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x40002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) mknod$auto(0x0, 0x1001, 0x5) open(0x0, 0x8c81, 0x91) madvise$auto(0x0, 0x400053, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 2m20.330848968s ago: executing program 0 (id=2334): mmap$auto(0x6, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000004c0)="4b6883fddc1f44aaa9b87917e5821a0000000000000080ff0ff06e79", 0x1c) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f00000004c0)="445cc19989", 0x5) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x440101, 0x0) ioctl$auto_UDF_GETEASIZE(r2, 0x80046c40, &(0x7f0000000040)=0x8001) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0x18, 0xa, 0x1) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r3, @ANYBLOB="000429bd7000fedbdf25150000000c00170004000000000000000800050005000000050012000400000006000900050000001400040067726574617030000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40004) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) close_range$auto(0x2, 0xa, 0x0) 2m19.483664522s ago: executing program 0 (id=2336): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) r2 = fsopen$auto(&(0x7f0000000300)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x4000000000df, 0x336, r2, 0x6) socket(0xa, 0x4, 0x84) mmap$auto(0x500000000000000, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2m15.962797375s ago: executing program 0 (id=2343): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r4) sendmsg$auto_TCP_METRICS_CMD_DEL(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB='0\x00\x00\x00', @ANYBLOB="010927bd7000fbdbdf25027605080001"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x4001, 0x0) bpf$auto(0x8, &(0x7f0000000580)=@bpf_attr_3={0x10000, 0x1, 0x7f, 0x1251, 0xdead, 0x401, 0x405, 0x145, 0x0, "f408a6dbe6eb5bcf18a6edbe6175edff", r0, 0x9, 0xffffffffffffffff, 0x81, 0x0, 0xc, 0x0, 0x3, 0xd2e2, 0x1, @attach_prog_fd=r3, 0x2, 0x7, 0xff, 0x7fffffff, 0x8}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/11/smp_affinity\x00', 0xc8780, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2m14.298804647s ago: executing program 0 (id=2345): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x7ffe}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x1}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xff0f0200, 0x9}, 0x7}, 0x3, 0x0) 2m14.170296958s ago: executing program 0 (id=2346): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000380)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) msgctl$auto_IPC_INFO(0x45, 0x3, &(0x7f0000000200)={{0xff, 0xee00, 0xee00, 0x7fff, 0xb61, 0xa, 0xe17}, &(0x7f0000000180)=0xbf, &(0x7f00000001c0)=0x1, 0x4, 0x8000000000000001, 0x8000000000000001, 0x3, 0x10, 0x7, 0x7ff, 0x7, @raw=0x55c, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x4010) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw=0x6, 0xffffffffffffff0d, 0x0, 0x929, 0x10, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x100000001, 0xeb1, r1, 0xbf47) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x16b802, 0x0) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb3, 0x401, 0x8000) unshare$auto(0x3ff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) lsetxattr$auto(&(0x7f00000003c0)='}[,&*}\x00', &(0x7f0000000080)='/sys/module/zswap/parameters/compressor\x00', &(0x7f0000000280)="37a0e52a2287b4343388390dbd7f88c01111b18c1d50138693675bfab94c5ea99cbfdf74c7ed2a0e484443aee09b75ca19998e427637c821faa1fbb9ef831a0adf09083fa2c54fda9de913eb5cd37190ce96147bed457430aebb14b5d65c0813dc7c2779c317c484d9b7dd86eca39b52786a98d43e819834998cde0a7260c7ec7aaac9b1122d8e0b6a331270077badef661be97ace0bc15da62d31c106cfba8c57ef1caf02c5be41e1c3a9637b65970c39eeb894a61b02db9f340ff95c26ff85e650fcea752187d8ae80b36835258ceb69", 0xc, 0x81) shutdown$auto(0x200000003, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000004c0)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0x6, 0x7, 0xfffffffffffffffe}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) getpid() 2m11.960686223s ago: executing program 2 (id=2349): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x20008000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0x8, 0xd, 0x6, @_rt={r0, 0x0, @sival_ptr=0x0}}}) r1 = socket(0x11, 0x3, 0x9) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/saved_tgids\x00', 0x241842, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xf3) r3 = open(&(0x7f0000000100)='./file0\x00', 0x149443, 0xc8) r4 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={r3, 0x8, 0x2000000, 0x8000}) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r5, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) 2m11.141613501s ago: executing program 0 (id=2350): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r4) sendmsg$auto_TCP_METRICS_CMD_DEL(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB='0\x00\x00\x00', @ANYBLOB="010927bd7000fbdbdf25027605080001"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x4001, 0x0) bpf$auto(0x8, &(0x7f0000000580)=@bpf_attr_3={0x10000, 0x1, 0x7f, 0x1251, 0xdead, 0x401, 0x405, 0x145, 0x0, "f408a6dbe6eb5bcf18a6edbe6175edff", r0, 0x9, 0xffffffffffffffff, 0x81, 0x0, 0xc, 0x0, 0x3, 0xd2e2, 0x1, @attach_prog_fd=r3, 0x2, 0x7, 0xff, 0x7fffffff, 0x8}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/11/smp_affinity\x00', 0xc8780, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2m10.983856866s ago: executing program 2 (id=2351): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r2, 0x200000000000) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) ioctl$auto(r0, 0x4b44, 0x8000000000038) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) mmap$auto(0x3, 0xe983, 0xdc, 0xeb1, 0x401, 0x8000) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000180)=0x7) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) 2m8.317061574s ago: executing program 2 (id=2353): unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) (async) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x101401, 0x0) ioctl$auto(0xffffffffffffffff, 0x6, r0) (async) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci4/force_devcoredump\x00', 0x6c17e777a72615f, 0x0) write$auto_force_devcoredump_fops_hci_vhci(r1, &(0x7f00000000c0), 0x0) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000240)={@sival_ptr=&(0x7f00000001c0), @inferred=r1, 0x200}, &(0x7f0000000280)=0x3) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x8) (async) r3 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000440), 0x7) statx$auto(r2, &(0x7f0000000540)='./file0\x00', 0x2, 0x9, &(0x7f0000000580)={0x3, 0xfffffffb, 0x81, 0xfffffffa, 0xee00, 0xee01, 0x6c3b, 0x4, 0x2, 0x2, 0x5, 0x86c, {0x8, 0x5}, {0x3, 0x9}, {0x3, 0x47f}, {0x0, 0xfe7d}, 0x1, 0x3, 0x4f, 0x0, 0x6, 0x100, 0x6, 0x100000000, 0x4, 0x3, 0x8b, 0xddc2, [0xffe0, 0x0, 0xfffffffffffffff0, 0x0, 0x3, 0xba, 0x4b0, 0x0, 0x1]}) shmctl$auto(0xb7, 0x4, &(0x7f0000000840)={{0x7c, 0x0, 0xffffffffffffffff, 0x5, 0x100, 0x400}, 0x7fffffff, 0x1, 0xfffffffffffffff7, 0x7ff, @inferred, @inferred, 0x40, 0x0, &(0x7f0000000680)="6963bb1650baa54263497dabf7500c77f04ad274fdf080ebccf935b58413fb01d9e95fa54aacfaf29723e2de275fa60fb580c19a5f7d4dd59cc4227ba596a05f374904657c4f204168efb001c03ba4b9b87e0e800ba089cde51a6faa9adfe44e6eb4f9ce2d2857e2ea8659c683af09af2fe3ea98c7fb9cf336ac992608e8aeadf5b4a907a40d49bff0f34ef666db2f2b359a33640dfa2affab5b0478ca7311bda7d188dd31b5589526c7d72abb9964dba04f72f9533a58ad4269c92fa7a958b9cbcacbae84ddd33da4a27b63", &(0x7f0000000780)="791d57f3c0ccac8ca2e6809da6e6f5d3be03a87e71d1695b53d14ba7bef3f58e451eb7301198dceb4144837d13bd1466a56c00656be572b2ef676c00838e49860f"}) keyctl$auto(0x2, 0xee00, r4, r5, 0x101) (async) fsconfig$auto_XFS_DAX_ALWAYS(r3, 0x6, &(0x7f00000008c0)='/sys/kernel/debug/bluetooth/hci4/force_devcoredump\x00', &(0x7f0000000900), 0x1) (async) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001900)='/dev/sequencer2\x00', 0x2c0800, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r6, 0x5404, &(0x7f0000001940)) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/snd/midiC2D0\x00', 0x100, 0x0) ioctl$auto_SNAPSHOT_FREE(r0, 0x3305, 0x0) (async) getpriority$auto_PRIO_USER(0x2, r4) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, r2) (async) sendmsg$auto_NL802154_CMD_ASSOCIATE(r2, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x3, &(0x7f0000001d00)={@_si_pad}, 0x8) connect$auto(r7, &(0x7f0000001d80)=@llc={0x1a, 0x108, 0x9, 0x9, 0x30, 0x7, @remote}, 0x5) (async) ioctl$auto_SNDCTL_MIDI_INFO(r6, 0xc074510c, &(0x7f0000001dc0)="7f9a3bd7f0847b10fa1e07552affaef2905d516040c18b10d1dd8b4520d5f75f7bf002b5790872ed2945a071b7631232706d4f90353d67eeb929a707897b0362d9337d4915056cba2b6ce5b8b0b48d4e5bac0a7af28569d95dbd5e33943deb2522f5f38b07cba3dd914586cea4be5d34df52f0c89ad918516250e9c088f227e9c3e044c43b627e72c7fd06af11b4227bf0b1db460823e5f9445dcf08b3872422c52c26cf52c6e4ac9384be0813a2fcf311e0674c56786f104d9c128cf878809ea173eced3e2af7d1c8d58ba9b6d50af7c76f11c519ca9eceb9d1cb90d9f38e09e510bdef8fcbce98cbe8ab60b16096aafa78caeb33232762ddddf01c61d0a552e266a2c63d31ae4a383ebd2fd1bfcc7fb4a951c2c207fd24dc56435cbcf88f6315bf23d09013ff44652374b9359e65703d33c3f2979b5d9aecd2576336fc2d143af54c2db08889e04a0d0675895cb00c9e8ce7d1edc2059ed4f1df7ddea4fc176811d7749447b5f5b9b92d5eab2b57b9938143834fbe6147abbda897c52d6b1b52188ee2351638ccdc6b877cd265aaa3edf492f94a0a61e4a31a80b45f33770dbf548849953d59af92a0e04ce350207f7e7fed79168d71f882663f873b4ddfb81117a44fd943f57d8af2339bcf5daf69eb65832f53f50d5023c3a0aeed7da6cbc3d83e4d9859cde3eee14b094096a27c014dd5034c728b00640ac45651330ab68c7b050c56de85b9c10dceda9b4ac8cc483ec41a8dd9eaac26e99ffc85d54e3b5f8f6de428b024f7d807a291d126ce55d2c0d768e00173207021d98c5d88fd9194391e275f1ea8c53c389fd4f5e814edab1d35298a3651195af43b4446dc0e2fa6d963d75569d300bddb47097d8c978d75ba711836205886d245fe4d34a28bd3aa9536bd8cc2ab8b8d4b2e5ffad75fdb89a1a9c4209d05f1f5837311f7d6c883d76a3da8ffb7c48d5088d33168ed81d2b9c9cf7acefe16b66df0d3748ace764274710bf444b96a023e0834e4469881bf0b02df3e29f19557ce73b3bc8df746734a3029bf91d268d44e2a73b26310f8977c9e1f46707d521240bee9ff9164b967a9281c28ca311e1e852313d7f94e271c97f3c85c84c6eed355d39ac6531ce8693f352b024484abb282b19355d18fcd15ab715487afc77fdec9a3977c855f30b4658fb06734af993e081b818aecf433f8095e25524a868186a22d5500a59b3af6534ee3725b39808a5818230c03125cc3d9f89b26df528db056003804020cf0ad4c988a022b3564bdaa47fe33ec9912c8076d87ce58e95d985ee5ae655b28ec9ad1d6ce5a4daa7e4ffefcf9fd6da7e26610be3b2b6b0555987f2f06b2d56504eae4903e63c184f4d06f9a4e7fa0e18809c4b7f45bb3a60116bfe79ffa11b2b4d3d89ae4155561bd71c356ef8521389b3367dd2a74c9f3b60befcfded2e6db1db8ec05e7b483ca2de4b2200bcd50b1e337e796a132b53c2aa184c5ab4e25d80638343b43a19f7a4479c6896f69240286d4cfc3647ff852d5cf76226081d3785b90eeeabeede07caa6ebf15add81227dc31013a93fcd9c0affe48cd72d3bef7aabf730f6b7b30d03f42937107f14a6e6783341868704c45e6a674f714a8e2514ebc5246dcc4d7034a66b7f892092bd062c26d23016b039e55d5df83d35bbce92ba6022695e7ec01ae9ad1fdbaa44e701597b806ff59909fc4d84339403fd97cd7893f749691943e051274c739833e6cf279a556a87483190bc6156ee882212cb5329ffa75811d5f318f61ee479ad1718e3d75815e05b25a53b3f53767e75ce9bc729da485292b8e800794c30047bf67add682bb7fb6b39a809ad58695959bc6f457a9f38be6ec203f69a9b9a9f1e7a798123a14796c9334d112ec7945fc616a75d004f982f651612623f9e9d5c491cc10d82e0d312f6a338eeb2da9153e3ccc8f865a1d625e2ef8de34225ba56b21e51341b33c6cef421ea395162d375a0d33d8a7b85f1aacf4f8f86858084de637af67fa2da7ce8c8c56e1130a4f7417695b84c7521d8a361a9ddd5ef0610dbf50f0e135052778df6d6e8751c726fd603f886669e59b795a9311291cf167464352363fb081db9a75e322ee5b13accb3b902f1a3e122f58d4aae8d7b50e13a2d51c34f5bc9f27c9cd6a7bf790751054a3c3be0c5f1344dcabaf30aa51afee34d48f3e4fcc31d9cff12e812600379a75d6acc4529267c01f413aa76af0352305357723d0b80f9d4e3e8cee36ff5049b3bba39b7a70ac1e29cece50a69568dcff6635fc9ddcae2e6d4ce9076c16f2d8bcbb9fae84fcdd16c1b4f99818410c387666ef2003771cfb50189b589963facdaaca43281d487df6dd0c6a86986a1f85975c5d9307a76b1ddf13ffcac76e8bb989215f924055e4ec94ae0837c5a129b727873f468d8502e61a64f6c99c252b6334ccb6faaf554471a3a8b0adb01bc2cf1748cea70c9a814d0cc6a079b79e14060f2995a1f291f75ea072792e88a653a5b6f60cf2f18762139a5c73ffbdb738e16f5fbf47dbf7e2340eb5cf1915c88d2fb5a313d855c466139d6c4a7309ed8bef2e0e5066c88f40c86a642f33939bc7701eb3439f3df7e81035a25b456e7f5f1ea627612d556fb3841e6c9dbe7e98ee97e4852c31d9eff20a23db2921049bcdd0c45b50f16f3b81345899da6a0f01d9f21f7b234d8507b85dcc744f7a32edc8a1ce112ce478ac6aa7e23d38dac2431da3be9171dc3a575cf66371403b9984e36482f8c6d2640ca1ed13307425edc157607e1bed6f6a6e63151cffe19722f24b3ef56353cfcce7a36544495cd5febe81d1ce56b1ca3c6392b061e6c75443c749fa2a257ca64fc5fa9cfa00be98e110a662ec47d9fc9b2038c5ea2cc85b4192f5c8bc205290ba44a5ed4ab5fa505dae1946a1bf4fa17ce11f5a147c23566adcee8b90f42c79423b60e06e307d748ffa55d23281458f16496adb3d4d861e8fa64892acafe35ddd4f2641e5df8b33fa7c9301f3c35b56e9f5967c5289e7944ef3a9433aa7443991ec34ceb6d30cd373b38a01a4539aa0bda0145125861a016a469b4ec9cb4075e0edc8d79e061bb96b6811ced64535fc9c874ab9e66f2c6fd9128dd15e622dec4ce77685c532c2e7d10261e2cbb7f564af123b0f3afd38e13cdf99131c1eca726c488524ca1597f9d92f2bc1a4e5845746e9e3f47de0a2f638f88b2c9c127ecf13b95a70bccb6c5fbe624de05687b9834ebae2daaff9cb86066cca2f834bda1952800dcc73f3648efc6a4a1c50fc66df16bc2ac052407f967689124d1258bafff6c152c303c529d4712cab06d35e9c3814c4896ca60eaa3512a40064fbc72237210ea70b4db77c0fc4e34bfe89b8a2d4e54063c19e58df49ea335d0361b20b364ecc2aa43121a3fc5ddc235ee64d8099fdf800d13b014616c1ffa3b810f5ba6230fe687eb555baad9d31b6ba020c6a7d6dc8fefd7af94b8939ca86b8f538728b6c4f0c6926842eaa08c7aa71568b9406dc3ef29a61ee54c6839ed2253e1ca9649f304793a8156747e215d2b88f3f6b507924a551991990cae6a1d0f9d3d1c9fc04b191c632b6ba6439559c4abd0eeeb9266fb0bee1fd0706e4a1c7cfd91c5a1d90f0a8f60b241fb8475ecd494a70bb4488b59529cc558b868147a93f80a4cb33c7ba226f09ae167e55f85be0a4c422f7628972b3a9ca196d9cba27d52c4f05ebfd0f61846d65a78b46b806edabd4c4be585ad392371612bda2baac081edb485c198a2ead7698a93df8037affc3b05388176d273f2055770dd94b67b35312c7c3d55ed86e02b975d61016d1d5395585d0ab9bd9a6cc3c744a54e5c46369e56a48cd940ae3dd052c4606cccc7a7b508e5c8002cb5ff30d187d9db10ae4199bc526f3100da86d6ec1c87a0da07679d9bc6605b3826c1ac216d18d7e649c84cfb54c3d41fc4357b5d2fb33f86fa73f09ce65844f6b77355e269476c626fbadeafa3ba09df575f0a3e5d80845849287cf800930cbffe2f343055c98e172e96715e3288d0dda603f634e64b6ac094d2404fc121caaae9f4faba54f76e024f7f3229336b0bcf92e7e1629d8d0e99b7d5de5d354a5dfe9107e38ebaef811e8893985ed173e652746859ba40f28ecd6fc0485ba5f19434a80eef52f20c70a518c577daf4a496a302a044a2ae93a84523a12ef4adb875eca7f7dacee887a117acd9d5c8da6df53a6275d484c382da0e34d1b0bba4f893155a83bbd4f177a64d02d2d8787dd28aaa6fd80960a7559c00ff1329934c31ef3e248a9b48482c71dc5b16c333bec656d3238c2d570b303443966a8ef4d22143b3f763da33f0cc6b9b064dfb2943ab491b891fb63082e5b20387d8641f1d77a9338576445696877da6bc3af3033203a775fa7f75b8be8726b9a0128d3655c4d325e7479cf2e350586a6dd1eee0100c3ad70e056090fdea5132be205e1dcbaa5617bda2c861c0d7997b97599b70364444dd6f4359df0330cc55a33faf5ca76cdd48ff39c11222557d12c56a1cfb881193bb3542e0573841822ebf5517a7412d3bc1ddaf41eb8c7a4615a7f8a17db47eae8e337e42438354081ff26a1621ae501b2e5dd3d7006eef2d9a802286468d3d9b7dfcc41e5fa481bf46393dd800f9f4a50eac753f8a4e3c1c0736203f95d0a21f761e4011f8a959899f3ff06f104e7873f14ff74361fc599c7a7a24c12381bb71f1e1d7b6aea45d992342cb56e0f143c80f0ac9f14e0a5df660552184b68e4e8873ba5c5260de3751851e59c6b9738d4bce4796a0e2c1966d6071ed1de1fa39e4976b6294ccb612e752ee6e7ec53864f2f25a63e7c9d86a5cc0ed8cd001c7d579ad76b7e115e2453fe2a41441ac0342f432fc9383afa89147eaec148dd1d5783a834ce56ea75d8d2611f515b9de1d52cc7db0200d454ea653d19de18e4b025cfcdeb9cf01ef688b140dfb7645e6c8027d3f9616fcfd23046280a38ab8f79594b28f96b79e27f2fdbc9d6ad87e3c381172437cec27105c1536c81ba108dcb59097b7aef117de1df6814fb86524dd5e469eb76de91f0a705a61366905b9498e33b2d667248c16f4c657c14c3ae0761c14d0cc75adacb8164a9a9c061b33c4c38bfe37d7042aa8a3966ee5838ec4d0f86d7cad0e55949a8d4003bc9bd19d858fda606f4a74fdbc1305e9f3db00e1f0133deddbfb35a6958911bdeda0e987b26081708c0210947aaf9a7de49951abed897108ff23bb0e87ad6febfc1d971773afbac8feb2725c4226cf4ae80d794ad3a6b8ae11cae9e85207b5f783f3d3f5d9da5839da8310c0fb2f9fe911f1fc0f59e55864aa817220d2c70206ab5796e68c2b0cefdc72eff5f02dff5a05b052d7605472dda1b957c9b08d6010820777d4065dcbdca7966d336f61ee43e62d234859f9e1526566e0dc9458641c393869e2d95bfcd4c225a03c925e886a63908f3767a9996210ba4e24faf62260e7f3d2716da3b792cd9093fd5149c590c3c9ee2c3dc9688aaaad069e78e4cfada515b314957307d39afd105e4df416df43ad0ae1ebfe03cba0669de6ea05af706428ac2463ab853fdfa3b1e44ae31244f0b8f7da8") write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000002dc0), 0x0) (async) unshare$auto(0x10001) (async) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000003ec0), 0x200200, 0x0) 2m7.831402654s ago: executing program 2 (id=2356): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x3f, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 2m6.993207291s ago: executing program 2 (id=2358): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000380)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) msgctl$auto_IPC_INFO(0x45, 0x3, &(0x7f0000000200)={{0xff, 0xee00, 0xee00, 0x7fff, 0xb61, 0xa, 0xe17}, &(0x7f0000000180)=0xbf, &(0x7f00000001c0)=0x1, 0x4, 0x8000000000000001, 0x8000000000000001, 0x3, 0x10, 0x7, 0x7ff, 0x7, @raw=0x55c, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x4010) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw=0x6, 0xffffffffffffff0d, 0x0, 0x929, 0x10, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x100000001, 0xeb1, r1, 0xbf47) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x16b802, 0x0) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb3, 0x401, 0x8000) unshare$auto(0x3ff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) lsetxattr$auto(&(0x7f00000003c0)='}[,&*}\x00', &(0x7f0000000080)='/sys/module/zswap/parameters/compressor\x00', &(0x7f0000000280)="37a0e52a2287b4343388390dbd7f88c01111b18c1d50138693675bfab94c5ea99cbfdf74c7ed2a0e484443aee09b75ca19998e427637c821faa1fbb9ef831a0adf09083fa2c54fda9de913eb5cd37190ce96147bed457430aebb14b5d65c0813dc7c2779c317c484d9b7dd86eca39b52786a98d43e819834998cde0a7260c7ec7aaac9b1122d8e0b6a331270077badef661be97ace0bc15da62d31c106cfba8c57ef1caf02c5be41e1c3a9637b65970c39eeb894a61b02db9f340ff95c26ff85e650fcea752187d8ae80b36835258ceb69", 0xc, 0x81) shutdown$auto(0x200000003, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000004c0)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0x6, 0x7, 0xfffffffffffffffe}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) getpid() 2m5.102678237s ago: executing program 2 (id=2359): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) read$auto(0x3, 0x0, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') socket(0x2, 0x1, 0x106) kexec_load$auto(0x5, 0x2, 0x0, 0x4) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24048800}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x9e) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r2, 0x1, 0x2070bd26, 0x25dfdb78, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, '\xc2\x00\x00\x00\x00\x00\x00\x00\n9\xac\xce\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x3, &(0x7f00000006c0)={@siginfo_0_0={0xf, 0x0, 0x4, @_sigsys={&(0x7f00000005c0)="359a1fee1b0e2173870ff8695205985f36d23d0f161772178f6c93c5bab9b4bfe7b00307b2b1badd35ad721c52d5e81bec0f719f76151f92a94531da10e231b258494a93d60cc7f5859fe9e7407b46a72df2ad86ec464202ef9868b615f443adec2d33bb312db142b9a12218a040f213291b33434dcefdf4c1d86f0e3b1fcdc9a2d1ca2ded1d5c1634802573946d5186e7a1dd72ad6f017edec981e207", 0x4, 0x40}}}, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="205c2020207e5cc0023af10e9bfa1babfa203753ca9a2037", 0x18) statmount$auto(&(0x7f0000000140)={0x2, @raw=0xfe000000, 0xfffffffffffffff7, 0x4, 0xffffffffffffffff}, 0x0, 0xffffffff, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0xe06, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) 1m56.069038646s ago: executing program 33 (id=2350): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r4) sendmsg$auto_TCP_METRICS_CMD_DEL(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB='0\x00\x00\x00', @ANYBLOB="010927bd7000fbdbdf25027605080001"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x4001, 0x0) bpf$auto(0x8, &(0x7f0000000580)=@bpf_attr_3={0x10000, 0x1, 0x7f, 0x1251, 0xdead, 0x401, 0x405, 0x145, 0x0, "f408a6dbe6eb5bcf18a6edbe6175edff", r0, 0x9, 0xffffffffffffffff, 0x81, 0x0, 0xc, 0x0, 0x3, 0xd2e2, 0x1, @attach_prog_fd=r3, 0x2, 0x7, 0xff, 0x7fffffff, 0x8}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/11/smp_affinity\x00', 0xc8780, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 1m50.017447463s ago: executing program 34 (id=2359): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) read$auto(0x3, 0x0, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') socket(0x2, 0x1, 0x106) kexec_load$auto(0x5, 0x2, 0x0, 0x4) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24048800}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x9e) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r2, 0x1, 0x2070bd26, 0x25dfdb78, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, '\xc2\x00\x00\x00\x00\x00\x00\x00\n9\xac\xce\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x3, &(0x7f00000006c0)={@siginfo_0_0={0xf, 0x0, 0x4, @_sigsys={&(0x7f00000005c0)="359a1fee1b0e2173870ff8695205985f36d23d0f161772178f6c93c5bab9b4bfe7b00307b2b1badd35ad721c52d5e81bec0f719f76151f92a94531da10e231b258494a93d60cc7f5859fe9e7407b46a72df2ad86ec464202ef9868b615f443adec2d33bb312db142b9a12218a040f213291b33434dcefdf4c1d86f0e3b1fcdc9a2d1ca2ded1d5c1634802573946d5186e7a1dd72ad6f017edec981e207", 0x4, 0x40}}}, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="205c2020207e5cc0023af10e9bfa1babfa203753ca9a2037", 0x18) statmount$auto(&(0x7f0000000140)={0x2, @raw=0xfe000000, 0xfffffffffffffff7, 0x4, 0xffffffffffffffff}, 0x0, 0xffffffff, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0xe06, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) 1m8.341290932s ago: executing program 4 (id=2486): r0 = open(&(0x7f0000000100)='./file0\x00', 0x149443, 0xc8) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={r0, 0x8, 0x2000000, 0x8000}) 1m8.132396973s ago: executing program 4 (id=2487): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x8, 0x9, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x1002}, 0x800000001, &(0x7f0000000280)={&(0x7f00000004c0)="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", 0x1ffffffff}, 0x7fffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) fanotify_init$auto(0x65, 0x2) close_range$auto(0x0, 0x5, 0x0) socket(0x18, 0x2, 0x0) clone$auto(0x20003b43, 0x4, 0x0, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_USB_RAW_IOCTL_RUN(0xffffffffffffffff, 0x5501, 0x0) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getpid() gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b74, 0x2, 0x8000) r3 = socket(0x11, 0x9, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r3, 0x0, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) lseek$auto(0xffffffffffffffff, 0xfffffffffffffffd, 0x1) 1m7.20820401s ago: executing program 4 (id=2491): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/11/smp_affinity\x00', 0xc8780, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 1m2.38873485s ago: executing program 4 (id=2497): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000001080)={&(0x7f0000000080), 0x5c2}, 0x5) r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_TXREHASH(r4, 0x1, 0x4a, &(0x7f0000000040)='/proc/thread-self/net/snmp\x00', &(0x7f0000000080)=0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark$auto(0xffffffffffffffff, 0x6cb7, 0x2, 0xffffffffffffff9c, 0x0) r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x118}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x3ff}]}, 0x24}, 0x1, 0x0, 0xf0ffffffffffffff, 0x10}, 0x0) epoll_create$auto(0x4) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r3) clone3$auto(&(0x7f00000000c0)={0x4, 0x80000db, 0x7, 0x8, 0xac9f, 0x80000000042f4, 0x1, 0x8, 0x3, 0x9, 0x7ff}, 0x6) msgctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff, 0xee00, 0x1, 0xa2, 0x2, 0x3}, 0x0, &(0x7f0000000180)=0x4, 0x1c8, 0xdb0, 0x4, 0x6, 0x80, 0xff56, 0x1000, 0x9, @raw=0x3, @raw=0x1}) getpgid(0xffffffffffffffff) getpid() sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x800}, 0x8800) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 1m0.871001166s ago: executing program 4 (id=2500): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x3f, 0x67f, 0xffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x3, 0x9, 0x400006, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) 1m0.327918564s ago: executing program 4 (id=2501): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)="a9492cdca8f95d291a3880bbcdbefdb07034a83b82b1385ced9221d239d219057867401a353d46f281333906abbae94347d5a0a012f9ec5dd09925070913ee8d818009fece1f93e5c975ff9c5b54846cc2f338d7114876b12b74a9034e529d4f810346c8fbef30dd36e2a211707322953ffa97a1dea804731bd599acb8a700779e08820831f684fd725c6f0178a1771a9d520aa5d63dab6a97a234989d818acbac85afcca323e3da01b86248d698f4a762cf4b1006c8ab00dc83935fdc9ab2b46251d0633d00"/211) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x5b8, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x9c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4d, 0x1, "fc15acd5b771c79fd2dc24b9d144105fd8f3e20dcb22de4c4853856eb9668c8aa532417747ccac3df1a5f1e896ac9cc0f973cad1119d4a9a7fe8ee5fa3e8fdf13a531925e6a2fe04e5"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '/\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '{).\\[+}.^%#\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x2ec, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x9a, 0x1, "c7ec2daa063026cd8b252681c161f79f91de0c16e7f4066726e2374b52943a027c3a1867bfb8d94af9df2f3cfc158f558e9c8291795004628f9bedd861a793c874b98d92af22a60137f2d87e6be5a473390405fda8ad10bb054012a623d334f53c40b6042a0a86013f1b853e7b8251ef9e8ea4d7aa820cc9ebabacba3797a4d0dcdc2fa9974f6a32fa54e8c8f1b9c06fbe54341af1d4"}, @NFSD_A_SOCK_ADDR={0x73, 0x1, "022b63a0beaef5e711a69f58da0b0ba16c2cdec2901fa0903e81f727c9234bd005d315fa14814294ff4d42899b5470d94a068f00937c9ac5642a3d135c35a121265009375db3ee3f8992cc3d0e22471b9afc3ba6d9312afadb59a9d5b2f9b6e361cfc8cb7be89af5a981f8bc3e3fd3"}, @NFSD_A_SOCK_ADDR={0xc9, 0x1, "f1f3573092dd1ae7c30486a21bd1e05dee12228a1fb21172271ca3185b80145b2a03c93387732f5b0a0ba83e30bd9e9152b92d5f29c9deb5e9678fdae648a67b7885162119f151fc40583ae5f654acfafee902e46e63d3f4f66fa2ad398d7f05c12302adefe750872c5781ebac68177231cffad9e697dcd71a472ff82fb9eb5f198ac6703ebaa6d35ffedfe2c9a4834faf2c26b6e359430c81c92a44fcd24d89656e54dac31a26aa34625daa406419729d34465d887d0dd49edabd98a4a5f11ecd5387a55f"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_ADDR={0x6, 0x1, "3501"}, @NFSD_A_SOCK_ADDR={0xd8, 0x1, "7d6dce6342ae29454a9adb498b4007e034e466357b249439d512f7cd94fcefd8df59e266b5991c6cdf6dfa95c7475653fbfc652100e413759a20b6d8eb7bb15c7a579969ca8ef2b9383b1fac751baf1e55134c4072a31d69ef8861eea0e2da4137d451d55e89ba10ced204e786ad7ed6b713c06a7d1092a9238b4647e77c7623c1199bdd95e68b0615d0f6ead589b52b41c136e73b0aba1d28e3bb8739e030b66954977b01f6b4f5c2494bdd492778c5f3a9d78bf72da4edab39e8163ff198abde69c4863ddd8854add4d4c69f5e831f28ecfd78"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '=\xa5\xba\x11F'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '#:u-*\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '!(\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1e8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x60, 0x1, "407ba2664b1381a01044f70c4435c91393eff55d1f3ba9e42df760c91b5f01dfbb3c1f629cc72d4603f4219461ae3aff4bf4ec48b1537ea0a7a3a12842e0f8c1cdebe9843ef63aef1088e74cd54763cbe10ac453db902599a41aa1d9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFSD_A_SOCK_ADDR={0xfe, 0x1, "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"}, @NFSD_A_SOCK_ADDR={0x5f, 0x1, "987507b32cbaea08ff59b3be4651c2000c1b44fa18e84eab130441e2b89ca7b62c099f142cbad243ce00fcb0ac0dd9484c66c4ab6605e51b9a8f5a19002346484a0c1190d6230fb17de3dfd3a217402709f8c13bd5c9f215380c30"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x13, 0x2, '!-$%)\x18.:/[}\\-\x8b\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x28, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '[.)(}.-/}\x00'}]}]}, 0x5b8}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) 44.965360264s ago: executing program 35 (id=2501): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)="a9492cdca8f95d291a3880bbcdbefdb07034a83b82b1385ced9221d239d219057867401a353d46f281333906abbae94347d5a0a012f9ec5dd09925070913ee8d818009fece1f93e5c975ff9c5b54846cc2f338d7114876b12b74a9034e529d4f810346c8fbef30dd36e2a211707322953ffa97a1dea804731bd599acb8a700779e08820831f684fd725c6f0178a1771a9d520aa5d63dab6a97a234989d818acbac85afcca323e3da01b86248d698f4a762cf4b1006c8ab00dc83935fdc9ab2b46251d0633d00"/211) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x5b8, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x9c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4d, 0x1, "fc15acd5b771c79fd2dc24b9d144105fd8f3e20dcb22de4c4853856eb9668c8aa532417747ccac3df1a5f1e896ac9cc0f973cad1119d4a9a7fe8ee5fa3e8fdf13a531925e6a2fe04e5"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '/\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '{).\\[+}.^%#\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x2ec, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x9a, 0x1, "c7ec2daa063026cd8b252681c161f79f91de0c16e7f4066726e2374b52943a027c3a1867bfb8d94af9df2f3cfc158f558e9c8291795004628f9bedd861a793c874b98d92af22a60137f2d87e6be5a473390405fda8ad10bb054012a623d334f53c40b6042a0a86013f1b853e7b8251ef9e8ea4d7aa820cc9ebabacba3797a4d0dcdc2fa9974f6a32fa54e8c8f1b9c06fbe54341af1d4"}, @NFSD_A_SOCK_ADDR={0x73, 0x1, "022b63a0beaef5e711a69f58da0b0ba16c2cdec2901fa0903e81f727c9234bd005d315fa14814294ff4d42899b5470d94a068f00937c9ac5642a3d135c35a121265009375db3ee3f8992cc3d0e22471b9afc3ba6d9312afadb59a9d5b2f9b6e361cfc8cb7be89af5a981f8bc3e3fd3"}, @NFSD_A_SOCK_ADDR={0xc9, 0x1, "f1f3573092dd1ae7c30486a21bd1e05dee12228a1fb21172271ca3185b80145b2a03c93387732f5b0a0ba83e30bd9e9152b92d5f29c9deb5e9678fdae648a67b7885162119f151fc40583ae5f654acfafee902e46e63d3f4f66fa2ad398d7f05c12302adefe750872c5781ebac68177231cffad9e697dcd71a472ff82fb9eb5f198ac6703ebaa6d35ffedfe2c9a4834faf2c26b6e359430c81c92a44fcd24d89656e54dac31a26aa34625daa406419729d34465d887d0dd49edabd98a4a5f11ecd5387a55f"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_ADDR={0x6, 0x1, "3501"}, @NFSD_A_SOCK_ADDR={0xd8, 0x1, "7d6dce6342ae29454a9adb498b4007e034e466357b249439d512f7cd94fcefd8df59e266b5991c6cdf6dfa95c7475653fbfc652100e413759a20b6d8eb7bb15c7a579969ca8ef2b9383b1fac751baf1e55134c4072a31d69ef8861eea0e2da4137d451d55e89ba10ced204e786ad7ed6b713c06a7d1092a9238b4647e77c7623c1199bdd95e68b0615d0f6ead589b52b41c136e73b0aba1d28e3bb8739e030b66954977b01f6b4f5c2494bdd492778c5f3a9d78bf72da4edab39e8163ff198abde69c4863ddd8854add4d4c69f5e831f28ecfd78"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '=\xa5\xba\x11F'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '#:u-*\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '!(\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1e8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x60, 0x1, "407ba2664b1381a01044f70c4435c91393eff55d1f3ba9e42df760c91b5f01dfbb3c1f629cc72d4603f4219461ae3aff4bf4ec48b1537ea0a7a3a12842e0f8c1cdebe9843ef63aef1088e74cd54763cbe10ac453db902599a41aa1d9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFSD_A_SOCK_ADDR={0xfe, 0x1, "045cce43018600541d2362cf3f7aaa64356dbef2d59e299ff0a9fb47b0d1cf591db6fc9734bde65c6b2fb695eb3b5fa884551992496e23227214bcfe11df54cd8f203172a62903cd53d9673c31f0e6c460193337dc71579142379a9355f3c1d5258bf8f7d0b242168745b14b8699b25d894814a33478124dc66146288300b151410e27d59b5814e72891b6657f883453dbf1fc55bd63dfd30a2fcb13ddce7d897b6c7f8d65cb72071f5ba14d9aae712ce1755e6aa9797c279b11fcc9fbfaf84189d3e97f976ee6a63ee0718b0bbc5ae6dc6ff8bf369f41b62152d7a69697af8cee1b64411d2ec04c04ea51cb6e8d7bd30b582bf16572dba0248b"}, @NFSD_A_SOCK_ADDR={0x5f, 0x1, "987507b32cbaea08ff59b3be4651c2000c1b44fa18e84eab130441e2b89ca7b62c099f142cbad243ce00fcb0ac0dd9484c66c4ab6605e51b9a8f5a19002346484a0c1190d6230fb17de3dfd3a217402709f8c13bd5c9f215380c30"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x13, 0x2, '!-$%)\x18.:/[}\\-\x8b\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x28, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '[.)(}.-/}\x00'}]}]}, 0x5b8}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) 36.723184984s ago: executing program 6 (id=2557): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r1) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB='0\x00\x00\x00', @ANYBLOB="010927bd7000fbdbdf25027605080001"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/11/smp_affinity\x00', 0xc8780, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 34.962591858s ago: executing program 6 (id=2563): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs\x00', 0x591040, 0x0) listen$auto(r0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/ip_vti0/ndisc_tclass\x00', 0x642, 0x0) write$auto(r1, &(0x7f0000000200)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400) getsockopt$auto_SO_SELECT_ERR_QUEUE(r0, 0x8001, 0x2d, &(0x7f0000000080)='/dev/mtd0\x00', &(0x7f0000000100)=0x3) close_range$auto(0xffffffffffffffff, 0xa, 0x0) select$auto(0x100, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x6, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x61, 0x80000000, 0x0, 0x6d3f, 0xffff, 0xb, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x401) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x100, 0x0) 31.910356705s ago: executing program 6 (id=2573): r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x1000) ioctl$auto_BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)=[{0x4, 0x39c, 0x3}, {0xfffffffffffffffc, 0x4, 0x5}]) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x25, 0x1, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r2, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0xf, 0xa, 0x5) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x7) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000240)={{0x3, 0xee01, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x7}, 0xfffffffe, 0x9, 0x0, 0x5, @inferred, @raw=0x6, 0x0, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x1c000000000000) r3 = socket(0x10, 0x2, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) 29.827394323s ago: executing program 6 (id=2567): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x3f, 0x67f, 0xffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x3, 0x9, 0x400006, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) 29.656893087s ago: executing program 6 (id=2568): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x29, 0x5, 0x0) 25.759187126s ago: executing program 6 (id=2579): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x29, 0x800, 0x5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b62, r0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r0) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x21, 0x5, 0xffff8000, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4605, 0x0) r5 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r5, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) shmctl$auto_SHM_INFO(0xffffff81, 0xe, &(0x7f00000015c0)={{0x2, 0xffffffffffffffff, 0xee00, 0x200, 0xfffffffa, 0x10000, 0xf}, 0x8, 0x100000001, 0x5, 0x9, @raw=0x8, @inferred, 0x7ff, 0x0, &(0x7f0000000100)="a02b880fb316b8760f274d1c30811547c732aa7c18a5d3b143d643be506b3c7c419dcd4575a453b0faed06025331ba556cd61e073c93598b4b25dd01f5b73365dfc27833caeb154bdaa5b7fd990a35a20f121a23dc8a9369d7c457522d947e60c356fc82d7eb8ec9d6008f6c4b6c72f7b371ead2317518a367e826e66d4201dc801d6eb4ae11c750eeb4dc6f4dda0c95034e985f546148a017705a4afbbec4aa0b27eb", &(0x7f00000005c0)="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"}) setresgid$auto(0x0, r6, 0xee00) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x7, 0x20101, 0xff9, 0x8000000008011, 0x3, 0xc23a) preadv2$auto(r7, &(0x7f0000000280)={0x0, 0x10000}, 0x40000000000006, 0x3, 0x4, 0x2f) ioctl$auto_PPPIOCSFLAGS(r5, 0x40047459, 0x0) unshare$auto(0x40000080) unshare$auto(0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) acct$auto(&(0x7f0000001740)='/syq\x1b\\s/kernel/debug/x86/boot_\x01\x00\x00\x00\xf5\xa1Sdata\x00\"F\xb6\xcd\x06\xd6\x97\\,\a\x00\x00\x00\x00\x00\x00\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\x1b\x99\xd4\xed;\xf8\x13a\xe8\x88 \x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83[\x0fz\x9dN\xc9\x1e\x15r\x97 t8Ik\xc5\xac\x12\x8f\xcd^\xa2p\xf9w\xab)\xfcy\xa4\xcf-\fee+\xcd\xe2\xe1\x9d\xed\x96\xf1<\x92\x05u\xac;U\xfa\x81\x9f\xa9\xfd\xff\xeb\x1d\x0f\xebf\xa9(\x1emA%\rX\x02w\xe6\xb6\xc0VT\xe3\x92\x13lB\xae\xc3G\x01\xbf\x0edv\xc6<\x853') bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000480)=@query={@target_fd=r3, 0x8, 0x7, 0x4, 0x9, @prog_cnt=0xb7, 0x0, 0xfffffffffbfffff7, 0x6, 0xffffffffffffff18, 0x9}, 0x1) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) 12.26849224s ago: executing program 3 (id=2612): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) r1 = socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x5}, 0xef) r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_CONNECT(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc090) r5 = openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x2, 0x0) read$auto_clk_summary_fops_(r5, &(0x7f00000002c0)=""/221, 0xdd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x5) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r2, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) unshare$auto(0x2000000000000003) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x1ff) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) read$auto_proc_pagemap_operations_internal(r8, &(0x7f0000001540)=""/209, 0xd1) getsockopt$auto(r1, 0x84, 0x7c, 0x0, 0x0) 10.539345648s ago: executing program 36 (id=2579): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x29, 0x800, 0x5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b62, r0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r0) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x21, 0x5, 0xffff8000, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4605, 0x0) r5 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r5, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) shmctl$auto_SHM_INFO(0xffffff81, 0xe, &(0x7f00000015c0)={{0x2, 0xffffffffffffffff, 0xee00, 0x200, 0xfffffffa, 0x10000, 0xf}, 0x8, 0x100000001, 0x5, 0x9, @raw=0x8, @inferred, 0x7ff, 0x0, &(0x7f0000000100)="a02b880fb316b8760f274d1c30811547c732aa7c18a5d3b143d643be506b3c7c419dcd4575a453b0faed06025331ba556cd61e073c93598b4b25dd01f5b73365dfc27833caeb154bdaa5b7fd990a35a20f121a23dc8a9369d7c457522d947e60c356fc82d7eb8ec9d6008f6c4b6c72f7b371ead2317518a367e826e66d4201dc801d6eb4ae11c750eeb4dc6f4dda0c95034e985f546148a017705a4afbbec4aa0b27eb", &(0x7f00000005c0)="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"}) setresgid$auto(0x0, r6, 0xee00) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x7, 0x20101, 0xff9, 0x8000000008011, 0x3, 0xc23a) preadv2$auto(r7, &(0x7f0000000280)={0x0, 0x10000}, 0x40000000000006, 0x3, 0x4, 0x2f) ioctl$auto_PPPIOCSFLAGS(r5, 0x40047459, 0x0) unshare$auto(0x40000080) unshare$auto(0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) acct$auto(&(0x7f0000001740)='/syq\x1b\\s/kernel/debug/x86/boot_\x01\x00\x00\x00\xf5\xa1Sdata\x00\"F\xb6\xcd\x06\xd6\x97\\,\a\x00\x00\x00\x00\x00\x00\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\x1b\x99\xd4\xed;\xf8\x13a\xe8\x88 \x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83[\x0fz\x9dN\xc9\x1e\x15r\x97 t8Ik\xc5\xac\x12\x8f\xcd^\xa2p\xf9w\xab)\xfcy\xa4\xcf-\fee+\xcd\xe2\xe1\x9d\xed\x96\xf1<\x92\x05u\xac;U\xfa\x81\x9f\xa9\xfd\xff\xeb\x1d\x0f\xebf\xa9(\x1emA%\rX\x02w\xe6\xb6\xc0VT\xe3\x92\x13lB\xae\xc3G\x01\xbf\x0edv\xc6<\x853') bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000480)=@query={@target_fd=r3, 0x8, 0x7, 0x4, 0x9, @prog_cnt=0xb7, 0x0, 0xfffffffffbfffff7, 0x6, 0xffffffffffffff18, 0x9}, 0x1) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) 9.988433091s ago: executing program 3 (id=2621): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x80, r2, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x69, 0x4, 'N\x10SKSPUATS\x90l\xad#6\xcak\x00g\xea\xa10\xcc\x17S\x8cf\x1d\b\xa6i\xe6\x15\x15\xaff\xd7\xfb|\x18\xb3\xa5\x9bA\xb7D[\'\xda\xd1\xa1h\xa4\x12\x84\x97#\xba\x98i\x06\x9a\xac_\xd8\x91\xeaM\xb3K9\n\xc4R\xf2x\x9dwF$\t\xd6\x82\xa7\xd5\xf2\x16\xf0\\#\x14\xcd&\xa6\xdc\xedr\xa8Bdy'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) keyctl$auto(0xe, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) mlockall$auto(0x1ff) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000100)={0x6}) write$auto(r4, &(0x7f0000000100)='/sys/kernel/debug\xd4\x00\x00\x00/vkms/Writeback-1/edid_override\x00&\x9c\xabdj\xaa\x87\xe6[J!y\x80r', 0x80) setsockopt$auto_SO_DETACH_FILTER(r4, 0x42ba, 0x1b, &(0x7f0000000180)='\x00', 0xdb26) msgctl$auto_IPC_SET(0xff, 0x1, &(0x7f0000000440)={{0x7, 0xffffffffffffffff, 0xee00, 0xff, 0xd, 0x1, 0x1}, &(0x7f0000000380)=0x48, &(0x7f0000000400)=0xf7, 0x4, 0x2, 0x0, 0x3, 0xdb, 0xa6b, 0x0, 0x1, @inferred=0xffffffffffffffff}) 9.660620805s ago: executing program 5 (id=2623): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = semctl$auto_GETPID(0x19, 0x8, 0xb, 0x5) r2 = getpgrp(r1) kcmp$auto(0x0, r2, 0x2c, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r0, @ANYBLOB="01bd7000985cbfabb5577f361702098075015180080030ecddac", @ANYRES32=r2, @ANYBLOB="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"], 0x22c}}, 0x20000841) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x401) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 7.769037251s ago: executing program 3 (id=2624): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x9, 0x9, 0x3, &(0x7f0000000040)=0x8, 0xa6, 0x8) mmap$auto(0x8000000000000001, 0x7, 0x4, 0x9b72, 0xffffffffffffffff, 0xf34) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) 7.699052349s ago: executing program 5 (id=2625): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80c0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r2, 0x5422, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) open(0x0, 0x0, 0xb5d1af1605322df2) sendfile$auto(0x3, r3, 0x0, 0x400000000006) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SOUND_MIXER_READ_CAPS2(r1, 0x80044dfc, &(0x7f0000000080)) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr9\x00', 0x40001, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x541a, r4) 6.101418792s ago: executing program 7 (id=2626): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0xc000, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70b52c, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x7, 0x2, 'H-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_OP={0x8, 0xa, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c85c}, 0x0) accept4$auto(r0, &(0x7f00000000c0)=@sco, &(0x7f0000000100)=0x8, 0x5) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r5, 0x0, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x6, 0x8, 0xd) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) 6.099418827s ago: executing program 5 (id=2633): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x1, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(r1, 0x0, 0x9a6, 0x40) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x1334, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x4, 0x14}, @typed={0xf, 0xd, 0x0, 0x0, @str='ovs_packet\x00'}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x12f0, 0x2, 0x0, 0x1, [@nested={0x11f9, 0x44, 0x0, 0x1, [@nested={0x183, 0xdf, 0x0, 0x1, [@generic="356fa250d53b683ddebe48de6bf9458ed017966a148b9236215ce527d34093b161fc76239f9efddd22733dfea43656231e1047800cd32c76ac8103995f232b605f9bfdcd1332745d54ba4acc3788cd2dfdd866982e50a677a18900eb50d230c7926aebb038a2b35d91425ab2d1ee974422ac7d138a912767a4c6e2cba891a1f2304a4152f198a7c4b6c6abb1d66c486c3be216810d532ab60585855714e13e25f41e3c841541119d9bea2bb845ee565f7d37ea59788634b3cebcfc445c7b2512eeaf1185419a56b1bcb9a36693d2e484559b", @typed={0xc, 0x25, 0x0, 0x0, @u64=0xa}, @nested={0x4, 0xa}, @nested={0x4, 0x136}, @typed={0x8, 0x13e, 0x0, 0x0, @uid}, @nested={0x4, 0x2b}, @nested={0x4, 0x14c}, @generic="cd65d4cd19843ef8f37c97fffc39efad501c4f2168855ffb4bf669e66c5a876e36b8dff9601fe8ecd25de7596c7d04a412425a2b931b312fe7b24075db1da1b820faa4c4e975139f2d79cf97467a59e86362ad939f32ff4091e8a3d77e531f26439292006294ea8d26da102a35e98a42422b29cd5d33388700bad08be74afab2b7ab4205fdb4930d76"]}, @typed={0x1004, 0x4, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x11d, 0x0, 0x0, @fd=r0}, @generic="f1a7cb855fa842a5fbe4a7aec2e137f7fa4547e102e58347c9e5348008c3ac2b47c4ee909e645cbf19db8c00eda599105fba9590d3a700b67f3975d615316cec581cb01fb2f050a0b2e67e5dcf9535eadeb2c566e22aa41cf4", @nested={0xc, 0x8e, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @pid}]}]}, @nested={0xec, 0x4, 0x0, 0x1, [@nested={0xe0, 0x138, 0x0, 0x1, [@typed={0xc, 0x36, 0x0, 0x0, @u64=0x89e}, @typed={0xcc, 0x127, 0x0, 0x0, @binary="e308d7cb8f8a7371f8fc553437865614d47d146e319db3d4b2b0137a3aafbdf2b2b6a7b83b8295d9894cb2e5567ac098720930d405c9648c69e7c644a3896f1f79606174855ee51582b622fe43a11186fc33b580b895f6ca45521d8f1ed835905293e71737f352e56bb2cf6ad38c1cafc1bb446452a42b09d71b6efb1d8c0788c12b5f19a85658bd4826c03988f9608e52bb7d2103930b09f70a2a0e7417a96699fab77e3cbfa0e3cdba3fce6aaf349e0360bf1557a7881656d7bfdf572a4c6118ce3b15a04f6cdd"}, @nested={0x4, 0x84}]}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r2}]}, @typed={0x4, 0xdb}]}]}, 0x1334}, 0x1, 0x0, 0x0, 0x4004040}, 0x4814) 5.552760608s ago: executing program 5 (id=2627): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r1) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB='0\x00\x00\x00', @ANYBLOB="010927bd7000fbdbdf25027605080001"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/11/smp_affinity\x00', 0xc8780, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 5.275750451s ago: executing program 3 (id=2628): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x5, 0x15f4da07, 0x9, 0x1010, 0x64, 0xfffffffffffffffe, 0x1000, 0xb, 0xb02a, 0x2, 0xa]}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x1802000000000000, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0x7fffffff) 4.865047222s ago: executing program 7 (id=2629): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) r1 = socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x5}, 0xef) r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_CONNECT(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc090) r5 = openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x2, 0x0) read$auto_clk_summary_fops_(r5, &(0x7f00000002c0)=""/221, 0xdd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x5) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r2, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) unshare$auto(0x2000000000000003) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x1ff) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) read$auto_proc_pagemap_operations_internal(r8, &(0x7f0000001540)=""/209, 0xd1) getsockopt$auto(r1, 0x84, 0x7c, 0x0, 0x0) 4.864873979s ago: executing program 3 (id=2630): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x1, 0x4a3) statmount$auto(0x0, &(0x7f0000000580)={0x8, 0x1, 0x1ff, 0x7, 0x3f, 0x1000004909b6f8, 0x1ffe0, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0x8b4, 0x9, 0x6, 0x10003, 0x7, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x8, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = syz_genetlink_get_family_id$auto_gtp(0x0, r3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/11, 0xb) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) listen$auto(r1, 0x8) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) poll$auto(0x0, 0x200, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x8000000000001fd, 0x20000000005, 0x4, 0x1, 0x7ff, 0x3, 0x101, 0x101, 0x400000000003, 0x3, 0x7ffd, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) 3.717811832s ago: executing program 3 (id=2631): socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x8eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xffffffffffffffef, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f4, 0x14) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) write$auto_sg_fops_sg(r0, &(0x7f0000000240)="4a0200000000040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b035ab6f7e46cbe922896e7e796fec3370fd6cf2d037d9f213d48b743bd7804490341927d618b20f562edf1261d0", 0x5d) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) userfaultfd$auto(0x1) r1 = gettid() kcmp$auto_KCMP_FILES(r1, r1, 0x2, 0x800, 0x1) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x4800) 2.632464552s ago: executing program 5 (id=2632): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x80, r2, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x69, 0x4, 'N\x10SKSPUATS\x90l\xad#6\xcak\x00g\xea\xa10\xcc\x17S\x8cf\x1d\b\xa6i\xe6\x15\x15\xaff\xd7\xfb|\x18\xb3\xa5\x9bA\xb7D[\'\xda\xd1\xa1h\xa4\x12\x84\x97#\xba\x98i\x06\x9a\xac_\xd8\x91\xeaM\xb3K9\n\xc4R\xf2x\x9dwF$\t\xd6\x82\xa7\xd5\xf2\x16\xf0\\#\x14\xcd&\xa6\xdc\xedr\xa8Bdy'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) keyctl$auto(0xe, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) mlockall$auto(0x1ff) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000100)={0x6}) write$auto(r4, &(0x7f0000000100)='/sys/kernel/debug\xd4\x00\x00\x00/vkms/Writeback-1/edid_override\x00&\x9c\xabdj\xaa\x87\xe6[J!y\x80r', 0x80) setsockopt$auto_SO_DETACH_FILTER(r4, 0x42ba, 0x1b, &(0x7f0000000180)='\x00', 0xdb26) msgctl$auto_IPC_SET(0xff, 0x1, &(0x7f0000000440)={{0x7, 0xffffffffffffffff, 0xee00, 0xff, 0xd, 0x1, 0x1}, &(0x7f0000000380)=0x48, &(0x7f0000000400)=0xf7, 0x4, 0x2, 0x0, 0x3, 0xdb, 0xa6b, 0x0, 0x1, @inferred=0xffffffffffffffff}) 1.378884932s ago: executing program 7 (id=2634): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x20000000000000, 0x9}, 0x7}, 0x3, 0x0) 1.098845226s ago: executing program 7 (id=2635): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0xcd}, 0x4c054) 222.963476ms ago: executing program 5 (id=2636): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0xb, 0x0, 0x0) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000140)={@sival_int=0x2, @inferred=r2, 0xd, @_tid}, &(0x7f00000002c0)=0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x5, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x9, 0x8000000400000001}, {0x8, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x0, 0x2, 0x3}}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x8000000000000001, 0x7, 0x4, 0x9b72, 0xffffffffffffffff, 0xf34) socket(0x11, 0x2, 0x2) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) 222.83996ms ago: executing program 7 (id=2637): unshare$auto(0xff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, 0x0, 0x7, 0x7, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x280, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0x8, 0x3d, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x4000800) 0s ago: executing program 7 (id=2638): ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x8000, 0x2020009, 0x7eb, 0x17, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) r1 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000100)="8c1922ff3c91c4ea240ec0e5f5ec32fad380dbac632fac2a74933a24f865ba2d689bd77cc3411ecdcf01cd3a481a4272c1a884f64cc0ba3d9eda8e3c06971ebb305a49dbbe951317942564151af149cd82f3f2f4e8d9b1d8d2809dcacd6357f864d19b6b1f482e8374edf893df90524ddb") sendmsg$auto_ETHTOOL_MSG_STATS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x62}, 0x1, 0x0, 0x0, 0x14044084}, 0x4008080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mprotect$auto(0xfffffffffffffffb, 0x2000000100004, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/virtual/tty/ptytf/uevent\x00', 0x0, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x8001}, 0x8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x403c6f2b, 0x0) pread64$auto(r0, 0x0, 0x100006, 0xc982) madvise$auto(0x0, 0x1, 0xa) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) unshare$auto(0x40000080) ioctl$auto_FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={{0xfc, 0x0, @identifier="8e077749c584e2121ffde898ed5416f7"}, 0xa}) acct$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) shmget$auto(0x0, 0x7b, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/oss/sndstat\x00', 0x569480, 0x0) kernel console output (not intermixed with test programs): 0007fffb659edf8 [ 636.027269][T15343] [ 636.534941][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2245'. [ 637.551545][T15371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2249'. [ 637.625830][T15371] smc: removing net device dummy0 with user defined pnetid DU [ 637.798556][ T7670] Bluetooth: hci4: command tx timeout [ 638.088806][T15383] netlink: 202 bytes leftover after parsing attributes in process `syz.3.2251'. [ 638.270800][T15390] FAULT_INJECTION: forcing a failure. [ 638.270800][T15390] name failslab, interval 1, probability 0, space 0, times 0 [ 638.347780][T15390] CPU: 0 UID: 0 PID: 15390 Comm: syz.3.2254 Tainted: G U syzkaller #0 PREEMPT(full) [ 638.347806][T15390] Tainted: [U]=USER [ 638.347811][T15390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 638.347821][T15390] Call Trace: [ 638.347827][T15390] [ 638.347833][T15390] dump_stack_lvl+0x100/0x190 [ 638.347855][T15390] should_fail_ex.cold+0x5/0xa [ 638.347875][T15390] should_failslab+0xc2/0x120 [ 638.347893][T15390] __kmalloc_cache_noprof+0x7a/0x6f0 [ 638.347915][T15390] ? append_filter_err+0xb8/0x620 [ 638.347935][T15390] ? process_preds+0x93d/0x1d90 [ 638.347958][T15390] append_filter_err+0xb8/0x620 [ 638.347981][T15390] apply_subsystem_event_filter+0x727/0x17b0 [ 638.348009][T15390] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 638.348035][T15390] ? _copy_from_user+0x59/0xd0 [ 638.348054][T15390] subsystem_filter_write+0x95/0x120 [ 638.348077][T15390] vfs_write+0x2aa/0x1070 [ 638.348096][T15390] ? __pfx_subsystem_filter_write+0x10/0x10 [ 638.348120][T15390] ? __pfx_vfs_write+0x10/0x10 [ 638.348137][T15390] ? __fget_files+0x215/0x3d0 [ 638.348159][T15390] ? __fget_files+0x21f/0x3d0 [ 638.348182][T15390] ksys_write+0x12a/0x250 [ 638.348200][T15390] ? __pfx_ksys_write+0x10/0x10 [ 638.348222][T15390] ? rcu_is_watching+0x12/0xc0 [ 638.348243][T15390] do_syscall_64+0x10b/0xf80 [ 638.348257][T15390] ? clear_bhb_loop+0x40/0x90 [ 638.348276][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.348291][T15390] RIP: 0033:0x7fef7659ce59 [ 638.348304][T15390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.348318][T15390] RSP: 002b:00007fef77446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 638.348333][T15390] RAX: ffffffffffffffda RBX: 00007fef76815fa0 RCX: 00007fef7659ce59 [ 638.348343][T15390] RDX: 0000000000000078 RSI: 0000200000000040 RDI: 0000000000000006 [ 638.348352][T15390] RBP: 00007fef77446090 R08: 0000000000000000 R09: 0000000000000000 [ 638.348362][T15390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 638.348371][T15390] R13: 00007fef76816038 R14: 00007fef76815fa0 R15: 00007ffe3ec5b2a8 [ 638.348390][T15390] [ 639.503153][T15405] FAULT_INJECTION: forcing a failure. [ 639.503153][T15405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.578211][T15405] CPU: 0 UID: 0 PID: 15405 Comm: syz.2.2257 Tainted: G U syzkaller #0 PREEMPT(full) [ 639.578237][T15405] Tainted: [U]=USER [ 639.578242][T15405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.578251][T15405] Call Trace: [ 639.578257][T15405] [ 639.578263][T15405] dump_stack_lvl+0x100/0x190 [ 639.578285][T15405] should_fail_ex.cold+0x5/0xa [ 639.578305][T15405] _copy_to_user+0x32/0xd0 [ 639.578323][T15405] simple_read_from_buffer+0xcb/0x170 [ 639.578344][T15405] proc_fail_nth_read+0x1af/0x230 [ 639.578369][T15405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.578394][T15405] ? rw_verify_area+0xce/0x6d0 [ 639.578410][T15405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.578433][T15405] vfs_read+0x1e4/0xb30 [ 639.578453][T15405] ? __pfx_vfs_read+0x10/0x10 [ 639.578469][T15405] ? __fget_files+0x215/0x3d0 [ 639.578492][T15405] ? __fget_files+0x21f/0x3d0 [ 639.578514][T15405] ksys_read+0x12a/0x250 [ 639.578531][T15405] ? __pfx_ksys_read+0x10/0x10 [ 639.578550][T15405] ? rcu_is_watching+0x12/0xc0 [ 639.578572][T15405] do_syscall_64+0x10b/0xf80 [ 639.578586][T15405] ? clear_bhb_loop+0x40/0x90 [ 639.578605][T15405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.578621][T15405] RIP: 0033:0x7fac3515d68e [ 639.578634][T15405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 639.578649][T15405] RSP: 002b:00007fac36116fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 639.578671][T15405] RAX: ffffffffffffffda RBX: 00007fac361176c0 RCX: 00007fac3515d68e [ 639.578681][T15405] RDX: 000000000000000f RSI: 00007fac361170a0 RDI: 0000000000000005 [ 639.578691][T15405] RBP: 00007fac36117090 R08: 0000000000000000 R09: 0000000000000000 [ 639.578700][T15405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.578709][T15405] R13: 00007fac35416038 R14: 00007fac35415fa0 R15: 00007fffb659edf8 [ 639.578729][T15405] [ 640.053095][ T7670] Bluetooth: hci4: command tx timeout [ 640.132689][T15338] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.154645][T15338] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.187905][T15338] bridge_slave_0: entered allmulticast mode [ 640.207722][T15338] bridge_slave_0: entered promiscuous mode [ 640.239758][T15338] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.267889][T15338] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.281050][T15338] bridge_slave_1: entered allmulticast mode [ 640.299014][T15338] bridge_slave_1: entered promiscuous mode [ 640.540537][T15338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.554162][T15338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.606997][T15407] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 640.606997][T15407] program syz.0.2252 not setting count and/or reply_len properly [ 640.834862][T15338] team0: Port device team_slave_0 added [ 640.855223][T15338] team0: Port device team_slave_1 added [ 641.019999][T15338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.045078][T15338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.133471][T15338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.183759][T15338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.214125][T15338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.325914][T15338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.535518][T15427] FAULT_INJECTION: forcing a failure. [ 641.535518][T15427] name failslab, interval 1, probability 0, space 0, times 0 [ 641.611172][T15427] CPU: 0 UID: 0 PID: 15427 Comm: syz.2.2261 Tainted: G U syzkaller #0 PREEMPT(full) [ 641.611201][T15427] Tainted: [U]=USER [ 641.611207][T15427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.611217][T15427] Call Trace: [ 641.611224][T15427] [ 641.611231][T15427] dump_stack_lvl+0x100/0x190 [ 641.611253][T15427] should_fail_ex.cold+0x5/0xa [ 641.611274][T15427] should_failslab+0xc2/0x120 [ 641.611292][T15427] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 641.611307][T15427] ? __d_alloc+0x34/0xa40 [ 641.611327][T15427] ? lockdep_init_map_type+0x5c/0x250 [ 641.611346][T15427] __d_alloc+0x34/0xa40 [ 641.611369][T15427] d_alloc_pseudo+0x1c/0xc0 [ 641.611384][T15427] alloc_file_pseudo+0xcf/0x230 [ 641.611408][T15427] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 641.611430][T15427] ? alloc_fd+0x476/0x790 [ 641.611455][T15427] sock_alloc_file+0x50/0x210 [ 641.611475][T15427] __sys_socket+0x1c0/0x260 [ 641.611491][T15427] ? __pfx___sys_socket+0x10/0x10 [ 641.611505][T15427] ? ksys_write+0x1ac/0x250 [ 641.611527][T15427] __x64_sys_socket+0x72/0xb0 [ 641.611548][T15427] ? lockdep_hardirqs_on+0x78/0x100 [ 641.611574][T15427] do_syscall_64+0x10b/0xf80 [ 641.611588][T15427] ? clear_bhb_loop+0x40/0x90 [ 641.611608][T15427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.611625][T15427] RIP: 0033:0x7fac3519ce59 [ 641.611639][T15427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.611654][T15427] RSP: 002b:00007fac36117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 641.611670][T15427] RAX: ffffffffffffffda RBX: 00007fac35415fa0 RCX: 00007fac3519ce59 [ 641.611681][T15427] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 641.611691][T15427] RBP: 00007fac35232d6f R08: 0000000000000000 R09: 0000000000000000 [ 641.611701][T15427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.611711][T15427] R13: 00007fac35416038 R14: 00007fac35415fa0 R15: 00007fffb659edf8 [ 641.611731][T15427] [ 641.962812][T15338] hsr_slave_0: entered promiscuous mode [ 641.969105][T15338] hsr_slave_1: entered promiscuous mode [ 641.975172][T15338] debugfs: 'hsr0' already exists in 'hsr' [ 641.981059][T15338] Cannot create hsr debugfs directory [ 642.171344][ T7670] Bluetooth: hci4: command tx timeout [ 642.812833][T15338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 642.866941][T15338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.962290][T15338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 642.982741][T15447] FAULT_INJECTION: forcing a failure. [ 642.982741][T15447] name failslab, interval 1, probability 0, space 0, times 0 [ 643.018663][T15338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.029171][T15447] CPU: 0 UID: 0 PID: 15447 Comm: syz.2.2266 Tainted: G U syzkaller #0 PREEMPT(full) [ 643.029200][T15447] Tainted: [U]=USER [ 643.029206][T15447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.029217][T15447] Call Trace: [ 643.029224][T15447] [ 643.029236][T15447] dump_stack_lvl+0x100/0x190 [ 643.029260][T15447] should_fail_ex.cold+0x5/0xa [ 643.029279][T15447] should_failslab+0xc2/0x120 [ 643.029298][T15447] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 643.029314][T15447] ? __d_alloc+0x34/0xa40 [ 643.029333][T15447] ? lockdep_init_map_type+0x5c/0x250 [ 643.029353][T15447] __d_alloc+0x34/0xa40 [ 643.029375][T15447] d_alloc_pseudo+0x1c/0xc0 [ 643.029390][T15447] alloc_file_pseudo+0xcf/0x230 [ 643.029415][T15447] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 643.029438][T15447] ? alloc_fd+0x476/0x790 [ 643.029459][T15447] sock_alloc_file+0x50/0x210 [ 643.029479][T15447] __sys_socket+0x1c0/0x260 [ 643.029494][T15447] ? __pfx___sys_socket+0x10/0x10 [ 643.029511][T15447] ? ksys_write+0x1ac/0x250 [ 643.029541][T15447] __x64_sys_socket+0x72/0xb0 [ 643.029556][T15447] ? lockdep_hardirqs_on+0x78/0x100 [ 643.029579][T15447] do_syscall_64+0x10b/0xf80 [ 643.029594][T15447] ? clear_bhb_loop+0x40/0x90 [ 643.029612][T15447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.029628][T15447] RIP: 0033:0x7fac3519e6c7 [ 643.029642][T15447] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.029657][T15447] RSP: 002b:00007fac360f4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 643.029672][T15447] RAX: ffffffffffffffda RBX: 00007fac35416090 RCX: 00007fac3519e6c7 [ 643.029688][T15447] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 643.029699][T15447] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 643.029709][T15447] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000000 [ 643.029719][T15447] R13: 00007fac35416128 R14: 00007fac35416090 R15: 00007fffb659edf8 [ 643.029739][T15447] [ 643.245101][T15338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 643.412976][ T5726] Process accounting paused [ 643.421759][T15338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.624254][T15448] openvswitch: netlink: Key type 68 is out of range max 32 [ 643.677950][T15338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 643.696534][T15338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.203641][ T7670] Bluetooth: hci4: command tx timeout [ 644.217468][T15338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.325417][T15338] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.374072][T14885] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.381243][T14885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.464685][T14885] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.471974][T14885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.658596][T15444] Process accounting resumed [ 644.881771][T15466] openvswitch: netlink: Key type 68 is out of range max 32 [ 645.100999][T15463] Process accounting resumed [ 645.403013][T15485] ubi0: attaching mtd0 [ 645.424074][T15485] ubi0: scanning is finished [ 645.446687][T15485] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 645.802659][T15485] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 645.834619][T15338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.489495][T15338] veth0_vlan: entered promiscuous mode [ 647.648337][T15338] veth1_vlan: entered promiscuous mode [ 647.690874][T15536] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 647.790354][T15535] can: request_module (can-proto-0) failed. [ 648.253009][T15338] veth0_macvtap: entered promiscuous mode [ 648.293534][T15338] veth1_macvtap: entered promiscuous mode [ 648.458537][T15549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2279'. [ 648.560963][T15338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.627884][T15338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.707160][ T6105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.727413][T15551] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2280'. [ 648.752187][ T6105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.824377][ T6105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.896255][ T6105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.462409][T14885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.511057][T14885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.626457][T15565] [U] ^C [ 649.660448][T15565] netlink: 202 bytes leftover after parsing attributes in process `syz.2.2284'. [ 649.693623][ T6105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.730729][ T6105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.241174][T15579] ubi0: attaching mtd0 [ 650.305352][T15579] ubi0: scanning is finished [ 650.366745][T15579] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 650.685487][T15579] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 651.146394][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2288'. [ 651.404211][T15593] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 651.973966][T15599] openvswitch: netlink: Key type 68 is out of range max 32 [ 652.114969][T15595] Process accounting resumed [ 652.425358][T15611] [U] ^C [ 652.458458][T15611] netlink: 202 bytes leftover after parsing attributes in process `syz.4.2294'. [ 652.486667][T15613] FAULT_INJECTION: forcing a failure. [ 652.486667][T15613] name failslab, interval 1, probability 0, space 0, times 0 [ 652.559508][T15613] CPU: 0 UID: 0 PID: 15613 Comm: syz.3.2295 Tainted: G U syzkaller #0 PREEMPT(full) [ 652.559537][T15613] Tainted: [U]=USER [ 652.559543][T15613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.559553][T15613] Call Trace: [ 652.559559][T15613] [ 652.559565][T15613] dump_stack_lvl+0x100/0x190 [ 652.559589][T15613] should_fail_ex.cold+0x5/0xa [ 652.559610][T15613] ? tomoyo_encode2+0xfb/0x3c0 [ 652.559629][T15613] should_failslab+0xc2/0x120 [ 652.559648][T15613] __kmalloc_noprof+0xe0/0x850 [ 652.559663][T15613] ? d_absolute_path+0x136/0x1b0 [ 652.559682][T15613] tomoyo_encode2+0xfb/0x3c0 [ 652.559703][T15613] tomoyo_encode+0x29/0x50 [ 652.559722][T15613] tomoyo_realpath_from_path+0x18c/0x690 [ 652.559746][T15613] tomoyo_check_open_permission+0x2af/0x3c0 [ 652.559765][T15613] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 652.559793][T15613] ? hook_file_open+0x24e/0x7a0 [ 652.559828][T15613] ? path_get+0x61/0x80 [ 652.559852][T15613] tomoyo_file_open+0x6b/0x90 [ 652.559876][T15613] security_file_open+0xb5/0x1e0 [ 652.559896][T15613] do_dentry_open+0x5aa/0x1660 [ 652.559932][T15613] ? security_inode_permission+0xbf/0x250 [ 652.559953][T15613] vfs_open+0x82/0x3f0 [ 652.559978][T15613] path_openat+0x208c/0x31a0 [ 652.560004][T15613] ? __pfx_path_openat+0x10/0x10 [ 652.560030][T15613] do_file_open+0x20e/0x430 [ 652.560051][T15613] ? __pfx_do_file_open+0x10/0x10 [ 652.560083][T15613] ? alloc_fd+0x476/0x790 [ 652.560103][T15613] ? do_getname+0x191/0x390 [ 652.560126][T15613] do_sys_openat2+0x10d/0x1e0 [ 652.560149][T15613] ? __pfx_do_sys_openat2+0x10/0x10 [ 652.560178][T15613] __x64_sys_openat+0x12d/0x210 [ 652.560201][T15613] ? __pfx___x64_sys_openat+0x10/0x10 [ 652.560224][T15613] ? ksys_write+0x1ac/0x250 [ 652.560243][T15613] ? rcu_is_watching+0x12/0xc0 [ 652.560264][T15613] do_syscall_64+0x10b/0xf80 [ 652.560278][T15613] ? clear_bhb_loop+0x40/0x90 [ 652.560296][T15613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.560312][T15613] RIP: 0033:0x7fef7659ce59 [ 652.560326][T15613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.560341][T15613] RSP: 002b:00007fef77446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 652.560356][T15613] RAX: ffffffffffffffda RBX: 00007fef76815fa0 RCX: 00007fef7659ce59 [ 652.560367][T15613] RDX: 0000000000020342 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 652.560376][T15613] RBP: 00007fef76632d6f R08: 0000000000000000 R09: 0000000000000000 [ 652.560386][T15613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.560395][T15613] R13: 00007fef76816038 R14: 00007fef76815fa0 R15: 00007ffe3ec5b2a8 [ 652.560416][T15613] [ 652.841305][T15613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 653.540852][T15620] openvswitch: netlink: Key type 68 is out of range max 32 [ 654.568091][ T7672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 654.583347][ T7672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 654.591598][ T7672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 654.605291][ T7672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 654.615817][ T7672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 654.859529][T15619] Process accounting resumed [ 655.053599][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2300'. [ 655.104605][T15639] veth1_macvtap: left promiscuous mode [ 656.018846][T15655] openvswitch: netlink: Key type 68 is out of range max 32 [ 656.249812][T15653] Process accounting resumed [ 656.686082][ T7672] Bluetooth: hci5: command tx timeout [ 657.736529][T15631] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.774752][T15631] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.799581][T15631] bridge_slave_0: entered allmulticast mode [ 657.833055][T15631] bridge_slave_0: entered promiscuous mode [ 657.930101][T15689] FAULT_INJECTION: forcing a failure. [ 657.930101][T15689] name failslab, interval 1, probability 0, space 0, times 0 [ 657.988030][T15689] CPU: 0 UID: 0 PID: 15689 Comm: syz.4.2306 Tainted: G U syzkaller #0 PREEMPT(full) [ 657.988058][T15689] Tainted: [U]=USER [ 657.988064][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 657.988075][T15689] Call Trace: [ 657.988081][T15689] [ 657.988088][T15689] dump_stack_lvl+0x100/0x190 [ 657.988111][T15689] should_fail_ex.cold+0x5/0xa [ 657.988132][T15689] ? tomoyo_realpath_from_path+0xb6/0x690 [ 657.988153][T15689] should_failslab+0xc2/0x120 [ 657.988172][T15689] __kmalloc_noprof+0xe0/0x850 [ 657.988186][T15689] ? kfree+0x1dd/0x6c0 [ 657.988209][T15689] tomoyo_realpath_from_path+0xb6/0x690 [ 657.988234][T15689] tomoyo_check_open_permission+0x2af/0x3c0 [ 657.988253][T15689] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 657.988278][T15689] ? hook_file_open+0x24e/0x7a0 [ 657.988308][T15689] ? path_get+0x61/0x80 [ 657.988331][T15689] tomoyo_file_open+0x6b/0x90 [ 657.988354][T15689] security_file_open+0xb5/0x1e0 [ 657.988373][T15689] do_dentry_open+0x5aa/0x1660 [ 657.988393][T15689] ? security_inode_permission+0xbf/0x250 [ 657.988413][T15689] vfs_open+0x82/0x3f0 [ 657.988437][T15689] path_openat+0x208c/0x31a0 [ 657.988462][T15689] ? __pfx_path_openat+0x10/0x10 [ 657.988488][T15689] do_file_open+0x20e/0x430 [ 657.988508][T15689] ? __pfx_do_file_open+0x10/0x10 [ 657.988549][T15689] ? alloc_fd+0x476/0x790 [ 657.988571][T15689] ? do_getname+0x191/0x390 [ 657.988594][T15689] do_sys_openat2+0x10d/0x1e0 [ 657.988618][T15689] ? __pfx_do_sys_openat2+0x10/0x10 [ 657.988648][T15689] __x64_sys_openat+0x12d/0x210 [ 657.988671][T15689] ? __pfx___x64_sys_openat+0x10/0x10 [ 657.988694][T15689] ? ksys_write+0x1ac/0x250 [ 657.988713][T15689] ? rcu_is_watching+0x12/0xc0 [ 657.988734][T15689] do_syscall_64+0x10b/0xf80 [ 657.988749][T15689] ? clear_bhb_loop+0x40/0x90 [ 657.988769][T15689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.988785][T15689] RIP: 0033:0x7f01a0f9ce59 [ 657.988800][T15689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.988815][T15689] RSP: 002b:00007f019f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 657.988830][T15689] RAX: ffffffffffffffda RBX: 00007f01a1215fa0 RCX: 00007f01a0f9ce59 [ 657.988841][T15689] RDX: 0000000000020342 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 657.988851][T15689] RBP: 00007f01a1032d6f R08: 0000000000000000 R09: 0000000000000000 [ 657.988860][T15689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.988869][T15689] R13: 00007f01a1216038 R14: 00007f01a1215fa0 R15: 00007ffc2514b738 [ 657.988889][T15689] [ 657.988897][T15689] ERROR: Out of memory at tomoyo_realpath_from_path. [ 658.507554][T15631] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.543904][T15631] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.567017][T15631] bridge_slave_1: entered allmulticast mode [ 658.584341][T15631] bridge_slave_1: entered promiscuous mode [ 658.702395][T15631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.739920][T15631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.783655][ T7672] Bluetooth: hci5: command tx timeout [ 658.849411][T15631] team0: Port device team_slave_0 added [ 658.857010][T15631] team0: Port device team_slave_1 added [ 658.964690][T15631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.995351][T15631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.086810][T15631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.143516][T15631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.173913][T15631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.296704][T15631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.507458][T15631] hsr_slave_0: entered promiscuous mode [ 659.541124][T15631] hsr_slave_1: entered promiscuous mode [ 659.597209][T15631] debugfs: 'hsr0' already exists in 'hsr' [ 659.631430][T15631] Cannot create hsr debugfs directory [ 660.577964][T15631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 660.624624][T15631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 660.701706][T15631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 660.732031][T15631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.756357][T15631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 660.786751][T15631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.834085][T15631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 660.841600][ T7672] Bluetooth: hci5: command tx timeout [ 660.883645][T15631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 661.881928][T15716] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 661.881928][T15716] program syz.3.2309 not setting count and/or reply_len properly [ 662.289816][T15631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.386610][T15631] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.426122][T14885] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.433277][T14885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.492085][T14885] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.499236][T14885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.918661][ T7672] Bluetooth: hci5: command tx timeout [ 663.720222][T15631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.741636][T15749] ubi0: attaching mtd0 [ 663.771883][T15749] ubi0: scanning is finished [ 663.793747][T15749] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 663.829252][T15738] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 663.829252][T15738] program syz.0.2311 not setting count and/or reply_len properly [ 664.139754][T15749] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 664.511751][T15631] veth0_vlan: entered promiscuous mode [ 664.713939][T15631] veth1_vlan: entered promiscuous mode [ 665.036219][T15631] veth0_macvtap: entered promiscuous mode [ 665.112184][T15631] veth1_macvtap: entered promiscuous mode [ 665.275483][T15631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.534225][T15631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.638613][ T6105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.690052][ T6105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.754243][ T6105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.802943][ T6105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.269034][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.323545][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.446186][ T6108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.498682][ T6108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.675174][T15773] Process accounting resumed [ 666.822655][T15786] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 667.092144][T15786] File: /dev/nullb0 PID: 15786 Comm: syz.3.2323 [ 667.165631][T15792] netlink: 98 bytes leftover after parsing attributes in process `syz.4.2324'. [ 667.233417][T15805] ubi0: attaching mtd0 [ 667.315597][T15805] ubi0: scanning is finished [ 667.367932][T15805] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 667.399426][T15811] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2324'. [ 667.455828][T15800] Â: entered promiscuous mode [ 667.973533][T15805] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 668.183305][T15793] kexec: Could not allocate control_code_buffer [ 669.961997][ T7670] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.979192][ T7670] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 669.991457][ T7670] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 670.012131][ T7670] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 670.019696][ T7670] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.217163][T15878] synth uevent: /devices/virtual/tty/ptyvc: unknown uevent action string [ 671.293296][T15878] tty ptyvc: uevent: failed to send synthetic uevent: -22 [ 671.522693][ T6105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.897145][ T6105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.117795][ T7670] Bluetooth: hci6: command tx timeout [ 672.143047][ T6105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.273462][ T6105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.676270][T15889] openvswitch: netlink: Key type 68 is out of range max 32 [ 672.866889][T15887] Process accounting resumed [ 673.041847][T15905] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2338'. [ 673.096999][T15905] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2338'. [ 673.477785][T15914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2340'. [ 674.197776][ T7670] Bluetooth: hci6: command tx timeout [ 674.475786][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.549440][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.615784][ T6105] bond0 (unregistering): Released all slaves [ 674.993644][ T6105] Â: left promiscuous mode [ 675.136158][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 675.549386][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.597308][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.647874][T15856] bridge_slave_0: entered allmulticast mode [ 675.691714][T15856] bridge_slave_0: entered promiscuous mode [ 675.704147][T15893] Process accounting paused [ 675.864625][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.886398][T15941] zswap: compressor not available [ 675.918841][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.979704][T15856] bridge_slave_1: entered allmulticast mode [ 676.036168][T15856] bridge_slave_1: entered promiscuous mode [ 676.261260][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.281656][ T7670] Bluetooth: hci6: command tx timeout [ 676.475821][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.812037][ T6105] hsr_slave_0: left promiscuous mode [ 676.880651][ T6105] hsr_slave_1: left promiscuous mode [ 676.898117][T15970] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 676.932095][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.971643][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.016967][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.055208][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.150608][ T6105] veth0_macvtap: left promiscuous mode [ 677.184737][ T6105] veth1_vlan: left promiscuous mode [ 677.213881][ T6105] veth0_vlan: left promiscuous mode [ 677.389999][ T6108] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1363 with max blocks 8 with error 117 [ 677.450225][ T6108] EXT4-fs (sda1): This should not happen!! Data will be lost [ 677.450225][ T6108] [ 677.859877][ T6105] team0 (unregistering): Port device team_slave_1 removed [ 677.887228][T15981] zswap: compressor not available [ 677.911302][ T6105] team0 (unregistering): Port device team_slave_0 removed [ 678.304557][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 678.337386][T15856] team0: Port device team_slave_0 added [ 678.358126][ T7670] Bluetooth: hci6: command tx timeout [ 678.540984][T15856] team0: Port device team_slave_1 added [ 678.721436][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.752578][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.904086][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.965076][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.987033][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.071091][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.625682][T15856] hsr_slave_0: entered promiscuous mode [ 679.655929][T15856] hsr_slave_1: entered promiscuous mode [ 679.695961][T15856] debugfs: 'hsr0' already exists in 'hsr' [ 679.753427][T15856] Cannot create hsr debugfs directory [ 679.795777][T16004] FAULT_INJECTION: forcing a failure. [ 679.795777][T16004] name failslab, interval 1, probability 0, space 0, times 0 [ 679.861020][T16004] CPU: 0 UID: 0 PID: 16004 Comm: syz.4.2348 Tainted: G U syzkaller #0 PREEMPT(full) [ 679.861048][T16004] Tainted: [U]=USER [ 679.861053][T16004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.861064][T16004] Call Trace: [ 679.861070][T16004] [ 679.861077][T16004] dump_stack_lvl+0x100/0x190 [ 679.861100][T16004] should_fail_ex.cold+0x5/0xa [ 679.861122][T16004] should_failslab+0xc2/0x120 [ 679.861140][T16004] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 679.861158][T16004] ? parse_pred+0x2d4/0x3070 [ 679.861182][T16004] kmemdup_nul+0x49/0xd0 [ 679.861205][T16004] parse_pred+0x2d4/0x3070 [ 679.861231][T16004] ? __pfx_parse_pred+0x10/0x10 [ 679.861258][T16004] ? rcu_is_watching+0x12/0xc0 [ 679.861278][T16004] ? trace_kmalloc+0xe3/0x110 [ 679.861298][T16004] ? __kmalloc_noprof+0x320/0x850 [ 679.861317][T16004] process_preds+0x6a6/0x1d90 [ 679.861345][T16004] apply_subsystem_event_filter+0x4b6/0x17b0 [ 679.861373][T16004] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 679.861399][T16004] ? _copy_from_user+0x59/0xd0 [ 679.861418][T16004] subsystem_filter_write+0x95/0x120 [ 679.861442][T16004] vfs_write+0x2aa/0x1070 [ 679.861463][T16004] ? __pfx_subsystem_filter_write+0x10/0x10 [ 679.861486][T16004] ? __pfx_vfs_write+0x10/0x10 [ 679.861503][T16004] ? __fget_files+0x215/0x3d0 [ 679.861526][T16004] ? __fget_files+0x21f/0x3d0 [ 679.861549][T16004] ksys_write+0x12a/0x250 [ 679.861566][T16004] ? __pfx_ksys_write+0x10/0x10 [ 679.861586][T16004] ? rcu_is_watching+0x12/0xc0 [ 679.861613][T16004] do_syscall_64+0x10b/0xf80 [ 679.861628][T16004] ? clear_bhb_loop+0x40/0x90 [ 679.861650][T16004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.861666][T16004] RIP: 0033:0x7f01a0f9ce59 [ 679.861681][T16004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.861696][T16004] RSP: 002b:00007f019f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 679.861711][T16004] RAX: ffffffffffffffda RBX: 00007f01a1215fa0 RCX: 00007f01a0f9ce59 [ 679.861722][T16004] RDX: 000000000000004a RSI: 0000200000000040 RDI: 0000000000000006 [ 679.861732][T16004] RBP: 00007f01a1032d6f R08: 0000000000000000 R09: 0000000000000000 [ 679.861741][T16004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.861751][T16004] R13: 00007f01a1216038 R14: 00007f01a1215fa0 R15: 00007ffc2514b738 [ 679.861771][T16004] [ 680.315727][ T9055] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1363 with max blocks 1 with error 117 [ 680.328547][ T9055] EXT4-fs (sda1): This should not happen!! Data will be lost [ 680.328547][ T9055] [ 680.427459][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 681.897964][T15856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 681.946271][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.978474][T15856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 682.021239][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.055186][T15856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 682.104745][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.137490][T15856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 682.201540][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.651365][T15856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.860238][T15856] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.906111][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.913285][T14112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.006865][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.014022][T14112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.995628][T16079] FAULT_INJECTION: forcing a failure. [ 683.995628][T16079] name fail_futex, interval 1, probability 0, space 0, times 0 [ 684.075495][T16079] CPU: 0 UID: 0 PID: 16079 Comm: syz.2.2356 Tainted: G U syzkaller #0 PREEMPT(full) [ 684.075523][T16079] Tainted: [U]=USER [ 684.075529][T16079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.075540][T16079] Call Trace: [ 684.075546][T16079] [ 684.075553][T16079] dump_stack_lvl+0x100/0x190 [ 684.075575][T16079] should_fail_ex.cold+0x5/0xa [ 684.075595][T16079] get_futex_key+0x1d2/0x1510 [ 684.075614][T16079] ? __pfx_get_futex_key+0x10/0x10 [ 684.075632][T16079] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.075660][T16079] futex_wake+0xea/0x530 [ 684.075681][T16079] ? __pfx_futex_wake+0x10/0x10 [ 684.075710][T16079] do_futex+0x32b/0x350 [ 684.075727][T16079] ? __pfx_do_futex+0x10/0x10 [ 684.075745][T16079] ? fput+0x79/0x100 [ 684.075765][T16079] ? __sys_sendmsg+0x18f/0x220 [ 684.075785][T16079] __x64_sys_futex+0x34f/0x4d0 [ 684.075805][T16079] ? __pfx___x64_sys_futex+0x10/0x10 [ 684.075825][T16079] ? rcu_is_watching+0x12/0xc0 [ 684.075845][T16079] do_syscall_64+0x10b/0xf80 [ 684.075859][T16079] ? clear_bhb_loop+0x40/0x90 [ 684.075877][T16079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.075892][T16079] RIP: 0033:0x7f8d79f9ce59 [ 684.075906][T16079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.075921][T16079] RSP: 002b:00007f8d7ae030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 684.075936][T16079] RAX: ffffffffffffffda RBX: 00007f8d7a215fa8 RCX: 00007f8d79f9ce59 [ 684.075946][T16079] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d7a215fac [ 684.075956][T16079] RBP: 00007f8d7a215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 684.075965][T16079] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000000 [ 684.076015][T16079] R13: 00007f8d7a216038 R14: 00007ffe2dc8e940 R15: 00007ffe2dc8ea28 [ 684.076036][T16079] [ 684.513526][T15856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.635420][T15856] veth0_vlan: entered promiscuous mode [ 684.696069][T15856] veth1_vlan: entered promiscuous mode [ 684.893019][T15856] veth0_macvtap: entered promiscuous mode [ 684.982545][T15856] veth1_macvtap: entered promiscuous mode [ 685.090001][T16093] zswap: compressor not available [ 685.285411][T15856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.361175][T16098] zswap: compressor not available [ 685.386540][T15856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.513813][T14112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.543395][T14112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.589791][T14112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.643242][T14112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.882414][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.893008][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.022892][T14115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.065477][T14115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.556072][ T6108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.596804][ T6108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.883802][T16137] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 688.883802][T16137] program syz.4.2360 not setting count and/or reply_len properly [ 689.097034][T16138] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 689.097034][T16138] program syz.3.2362 not setting count and/or reply_len properly [ 690.184047][T16157] vcan0: tx drop: invalid da for name 0x000000000000003f [ 690.480659][T16162] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 690.527231][T16162] FAULT_INJECTION: forcing a failure. [ 690.527231][T16162] name failslab, interval 1, probability 0, space 0, times 0 [ 690.576105][T16162] CPU: 0 UID: 0 PID: 16162 Comm: syz.3.2366 Tainted: G U syzkaller #0 PREEMPT(full) [ 690.576133][T16162] Tainted: [U]=USER [ 690.576140][T16162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 690.576150][T16162] Call Trace: [ 690.576156][T16162] [ 690.576163][T16162] dump_stack_lvl+0x100/0x190 [ 690.576186][T16162] should_fail_ex.cold+0x5/0xa [ 690.576206][T16162] ? tracing_log_err+0xb9/0x6a0 [ 690.576226][T16162] should_failslab+0xc2/0x120 [ 690.576245][T16162] __kmalloc_noprof+0xe0/0x850 [ 690.576265][T16162] tracing_log_err+0xb9/0x6a0 [ 690.576288][T16162] append_filter_err+0x399/0x620 [ 690.576312][T16162] apply_subsystem_event_filter+0x727/0x17b0 [ 690.576340][T16162] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 690.576366][T16162] ? _copy_from_user+0x59/0xd0 [ 690.576385][T16162] subsystem_filter_write+0x95/0x120 [ 690.576408][T16162] vfs_write+0x2aa/0x1070 [ 690.576427][T16162] ? __pfx_subsystem_filter_write+0x10/0x10 [ 690.576450][T16162] ? __pfx_vfs_write+0x10/0x10 [ 690.576468][T16162] ? __fget_files+0x215/0x3d0 [ 690.576490][T16162] ? __fget_files+0x21f/0x3d0 [ 690.576513][T16162] ksys_write+0x12a/0x250 [ 690.576531][T16162] ? __pfx_ksys_write+0x10/0x10 [ 690.576550][T16162] ? rcu_is_watching+0x12/0xc0 [ 690.576578][T16162] do_syscall_64+0x10b/0xf80 [ 690.576593][T16162] ? clear_bhb_loop+0x40/0x90 [ 690.576613][T16162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.576629][T16162] RIP: 0033:0x7f409ef9ce59 [ 690.576644][T16162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.576660][T16162] RSP: 002b:00007f409fe0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 690.576675][T16162] RAX: ffffffffffffffda RBX: 00007f409f215fa0 RCX: 00007f409ef9ce59 [ 690.576686][T16162] RDX: 000000000000004a RSI: 0000200000000040 RDI: 0000000000000006 [ 690.576695][T16162] RBP: 00007f409f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 690.576705][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.576714][T16162] R13: 00007f409f216038 R14: 00007f409f215fa0 R15: 00007fffd8c5efd8 [ 690.576735][T16162] [ 692.584728][T16178] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 693.710724][T16190] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 693.710724][T16190] program syz.4.2369 not setting count and/or reply_len properly [ 695.295254][T16200] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 695.295254][T16200] program syz.3.2372 not setting count and/or reply_len properly [ 695.884090][ T7672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 695.902866][ T7672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 695.911045][ T7672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 695.921984][ T7672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 695.929551][ T7672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.894396][T16222] Process accounting paused [ 697.272461][T16207] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.298588][T16207] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.326640][T16207] bridge_slave_0: entered allmulticast mode [ 697.351306][T16207] bridge_slave_0: entered promiscuous mode [ 697.373754][T16207] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.406010][T16207] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.429819][T16207] bridge_slave_1: entered allmulticast mode [ 697.456086][T16207] bridge_slave_1: entered promiscuous mode [ 697.546943][T16207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.589957][T16207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.685854][T16207] team0: Port device team_slave_0 added [ 697.711811][T16207] team0: Port device team_slave_1 added [ 697.802530][T16207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.825412][T16207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.908540][T16207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.947379][T16207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.957831][ T7672] Bluetooth: hci2: command tx timeout [ 697.982903][T16207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.079817][T16207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.295624][T16207] hsr_slave_0: entered promiscuous mode [ 698.316208][T16207] hsr_slave_1: entered promiscuous mode [ 698.338824][T16207] debugfs: 'hsr0' already exists in 'hsr' [ 698.359961][T16207] Cannot create hsr debugfs directory [ 699.325581][T16207] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 699.354584][T16207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.377485][T16207] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 699.403880][T16207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.428438][T16207] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 699.459337][T16207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.484841][T16207] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 699.510786][T16207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.781132][T16207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.931280][T16207] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.001536][T14120] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.008703][T14120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.039604][ T7672] Bluetooth: hci2: command tx timeout [ 700.061356][T14120] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.068500][T14120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.364465][T16207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.117694][ T7672] Bluetooth: hci2: command tx timeout [ 702.296249][ T7670] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 702.310710][ T7670] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 702.320416][ T7670] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 702.329834][ T7670] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 702.347065][ T7670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 702.550489][T16207] veth0_vlan: entered promiscuous mode [ 702.601197][T16207] veth1_vlan: entered promiscuous mode [ 702.733340][T16207] veth0_macvtap: entered promiscuous mode [ 702.781128][T16207] veth1_macvtap: entered promiscuous mode [ 702.856528][T16207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.053385][T16207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.139996][ T6105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.179492][ T6105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.256727][ T6105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.304135][ T6105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.624097][T14120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.664117][T14120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.795776][ T6105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.837549][ T6105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.202054][ T7670] Bluetooth: hci2: command tx timeout [ 704.439006][ T7670] Bluetooth: hci7: command tx timeout [ 704.639586][T16319] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.678552][T16319] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.710458][T16319] bridge_slave_0: entered allmulticast mode [ 704.742147][T16319] bridge_slave_0: entered promiscuous mode [ 704.779737][T16319] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.810354][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.846922][T16319] bridge_slave_1: entered allmulticast mode [ 704.878925][T16319] bridge_slave_1: entered promiscuous mode [ 704.994250][T16319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.055133][T16319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.252547][T16319] team0: Port device team_slave_0 added [ 705.288853][T16319] team0: Port device team_slave_1 added [ 705.506793][T16319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.540373][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.655517][T16319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.708448][T16319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.740189][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.869550][T16319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.205026][T16319] hsr_slave_0: entered promiscuous mode [ 706.225601][T16319] hsr_slave_1: entered promiscuous mode [ 706.245318][T16319] debugfs: 'hsr0' already exists in 'hsr' [ 706.266059][T16319] Cannot create hsr debugfs directory [ 706.518298][ T7670] Bluetooth: hci7: command tx timeout [ 707.207368][T16359] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 707.207368][T16359] program syz.5.2373 not setting count and/or reply_len properly [ 707.303922][T16319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 707.339300][T16319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.369427][T16319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 707.397004][T16319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 707.425523][T16319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 707.455074][T16319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 707.498428][T16319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 707.540435][T16319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 707.780501][T16319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.844586][T16319] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.888355][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.895559][T14112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.957552][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.964730][T14112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.598364][ T7670] Bluetooth: hci7: command tx timeout [ 709.190632][T16357] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 709.190632][T16357] program syz.3.2395 not setting count and/or reply_len properly [ 709.229754][T16384] openvswitch: netlink: Key type 68 is out of range max 32 [ 709.439956][T16379] Process accounting resumed [ 709.572650][T16319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.684898][ T7670] Bluetooth: hci7: command tx timeout [ 710.793098][T16319] veth0_vlan: entered promiscuous mode [ 710.856631][T16420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2402'. [ 710.873258][T16319] veth1_vlan: entered promiscuous mode [ 710.929324][T16420] bridge_slave_1: left allmulticast mode [ 710.956118][T16420] bridge_slave_1: left promiscuous mode [ 710.985961][T16420] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.033240][T16412] openvswitch: netlink: Key type 68 is out of range max 32 [ 711.071484][T16420] bridge_slave_0: left allmulticast mode [ 711.094110][T16420] bridge_slave_0: left promiscuous mode [ 711.125582][T16420] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.319268][T16319] veth0_macvtap: entered promiscuous mode [ 711.377243][T16319] veth1_macvtap: entered promiscuous mode [ 711.472901][T16319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.563783][T16319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.659276][T14885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.701380][T14885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.758157][T14885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.814527][T14885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.163681][ T6105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.215322][ T6105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.356043][ T9055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.408612][ T9055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.629792][T16417] Process accounting resumed [ 714.833965][T16470] openvswitch: netlink: Key type 68 is out of range max 32 [ 715.086345][T16467] Process accounting resumed [ 715.633001][ T29] audit: type=1326 audit(1779682715.075:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16489 comm="syz.4.2424" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01a0f9ce59 code=0x0 [ 716.465125][T16499] openvswitch: netlink: Key type 68 is out of range max 32 [ 716.643618][T16495] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 716.643618][T16495] program syz.5.2407 not setting count and/or reply_len properly [ 716.894065][T16508] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2419'. [ 716.961395][T16509] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2419'. [ 717.305143][T16514] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 717.378752][T16514] File: /dev/nullb0 PID: 16514 Comm: syz.4.2421 [ 717.852062][T16493] Process accounting resumed [ 720.767189][T16537] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 721.042600][T16537] File: /dev/nullb0 PID: 16537 Comm: syz.6.2427 [ 725.698198][T16602] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 725.698198][T16602] program syz.6.2442 not setting count and/or reply_len properly [ 726.044987][T16616] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 728.789375][T16655] FAULT_INJECTION: forcing a failure. [ 728.789375][T16655] name failslab, interval 1, probability 0, space 0, times 0 [ 728.899046][T16655] CPU: 0 UID: 0 PID: 16655 Comm: syz.6.2457 Tainted: G U L syzkaller #0 PREEMPT(full) [ 728.899076][T16655] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 728.899082][T16655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 728.899092][T16655] Call Trace: [ 728.899098][T16655] [ 728.899105][T16655] dump_stack_lvl+0x100/0x190 [ 728.899127][T16655] should_fail_ex.cold+0x5/0xa [ 728.899148][T16655] should_failslab+0xc2/0x120 [ 728.899166][T16655] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 728.899181][T16655] ? mas_preallocate+0x1105/0x14a0 [ 728.899203][T16655] mas_preallocate+0x1105/0x14a0 [ 728.899224][T16655] ? __pfx_mas_preallocate+0x10/0x10 [ 728.899249][T16655] ? vm_area_alloc+0x1f/0x160 [ 728.899272][T16655] ? lockdep_init_map_type+0x5c/0x250 [ 728.899292][T16655] __mmap_region+0x124a/0x2da0 [ 728.899321][T16655] ? __pfx___mmap_region+0x10/0x10 [ 728.899346][T16655] ? __lock_acquire+0x4a5/0x2630 [ 728.899375][T16655] ? find_held_lock+0x2b/0x80 [ 728.899394][T16655] ? ima_match_policy+0x8c4/0x2350 [ 728.899412][T16655] ? ima_match_policy+0x8c4/0x2350 [ 728.899448][T16655] ? process_measurement+0x4c8/0x2350 [ 728.899502][T16655] mmap_region+0x527/0x620 [ 728.899519][T16655] ? __pfx_mmap_region+0x10/0x10 [ 728.899535][T16655] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 728.899564][T16655] ? cap_mmap_addr+0x4b/0x120 [ 728.899587][T16655] ? bpf_lsm_mmap_addr+0x9/0x30 [ 728.899604][T16655] ? security_mmap_addr+0x71/0x1e0 [ 728.899623][T16655] ? __get_unmapped_area+0x255/0x3e0 [ 728.899644][T16655] do_mmap+0xc63/0x12f0 [ 728.899666][T16655] ? __pfx_do_mmap+0x10/0x10 [ 728.899685][T16655] ? __pfx_down_write_killable+0x10/0x10 [ 728.899706][T16655] vm_mmap_pgoff+0x29e/0x470 [ 728.899728][T16655] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 728.899746][T16655] ? __fget_files+0x215/0x3d0 [ 728.899767][T16655] ? __fget_files+0x21f/0x3d0 [ 728.899788][T16655] ksys_mmap_pgoff+0x3cb/0x610 [ 728.899808][T16655] ? __x64_sys_futex+0x358/0x4d0 [ 728.899826][T16655] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 728.899844][T16655] ? xfd_validate_state+0x129/0x190 [ 728.899859][T16655] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 728.899879][T16655] __x64_sys_mmap+0x125/0x190 [ 728.899897][T16655] do_syscall_64+0x10b/0xf80 [ 728.899911][T16655] ? clear_bhb_loop+0x40/0x90 [ 728.899929][T16655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.899945][T16655] RIP: 0033:0x7fd95419ce59 [ 728.899959][T16655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.899973][T16655] RSP: 002b:00007fd9523f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 728.899989][T16655] RAX: ffffffffffffffda RBX: 00007fd954415fa0 RCX: 00007fd95419ce59 [ 728.900000][T16655] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000005000000 [ 728.900010][T16655] RBP: 00007fd954232d6f R08: 00000000000000dd R09: 0000000000000000 [ 728.900019][T16655] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 728.900028][T16655] R13: 00007fd954416038 R14: 00007fd954415fa0 R15: 00007ffd0392fa58 [ 728.900050][T16655] [ 730.241204][T16666] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 730.241204][T16666] program syz.5.2458 not setting count and/or reply_len properly [ 731.174393][T16623] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 731.174393][T16623] program syz.3.2448 not setting count and/or reply_len properly [ 731.395462][T16683] openvswitch: netlink: Key type 68 is out of range max 32 [ 732.737115][T16654] Process accounting resumed [ 733.218329][T16706] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 733.464632][T16706] File: /dev/nullb0 PID: 16706 Comm: syz.3.2465 [ 734.740549][T16728] openvswitch: netlink: Key type 68 is out of range max 32 [ 735.799515][T16724] Process accounting resumed [ 736.986598][T16747] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 737.390563][T16747] File: /dev/nullb0 PID: 16747 Comm: syz.6.2474 [ 739.077010][T16764] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 739.077010][T16764] program syz.4.2472 not setting count and/or reply_len properly [ 740.996979][T16798] netlink: zone id is out of range [ 741.065387][T16798] netlink: zone id is out of range [ 741.140209][T16798] netlink: zone id is out of range [ 741.196789][T16798] netlink: zone id is out of range [ 741.233251][T16798] netlink: zone id is out of range [ 741.266229][T16798] netlink: zone id is out of range [ 741.299334][T16798] netlink: zone id is out of range [ 741.327341][T16798] netlink: zone id is out of range [ 741.359044][T16798] netlink: zone id is out of range [ 741.493433][T16798] netlink: set zone limit has 8 unknown bytes [ 742.460021][T16805] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 742.839457][T16805] File: /dev/nullb0 PID: 16805 Comm: syz.6.2483 [ 743.066564][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2485'. [ 744.187099][T16816] Process accounting paused [ 745.353719][T16835] MTRR 1 not used [ 746.161397][T16828] Process accounting resumed [ 747.321121][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.332347][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.657147][T16856] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 747.657147][T16856] program syz.3.2489 not setting count and/or reply_len properly [ 747.763581][T16845] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 747.993166][T16845] File: /dev/nullb0 PID: 16845 Comm: syz.5.2493 [ 748.046141][T16858] Process accounting paused [ 748.374295][T16865] FAULT_INJECTION: forcing a failure. [ 748.374295][T16865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 748.520026][T16865] CPU: 0 UID: 0 PID: 16865 Comm: syz.6.2496 Tainted: G U L syzkaller #0 PREEMPT(full) [ 748.520063][T16865] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 748.520070][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.520081][T16865] Call Trace: [ 748.520087][T16865] [ 748.520094][T16865] dump_stack_lvl+0x100/0x190 [ 748.520117][T16865] should_fail_ex.cold+0x5/0xa [ 748.520134][T16865] ? prepare_alloc_pages+0x16d/0x5f0 [ 748.520155][T16865] should_fail_alloc_page+0xeb/0x140 [ 748.520176][T16865] prepare_alloc_pages+0x1f0/0x5f0 [ 748.520198][T16865] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 748.520217][T16865] ? find_held_lock+0x2b/0x80 [ 748.520237][T16865] ? rcu_read_unlock+0x17/0x60 [ 748.520257][T16865] ? __up_read+0x2c1/0x6e0 [ 748.520274][T16865] ? __pfx___up_read+0x10/0x10 [ 748.520290][T16865] ? __rmap_walk_file+0x5c5/0x680 [ 748.520309][T16865] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 748.520337][T16865] ? __rmap_walk_file+0x50f/0x680 [ 748.520361][T16865] ? rmap_walk_file+0x1dd/0x2a0 [ 748.520387][T16865] __folio_alloc_noprof+0x13/0x260 [ 748.520402][T16865] alloc_migration_target+0x1d7/0x6d0 [ 748.520424][T16865] migrate_pages_batch+0x5dc/0x45c0 [ 748.520446][T16865] ? __pfx_alloc_migration_target+0x10/0x10 [ 748.520471][T16865] ? walk_pgd_range+0x1133/0x1dd0 [ 748.520486][T16865] ? __pfx_migrate_pages_batch+0x10/0x10 [ 748.520519][T16865] migrate_pages_sync+0x12c/0x880 [ 748.520540][T16865] ? __pfx_alloc_migration_target+0x10/0x10 [ 748.520564][T16865] ? __pfx_migrate_pages_sync+0x10/0x10 [ 748.520582][T16865] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 748.520605][T16865] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 748.520625][T16865] migrate_pages+0x1aa5/0x2880 [ 748.520647][T16865] ? __pfx_alloc_migration_target+0x10/0x10 [ 748.520671][T16865] ? __pfx_migrate_pages+0x10/0x10 [ 748.520691][T16865] ? queue_pages_range+0x11e/0x180 [ 748.520708][T16865] ? __up_read+0x2c1/0x6e0 [ 748.520725][T16865] ? __pfx___up_read+0x10/0x10 [ 748.520741][T16865] ? do_migrate_pages+0x451/0x740 [ 748.520758][T16865] ? do_migrate_pages+0x451/0x740 [ 748.520779][T16865] do_migrate_pages+0x488/0x740 [ 748.520802][T16865] ? __pfx_do_migrate_pages+0x10/0x10 [ 748.520823][T16865] ? rcu_is_watching+0x12/0xc0 [ 748.520841][T16865] ? cap_capable+0x10b/0x440 [ 748.520862][T16865] ? get_task_mm+0xc2/0xf0 [ 748.520881][T16865] ? security_capable+0xbd/0x260 [ 748.520909][T16865] kernel_migrate_pages+0x560/0x700 [ 748.520928][T16865] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 748.520952][T16865] __x64_sys_migrate_pages+0x96/0x100 [ 748.520970][T16865] ? lockdep_hardirqs_on+0x78/0x100 [ 748.520994][T16865] do_syscall_64+0x10b/0xf80 [ 748.521007][T16865] ? clear_bhb_loop+0x40/0x90 [ 748.521027][T16865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.521043][T16865] RIP: 0033:0x7fd95419ce59 [ 748.521064][T16865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.521080][T16865] RSP: 002b:00007fd9523d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 748.521095][T16865] RAX: ffffffffffffffda RBX: 00007fd954416090 RCX: 00007fd95419ce59 [ 748.521106][T16865] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 748.521117][T16865] RBP: 00007fd954232d6f R08: 0000000000000000 R09: 0000000000000000 [ 748.521127][T16865] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 748.521137][T16865] R13: 00007fd954416128 R14: 00007fd954416090 R15: 00007ffd0392fa58 [ 748.521157][T16865] [ 750.691799][ T7670] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 751.046595][T16864] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 751.437238][T16864] File: /dev/nullb0 PID: 16864 Comm: syz.5.2495 [ 752.760705][ T7670] Bluetooth: hci7: command 0x2016 tx timeout [ 753.039984][T16920] FAULT_INJECTION: forcing a failure. [ 753.039984][T16920] name failslab, interval 1, probability 0, space 0, times 0 [ 753.116756][T16920] CPU: 0 UID: 0 PID: 16920 Comm: syz.3.2504 Tainted: G U L syzkaller #0 PREEMPT(full) [ 753.116786][T16920] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 753.116792][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 753.116803][T16920] Call Trace: [ 753.116809][T16920] [ 753.116815][T16920] dump_stack_lvl+0x100/0x190 [ 753.116838][T16920] should_fail_ex.cold+0x5/0xa [ 753.116859][T16920] ? process_preds+0x4a2/0x1d90 [ 753.116878][T16920] should_failslab+0xc2/0x120 [ 753.116895][T16920] __kmalloc_noprof+0xe0/0x850 [ 753.116915][T16920] process_preds+0x4a2/0x1d90 [ 753.116944][T16920] apply_subsystem_event_filter+0x4b6/0x17b0 [ 753.116971][T16920] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 753.116997][T16920] ? _copy_from_user+0x59/0xd0 [ 753.117016][T16920] subsystem_filter_write+0x95/0x120 [ 753.117039][T16920] vfs_write+0x2aa/0x1070 [ 753.117057][T16920] ? __pfx_subsystem_filter_write+0x10/0x10 [ 753.117081][T16920] ? __pfx_vfs_write+0x10/0x10 [ 753.117098][T16920] ? __fget_files+0x215/0x3d0 [ 753.117120][T16920] ? __fget_files+0x21f/0x3d0 [ 753.117143][T16920] ksys_write+0x12a/0x250 [ 753.117160][T16920] ? __pfx_ksys_write+0x10/0x10 [ 753.117179][T16920] ? rcu_is_watching+0x12/0xc0 [ 753.117201][T16920] do_syscall_64+0x10b/0xf80 [ 753.117218][T16920] ? clear_bhb_loop+0x40/0x90 [ 753.117237][T16920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.117252][T16920] RIP: 0033:0x7f409ef9ce59 [ 753.117266][T16920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.117282][T16920] RSP: 002b:00007f409fe0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 753.117297][T16920] RAX: ffffffffffffffda RBX: 00007f409f215fa0 RCX: 00007f409ef9ce59 [ 753.117308][T16920] RDX: 000000000000004a RSI: 0000200000000040 RDI: 0000000000000004 [ 753.117318][T16920] RBP: 00007f409f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 753.117327][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.117336][T16920] R13: 00007f409f216038 R14: 00007f409f215fa0 R15: 00007fffd8c5efd8 [ 753.117357][T16920] [ 754.074397][T16913] net_ratelimit: 1 callbacks suppressed [ 754.074414][T16913] openvswitch: netlink: Key type 68 is out of range max 32 [ 754.361473][T16910] Process accounting resumed [ 754.842501][ T7670] Bluetooth: hci7: command 0x2016 tx timeout [ 755.109139][T16948] openvswitch: netlink: Key type 68 is out of range max 32 [ 755.292786][T16945] Process accounting resumed [ 755.687792][T16964] FAULT_INJECTION: forcing a failure. [ 755.687792][T16964] name failslab, interval 1, probability 0, space 0, times 0 [ 755.733637][T16964] CPU: 0 UID: 0 PID: 16964 Comm: syz.3.2513 Tainted: G U L syzkaller #0 PREEMPT(full) [ 755.733666][T16964] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 755.733673][T16964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.733684][T16964] Call Trace: [ 755.733690][T16964] [ 755.733697][T16964] dump_stack_lvl+0x100/0x190 [ 755.733719][T16964] should_fail_ex.cold+0x5/0xa [ 755.733740][T16964] should_failslab+0xc2/0x120 [ 755.733758][T16964] __kmalloc_node_noprof+0xe6/0x850 [ 755.733773][T16964] ? mempool_init_node+0x11b/0x6e0 [ 755.733790][T16964] ? lockdep_init_map_type+0x5c/0x250 [ 755.733810][T16964] ? __pfx_mempool_free_slab+0x10/0x10 [ 755.733827][T16964] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 755.733845][T16964] mempool_init_node+0x11b/0x6e0 [ 755.733862][T16964] ? __pfx_xa_load+0x10/0x10 [ 755.733882][T16964] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 755.733898][T16964] ? __pfx_mempool_free_slab+0x10/0x10 [ 755.733915][T16964] mempool_init_noprof+0x3a/0x50 [ 755.733935][T16964] bioset_init+0x37e/0x8a0 [ 755.733959][T16964] ? __pfx_bioset_init+0x10/0x10 [ 755.733989][T16964] __alloc_disk_node+0x83/0x6b0 [ 755.734016][T16964] __blk_alloc_disk+0xd2/0x170 [ 755.734039][T16964] ? __pfx___blk_alloc_disk+0x10/0x10 [ 755.734072][T16964] ? __pfx_idr_alloc+0x10/0x10 [ 755.734086][T16964] ? lockdep_init_map_type+0x5c/0x250 [ 755.734102][T16964] ? __raw_spin_lock_init+0x3a/0x110 [ 755.734122][T16964] ? __pfx_hot_add_show+0x10/0x10 [ 755.734137][T16964] zram_add+0x1bf/0x5d0 [ 755.734152][T16964] ? __pfx_zram_add+0x10/0x10 [ 755.734178][T16964] ? find_held_lock+0x2b/0x80 [ 755.734198][T16964] ? sysfs_file_kobj+0xe4/0x290 [ 755.734216][T16964] ? __pfx_hot_add_show+0x10/0x10 [ 755.734231][T16964] hot_add_show+0x21/0x80 [ 755.734246][T16964] class_attr_show+0x72/0xa0 [ 755.734268][T16964] ? __pfx_class_attr_show+0x10/0x10 [ 755.734288][T16964] sysfs_kf_seq_show+0x217/0x3a0 [ 755.734307][T16964] seq_read_iter+0x32f/0x1270 [ 755.734323][T16964] ? lock_acquire+0x1b1/0x370 [ 755.734345][T16964] kernfs_fop_read_iter+0x46c/0x610 [ 755.734368][T16964] ? rw_verify_area+0xce/0x6d0 [ 755.734383][T16964] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 755.734407][T16964] vfs_read+0x825/0xb30 [ 755.734426][T16964] ? __pfx_vfs_read+0x10/0x10 [ 755.734456][T16964] ksys_read+0x12a/0x250 [ 755.734474][T16964] ? __pfx_ksys_read+0x10/0x10 [ 755.734492][T16964] ? rcu_is_watching+0x12/0xc0 [ 755.734513][T16964] do_syscall_64+0x10b/0xf80 [ 755.734527][T16964] ? clear_bhb_loop+0x40/0x90 [ 755.734546][T16964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.734569][T16964] RIP: 0033:0x7f409ef9ce59 [ 755.734584][T16964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.734600][T16964] RSP: 002b:00007f409fe0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 755.734616][T16964] RAX: ffffffffffffffda RBX: 00007f409f215fa0 RCX: 00007f409ef9ce59 [ 755.734626][T16964] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000005 [ 755.734636][T16964] RBP: 00007f409f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 755.734646][T16964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.734655][T16964] R13: 00007f409f216038 R14: 00007f409f215fa0 R15: 00007fffd8c5efd8 [ 755.734677][T16964] [ 756.122815][T16961] MTRR 1 not used [ 757.201107][T16964] zram: Error allocating disk structure for device 0 [ 758.809695][T16996] FAULT_INJECTION: forcing a failure. [ 758.809695][T16996] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.874076][T16996] CPU: 0 UID: 0 PID: 16996 Comm: syz.5.2518 Tainted: G U L syzkaller #0 PREEMPT(full) [ 758.874105][T16996] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 758.874111][T16996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 758.874122][T16996] Call Trace: [ 758.874128][T16996] [ 758.874135][T16996] dump_stack_lvl+0x100/0x190 [ 758.874158][T16996] should_fail_ex.cold+0x5/0xa [ 758.874175][T16996] ? prepare_alloc_pages+0x16d/0x5f0 [ 758.874197][T16996] should_fail_alloc_page+0xeb/0x140 [ 758.874217][T16996] prepare_alloc_pages+0x1f0/0x5f0 [ 758.874240][T16996] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 758.874260][T16996] ? find_held_lock+0x2b/0x80 [ 758.874279][T16996] ? rcu_read_unlock+0x17/0x60 [ 758.874299][T16996] ? __up_read+0x2c1/0x6e0 [ 758.874316][T16996] ? __pfx___up_read+0x10/0x10 [ 758.874332][T16996] ? __rmap_walk_file+0x5c5/0x680 [ 758.874351][T16996] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 758.874379][T16996] ? __rmap_walk_file+0x50f/0x680 [ 758.874403][T16996] ? rmap_walk_file+0x1dd/0x2a0 [ 758.874429][T16996] __folio_alloc_noprof+0x13/0x260 [ 758.874444][T16996] alloc_migration_target+0x1d7/0x6d0 [ 758.874476][T16996] migrate_pages_batch+0x5dc/0x45c0 [ 758.874499][T16996] ? __pfx_alloc_migration_target+0x10/0x10 [ 758.874524][T16996] ? walk_pgd_range+0x1133/0x1dd0 [ 758.874539][T16996] ? __pfx_migrate_pages_batch+0x10/0x10 [ 758.874573][T16996] migrate_pages_sync+0x12c/0x880 [ 758.874594][T16996] ? __pfx_alloc_migration_target+0x10/0x10 [ 758.874619][T16996] ? __pfx_migrate_pages_sync+0x10/0x10 [ 758.874638][T16996] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 758.874661][T16996] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 758.874680][T16996] migrate_pages+0x1aa5/0x2880 [ 758.874703][T16996] ? __pfx_alloc_migration_target+0x10/0x10 [ 758.874726][T16996] ? __pfx_migrate_pages+0x10/0x10 [ 758.874746][T16996] ? queue_pages_range+0x11e/0x180 [ 758.874764][T16996] ? __up_read+0x2c1/0x6e0 [ 758.874781][T16996] ? __pfx___up_read+0x10/0x10 [ 758.874796][T16996] ? do_migrate_pages+0x451/0x740 [ 758.874814][T16996] ? do_migrate_pages+0x451/0x740 [ 758.874835][T16996] do_migrate_pages+0x488/0x740 [ 758.874857][T16996] ? __pfx_do_migrate_pages+0x10/0x10 [ 758.874879][T16996] ? rcu_is_watching+0x12/0xc0 [ 758.874897][T16996] ? cap_capable+0x10b/0x440 [ 758.874918][T16996] ? get_task_mm+0xc2/0xf0 [ 758.874937][T16996] ? security_capable+0xbd/0x260 [ 758.874961][T16996] kernel_migrate_pages+0x560/0x700 [ 758.874980][T16996] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 758.875005][T16996] __x64_sys_migrate_pages+0x96/0x100 [ 758.875023][T16996] ? lockdep_hardirqs_on+0x78/0x100 [ 758.875046][T16996] do_syscall_64+0x10b/0xf80 [ 758.875060][T16996] ? clear_bhb_loop+0x40/0x90 [ 758.875078][T16996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.875094][T16996] RIP: 0033:0x7f5aac99ce59 [ 758.875112][T16996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.875128][T16996] RSP: 002b:00007f5aad7bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 758.875144][T16996] RAX: ffffffffffffffda RBX: 00007f5aacc16090 RCX: 00007f5aac99ce59 [ 758.875155][T16996] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 758.875165][T16996] RBP: 00007f5aaca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 758.875174][T16996] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 758.875184][T16996] R13: 00007f5aacc16128 R14: 00007f5aacc16090 R15: 00007fffbb9c2b08 [ 758.875204][T16996] [ 759.724777][T13999] Bluetooth: hci4: command 0x0406 tx timeout [ 760.132860][T17003] openvswitch: netlink: Key type 68 is out of range max 32 [ 760.262938][T17001] Process accounting resumed [ 760.419578][T17008] sysfs_service_op_store: Client not running :-5: [ 760.870143][T17015] openvswitch: netlink: Key type 68 is out of range max 32 [ 761.895840][T17011] Process accounting resumed [ 762.925782][T17036] FAULT_INJECTION: forcing a failure. [ 762.925782][T17036] name failslab, interval 1, probability 0, space 0, times 0 [ 762.984468][T17036] CPU: 0 UID: 0 PID: 17036 Comm: syz.5.2528 Tainted: G U L syzkaller #0 PREEMPT(full) [ 762.984498][T17036] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 762.984504][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.984514][T17036] Call Trace: [ 762.984520][T17036] [ 762.984527][T17036] dump_stack_lvl+0x100/0x190 [ 762.984551][T17036] should_fail_ex.cold+0x5/0xa [ 762.984571][T17036] ? process_preds+0x4c2/0x1d90 [ 762.984591][T17036] should_failslab+0xc2/0x120 [ 762.984609][T17036] __kmalloc_noprof+0xe0/0x850 [ 762.984629][T17036] process_preds+0x4c2/0x1d90 [ 762.984658][T17036] apply_subsystem_event_filter+0x4b6/0x17b0 [ 762.984686][T17036] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 762.984712][T17036] ? _copy_from_user+0x59/0xd0 [ 762.984730][T17036] subsystem_filter_write+0x95/0x120 [ 762.984754][T17036] vfs_write+0x2aa/0x1070 [ 762.984773][T17036] ? __pfx_subsystem_filter_write+0x10/0x10 [ 762.984796][T17036] ? __pfx_vfs_write+0x10/0x10 [ 762.984813][T17036] ? __fget_files+0x215/0x3d0 [ 762.984835][T17036] ? __fget_files+0x21f/0x3d0 [ 762.984858][T17036] ksys_write+0x12a/0x250 [ 762.984875][T17036] ? __pfx_ksys_write+0x10/0x10 [ 762.984895][T17036] ? rcu_is_watching+0x12/0xc0 [ 762.984916][T17036] do_syscall_64+0x10b/0xf80 [ 762.984931][T17036] ? clear_bhb_loop+0x40/0x90 [ 762.984952][T17036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.984969][T17036] RIP: 0033:0x7f5aac99ce59 [ 762.984983][T17036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.984999][T17036] RSP: 002b:00007f5aad7dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.985015][T17036] RAX: ffffffffffffffda RBX: 00007f5aacc15fa0 RCX: 00007f5aac99ce59 [ 762.985025][T17036] RDX: 000000000000004a RSI: 0000200000000040 RDI: 0000000000000004 [ 762.985035][T17036] RBP: 00007f5aaca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 762.985044][T17036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.985054][T17036] R13: 00007f5aacc16038 R14: 00007f5aacc15fa0 R15: 00007fffbb9c2b08 [ 762.985074][T17036] [ 763.574946][T17041] openvswitch: netlink: Key type 68 is out of range max 32 [ 763.621962][T17041] Process accounting resumed [ 764.077828][T17048] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 764.236363][T17048] File: /dev/nullb0 PID: 17048 Comm: syz.5.2532 [ 764.296408][T17057] FAULT_INJECTION: forcing a failure. [ 764.296408][T17057] name failslab, interval 1, probability 0, space 0, times 0 [ 764.384999][T17057] CPU: 0 UID: 0 PID: 17057 Comm: syz.6.2534 Tainted: G U L syzkaller #0 PREEMPT(full) [ 764.385029][T17057] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 764.385042][T17057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.385052][T17057] Call Trace: [ 764.385058][T17057] [ 764.385064][T17057] dump_stack_lvl+0x100/0x190 [ 764.385088][T17057] should_fail_ex.cold+0x5/0xa [ 764.385109][T17057] should_failslab+0xc2/0x120 [ 764.385128][T17057] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 764.385142][T17057] ? sk_prot_alloc+0x60/0x2a0 [ 764.385168][T17057] sk_prot_alloc+0x60/0x2a0 [ 764.385190][T17057] sk_alloc+0x36/0xe80 [ 764.385208][T17057] pn_socket_create+0x22d/0x560 [ 764.385225][T17057] __sock_create+0x339/0x860 [ 764.385251][T17057] __sys_socket+0x14d/0x260 [ 764.385266][T17057] ? __pfx___sys_socket+0x10/0x10 [ 764.385287][T17057] __x64_sys_socket+0x72/0xb0 [ 764.385304][T17057] ? lockdep_hardirqs_on+0x78/0x100 [ 764.385327][T17057] do_syscall_64+0x10b/0xf80 [ 764.385341][T17057] ? clear_bhb_loop+0x40/0x90 [ 764.385359][T17057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.385374][T17057] RIP: 0033:0x7fd95419ce59 [ 764.385388][T17057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.385403][T17057] RSP: 002b:00007fd9523f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 764.385418][T17057] RAX: ffffffffffffffda RBX: 00007fd954415fa0 RCX: 00007fd95419ce59 [ 764.385428][T17057] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000023 [ 764.385437][T17057] RBP: 00007fd954232d6f R08: 0000000000000000 R09: 0000000000000000 [ 764.385447][T17057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.385456][T17057] R13: 00007fd954416038 R14: 00007fd954415fa0 R15: 00007ffd0392fa58 [ 764.385477][T17057] [ 765.489752][T17057] sd 0:0:1:0: PR command failed: 1026 [ 765.502743][T17057] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 765.523577][T17057] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 766.740791][T15338] Process accounting paused [ 767.090483][T13999] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 767.111732][T13999] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 767.123287][T13999] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 767.145684][T13999] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 767.157383][T13999] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 768.421494][T17102] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 768.421494][T17102] program syz.3.2541 not setting count and/or reply_len properly [ 769.051071][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.086921][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.119390][T17088] bridge_slave_0: entered allmulticast mode [ 769.150677][T17088] bridge_slave_0: entered promiscuous mode [ 769.238073][T13999] Bluetooth: hci8: command tx timeout [ 769.281044][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.311607][T17088] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.345769][T17088] bridge_slave_1: entered allmulticast mode [ 769.375442][T17088] bridge_slave_1: entered promiscuous mode [ 769.454671][T17085] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 769.454671][T17085] program syz.5.2542 not setting count and/or reply_len properly [ 769.504366][T17088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.552393][T17088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.689362][T17120] openvswitch: netlink: Key type 68 is out of range max 32 [ 769.727556][T17088] team0: Port device team_slave_0 added [ 769.748407][T17088] team0: Port device team_slave_1 added [ 769.851922][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.883373][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.920967][T17120] Process accounting resumed [ 770.007241][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.063846][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.104262][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.212992][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.262370][T17126] FAULT_INJECTION: forcing a failure. [ 770.262370][T17126] name failslab, interval 1, probability 0, space 0, times 0 [ 770.332357][T17126] CPU: 0 UID: 0 PID: 17126 Comm: syz.3.2546 Tainted: G U L syzkaller #0 PREEMPT(full) [ 770.332388][T17126] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 770.332394][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 770.332404][T17126] Call Trace: [ 770.332411][T17126] [ 770.332418][T17126] dump_stack_lvl+0x100/0x190 [ 770.332441][T17126] should_fail_ex.cold+0x5/0xa [ 770.332462][T17126] should_failslab+0xc2/0x120 [ 770.332482][T17126] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 770.332498][T17126] ? __d_alloc+0x34/0xa40 [ 770.332518][T17126] ? lockdep_init_map_type+0x5c/0x250 [ 770.332538][T17126] __d_alloc+0x34/0xa40 [ 770.332560][T17126] d_alloc_pseudo+0x1c/0xc0 [ 770.332575][T17126] alloc_file_pseudo+0xcf/0x230 [ 770.332598][T17126] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 770.332620][T17126] ? alloc_fd+0x476/0x790 [ 770.332642][T17126] sock_alloc_file+0x50/0x210 [ 770.332662][T17126] __sys_socket+0x1c0/0x260 [ 770.332678][T17126] ? __pfx___sys_socket+0x10/0x10 [ 770.332691][T17126] ? ksys_write+0x1ac/0x250 [ 770.332712][T17126] __x64_sys_socket+0x72/0xb0 [ 770.332733][T17126] ? lockdep_hardirqs_on+0x78/0x100 [ 770.332758][T17126] do_syscall_64+0x10b/0xf80 [ 770.332772][T17126] ? clear_bhb_loop+0x40/0x90 [ 770.332792][T17126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.332808][T17126] RIP: 0033:0x7f409ef9e6c7 [ 770.332823][T17126] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.332839][T17126] RSP: 002b:00007f409fdebf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 770.332853][T17126] RAX: ffffffffffffffda RBX: 00007f409f216090 RCX: 00007f409ef9e6c7 [ 770.332864][T17126] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 770.332874][T17126] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 770.332884][T17126] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000000 [ 770.332894][T17126] R13: 00007f409f216128 R14: 00007f409f216090 R15: 00007fffd8c5efd8 [ 770.332913][T17126] [ 771.320254][T13999] Bluetooth: hci8: command tx timeout [ 771.446647][T17133] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 771.446647][T17133] program syz.6.2551 not setting count and/or reply_len properly [ 771.466035][T17088] hsr_slave_0: entered promiscuous mode [ 771.494513][T17088] hsr_slave_1: entered promiscuous mode [ 771.510015][T17088] debugfs: 'hsr0' already exists in 'hsr' [ 771.527016][T17088] Cannot create hsr debugfs directory [ 773.222191][T17088] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 773.272428][T17088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.298293][T17088] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 773.346049][T17088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 773.392490][T17088] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 773.400026][T13999] Bluetooth: hci8: command tx timeout [ 773.485011][T17088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 773.524038][T17088] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.582254][T17088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.984080][T17088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.031479][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2553'. [ 774.069758][T17088] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.105571][T17161] bridge_slave_1: left allmulticast mode [ 774.127345][T17161] bridge_slave_1: left promiscuous mode [ 774.152644][T17161] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.186200][T17161] bridge_slave_0: left allmulticast mode [ 774.194893][T17164] FAULT_INJECTION: forcing a failure. [ 774.194893][T17164] name failslab, interval 1, probability 0, space 0, times 0 [ 774.222040][T17161] bridge_slave_0: left promiscuous mode [ 774.239546][T17161] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.251032][T17164] CPU: 0 UID: 0 PID: 17164 Comm: syz.3.2554 Tainted: G U L syzkaller #0 PREEMPT(full) [ 774.251061][T17164] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 774.251068][T17164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.251078][T17164] Call Trace: [ 774.251084][T17164] [ 774.251091][T17164] dump_stack_lvl+0x100/0x190 [ 774.251113][T17164] should_fail_ex.cold+0x5/0xa [ 774.251133][T17164] should_failslab+0xc2/0x120 [ 774.251152][T17164] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 774.251166][T17164] ? sk_prot_alloc+0x60/0x2a0 [ 774.251191][T17164] sk_prot_alloc+0x60/0x2a0 [ 774.251214][T17164] sk_alloc+0x36/0xe80 [ 774.251233][T17164] pn_socket_create+0x22d/0x560 [ 774.251251][T17164] __sock_create+0x339/0x860 [ 774.251278][T17164] __sys_socket+0x14d/0x260 [ 774.251293][T17164] ? __pfx___sys_socket+0x10/0x10 [ 774.251314][T17164] __x64_sys_socket+0x72/0xb0 [ 774.251329][T17164] ? lockdep_hardirqs_on+0x78/0x100 [ 774.251352][T17164] do_syscall_64+0x10b/0xf80 [ 774.251366][T17164] ? clear_bhb_loop+0x40/0x90 [ 774.251384][T17164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.251400][T17164] RIP: 0033:0x7f409ef9ce59 [ 774.251414][T17164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.251428][T17164] RSP: 002b:00007f409fe0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 774.251443][T17164] RAX: ffffffffffffffda RBX: 00007f409f215fa0 RCX: 00007f409ef9ce59 [ 774.251454][T17164] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000023 [ 774.251463][T17164] RBP: 00007f409f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 774.251476][T17164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.251485][T17164] R13: 00007f409f216038 R14: 00007f409f215fa0 R15: 00007fffd8c5efd8 [ 774.251504][T17164] [ 774.460037][T17164] sd 0:0:1:0: PR command failed: 1026 [ 774.465523][T17164] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 774.472292][T17164] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 774.853335][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.860492][T14112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.910335][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.917464][T14112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.480603][T13999] Bluetooth: hci8: command tx timeout [ 775.553958][T17178] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 775.836752][T17178] File: /dev/nullb0 PID: 17178 Comm: syz.6.2557 [ 776.774785][T17088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.976672][T17222] FAULT_INJECTION: forcing a failure. [ 777.976672][T17222] name failslab, interval 1, probability 0, space 0, times 0 [ 777.998803][T17227] netlink: 202 bytes leftover after parsing attributes in process `syz.5.2564'. [ 778.175175][T17222] CPU: 0 UID: 0 PID: 17222 Comm: syz.6.2563 Tainted: G U L syzkaller #0 PREEMPT(full) [ 778.175204][T17222] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 778.175211][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 778.175233][T17222] Call Trace: [ 778.175239][T17222] [ 778.175246][T17222] dump_stack_lvl+0x100/0x190 [ 778.175269][T17222] should_fail_ex.cold+0x5/0xa [ 778.175289][T17222] ? tomoyo_realpath_from_path+0xb6/0x690 [ 778.175310][T17222] should_failslab+0xc2/0x120 [ 778.175328][T17222] __kmalloc_noprof+0xe0/0x850 [ 778.175343][T17222] ? kfree+0x1dd/0x6c0 [ 778.175366][T17222] tomoyo_realpath_from_path+0xb6/0x690 [ 778.175391][T17222] tomoyo_check_open_permission+0x2af/0x3c0 [ 778.175409][T17222] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 778.175434][T17222] ? hook_file_open+0x24e/0x7a0 [ 778.175464][T17222] ? path_get+0x61/0x80 [ 778.175486][T17222] tomoyo_file_open+0x6b/0x90 [ 778.175509][T17222] security_file_open+0xb5/0x1e0 [ 778.175528][T17222] do_dentry_open+0x5aa/0x1660 [ 778.175548][T17222] ? security_inode_permission+0xbf/0x250 [ 778.175568][T17222] vfs_open+0x82/0x3f0 [ 778.175592][T17222] path_openat+0x208c/0x31a0 [ 778.175618][T17222] ? __pfx_path_openat+0x10/0x10 [ 778.175643][T17222] do_file_open+0x20e/0x430 [ 778.175664][T17222] ? __pfx_do_file_open+0x10/0x10 [ 778.175696][T17222] ? alloc_fd+0x476/0x790 [ 778.175716][T17222] ? do_getname+0x191/0x390 [ 778.175745][T17222] do_sys_openat2+0x10d/0x1e0 [ 778.175768][T17222] ? __pfx_do_sys_openat2+0x10/0x10 [ 778.175797][T17222] __x64_sys_openat+0x12d/0x210 [ 778.175820][T17222] ? __pfx___x64_sys_openat+0x10/0x10 [ 778.175842][T17222] ? ksys_write+0x1ac/0x250 [ 778.175859][T17222] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 778.175883][T17222] ? syscall_user_dispatch+0x76/0x130 [ 778.175902][T17222] do_syscall_64+0x10b/0xf80 [ 778.175917][T17222] ? clear_bhb_loop+0x40/0x90 [ 778.175936][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.175951][T17222] RIP: 0033:0x7fd95419ce59 [ 778.175966][T17222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.175981][T17222] RSP: 002b:00007fd951f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 778.175996][T17222] RAX: ffffffffffffffda RBX: 00007fd954416270 RCX: 00007fd95419ce59 [ 778.176007][T17222] RDX: 0000000000000100 RSI: 00002000000031c0 RDI: ffffffffffffff9c [ 778.176018][T17222] RBP: 00007fd954232d6f R08: 0000000000000000 R09: 0000000000000000 [ 778.176028][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.176037][T17222] R13: 00007fd954416308 R14: 00007fd954416270 R15: 00007ffd0392fa58 [ 778.176058][T17222] [ 778.561137][T17222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 778.596712][T17088] veth0_vlan: entered promiscuous mode [ 778.607363][T17088] veth1_vlan: entered promiscuous mode [ 778.626652][T17088] veth0_macvtap: entered promiscuous mode [ 778.635903][T17088] veth1_macvtap: entered promiscuous mode [ 778.650521][T17088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.662356][T17088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.711742][T14116] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1366 with max blocks 5 with error 117 [ 778.724492][T14116] EXT4-fs (sda1): This should not happen!! Data will be lost [ 778.724492][T14116] [ 778.899917][T14885] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.911025][T14885] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.094321][T14885] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.190780][T14885] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.449902][T14112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.486866][T14112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.594166][T14112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.618983][T14112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.042967][T14112] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1366 with max blocks 1 with error 117 [ 780.109222][T14112] EXT4-fs (sda1): This should not happen!! Data will be lost [ 780.109222][T14112] [ 780.123140][T13999] Bluetooth: hci5: command 0x0406 tx timeout [ 780.489979][T17256] FAULT_INJECTION: forcing a failure. [ 780.489979][T17256] name failslab, interval 1, probability 0, space 0, times 0 [ 780.557416][T17256] CPU: 0 UID: 0 PID: 17256 Comm: syz.7.2566 Tainted: G U L syzkaller #0 PREEMPT(full) [ 780.557451][T17256] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 780.557458][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 780.557469][T17256] Call Trace: [ 780.557476][T17256] [ 780.557486][T17256] dump_stack_lvl+0x100/0x190 [ 780.557509][T17256] should_fail_ex.cold+0x5/0xa [ 780.557529][T17256] should_failslab+0xc2/0x120 [ 780.557549][T17256] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 780.557564][T17256] ? sk_prot_alloc+0x60/0x2a0 [ 780.557589][T17256] sk_prot_alloc+0x60/0x2a0 [ 780.557612][T17256] sk_alloc+0x36/0xe80 [ 780.557631][T17256] pn_socket_create+0x22d/0x560 [ 780.557650][T17256] __sock_create+0x339/0x860 [ 780.557676][T17256] __sys_socket+0x14d/0x260 [ 780.557694][T17256] ? __pfx___sys_socket+0x10/0x10 [ 780.557716][T17256] __x64_sys_socket+0x72/0xb0 [ 780.557729][T17256] ? lockdep_hardirqs_on+0x78/0x100 [ 780.557753][T17256] do_syscall_64+0x10b/0xf80 [ 780.557767][T17256] ? clear_bhb_loop+0x40/0x90 [ 780.557788][T17256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.557805][T17256] RIP: 0033:0x7fbad679ce59 [ 780.557820][T17256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.557834][T17256] RSP: 002b:00007fbad773a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 780.557849][T17256] RAX: ffffffffffffffda RBX: 00007fbad6a15fa0 RCX: 00007fbad679ce59 [ 780.557860][T17256] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000023 [ 780.557870][T17256] RBP: 00007fbad6832d6f R08: 0000000000000000 R09: 0000000000000000 [ 780.557879][T17256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.557889][T17256] R13: 00007fbad6a16038 R14: 00007fbad6a15fa0 R15: 00007ffd10edd878 [ 780.557909][T17256] [ 781.337572][T17253] FAULT_INJECTION: forcing a failure. [ 781.337572][T17253] name failslab, interval 1, probability 0, space 0, times 0 [ 781.456597][T17253] CPU: 0 UID: 0 PID: 17253 Comm: syz.3.2574 Tainted: G U L syzkaller #0 PREEMPT(full) [ 781.456625][T17253] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 781.456632][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 781.456643][T17253] Call Trace: [ 781.456649][T17253] [ 781.456655][T17253] dump_stack_lvl+0x100/0x190 [ 781.456679][T17253] should_fail_ex.cold+0x5/0xa [ 781.456700][T17253] ? tomoyo_realpath_from_path+0xb6/0x690 [ 781.456720][T17253] should_failslab+0xc2/0x120 [ 781.456739][T17253] __kmalloc_noprof+0xe0/0x850 [ 781.456753][T17253] ? kfree+0x1dd/0x6c0 [ 781.456777][T17253] tomoyo_realpath_from_path+0xb6/0x690 [ 781.456802][T17253] tomoyo_check_open_permission+0x2af/0x3c0 [ 781.456820][T17253] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 781.456845][T17253] ? hook_file_open+0x24e/0x7a0 [ 781.456876][T17253] ? path_get+0x61/0x80 [ 781.456899][T17253] tomoyo_file_open+0x6b/0x90 [ 781.456922][T17253] security_file_open+0xb5/0x1e0 [ 781.456942][T17253] do_dentry_open+0x5aa/0x1660 [ 781.456962][T17253] ? security_inode_permission+0xbf/0x250 [ 781.456983][T17253] vfs_open+0x82/0x3f0 [ 781.457007][T17253] path_openat+0x208c/0x31a0 [ 781.457032][T17253] ? __pfx_path_openat+0x10/0x10 [ 781.457058][T17253] do_file_open+0x20e/0x430 [ 781.457078][T17253] ? __pfx_do_file_open+0x10/0x10 [ 781.457111][T17253] ? alloc_fd+0x476/0x790 [ 781.457131][T17253] ? do_getname+0x191/0x390 [ 781.457154][T17253] do_sys_openat2+0x10d/0x1e0 [ 781.457177][T17253] ? __pfx_do_sys_openat2+0x10/0x10 [ 781.457207][T17253] __x64_sys_openat+0x12d/0x210 [ 781.457230][T17253] ? __pfx___x64_sys_openat+0x10/0x10 [ 781.457253][T17253] ? ksys_write+0x1ac/0x250 [ 781.457270][T17253] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 781.457293][T17253] ? syscall_user_dispatch+0x76/0x130 [ 781.457313][T17253] do_syscall_64+0x10b/0xf80 [ 781.457335][T17253] ? clear_bhb_loop+0x40/0x90 [ 781.457355][T17253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.457371][T17253] RIP: 0033:0x7f409ef9ce59 [ 781.457386][T17253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.457401][T17253] RSP: 002b:00007f409fdcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 781.457417][T17253] RAX: ffffffffffffffda RBX: 00007f409f216180 RCX: 00007f409ef9ce59 [ 781.457427][T17253] RDX: 0000000000000100 RSI: 00002000000031c0 RDI: ffffffffffffff9c [ 781.457438][T17253] RBP: 00007f409f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 781.457447][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.457456][T17253] R13: 00007f409f216218 R14: 00007f409f216180 R15: 00007fffd8c5efd8 [ 781.457477][T17253] [ 781.457484][T17253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 781.821092][T17260] sd 0:0:1:0: PR command failed: 1026 [ 781.840322][T17260] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 781.859376][T17260] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 785.108478][T17292] FAULT_INJECTION: forcing a failure. [ 785.108478][T17292] name failslab, interval 1, probability 0, space 0, times 0 [ 785.184094][T17292] CPU: 0 UID: 0 PID: 17292 Comm: syz.3.2576 Tainted: G U L syzkaller #0 PREEMPT(full) [ 785.184130][T17292] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 785.184137][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 785.184147][T17292] Call Trace: [ 785.184153][T17292] [ 785.184160][T17292] dump_stack_lvl+0x100/0x190 [ 785.184183][T17292] should_fail_ex.cold+0x5/0xa [ 785.184203][T17292] should_failslab+0xc2/0x120 [ 785.184222][T17292] __kmalloc_node_noprof+0xe6/0x850 [ 785.184237][T17292] ? mempool_init_node+0x11b/0x6e0 [ 785.184254][T17292] ? lockdep_init_map_type+0x5c/0x250 [ 785.184273][T17292] ? __pfx_mempool_free_slab+0x10/0x10 [ 785.184289][T17292] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 785.184307][T17292] mempool_init_node+0x11b/0x6e0 [ 785.184325][T17292] ? __pfx_xa_load+0x10/0x10 [ 785.184345][T17292] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 785.184361][T17292] ? __pfx_mempool_free_slab+0x10/0x10 [ 785.184378][T17292] mempool_init_noprof+0x3a/0x50 [ 785.184398][T17292] bioset_init+0x37e/0x8a0 [ 785.184423][T17292] ? __pfx_bioset_init+0x10/0x10 [ 785.184454][T17292] __alloc_disk_node+0x83/0x6b0 [ 785.184480][T17292] __blk_alloc_disk+0xd2/0x170 [ 785.184502][T17292] ? __pfx___blk_alloc_disk+0x10/0x10 [ 785.184535][T17292] ? __pfx_idr_alloc+0x10/0x10 [ 785.184549][T17292] ? lockdep_init_map_type+0x5c/0x250 [ 785.184565][T17292] ? __raw_spin_lock_init+0x3a/0x110 [ 785.184585][T17292] ? __pfx_hot_add_show+0x10/0x10 [ 785.184601][T17292] zram_add+0x1bf/0x5d0 [ 785.184615][T17292] ? __pfx_zram_add+0x10/0x10 [ 785.184642][T17292] ? find_held_lock+0x2b/0x80 [ 785.184660][T17292] ? sysfs_file_kobj+0xe4/0x290 [ 785.184679][T17292] ? __pfx_hot_add_show+0x10/0x10 [ 785.184694][T17292] hot_add_show+0x21/0x80 [ 785.184709][T17292] class_attr_show+0x72/0xa0 [ 785.184730][T17292] ? __pfx_class_attr_show+0x10/0x10 [ 785.184749][T17292] sysfs_kf_seq_show+0x217/0x3a0 [ 785.184768][T17292] seq_read_iter+0x32f/0x1270 [ 785.184784][T17292] ? lock_acquire+0x1b1/0x370 [ 785.184807][T17292] kernfs_fop_read_iter+0x46c/0x610 [ 785.184830][T17292] ? rw_verify_area+0xce/0x6d0 [ 785.184845][T17292] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 785.184869][T17292] vfs_read+0x825/0xb30 [ 785.184889][T17292] ? __pfx_vfs_read+0x10/0x10 [ 785.184918][T17292] ksys_read+0x12a/0x250 [ 785.184936][T17292] ? __pfx_ksys_read+0x10/0x10 [ 785.184954][T17292] ? rcu_is_watching+0x12/0xc0 [ 785.184975][T17292] do_syscall_64+0x10b/0xf80 [ 785.184989][T17292] ? clear_bhb_loop+0x40/0x90 [ 785.185008][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.185023][T17292] RIP: 0033:0x7f409ef9ce59 [ 785.185037][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.185052][T17292] RSP: 002b:00007f409fe0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 785.185067][T17292] RAX: ffffffffffffffda RBX: 00007f409f215fa0 RCX: 00007f409ef9ce59 [ 785.185078][T17292] RDX: 0000000000000a00 RSI: 0000200000000ec0 RDI: 0000000000000005 [ 785.185088][T17292] RBP: 00007f409f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 785.185098][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.185107][T17292] R13: 00007f409f216038 R14: 00007f409f215fa0 R15: 00007fffd8c5efd8 [ 785.185138][T17292] [ 786.109167][T17300] FAULT_INJECTION: forcing a failure. [ 786.109167][T17300] name failslab, interval 1, probability 0, space 0, times 0 [ 786.137902][T17300] CPU: 0 UID: 0 PID: 17300 Comm: syz.7.2580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 786.137953][T17300] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 786.137963][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 786.137974][T17300] Call Trace: [ 786.137980][T17300] [ 786.137986][T17300] dump_stack_lvl+0x100/0x190 [ 786.138010][T17300] should_fail_ex.cold+0x5/0xa [ 786.138032][T17300] should_failslab+0xc2/0x120 [ 786.138051][T17300] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 786.138065][T17300] ? mas_preallocate+0x1105/0x14a0 [ 786.138087][T17300] mas_preallocate+0x1105/0x14a0 [ 786.138108][T17300] ? __pfx_mas_preallocate+0x10/0x10 [ 786.138134][T17300] ? vm_area_alloc+0x1f/0x160 [ 786.138157][T17300] ? lockdep_init_map_type+0x5c/0x250 [ 786.138175][T17300] __mmap_region+0x124a/0x2da0 [ 786.138202][T17300] ? __pfx___mmap_region+0x10/0x10 [ 786.138226][T17300] ? __lock_acquire+0x4a5/0x2630 [ 786.138255][T17300] ? find_held_lock+0x2b/0x80 [ 786.138274][T17300] ? ima_match_policy+0x8c4/0x2350 [ 786.138292][T17300] ? ima_match_policy+0x8c4/0x2350 [ 786.138327][T17300] ? process_measurement+0x4c8/0x2350 [ 786.138381][T17300] mmap_region+0x527/0x620 [ 786.138398][T17300] ? __pfx_mmap_region+0x10/0x10 [ 786.138414][T17300] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 786.138435][T17300] ? cap_mmap_addr+0x4b/0x120 [ 786.138456][T17300] ? bpf_lsm_mmap_addr+0x9/0x30 [ 786.138471][T17300] ? security_mmap_addr+0x71/0x1e0 [ 786.138489][T17300] ? __get_unmapped_area+0x255/0x3e0 [ 786.138510][T17300] do_mmap+0xc63/0x12f0 [ 786.138532][T17300] ? __pfx_do_mmap+0x10/0x10 [ 786.138550][T17300] ? __pfx_down_write_killable+0x10/0x10 [ 786.138571][T17300] vm_mmap_pgoff+0x29e/0x470 [ 786.138593][T17300] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 786.138611][T17300] ? __fget_files+0x215/0x3d0 [ 786.138632][T17300] ? __fget_files+0x21f/0x3d0 [ 786.138653][T17300] ksys_mmap_pgoff+0x3cb/0x610 [ 786.138671][T17300] ? __x64_sys_futex+0x358/0x4d0 [ 786.138689][T17300] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 786.138707][T17300] ? xfd_validate_state+0x129/0x190 [ 786.138722][T17300] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 786.138780][T17300] __x64_sys_mmap+0x125/0x190 [ 786.138800][T17300] do_syscall_64+0x10b/0xf80 [ 786.138815][T17300] ? clear_bhb_loop+0x40/0x90 [ 786.138834][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.138850][T17300] RIP: 0033:0x7fbad679ce59 [ 786.138864][T17300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.138879][T17300] RSP: 002b:00007fbad773a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 786.138895][T17300] RAX: ffffffffffffffda RBX: 00007fbad6a15fa0 RCX: 00007fbad679ce59 [ 786.138906][T17300] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 00000000fffff000 [ 786.138916][T17300] RBP: 00007fbad6832d6f R08: 00000000000000dd R09: 0000000000000000 [ 786.138926][T17300] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 786.138935][T17300] R13: 00007fbad6a16038 R14: 00007fbad6a15fa0 R15: 00007ffd10edd878 [ 786.138956][T17300] [ 786.852765][T17294] openvswitch: netlink: Key type 68 is out of range max 32 [ 786.906010][T17293] Process accounting resumed [ 787.029505][T17292] zram: Error allocating disk structure for device 0 [ 787.466299][T17313] netlink: 98 bytes leftover after parsing attributes in process `syz.7.2583'. [ 787.510990][T17309] Â: entered promiscuous mode [ 787.585031][T17315] netlink: 50 bytes leftover after parsing attributes in process `syz.7.2583'. [ 788.147095][T17318] random: crng reseeded on system resumption [ 788.582987][T17317] hub 1-0:1.0: USB hub found [ 788.632793][T17317] hub 1-0:1.0: 1 port detected [ 788.886292][T17310] kexec: Could not allocate control_code_buffer [ 791.927228][T17352] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 791.927228][T17352] program syz.7.2590 not setting count and/or reply_len properly [ 793.210600][T17377] random: crng reseeded on system resumption [ 793.443795][T17374] hub 1-0:1.0: USB hub found [ 793.495849][T17374] hub 1-0:1.0: 1 port detected [ 793.751763][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2597'. [ 794.462821][T17395] openvswitch: netlink: Key type 68 is out of range max 32 [ 794.572625][T17392] Process accounting resumed [ 794.618235][T17394] openvswitch: netlink: Key type 68 is out of range max 32 [ 794.792168][T17390] Process accounting resumed [ 794.898612][T17400] FAULT_INJECTION: forcing a failure. [ 794.898612][T17400] name failslab, interval 1, probability 0, space 0, times 0 [ 794.944306][T17400] CPU: 0 UID: 0 PID: 17400 Comm: syz.3.2603 Tainted: G U L syzkaller #0 PREEMPT(full) [ 794.944336][T17400] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 794.944342][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.944353][T17400] Call Trace: [ 794.944360][T17400] [ 794.944366][T17400] dump_stack_lvl+0x100/0x190 [ 794.944389][T17400] should_fail_ex.cold+0x5/0xa [ 794.944410][T17400] should_failslab+0xc2/0x120 [ 794.944430][T17400] __kmalloc_cache_noprof+0x7a/0x6f0 [ 794.944452][T17400] ? append_filter_err+0xb8/0x620 [ 794.944481][T17400] ? process_preds+0x93d/0x1d90 [ 794.944505][T17400] append_filter_err+0xb8/0x620 [ 794.944529][T17400] apply_subsystem_event_filter+0x727/0x17b0 [ 794.944558][T17400] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 794.944584][T17400] ? _copy_from_user+0x59/0xd0 [ 794.944603][T17400] subsystem_filter_write+0x95/0x120 [ 794.944626][T17400] vfs_write+0x2aa/0x1070 [ 794.944645][T17400] ? __pfx_subsystem_filter_write+0x10/0x10 [ 794.944668][T17400] ? __pfx_vfs_write+0x10/0x10 [ 794.944685][T17400] ? __fget_files+0x215/0x3d0 [ 794.944707][T17400] ? __fget_files+0x21f/0x3d0 [ 794.944730][T17400] ksys_write+0x12a/0x250 [ 794.944747][T17400] ? __pfx_ksys_write+0x10/0x10 [ 794.944766][T17400] ? rcu_is_watching+0x12/0xc0 [ 794.944788][T17400] do_syscall_64+0x10b/0xf80 [ 794.944802][T17400] ? clear_bhb_loop+0x40/0x90 [ 794.944820][T17400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.944836][T17400] RIP: 0033:0x7f409ef9ce59 [ 794.944850][T17400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.944865][T17400] RSP: 002b:00007f409fe0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.944880][T17400] RAX: ffffffffffffffda RBX: 00007f409f215fa0 RCX: 00007f409ef9ce59 [ 794.944890][T17400] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 794.944899][T17400] RBP: 00007f409f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 794.944908][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.944917][T17400] R13: 00007f409f216038 R14: 00007f409f215fa0 R15: 00007fffd8c5efd8 [ 794.944938][T17400] [ 795.516301][T13999] Bluetooth: hci6: command 0x0406 tx timeout [ 797.786240][T17389] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 797.786240][T17389] program syz.7.2599 not setting count and/or reply_len properly [ 798.748433][T17456] random: crng reseeded on system resumption [ 798.760960][T17451] netlink: 206 bytes leftover after parsing attributes in process `syz.5.2615'. [ 798.995141][T17453] hub 1-0:1.0: USB hub found [ 799.077089][T17453] hub 1-0:1.0: 1 port detected [ 799.220944][T17457] openvswitch: netlink: Key type 68 is out of range max 32 [ 799.409093][T17449] Process accounting resumed [ 800.372069][T17486] FAULT_INJECTION: forcing a failure. [ 800.372069][T17486] name failslab, interval 1, probability 0, space 0, times 0 [ 800.412996][T17486] CPU: 0 UID: 0 PID: 17486 Comm: syz.5.2616 Tainted: G U L syzkaller #0 PREEMPT(full) [ 800.413026][T17486] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 800.413033][T17486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 800.413042][T17486] Call Trace: [ 800.413049][T17486] [ 800.413056][T17486] dump_stack_lvl+0x100/0x190 [ 800.413079][T17486] should_fail_ex.cold+0x5/0xa [ 800.413100][T17486] should_failslab+0xc2/0x120 [ 800.413119][T17486] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 800.413134][T17486] ? mempool_init_node+0x2f7/0x6e0 [ 800.413152][T17486] ? mempool_init_noprof+0x3a/0x50 [ 800.413170][T17486] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 800.413189][T17486] mempool_init_node+0x2f7/0x6e0 [ 800.413210][T17486] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 800.413227][T17486] ? __pfx_mempool_free_slab+0x10/0x10 [ 800.413245][T17486] mempool_init_noprof+0x3a/0x50 [ 800.413264][T17486] bioset_init+0x37e/0x8a0 [ 800.413288][T17486] ? __pfx_bioset_init+0x10/0x10 [ 800.413319][T17486] __alloc_disk_node+0x83/0x6b0 [ 800.413345][T17486] __blk_alloc_disk+0xd2/0x170 [ 800.413367][T17486] ? __pfx___blk_alloc_disk+0x10/0x10 [ 800.413400][T17486] ? __pfx_idr_alloc+0x10/0x10 [ 800.413414][T17486] ? lockdep_init_map_type+0x5c/0x250 [ 800.413431][T17486] ? __raw_spin_lock_init+0x3a/0x110 [ 800.413451][T17486] ? __pfx_hot_add_show+0x10/0x10 [ 800.413467][T17486] zram_add+0x1bf/0x5d0 [ 800.413481][T17486] ? __pfx_zram_add+0x10/0x10 [ 800.413508][T17486] ? find_held_lock+0x2b/0x80 [ 800.413526][T17486] ? sysfs_file_kobj+0xe4/0x290 [ 800.413545][T17486] ? __pfx_hot_add_show+0x10/0x10 [ 800.413560][T17486] hot_add_show+0x21/0x80 [ 800.413574][T17486] class_attr_show+0x72/0xa0 [ 800.413595][T17486] ? __pfx_class_attr_show+0x10/0x10 [ 800.413614][T17486] sysfs_kf_seq_show+0x217/0x3a0 [ 800.413636][T17486] seq_read_iter+0x32f/0x1270 [ 800.413652][T17486] ? lock_acquire+0x1b1/0x370 [ 800.413674][T17486] kernfs_fop_read_iter+0x46c/0x610 [ 800.413697][T17486] ? rw_verify_area+0xce/0x6d0 [ 800.413713][T17486] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 800.413737][T17486] vfs_read+0x825/0xb30 [ 800.413756][T17486] ? __pfx_vfs_read+0x10/0x10 [ 800.413786][T17486] ksys_read+0x12a/0x250 [ 800.413803][T17486] ? __pfx_ksys_read+0x10/0x10 [ 800.413823][T17486] ? rcu_is_watching+0x12/0xc0 [ 800.413843][T17486] do_syscall_64+0x10b/0xf80 [ 800.413864][T17486] ? clear_bhb_loop+0x40/0x90 [ 800.413884][T17486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.413899][T17486] RIP: 0033:0x7f5aac99ce59 [ 800.413915][T17486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.413930][T17486] RSP: 002b:00007f5aad7dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 800.413945][T17486] RAX: ffffffffffffffda RBX: 00007f5aacc15fa0 RCX: 00007f5aac99ce59 [ 800.413955][T17486] RDX: 000000000000101f RSI: 0000200000000ec0 RDI: 0000000000000005 [ 800.413966][T17486] RBP: 00007f5aaca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 800.413975][T17486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.413984][T17486] R13: 00007f5aacc16038 R14: 00007f5aacc15fa0 R15: 00007fffbb9c2b08 [ 800.414006][T17486] [ 800.750750][T17471] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2611'. [ 801.606075][T13999] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 801.626859][T13999] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 801.645031][T13999] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 801.662552][T13999] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 801.673527][T13999] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 801.913409][T17486] zram: Error allocating disk structure for device 0 [ 802.194142][T17511] FAULT_INJECTION: forcing a failure. [ 802.194142][T17511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.276980][T17511] CPU: 0 UID: 0 PID: 17511 Comm: syz.5.2623 Tainted: G U L syzkaller #0 PREEMPT(full) [ 802.277010][T17511] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 802.277016][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 802.277027][T17511] Call Trace: [ 802.277033][T17511] [ 802.277040][T17511] dump_stack_lvl+0x100/0x190 [ 802.277064][T17511] should_fail_ex.cold+0x5/0xa [ 802.277081][T17511] ? prepare_alloc_pages+0x16d/0x5f0 [ 802.277103][T17511] should_fail_alloc_page+0xeb/0x140 [ 802.277124][T17511] prepare_alloc_pages+0x1f0/0x5f0 [ 802.277146][T17511] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 802.277168][T17511] ? __up_read+0x2c1/0x6e0 [ 802.277186][T17511] ? __pfx___up_read+0x10/0x10 [ 802.277202][T17511] ? __rmap_walk_file+0x5c5/0x680 [ 802.277220][T17511] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 802.277249][T17511] ? __rmap_walk_file+0x50f/0x680 [ 802.277273][T17511] ? rmap_walk_file+0x1dd/0x2a0 [ 802.277300][T17511] __folio_alloc_noprof+0x13/0x260 [ 802.277316][T17511] alloc_migration_target+0x1d7/0x6d0 [ 802.277336][T17511] migrate_pages_batch+0x5dc/0x45c0 [ 802.277358][T17511] ? __pfx_alloc_migration_target+0x10/0x10 [ 802.277382][T17511] ? walk_pgd_range+0x1133/0x1dd0 [ 802.277397][T17511] ? __pfx_migrate_pages_batch+0x10/0x10 [ 802.277434][T17511] migrate_pages_sync+0x12c/0x880 [ 802.277454][T17511] ? __pfx_alloc_migration_target+0x10/0x10 [ 802.277477][T17511] ? __pfx_migrate_pages_sync+0x10/0x10 [ 802.277496][T17511] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 802.277520][T17511] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 802.277540][T17511] migrate_pages+0x1aa5/0x2880 [ 802.277562][T17511] ? __pfx_alloc_migration_target+0x10/0x10 [ 802.277586][T17511] ? __pfx_migrate_pages+0x10/0x10 [ 802.277606][T17511] ? queue_pages_range+0x11e/0x180 [ 802.277624][T17511] ? __up_read+0x2c1/0x6e0 [ 802.277641][T17511] ? __pfx___up_read+0x10/0x10 [ 802.277656][T17511] ? do_migrate_pages+0x451/0x740 [ 802.277673][T17511] ? do_migrate_pages+0x451/0x740 [ 802.277695][T17511] do_migrate_pages+0x488/0x740 [ 802.277718][T17511] ? __pfx_do_migrate_pages+0x10/0x10 [ 802.277739][T17511] ? rcu_is_watching+0x12/0xc0 [ 802.277756][T17511] ? cap_capable+0x10b/0x440 [ 802.277778][T17511] ? get_task_mm+0xc2/0xf0 [ 802.277797][T17511] ? security_capable+0xbd/0x260 [ 802.277829][T17511] kernel_migrate_pages+0x560/0x700 [ 802.277850][T17511] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 802.277876][T17511] __x64_sys_migrate_pages+0x96/0x100 [ 802.277895][T17511] ? lockdep_hardirqs_on+0x78/0x100 [ 802.277919][T17511] do_syscall_64+0x10b/0xf80 [ 802.277933][T17511] ? clear_bhb_loop+0x40/0x90 [ 802.277951][T17511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.277967][T17511] RIP: 0033:0x7f5aac99ce59 [ 802.277981][T17511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.277997][T17511] RSP: 002b:00007f5aad7dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 802.278013][T17511] RAX: ffffffffffffffda RBX: 00007f5aacc15fa0 RCX: 00007f5aac99ce59 [ 802.278024][T17511] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 802.278034][T17511] RBP: 00007f5aaca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 802.278043][T17511] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 802.278053][T17511] R13: 00007f5aacc16038 R14: 00007f5aacc15fa0 R15: 00007fffbb9c2b08 [ 802.278073][T17511] [ 803.669960][T15033] NFSD: Failed to start, no listeners configured. [ 803.802157][ T7672] Bluetooth: hci9: command tx timeout [ 804.835056][T17497] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.861208][T17497] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.893667][T17497] bridge_slave_0: entered allmulticast mode [ 804.916344][T17497] bridge_slave_0: entered promiscuous mode [ 804.956279][T17497] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.006150][T17497] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.035928][T17497] bridge_slave_1: entered allmulticast mode [ 805.063562][T17497] bridge_slave_1: entered promiscuous mode [ 805.177327][T17497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.326482][T17497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.521550][T17497] team0: Port device team_slave_0 added [ 805.552821][T17497] team0: Port device team_slave_1 added [ 805.752051][T17497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.784665][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.878725][ T7672] Bluetooth: hci9: command tx timeout [ 805.906135][T17497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.007275][T17548] openvswitch: netlink: Key type 68 is out of range max 32 [ 806.029453][T17497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.058612][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.130225][T17544] Process accounting resumed [ 806.156863][T17497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.395629][T17497] hsr_slave_0: entered promiscuous mode [ 806.412283][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2626'. [ 806.439410][T17497] hsr_slave_1: entered promiscuous mode [ 806.465290][T17497] debugfs: 'hsr0' already exists in 'hsr' [ 806.487309][T17497] Cannot create hsr debugfs directory [ 807.959647][ T7672] Bluetooth: hci9: command tx timeout [ 808.537475][T17497] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 808.601751][T17497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.635974][T17497] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 808.707406][T17497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 808.741610][T17497] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 808.772650][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.780122][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.815898][T17497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 808.851762][T17497] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 808.905900][T17497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 809.286790][T17497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.370937][T17497] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.442242][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.449419][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.572110][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.579315][ T9055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.038424][T13999] Bluetooth: hci9: command tx timeout [ 811.268107][T17497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.538835][T17576] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 812.538835][T17576] program syz.3.2631 not setting count and/or reply_len properly [ 812.692674][T17627] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2636'. [ 812.916535][T17497] veth0_vlan: entered promiscuous mode [ 813.238728][ T30] INFO: task syz.2.1306:11475 blocked for more than 143 seconds. [ 813.246877][ T30] Tainted: G U L syzkaller #0 [ 813.262014][ T30] Blocked by coredump. [ 813.279650][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 813.307491][ T30] task:syz.2.1306 state:D stack:27272 pid:11475 tgid:11475 ppid:5634 task_flags:0x40044c flags:0x00080803 [ 813.365371][ T30] Call Trace: [ 813.384571][ T30] [ 813.398939][ T30] __schedule+0x1295/0x67a0 [ 813.415068][ T30] ? __pfx___schedule+0x10/0x10 [ 813.431449][ T30] ? find_held_lock+0x2b/0x80 [ 813.446481][ T30] ? schedule+0x2bf/0x390 [ 813.462495][ T30] schedule+0xdd/0x390 [ 813.482785][ T30] schedule_preempt_disabled+0x13/0x30 [ 813.499109][ T30] __mutex_lock+0xced/0x1b10 [ 813.516153][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 813.533278][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 813.551675][ T30] ? net_generic+0xea/0x2a0 [ 813.582031][ T30] ? net_generic+0xea/0x2a0 [ 813.596581][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 813.613598][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 813.632497][ T30] nfsd_umount+0x3b/0x60 [ 813.645037][ T30] deactivate_locked_super+0xc1/0x1b0 [ 813.663243][ T30] deactivate_super+0xe7/0x110 [ 813.682536][ T30] cleanup_mnt+0x21f/0x450 [ 813.697715][ T30] task_work_run+0x150/0x240 [ 813.713611][ T30] ? __pfx_task_work_run+0x10/0x10 [ 813.755649][ T30] do_exit+0x951/0x2af0 [ 813.794746][ T30] ? __pfx_do_exit+0x10/0x10 [ 813.829898][ T30] ? cgroup_update_frozen_flag+0x107/0x210 [ 813.870201][ T30] ? find_held_lock+0x2b/0x80 [ 813.895597][ T30] ? get_signal+0x1872/0x2210 [ 813.916924][ T30] do_group_exit+0xd5/0x2a0 [ 813.949221][ T30] get_signal+0x20ff/0x2210 [ 813.972479][ T30] ? __pfx_get_signal+0x10/0x10 [ 813.996708][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 814.019852][ T30] arch_do_signal_or_restart+0x91/0x7a0 [ 814.046185][ T30] ? get_timespec64+0x136/0x1b0 [ 814.059233][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 814.077720][ T30] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 814.086165][ T30] ? rcu_is_watching+0x12/0xc0 [ 814.097700][ T30] exit_to_user_mode_loop+0x8b/0x4f0 [ 814.108955][ T30] ? rcu_is_watching+0x12/0xc0 [ 814.119298][ T30] do_syscall_64+0x6f2/0xf80 [ 814.130643][ T30] ? clear_bhb_loop+0x40/0x90 [ 814.147676][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.153641][ T30] RIP: 0033:0x7fac3515d68e [ 814.168753][ T30] RSP: 002b:00007fac36116f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 814.181482][ T30] RAX: fffffffffffffdfc RBX: 00007fac361176c0 RCX: 00007fac3515d68e [ 814.206364][T15851] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 814.216345][ T30] RDX: 00007fac36116fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 814.225845][ T30] RBP: 00007fac35232d6f R08: 0000000000000000 R09: 0000000000000000 [ 814.244071][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.252476][T15851] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz-executor: Error -117 reading block bitmap for 2 [ 814.267216][ T30] R13: 00007fac35416038 R14: 00007fac35415fa0 R15: 00007fffb659edf8 [ 814.280054][ T30] [ 814.316265][ T30] [ 814.316265][ T30] Showing all locks held in the system: [ 814.345777][T15851] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 814.370905][ T30] 3 locks held by kworker/0:0/9: [ 814.377540][ T30] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 814.404842][ T30] #1: ffff888036656008 (&____s->seqcount#15){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 814.415711][ T30] #2: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 814.427202][ T30] 1 lock held by khungtaskd/30: [ 814.432308][ T30] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 814.444805][ T30] 2 locks held by syz-executor/5628: [ 814.450333][ T30] #0: ffff8880727e40d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 814.462814][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 814.472707][ T30] 3 locks held by kworker/u10:0/6100: [ 814.478510][ T30] #0: ffff888032e9f140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 814.490514][ T30] #1: ffffc900052a7d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 814.506825][ T30] #2: ffffffff906118a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 814.516786][ T30] 4 locks held by kworker/u10:4/6108: [ 814.527038][ T30] #0: ffff88801c6ae140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 814.539084][ T30] #1: ffffc90000127d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 814.551311][ T30] #2: ffffffff905f8b48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 814.560924][ T30] #3: ffffffff906118a0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 814.572574][ T30] 2 locks held by syz.2.1306/11475: [ 814.578020][ T30] #0: ffff88802a1420d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 814.588812][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 814.611168][ T30] 3 locks held by kworker/u10:14/14112: [ 814.616751][ T30] #0: ffff88813fe9c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 814.628420][ T30] #1: ffffc9000351fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 814.639110][ T30] #2: ffffffff906118a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 814.649664][ T30] 2 locks held by getty/14865: [ 814.654454][ T30] #0: ffff8880378890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 814.665598][ T30] #1: ffffc90004fd52e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 814.676082][ T30] 2 locks held by syz.1.2165/15033: [ 814.683974][ T30] #0: ffffffff906bfe48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.692530][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 814.705831][ T30] 2 locks held by syz-executor/15631: [ 814.712470][ T30] #0: ffff88802078e0d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 814.724084][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 814.733953][ T30] 5 locks held by syz-executor/15856: [ 814.739511][ T30] #0: ffff8880689b0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 814.750002][ T30] #1: ffff8880689b00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 814.761552][ T30] #2: ffffffff90898700 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 814.774577][ T30] #3: ffff88804e5aa2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 814.784215][ T30] #4: ffffffff8e7f0f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 814.796827][ T30] 2 locks held by syz-executor/16319: [ 814.804967][ T30] #0: ffff88807de780d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 814.815735][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 814.826108][ T30] 2 locks held by syz.4.2501/16901: [ 814.832578][ T30] #0: ffffffff906bfe48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.841955][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 814.852976][ T30] 2 locks held by syz.4.2501/16905: [ 814.858516][ T30] #0: ffffffff906bfe48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.866897][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 814.879554][ T30] 1 lock held by syz-executor/17497: [ 814.884867][ T30] #0: ffffffff906118a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 814.894274][ T30] 3 locks held by syz.5.2636/17619: [ 814.901483][ T30] #0: ffffffff905f8b48 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 814.913633][ T30] #1: ffffffff906118a0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 814.923643][ T30] #2: ffffffff8e7f0f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 814.934449][ T30] 2 locks held by syz.7.2638/17628: [ 814.941311][ T30] #0: ffffffff905f8b48 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 814.951043][ T30] #1: ffffffff906118a0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 814.975891][T17497] veth1_vlan: entered promiscuous mode [ 814.984160][ T30] [ 814.990801][ T30] ============================================= [ 814.990801][ T30] [ 815.039449][ T30] NMI backtrace for cpu 0 [ 815.039466][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 815.039489][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 815.039495][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.039504][ T30] Call Trace: [ 815.039510][ T30] [ 815.039516][ T30] dump_stack_lvl+0x100/0x190 [ 815.039538][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 815.039557][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 815.039574][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 815.039596][ T30] sys_info+0x141/0x190 [ 815.039612][ T30] watchdog+0xcb1/0x1030 [ 815.039637][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 815.039660][ T30] ? __pfx_watchdog+0x10/0x10 [ 815.039682][ T30] ? __kthread_parkme+0x18c/0x230 [ 815.039704][ T30] ? kthread+0x13a/0x450 [ 815.039717][ T30] ? __pfx_watchdog+0x10/0x10 [ 815.039736][ T30] kthread+0x370/0x450 [ 815.039749][ T30] ? __pfx_kthread+0x10/0x10 [ 815.039763][ T30] ret_from_fork+0x72b/0xd50 [ 815.039781][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 815.039802][ T30] ? __switch_to+0x800/0x1100 [ 815.039823][ T30] ? __switch_to_asm+0x39/0x70 [ 815.039842][ T30] ? __pfx_kthread+0x10/0x10 [ 815.039856][ T30] ret_from_fork_asm+0x1a/0x30 [ 815.039884][ T30] [ 815.555657][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 815.562524][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 815.573187][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 815.578361][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.588488][ T30] Call Trace: [ 815.591750][ T30] [ 815.594672][ T30] dump_stack_lvl+0x100/0x190 [ 815.599338][ T30] vpanic+0x552/0x970 [ 815.603307][ T30] ? __pfx_vpanic+0x10/0x10 [ 815.607791][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 815.613933][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 815.620076][ T30] panic+0xd1/0xe0 [ 815.623778][ T30] ? __pfx_panic+0x10/0x10 [ 815.628182][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 815.634319][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 815.640465][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 815.646605][ T30] ? watchdog.cold+0x1ec/0x234 [ 815.651355][ T30] ? watchdog+0xcc1/0x1030 [ 815.655776][ T30] watchdog.cold+0x1fd/0x234 [ 815.660372][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 815.666195][ T30] ? __pfx_watchdog+0x10/0x10 [ 815.670961][ T30] ? __kthread_parkme+0x18c/0x230 [ 815.676003][ T30] ? kthread+0x13a/0x450 [ 815.680243][ T30] ? __pfx_watchdog+0x10/0x10 [ 815.684914][ T30] kthread+0x370/0x450 [ 815.688979][ T30] ? __pfx_kthread+0x10/0x10 [ 815.693552][ T30] ret_from_fork+0x72b/0xd50 [ 815.698130][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 815.703230][ T30] ? __switch_to+0x800/0x1100 [ 815.707901][ T30] ? __switch_to_asm+0x39/0x70 [ 815.712658][ T30] ? __pfx_kthread+0x10/0x10 [ 815.717233][ T30] ret_from_fork_asm+0x1a/0x30 [ 815.721994][ T30] [ 815.725079][ T30] Kernel Offset: disabled [ 815.729490][ T30] Rebooting in 86400 seconds..