last executing test programs: 6m6.958788321s ago: executing program 2 (id=1382): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socketcall$auto(0xc82, &(0x7f0000000040)=0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000000)={0x0, 0x7}, 0x1) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x82002, 0x0) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0xa200, 0x0) socket(0xa, 0x801, 0x84) eventfd$auto(0x7) socket(0x2b, 0x1, 0x0) open(0x0, 0x40, 0x23) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x2, 0xa, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) 6m6.688757068s ago: executing program 2 (id=1384): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x13, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x101100, 0xa6) r1 = open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) read$auto(r1, 0x0, 0x24) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40106f52, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x13, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) open(0x0, 0x22240, 0x55) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x101100, 0xa6) (async) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) (async) read$auto(r1, 0x0, 0x24) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) (async) ioctl$auto(0x3, 0x40106f52, r2) (async) 6m6.252411949s ago: executing program 2 (id=1386): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x29, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)={0x1c, r1, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x5, 0xf, 'P'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_snmp6/veth0\x00', 0x400e42, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff53, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x40800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/manufacturer\x00', 0xa2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001540)=""/104, 0x68) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x10b142, 0x0) read$auto(r5, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x9) open_by_handle_at$auto(0x1, 0x0, 0x2) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8880, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80045439, 0x10000000000402) acct$auto(&(0x7f0000000000)) 6m5.752344936s ago: executing program 2 (id=1390): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x5, 0xa, 0x1000009, 0x5f, 0x4, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x2f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r4, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1, r1, @relative_id=0x13, 0xe600}, 0xf) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 6m4.617817398s ago: executing program 2 (id=1395): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x60802, 0x0) clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe) read$auto(r0, &(0x7f0000000480)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/over_current_count\x00', 0x60000, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a792, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001080)=""/98, 0x62) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r5) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x14, r6, 0xf09, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = semctl$auto(0xfffffffc, 0x5, 0x5, 0x6) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000003840)={&(0x7f0000002640), 0xc, &(0x7f0000003800)={&(0x7f0000002680)={0x116c, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_SEC_KEY={0x92, 0x30, 0x0, 0x1, [@generic="bc83ff9b899ad09b6b2d7ccd4ba97fdba1a0314e93a3ec77c7e1b3fb2f5932c5e446319555d9545ea230b38de16f9d7cd0a3f698725a4e2da63f783277fc7b309ba244566d3721b40e733b698999418b30336509f7b3905e656d6c06bc34a582bbbd61ebb1030976ef566791e4e1942ba48fe11b17b20fc3aae15987c4d8a7a160195950610b3a69c8bd75ce174e"]}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x20f}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL802154_ATTR_WPAN_PHY_CAPS={0x108c, 0x18, 0x0, 0x1, [@nested={0x1073, 0x13b, 0x0, 0x1, [@generic="5448555442b621ec55c1d815894591868f19682498065a5ccb1392498a92f1d46889803f8790813f5a4d92c5fc78ec5a19514e8cd099e720cb3364acdbf2a27b0216a1cf2e172f175c4ab38f139618d2bc507174e6cd082d22028469e4a11437424fb53070c7955b139c5a", @generic="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", @nested={0x4, 0x62}]}, @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x6}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x4f37}]}, 0x116c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x1f0, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0xbd, 0x0, 0x0, @u32=0x100}]}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@generic="36969e3b49612b926e9274e5ee2ac6a6e95b1982d0632f4207364324a06c2201c19b85d86c85c035fa19f6466b11ae5e026e2b", @generic="76d208c92a4c621a607a9489ec614f56e8c961de4adc56b1106bd92b3dd447e0a4a82fab9a8385b8ae630777217de1c126dcd472c2d77cf35639522a8ead4dcfa27daef920f3701bc8becf7f736938fa5be8175e4e6fefd8fda27d8a5b53414f9eeec320226c900c80593a06b7ab949d628186462ee2eeff1f8e7d1e6ea98cdeaee21e428f"]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x54}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x1200000}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xdc, 0x19, 0x0, 0x1, [@nested={0xcd, 0x1e, 0x0, 0x1, [@typed={0x1a, 0x13d, 0x0, 0x0, @binary="f611ba2d5536246a7cb5fbedfb421cf251b444fa7d2f"}, @generic="3a6971e4c1876e0fdb616f254ecba07182b36b6d1817038f7a5521f2dde89207a81a65388224381bdc1d2b63563b3c3f021580a125e973573cb740aa247666687398848459c29177985031db70f1de7ddda3dd1217e46d27", @typed={0x8, 0x100, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x4d}, @generic="e9a5803c17765ba6c1d6cf4506d829d3532474ecbe25ef38d1ada0cfdd819cf7942e81c7bb3fec9c0d98fc77ca9dd5a2fe364fc08459b3df6d7b6519e57e583e1c809c869a10cd8034"]}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r0}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40810}, 0x44011) getdents$auto(r2, &(0x7f0000000100)={0xfff, 0x5, 0x3, "e36a34b1dafe8727d0a7257cc5b6f44a02095d9dd47688c1617ac41b1cd302f4e36f3bfe18ce78f005d69dd5dbb2cec5c58d4dbbc1352097d3f75b499f88e91c23b460644b85b9a35e67fe294bd47b576f256485fb0ffd81328344d3efffa78fa31087dddcb30794736809af8c51d3b15e0ed9f02f25a4a5900c93c0cb1b2fcc9e24d58e05a8ff2f5c0a7fca6ae839"}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 6m3.97069227s ago: executing program 2 (id=1397): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1c, 0x2, 0x8, 0x7fa, &(0x7f0000001800)}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) (async) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000280)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [0x0, 0x0, 0x4], {0x6, 0x6, 0x8c48, 0x29a, 0x109, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) (async) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x7, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da06, 0xc, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d42, 0x100c, 0x2]}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0x200007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) 5m48.642088809s ago: executing program 32 (id=1397): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1c, 0x2, 0x8, 0x7fa, &(0x7f0000001800)}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) (async) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000280)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [0x0, 0x0, 0x4], {0x6, 0x6, 0x8c48, 0x29a, 0x109, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) (async) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x7, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da06, 0xc, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d42, 0x100c, 0x2]}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0x200007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) 1m0.694535792s ago: executing program 4 (id=2481): prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5a18197afee4342371299bad58cb467de1d23d72499ef3a1eb3566c1e16f5569eaef4e1d76999a014e4b403e42005f0dc0a942894e88b4ce7926f2c0e766e2accb97bd77bb733cdfa9940aaca48358005565444ea9233938eeb581f432bef02eb861480f7d72bebed580dea350396ae4f546a18827fe87f3b11f567fc8c75d98bf3700"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 59.798818422s ago: executing program 1 (id=2482): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) 59.433957748s ago: executing program 4 (id=2483): mmap$auto(0x2, 0x4020009, 0x9d, 0xeb1, 0x401, 0x8200) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x2, 0x2, 0x0, 0x0, 0x2) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) fanotify_init$auto(0x8, 0x1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video59\x00', 0x200840, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x200, 0x4, 0x948b, 0x7, 0x20000003, 0x10001, 0x3, 0x5, 0x80000001, 0xa, 0x6, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x880, 0x2, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/oom_adj\x00', 0x80000, 0x0) r2 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r2, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64$auto(r3, 0x0, 0x7fff, 0x100000001) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f00000000c0)="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", 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 58.848063094s ago: executing program 1 (id=2487): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x23, 0x5, 0x0) set_mempolicy$auto(0x4006, &(0x7f0000000040)=0xa, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyc4\x00', 0x0, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/vmwgfx/new_id\x00', 0xa001, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x6, 0x0, 0x8000002) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd3e, 0x1, 0x8, 0x3, 0x20000000f1f, 0x10001, 0x0, 0x8000000000000000, 0x80000001, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 58.717756727s ago: executing program 1 (id=2488): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r0, 0x40086602, &(0x7f0000000100)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) r1 = socket(0x11, 0x3, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r2, 0x6) r3 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r3, 0x1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r4, 0x2) flock$auto(r4, 0x2) close_range$auto(r1, 0xffffffffffffffff, 0x0) fstatfs$auto(0x3, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x803, 0x0) sysfs$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x2, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x0, 0x2}) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r6, 0x4004550a, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) epoll_create$auto(0x7) 57.592149598s ago: executing program 1 (id=2491): prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5a18197afee4342371299bad58cb467de1d23d72499ef3a1eb3566c1e16f5569eaef4e1d76999a014e4b403e42005f0dc0a942894e88b4ce7926f2c0e766e2accb97bd77bb733cdfa9940aaca48358005565444ea9233938eeb581f432bef02eb861480f7d72bebed580dea350396ae4f546a18827fe87f3b11f567fc8c75d98bf3700"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 56.942454402s ago: executing program 4 (id=2493): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)=@batch={0x6, 0x0, 0xa1a, 0x1, 0x2, r1, 0x16e8, 0x200000000000}, 0xff) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={0x0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf250100000004000180072e01806ca8d1f92f187dbd99d6b3c4bc1b4d476946f48f38243bf5f97d6b9786019294"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x1, 0x0) getsockopt$auto_SO_TIMESTAMP_NEW(r4, 0x1, 0x3f, &(0x7f0000000040)='](\x00', &(0x7f00000000c0)=0x8) r5 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xc, 0xeb1, 0xffffffffffffffff, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x4880, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x32}, &(0x7f0000000300)=""/235, 0xeb, &(0x7f0000000400)=""/222, &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, {r5}}, 0x58) move_pages$auto(r6, 0x1, &(0x7f0000000280)=&(0x7f0000000580)="656b252b8ed7990c11c2c836c439cc55033a3a2db96364060578f00465bddd3a1db9999cb0502c9b8e5dfdbd26ea304fd09fd77be72e9a1057ba3799a5374d968637d1ee172785863f9e837bec6595b009d5867adf1e8d3c27b47b8df5efbcc4073bce707b2465f418855a374c3df2034edbd095a7fe9acdeb348e2015e16be1d9351f", &(0x7f0000000640)=0x1, &(0x7f0000000680)=0x6, 0xc5f9) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 56.644578464s ago: executing program 1 (id=2495): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x29, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)={0x1c, r1, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x5, 0xf, 'P'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x5, 0x0, 0x4, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_snmp6/veth0\x00', 0x400e42, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r3, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff53, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x40800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/manufacturer\x00', 0xa2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001540)=""/104, 0x68) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x10b142, 0x0) read$auto(r5, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x9) cachestat$auto(r0, &(0x7f0000000100)={0x1000, 0x1}, &(0x7f0000000300)={0x2, 0x10001, 0x1, 0x2, 0x3}, 0x4) open_by_handle_at$auto(0x1, 0x0, 0x2) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8880, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80045439, 0x10000000000402) acct$auto(&(0x7f0000000000)) 56.064391608s ago: executing program 4 (id=2496): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) 55.316251681s ago: executing program 4 (id=2499): mknod$auto(&(0x7f0000000000)='./file0\x00', 0x7f, 0x6) move_mount$auto(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x6) r0 = socket(0x11, 0x80003, 0x300) syz_clone(0x7ba25133b1695f89, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x23, 0x5, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @multicast2}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/vmwgfx/new_id\x00', 0xa001, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x6, 0x0, 0x8000002) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd3e, 0x1, 0x8, 0x3, 0x20000000f1f, 0x10002, 0x0, 0x8000000000000000, 0x80000001, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 55.296791608s ago: executing program 1 (id=2500): timer_create$auto_CLOCK_TAI(0xb, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) (async, rerun: 32) r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000000)={@_si_pad}, 0x1, &(0x7f0000000080)={{0xa, 0x7}, {0xffffffffffffffff, 0x8}, 0xa0ed, 0x4, 0x6, 0x9, 0x7, 0x0, 0x6, 0x6, 0x8, 0x6, 0x45, 0xaf2, 0x4, 0x7}) (rerun: 32) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000280), 0xc0, 0x0) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000300)="23bc0e7aea3768234bf22d17a3042c763f813cf60a848fc293b1b7e1cde6f39e66117c5aeb4e80062254b755ad62b9ed36206ba57bbd0f85ba2e5d015e274db61f5b62feca52a8c2dacd9f90c710a1d993fa", 0x2) (async) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x2, 0x44, &(0x7f00000002c0)='(%\x00', 0x100) capget$auto(&(0x7f0000000140)={0x3, r0}, &(0x7f0000000180)={0x4, 0x2550, 0x101}) (async) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x10, 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x73) setrlimit$auto(0x7, &(0x7f0000000440)={0x2, 0x1000}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}}, 0x40000) (async) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x5512c0, 0x0) (async) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f0000000480)=@query={@target_fd=r2, 0x3ca, 0x6, 0x1, 0x6, @count=0x9c4b, 0x0, 0x8000000000000001, 0x7fffffff, 0xdd, 0x7a7c}, 0x10) (async, rerun: 32) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x98) (rerun: 32) 54.814387674s ago: executing program 4 (id=2501): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/device_strs\x00', 0x1c9802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/max_segment_size\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='-', 0x1) pread64$auto(r0, 0x0, 0x100000001, 0x2000006) ppoll$auto(&(0x7f0000000080)={r1, 0xff04, 0x46}, 0x3, 0x0, 0x0, 0x8) r2 = socket(0x9, 0xa, 0x6fffffff) msgctl$auto(0x9, 0x287, 0x0) keyctl$auto(0x1, 0x0, 0x0, 0x0, 0x40000000000007e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) getxattrat$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0, 0x10) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000001) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty57\x00', 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r4) write$auto(0x3, 0x0, 0xfffffdeb) ioctl$auto(0x3, 0x541b, 0x74) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(r2, 0x5, 0x4d, &(0x7f0000000100)='\x00', 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x40005) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 39.793634788s ago: executing program 33 (id=2500): timer_create$auto_CLOCK_TAI(0xb, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) (async, rerun: 32) r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000000)={@_si_pad}, 0x1, &(0x7f0000000080)={{0xa, 0x7}, {0xffffffffffffffff, 0x8}, 0xa0ed, 0x4, 0x6, 0x9, 0x7, 0x0, 0x6, 0x6, 0x8, 0x6, 0x45, 0xaf2, 0x4, 0x7}) (rerun: 32) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000280), 0xc0, 0x0) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000300)="23bc0e7aea3768234bf22d17a3042c763f813cf60a848fc293b1b7e1cde6f39e66117c5aeb4e80062254b755ad62b9ed36206ba57bbd0f85ba2e5d015e274db61f5b62feca52a8c2dacd9f90c710a1d993fa", 0x2) (async) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x2, 0x44, &(0x7f00000002c0)='(%\x00', 0x100) capget$auto(&(0x7f0000000140)={0x3, r0}, &(0x7f0000000180)={0x4, 0x2550, 0x101}) (async) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x10, 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x73) setrlimit$auto(0x7, &(0x7f0000000440)={0x2, 0x1000}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}}, 0x40000) (async) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x5512c0, 0x0) (async) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f0000000480)=@query={@target_fd=r2, 0x3ca, 0x6, 0x1, 0x6, @count=0x9c4b, 0x0, 0x8000000000000001, 0x7fffffff, 0xdd, 0x7a7c}, 0x10) (async, rerun: 32) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x98) (rerun: 32) 38.681114394s ago: executing program 34 (id=2501): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/device_strs\x00', 0x1c9802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/max_segment_size\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='-', 0x1) pread64$auto(r0, 0x0, 0x100000001, 0x2000006) ppoll$auto(&(0x7f0000000080)={r1, 0xff04, 0x46}, 0x3, 0x0, 0x0, 0x8) r2 = socket(0x9, 0xa, 0x6fffffff) msgctl$auto(0x9, 0x287, 0x0) keyctl$auto(0x1, 0x0, 0x0, 0x0, 0x40000000000007e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) getxattrat$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0, 0x10) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000001) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty57\x00', 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r4) write$auto(0x3, 0x0, 0xfffffdeb) ioctl$auto(0x3, 0x541b, 0x74) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(r2, 0x5, 0x4d, &(0x7f0000000100)='\x00', 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x40005) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.594433035s ago: executing program 6 (id=2598): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x2, 0x100000, 0x100000, 0x100000000000002, 0x0, 0x0, 0x0, 0x87, 0x2c, 0x4, 0x3}) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x2c) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) pread64$auto(r3, 0x0, 0x3, 0x5511f446) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000080)={0x8, 0x0, r3}) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) 9.054746541s ago: executing program 6 (id=2600): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$auto_HPET_IE_ON(r1, 0x6801, 0x0) r2 = socket(0xa, 0x2, 0x88) r3 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r3, &(0x7f0000000380)="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", 0x4e00) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r4, 0x4, 0x302f, r2, @relative_id=0x13, 0xe5ff}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0x91) 8.563165855s ago: executing program 6 (id=2603): socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) (async) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) (async) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, 0x0, 0x3, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) socket(0x11, 0x3, 0xe) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0803, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0803, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) r1 = clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x30001, 0x0) (async) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x30001, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) (async) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0xc, 0x82000000000940, 0x1ffde, 0x7, 0x4, 0x9, 0x9, 0x1, 0x2, 0x7, 0x9, 0x3979d5ff, 0x8, 0x1407, 0x5, 0x8000000007, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff5, 0x1, 0x0, 0xffffffffffffffff, 0x47e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000000e3a, 0x101, 0xfffffffffffffffe, 0x80000000, 0x2000000]}, 0x400, 0x9632) socket(0x10, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000003c0)='+&\x00', 0x273f) (async) write$auto(0xffffffffffffffff, &(0x7f00000003c0)='+&\x00', 0x273f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000000440)={{0xfffffff2, 0x0, 0xffffffffffffffff, 0x7f, 0x5, 0x4, 0x7}, &(0x7f0000000380)=0x2, &(0x7f0000000500), 0x9, 0x80, 0x7, 0x4, 0x0, 0x38, 0x0, 0x22f0, @inferred=r1, @inferred=r1}) (async) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000000440)={{0xfffffff2, 0x0, 0xffffffffffffffff, 0x7f, 0x5, 0x4, 0x7}, &(0x7f0000000380)=0x2, &(0x7f0000000500), 0x9, 0x80, 0x7, 0x4, 0x0, 0x38, 0x0, 0x22f0, @inferred=r1, @inferred=r1}) 6.910963502s ago: executing program 5 (id=2609): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x9) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x01\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 4.993716179s ago: executing program 5 (id=2613): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty50\x00', 0x1, 0x0) ioctl$auto(r1, 0x540a, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={@inferred, 0x9, &(0x7f00000001c0)=0xfffffffffffffffa, 0x4, 0x0, 0x4, "06652b19bf85626a795114bb619c748271ad5cef9b79a37ee0d6f56e"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) io_destroy$auto(0x0) recvfrom$auto(r0, &(0x7f00000006c0)="9c99089935cfbf5cc504b275edcfba81947af30fa759ca59b2e8fd97e5f8d869be996a8d48b8c8524e7159c992e4515a5ff4c5348863083ed5b7e3ae6bf5142150ee1b2bc012b56d1c4ee5c11d2383b4d9a405cc9d7fe0658f07c38698e01965cb882bdb4da6680a8713f136bbe0f9b45800f066477c23084fafc2b516d8d2b6959907e17471db6fe63497cb8959cb1eeea6a9da8c9b25df31642cd52f253eb5a7442aab53d49009fd1bb3572122c8989ccdd1c1046c092adc4e95ca15189f14d3d32b0b116a0c5ced9e88730dca13bc3e7d7fcd6c2a1887d55cc2594c47e748d4aa8324bd0af35ccf16480f4a66547e0b0b72bf516767e53e9dce4c562399ec86f860bc5b96e8adc98d2a95c7d8d0831761b1a9356493450cb1036e89894c557dcf03296e6cd6e2c29b4ba7eb97e3a3e1ea952a2b01cdf12a998b79fb79da931560b708245cf6b5d9b592ba39dee61b1e37a058fbcc4d9c6660f8c17a62bad0feedb8129282c8a208dd0722e74e0ec5c280490f39f9b0e4891cd6fcf86764bbc9467b29773aa00a94a2ecc87d98b75e9b722f6624db19292b7ee9d72044ca35699bddd98774b6af00978b4f92b13d7fc24b2b8d861d418ce9ccf60d6c36a0470eedecc6ccb7d22342e351ab2effb702166ce51710fb9dd660ccb5a615c4f1cf2a93927e96f1bb5cb29259a8d111eb7ea0be6ee8c6c6edb211e6bc269cba3f3f2409d41aac8c3ac4c71165fc21ce51b88880dd63ad556710edb3dd1d053d1f94faf26318bd91a1e659eabe747bf831e083b41851b73dfe6f70e3c6997792a6f4ee61c6691bc612a56bc8e5147badd9abeba907e98c96f29d522c513c19436083b427d1d628bb2812a019d6e59134e44e4af1fd5f6b5ddb7a8a0575ed1abfb7cd5f2d0d91c7024cff55e2e668e049c1c4af8e7a048c7f7875c2785157be91ba074db79def79d9483678103f07fba3f8a3d96f687b5867d946b6c41e2330ab170808ed267834ef28c8a0db02b2ee66ebf847ff533442f0bf21d20599688400b64d9c1d4e5a88eb6a840af8983e00e1e3df76d46d1e1abbd1edc0df6788cd10c693c3cb69c2bc56cfeacec43dde496452db0cf5cad886b6b616125ddb7b14c0e2248bb48ceeceb9b255ae7627ebe819f95e117abfd043d51977431b440abc6240068a06d8d55cab99ce85b9f31100cc10b2ff602118d083ac50423a143c37159960a44c6662807443bb2b7cc21815eac778e566d0063bbb0035c4a387606fdd8a611e4e1b6ccc41409d15d6ad6085fe6299b7f457389395f37698e15ce1e1badcd62467969f608335522a54338a36a5acd83fed1099bbc675af9770d1b96ab574f6919181fbfd200ae223bee605723e71da8951fc6072e4d3b2e576d7fa195221b43fc328cb6ee3fa54c4becd16013b5f51bfcb847235a2159502f4cfb883ca164c7b53adf592d06ad1844b2ffa3a0b8f88deee59f0e0fee3b9b6c4d2aa15e9ac60c9f8bb978f59d9f9fa6408097bccc3f99171cb9cea6b8f1221631d3db0d9e924f1a4f855c2ff31cb099cc4161ca8e0e1c4f9ef9e9b495daab442e08fcb3f0c34bbd47bcda40a477361a836360a89ce22e081af14b8e885316f099ac855347fc26a487f8d97dca25a2083180258a0be0e1637a0d2a9cab1b181dc6f24f22cf251fa7e5d73ffa53b5f3e7df5d88ebb66c8802b5123355220877e7b904dce972861ff10c33954e4d916c86d5663ee4e04bfe78ff1ec59d89b95e799ab01c4290cd00797e3c462bee32995cbdeb744da16d043b9c7b54be758bdcc15168ba7bb43ac095dbafd4c7ed88da642fcca5c7b6eefbce3ce055c6c162196a36f60a55214987605678ddf08c68394b876c11000e2f35f1c2cfe874f7babfe93cc8c0a311a6016dfcc548855f09a0ab9a21d1e93b85ff85fc2131194ecf2ab71259226e23ba4ac2ebcacf56b332c6ff12129f41e1a182a86ac02835b215ad03d244bf7edad5ad66d707ecd6a3e34a897f482e14e93903c2a19c263b054e575658ed46498a64914ee0cfc7d4398376a74ee70f103def2b21b972ef6abf67e9953ba2dee281b0a15e78ed198790e4c034193a537960f0dc7d016fff4551a9eba4fcdc54178b0230d02fbbd2e9976b06b94f931ff27c2c3c45fd0765a55357b0af2acc07221b13b38da5827388039831100a04d305493839a19f676c4c22d6ffe78fc6680d07200813ddfcb26674e3adf7ca8e19f172c9de97365da72b3bbabfa6bb3901331b521b788e89be182a33f6acbaacec86983da2b9a5202f69debf38eda7225e834e033b2a65455e37c65713edb6b5f9db66b1a93061f9caad824e9f0429c3613a07fe411e51d3c5b5d541bbed8469f17bbe63fcca2095bea5d7d6097c5d4a45bca7285343580dcc1957c5e823a7baa7c45796b42038ca845dbee4d794a04baaffd3899c62de93b383e1f5827d08ac4b6bc4afc8cc4fb46ba1dab7e559d09e9dab6587a56465eaedc97af3a21d2522666ff87c65aadd5a488df4bf88ddbb9ec5df178bd4222d3cf1c95b474f900ca3b7cd9e9316689fd8e7a5908b8ffa24d6fe459b693935e524b5b9ed8f6dd54dbeab5848f598f732938a4c1fc36d38b7d6d0aabe73434cd38c79855dc5177d923f76a2a02f8db7e3d33823a3f7054815652890c168c37e6989f80cf2b91358aa5cea156249c1781abb1c2fa9efb14ad3b11b2b14ee21ffb93ffa5715cb8a26703ad37f693de003de3a48bd60952af8b6551d0321bfd1e98f691b0daf888193ae3f23814296be4f7489170ad8728cfa7cca28db8e9269afeaf811479075d3f9a74f8d8ca16621f73306d965a98ef954b1b81b264172169fd43c9b0f85153154920eb376e4794a47009c15f307d25a0b0a6b7be0c489bb466a953e82016b56c7b4babf03be32bd9d950c97b12144ec7b32db86498e3fe19f45b960788a50cf993488505f4667e63aa5d47a0753c9246ab1a1c6365a89d5c8a3057d21a7268cbcdbc7c95cd6fab930444931dced1e643239996181b653ad234a676b4bcbd5070f4ce87a71d8fb0a62e5d5c61ae3f290a31f1269f1356a6d9f74cd21811357e78bc8eda28de4f385685d506b2601d572456f816deec184b67e9d9c5272f16731d59592eba540c4798719bed2e9bcd86638c60cb271948dc11384d2b0ed61ec5033b076a58f9d27d2db99b595a3862f89fdbd1879857ae27483db08ccaeb7557c8dbea333d99a3e3c473582d262e58e918eaee7cb5aaf37cc9244cca56db8eff5f1b5b22fc38778b9f410fef2fd66e8f007135fba928d4aa59c21589079a6a3b1e5278e475ae9570c3143b15b4b206faaa037c233c5d6ebdc4c15839df4fb05e6598d1801bea2c024a322fb9371d12ff4485ba1a6e0e8bb1ce66d46028d242cbe70e5f166f024dccc4d0c220cfbc75bcf3be64b2e05db1220ef979b8fb3aa41d7ee51ca6ab2e6de619032ff19315470909f62a99860f1383058e4d6e5b8eb29430484d6241e1e5f3c9a41c5cff669f6af474ace33ad1e1442e30101bbd5a2d0311095a02214bb6605dbde91026acd232733e4cb91ba7dcf278c1b840cbb7f10560a388087d2c36af652ce23c63d43d25e22e2cbb655896c27cbb0409081eb67224fbdd2790df16d77412b6bc78dd035da72bbee8dbe65f128a4fc324683633ad2a74690dc5bf8bf41d892face3a08aff863ad42b488cd0fe6e06ddeb0e06051c44caeeb39183f1132ece83b8695c74500f0b4f908c6486e169f48517da4dd37f7a8f31aa555239648b1e3050733d21097f14c6c3ae530166c11f67caa975c96f4f3b4369a647db15cd6c41192e37cdeac89802800c53ccca704a5b020c067d13d6c672c067f5bba68849216a3c2d75f5b8cade667ea71cb828701bd018bdb7105fc3fb5301ca8287728b8d72cafd843735032ffa1578f19057aa8f01215b2a4aef021975986adf32774dc76aa1e80e165b58b967f595779d983ef1096b79485b7f3c5ce70f729f2e3317a933a5d5a519fe85c70440d9bb2710c13dc59396a30799ae9516e2ad638ccb25a91e5ccb2fd388fcfb016574e7d332ce16fa9759f752db716e11c4eb709472c634041a66f01e063346a45e8400bb387a98d993f75bd36c6a2e4cc804ef252278e3b4ed48ddd3f0af8bdad32afc9226a0a738eade783f5cf7f93c7243c3c47bfc351b7daf707372cb5e7fc61505a0d625a52068de9632839a181e6b385517fca003921f1f05c19990e0e1cef2a78a0d5daa4a3d7ef85c0317e04e68cc73e089eb90ea8d8d79aacec375dcb0b2ed9180eb4488ac6f1b021d52aada29835e0b93869b2316696434411a9b9f85abeee4c0c4bb23f9537c3f5ea9bbfb48db894142b59af16f0be33dd02b2097b9f0b6ce5e4333668dd2d9b7225987e850f73918e5f9d1647165c91645e568b1bebe9fdb4d846574d54ed090761105792d9b234cff140a79ced57ed980082cd4695aadec4f76d03c22d0d9141ae35ad783745c74cdee3711b7975503ff2a53093228167a74e69c4beb21f508475abd50995e1f1a1c564c8bd874ddff7a302341c9424231cb58e8432183ccb43e617fef03b829336e5add0f7cdd2fa53ed22aa582f119be0b81b7dddff39e7f51ca3b3633075732a93ead1d875e887771cada8ea169333500f0b6396056fcc9e5112c1c238bc7bafdc10473c07a5ae49a20d2b62df54dcf55ef89a729947c3bfbb3da03944152772ee22ff8506f4834093d0f3aa36493b1b15d85b3ae261b4300cc7e21623b78295aecb5fd64110a0eba52539d61418790c275fbf3bf9cb0b9185e5b001c9df0172915ef065ce4642ce93078fa0ea538bc8bf11d76f21631fe16ddef3c460988e103f8aa7512c8ead89ae1e89bb03e9c6c350bb4caa85a9eeeb1954135b696b5e29f1d04f9161af57e04435b22c5803251e83251e4e4cfc7b970e841e72d39d7b4f8ff5d02aa11a2d3e78405de74037461ad07337107d8b19b0f6c1ff3aa72173c37ef35a525bdc68f2fdca40e602f9a7dd3517697fb009ee46f6b074cd1652eae31350b33e9d0c96f954391f332282c9ee0a3e26d5157acdd7eb33e3def820c49705881a9c62f5615ccdc94a8f63ccb5fd4d82c6c7649cb4b4be98b780617451d9c4248134028d1ea0775a82fd44fcdf9149e74626d7f142860652c7d20c04d1b175e99125c24d1f1d4b4fde0ab0a82b1dbe538e859d823c3d6a42cc1d697e67a7126e28d81d65301293675a92dfdd8e724365f3847eb7f0d3121ca3892ea568166076f262f7270e4d41947fff3567202660591da48e7ab6c8f09bc89bde9cd3265f3ab20b962a948c19dbcab41db26262ac83c7fd28426bcb7425c8852d1774250e518ea095cdbb1c66276511bc1ec8c22d43a20c61ac50ee9ec2d3d6c7f49b7d420dc4f0cd9ff181492acd08f1397fa0719792db7b68508d0153395ac5b5c9bf8beb25e4b81fcebb0a859c12f084117cb2736619c65aea7e00712c8b04d6f749e81f6b4caffc13d1626772de23a4c450d527ba86a3df1b6fb3392ccbb9b09cabb191135dcc763ae48331b59726d90a20aa005c3a6d960cca5aeb89221fd81b1930add8957a20d2c01e6dfcf26694898d8f7da90b49c1953cea858d7e4a62632d3d934c44a52fa3a5f85bf2b7a197a19f762fa2fc2df2b8943301a639de46d9b18550beebead14949d0703cb2ef6a5592382699e36eb60bf25b1da03b5cabd291fd53d4e48bd5cc09e9fdd0dc7ef3dad4d04afc144a84b8d4607982ce8d0a38caa27cd513bbc98c952450ef2be9fd032", 0x9, 0x80, &(0x7f00000016c0)=@l2={0x1f, 0x4, @any, 0x100, 0x2}, &(0x7f0000001700)=0x5) r3 = socket(0x2, 0xa, 0x1) r4 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r3, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r4, 0x8000) ioctl$auto_BCH_IOCTL_FS_USAGE(r4, 0xc040bc0b, &(0x7f0000001740)={0x7, 0x2, 0x0, '\x00', 0x2, 0x0, [{0x9, {0x7, 0xe, 0x9, "7f878c6a41007408552ffe6a26da"}}, {0x3, {0xfd, 0x64, 0xfe, "d7fb32373f7c0a424e44a66f1235d46c897486d4e69c714e2aeba5c8d86d91ea923b57bdf62fc776a74ce87db3d15f1be940181564c9b375753cb72c50995cfa9f476aa53faa0da38f8109bbea04ccdd23074bece3e6c2e418c7dd2a34c65ecd227b2d37"}}, {0x7fff, {0x0, 0xe8, 0xf9, "60fb5af9e4fe9faa28501892fe7d66967fd2ca78c2e25c16bd840ed61cb75dae24839a725388c1d083370335e96d8999ef3a570b907f4eb22a668326dce039bdd0c8fad206132244f4b52c83610a3e6738187540c8b58b76cbbba7d3a2d9081058125eb8e044c660c47fb6feabed49bbbfea9fe564cc4ee36bd9df2bf1e7750419fcc097f064f39095482c7b3cecd55ed9071609f7cc72211ed4b629d5b9e9982225c844db392f8628ba87f3bfea0adc59de630dacc90ab8483614482b363125a1cba9246f9824c808f72fd8539985de2511707e9ea37ffef6a3419745824db741d34c967377def8"}}, {0x1c7, {0xb, 0x6e, 0x2, "6fab2c2ecad61cc499cc5764c43345245434a9d2f0955c151010d72270fcfafaee041ac8e6250abd1439386fb9c287c4591777372fbeb334331be75c919742cf8a470fcd1e8c1088371eb29c4cb1261e8adf5c2904c6417a68bdc0c2b45c8e0d49e669b97d1073cd523c56648d69"}}, {0x6b6, {0x1, 0xe00, 0x8, "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"}}]}) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfdef) waitid$auto(0x9d4, 0xffffffffffffffff, 0x0, 0xfffffbff, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) msgsnd$auto(0xfffff800, 0x0, 0x1, 0x1) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) ioctl$auto_BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_KEY(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000002980)=ANY=[@ANYBLOB="d4020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x11) 4.744445347s ago: executing program 0 (id=2614): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x29, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r1, @ANYBLOB="79a327bd7000fbdbdf2520000000b3bebe244d8b13a4"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x5b, 0x5, 0x0, 0x1, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_snmp6/veth0\x00', 0x400e42, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffb4, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) mremap$auto(0x0, 0xfffffffffffffffc, 0xff, 0x2, 0xb6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff53, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x40800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5eeb62ce061cdfead91748c190b13feaa5a41b6eab92f8add3ff749a64f2c4fe89cf07e02776de848d3658467bfd5611cca3055521ea4428", @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/manufacturer\x00', 0xa2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001540)=""/104, 0x68) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x10b142, 0x0) read$auto(r6, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x9) open_by_handle_at$auto(0x1, 0x0, 0x2) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8880, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(r3, 0x80045439, r5) acct$auto(&(0x7f0000000000)) 4.233471222s ago: executing program 0 (id=2616): unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x2080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x8281, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) r2 = socket(0x27, 0x2, 0x1) socket(0xa, 0x1, 0x84) ioctl$auto_RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0xb, 0x0) readv$auto(r3, &(0x7f0000000a80)={0x0, 0x10002}, 0xff) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/206, 0xce) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) sync_file_range$auto(r2, 0xfffffffffffffe95, 0x9, 0x9) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) 4.179024381s ago: executing program 3 (id=2617): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) mmap$auto(0x0, 0x2020009, 0xa0e2, 0xeb2, 0xfffffffffffffffb, 0x8000) r1 = setfsuid$auto(0xee01) setresuid$auto(0x0, r1, 0x0) shmctl$auto_SHM_INFO(0x7fffffff, 0xe, &(0x7f0000000180)={{0x8, r1, 0xffffffffffffffff, 0xc27e, 0x8, 0x7, 0xfff}, 0x8000, 0x8, 0x5, 0xc64b, @raw=0x5, @raw=0x5, 0x5, 0x0, &(0x7f0000000080)="6d1cf97e7a96602b5abfe80ff331ff16191767ce326d6bec", &(0x7f0000000100)="62c097e6f2240203a3553af09a40ae262a55eaad97b906262b97663dc60e50a9ea2cfd5de10e78d01e41108da48bd0cdea6e321139363c29020a7ac447a12e9d92b597faff276dc2"}) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0xee01, 0x1001) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x5d1480, 0x0) r2 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) read$auto(0x3, 0x0, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) read$auto(r3, 0x0, 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x1f00) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) fsconfig$auto_FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0xa00000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x2a3142398c82a762, 0x0) epoll_create$auto(0x8800001) r4 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x306, 0x8000040006) 4.041077129s ago: executing program 5 (id=2618): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@siginfo_0_0={0x0, 0x0, 0x7ffffffd, @_rt={0xffffffffffffffff}}}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x200001, 0x6b1, 0x9, 0x3, 0x4, 0x54bf, 0x6}) mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) open(0x0, 0x64842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) signalfd4$auto(0xffffffffffffffff, 0x0, 0x8, 0x800) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/036/001\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 3.748988045s ago: executing program 6 (id=2619): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)=@batch={0x6, 0x0, 0xa1a, 0x1, 0x2, r1, 0x16e8, 0x200000000000}, 0xff) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={0x0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x1, 0x0) getsockopt$auto_SO_TIMESTAMP_NEW(r4, 0x1, 0x3f, &(0x7f0000000040)='](\x00', &(0x7f00000000c0)=0x8) r5 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xc, 0xeb1, 0xffffffffffffffff, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x4880, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x32}, &(0x7f0000000300)=""/235, 0xeb, &(0x7f0000000400)=""/222, &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, {r5}}, 0x58) move_pages$auto(r6, 0x1, &(0x7f0000000280)=&(0x7f0000000580)="656b252b8ed7990c11c2c836c439cc55033a3a2db96364060578f00465bddd3a1db9999cb0502c9b8e5dfdbd26ea304fd09fd77be72e9a1057ba3799a5374d968637d1ee172785863f9e837bec6595b009d5867adf1e8d3c27b47b8df5efbcc4073bce707b2465f418855a374c3df2034edbd095a7fe9acdeb348e2015e16be1d9351f", &(0x7f0000000640)=0x1, &(0x7f0000000680)=0x6, 0xc5f9) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.148753187s ago: executing program 0 (id=2620): socket(0x11, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffff00, 0x8000}, "290000000000000000000000008000"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040)={0x7, 0x1, 0x1c0, 0x6, 0xfffffff6, 0x2, "90577a425e214e1730ea2bab411a38e8857053c022bf12795a87e69f1bb7f01ffd02fe3d475a9b4644cf75f39f724fbed78ab016e711635563cbdd0aa81fb9cb"}) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40800, 0x0) r3 = socket(0x2, 0x3, 0x4) getsockopt$auto(r3, 0x84, 0x22, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r6 = socket(0xa, 0x1, 0x84) accept4$auto(r6, 0x0, 0x0, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy11/hwsim/dfs_simulate_radar\x00', 0x1c1900, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x1000009}, 0x100007}, 0x3, 0x0) 2.59814542s ago: executing program 3 (id=2621): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x6) socket(0x10, 0x2, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(r0, 0x8, 0x2) msync$auto(0x0, 0x8000, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c014}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) 2.522056353s ago: executing program 6 (id=2622): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r1, &(0x7f0000000380)="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", 0x4e00) munmap$auto(0x80c00100000000, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb5, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x38, &(0x7f0000000040)={0x4, 0x41, 0xd, @inferred=r0}}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port8/uevent\x00', 0x0, 0x0) write$auto(r3, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) preadv$auto(0x3, 0x0, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, 0x0, 0x1) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_mark$auto(r2, 0x9ad, 0xb, r0, &(0x7f0000000100)='./file0\x00') clock_adjtime$auto(0x354d, 0x0) 2.37937807s ago: executing program 0 (id=2623): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f00000000c0)="645f16", 0x8}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r2 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) sendmsg$auto_NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4000840) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x0, 0x0) r4 = prctl$auto(0x16, 0x1, 0x0, 0xfffffffffffffffe, 0x4) pread64$auto(r3, 0x0, 0x81, 0x200) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffff7fffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1b0, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_REG_RULES={0x194, 0x22, 0x0, 0x1, [@nested={0x91, 0x27, 0x0, 0x1, [@generic="78dd774cfb36e6dc4896ec01a8381afa1ad8a925bdaf5d4ebfd782237edf167f7d91706b9bff2b16094f8df54694611af5089586eaa43daeb83ac6d9632ce1e1ab9725bbba8256fe9b3c896baef68962623bdd0e69b19d6514ce7bd9a2fc4f151fa18d2efee14ac61e219df91812d29e3e6699612c3134635e46a5ff3191c681d366782ca8462132439591d3bf"]}, @nested={0x8, 0xd4, 0x0, 0x1, [@nested={0x4, 0xb0}]}, @nested={0xf3, 0xa4, 0x0, 0x1, [@typed={0xa, 0x37, 0x0, 0x0, @str='vcan0\x00'}, @nested={0x4, 0xe6}, @nested={0x4, 0x6a}, @nested={0x4, 0x100}, @nested={0x4, 0x2c}, @generic="a83b8991f8468fc99eaf347d687555e77b23aee56f61b6cf45cfe38cd778056379534cc7728af28feeb0ae72d465d3e3c22b4b860fbff412213985c306a9514f735873559f42ad5a9819dffe8456b2de39904df59f4923ce26bea602c45316b7112271502466fcfe46fc6ee78a879979eff61373a6e11e9f902858611948ead58c73344ce2bc94463b2408ef05d7e2db46b9566cbe6ba062c500873f08291ab6772a4ba42400d6737dc5d13a25640f78c5a55749a2c667c698adb2e106ffcf92a6ddd06e64a17c", @nested={0x4, 0x5b}, @nested={0x4, 0x4f}, @nested={0x4, 0x8c}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) 2.018506874s ago: executing program 3 (id=2624): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x25, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x10000000000000, 0x400053, 0x9) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x1, 0x9) 1.839689926s ago: executing program 5 (id=2625): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cb5d17026332416576b139e48cd050900000000", @ANYRES16=r0, @ANYBLOB="79a327bd7000fbdbdf252000000005000f0050000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x64c4, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_snmp6/veth0\x00', 0x400e42, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="83fe2437", @ANYRES32, @ANYRESDEC=r0, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000600000200", @ANYRES32=r2, @ANYRES64=r3], 0x68}, 0x1, 0x0, 0x0, 0x52c8fbb08a1ebaca}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0xd99) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20004801}, 0x40800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/manufacturer\x00', 0xa2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000440)=""/104, 0x3a) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x4181, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x10b142, 0x0) read$auto(r5, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x9) mmap$auto(0x0, 0x40, 0xffffffffffffffff, 0xebb, 0xffffffffffffffff, 0xfffb) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/kvm/pf_emulate\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x1c1000, 0x0) read$auto(r6, 0x0, 0x9) 1.556598005s ago: executing program 3 (id=2626): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) r0 = prctl$auto_PR_SET_MM_END_CODE(0x2, 0x2, 0x0, 0x6, 0x10000) read$auto_debugfs_full_proxy_file_operations_internal(r0, &(0x7f0000000000)=""/4, 0x4) mmap$auto(0x0, 0x400007, 0xdf, 0x111, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) io_uring_setup$auto(0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x8000a}, 0xc) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x3ff, 0x8}, 0x9) r5 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r5, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r5, 0x0, 0x405c8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) 1.423175336s ago: executing program 0 (id=2627): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)="5acc6af2", 0x0, &(0x7f0000000040)="e3ec79707a66c911b1bd7b9df624e290c4a5c76c512a685cbdb7c14ff92c0505111ca995f9055777212f846ec1e18e5417421b8c7de74691af9f1b8e64e28eedaea9b0157fbcea5cea4d166969e7a7bcd56cf515ff799c239b91458602314a645f6e65ae8f39530a869ab666e6", 0x1, &(0x7f00000000c0)="2bce742eecba56f43312e385c6573c888864e674f7a267b26f37c67ce8a9a90e281a3c55a3ef17870a1ab77f27e12e1f7a5219ab6bf13fc48aec990e2c5d437dfa52648b6dd32d600af0c1a372e80f4907a8e53981a522731cea0fe529771ed6f91ac3fd658caa137961fc51b228c77edfea43f435f0b0208f064fe6f5320c40e957de48f98b4ba0a3d50c068c87db696b0021cbfc84c9688a1965076d847ad150b26b93e4a291cd66eee9cfcea4fd3de58faeed6b84a88adde5d7b4f926af2bded62bd010264e7bae24ece597fa4028f3b5d0e3f7676f321eeef2e645e0addbdf520f533f6ffe21f1e3e4b79d54684c80b1584a4fd4bd79491aad02", &(0x7f00000001c0)=0x80}) ioctl$auto_IMADDTIMER(r0, 0x80044940, &(0x7f0000000240)=0x6) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) removexattr$auto(0x0, 0x0) 1.361698964s ago: executing program 3 (id=2628): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) memfd_create$auto(0x0, 0x5) clone$auto(0x9, 0x2, 0x0, 0x0, 0x2) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x80000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x801, 0x84) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) pipe2$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) write$auto(0x3, 0x0, 0xfdef) r0 = open(0x0, 0x222c0, 0x0) ioctl$auto(0x3, 0x541a, r0) setresuid$auto(0x8, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) bind$auto(r1, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) socket(0xf, 0x804, 0x106) io_uring_setup$auto(0x5, 0x0) socket(0x29, 0x800, 0xf08) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) 1.337707s ago: executing program 5 (id=2629): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio\x00', 0x7ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r2 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000000)=0x4) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x1, 0x106) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x14, r10, 0x1, 0x70bd31, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20048004) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002cbd7000d816df2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_batadv\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x14, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x810) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x36c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x2be, 0x2, 0x0, 0x1, [@nested={0x20, 0x24, 0x0, 0x1, [@typed={0x14, 0x125, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x144, 0x0, 0x0, @u32=0x831d}]}, @generic="3350ac1c6a37211ba8d204142c619ec674bebb508b71ada386b77b0c5a485b9be6d6a627cc61f3935c0f9dd9481221cb4190d1d2137d5892a188a990481853dcd3c0dcd5355c80799f02002d447c199bb256da53e6726cc7ff4380f5c10ddf38f657b00afa106f7ae5b5f18a535b0f60cbb49395cd8b482eba95ca8a548a1208dc64311d25dd002775e00f4838bb85070bc8ab61f942abde954ce695329306930cfb2e496102706febcfa981614cfe41fa0cb9926b030110a29516fa97d8d8c977bba65607bb2e6f6d15", @typed={0x8, 0x39, 0x0, 0x0, @uid=0xee00}, @nested={0x1c8, 0xa7, 0x0, 0x1, [@nested={0x4, 0x6a}, @nested={0x4, 0x8c}, @nested={0x4, 0x14f}, @typed={0x8, 0xde, 0x0, 0x0, @binary="3c44adcb"}, @nested={0x4, 0x77}, @typed={0xb, 0xa4, 0x0, 0x0, @str='-)&,[.\x00'}, @generic="27c011cf8adae148cdda557a2e2f99e568738c9fedac98b0488ca0cf2544959613e9d8a1602d92a178ba026f1fd1ced6fbed057e3c2edc8608f50cb960afe14767408b6e8d1d2b66c73c8197048daaa023a5434a83326ddfdf8ff4f0a7a591a6712d9f98b053e1a48c146a48ce51c8f8fc2da608392a973a7d48d55065cb614edce480f43fd194cf5d92791b04deab5810aa2b6515c5c8bcdfd66ff225a832d1b0269f5641d656cc66d22bfba0f087933508cda6726649", @nested={0x4, 0x46}, @generic="c9de6c03af6b9494402dce60bb43", @generic="2e2d4baa38e651e3626145980c8aa31cdbfd1ae8fa1e4a4305878726c221929a7234e0a0f433b33ed89825efb76e778ba4e01bc41fbf987977a8913dac9c82a3ede613002b02969866bb01104591b3190e3776bc4b5b20b1b5433a9aa154adbb75ee3d5e90a996ec32c16957fca2588540fe514a85de8b732d3ad908c834fed5357e429bfc5d6c3aea2a19c3a74377c7af877a92e6cf438e18fd6d71701f8e7160c1dd836b1b53c8613873e1e397938c86a69a49fd68e63356a97c977a4a7e935ba6d83af6ab3929bbab7f868b3aad4d804ec3eb9e1a53"]}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendfile$auto(r1, r1, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x8, 0x6, 0x7, 0x8000, 0x5, 0x4000000, 0x5, 0x25991f93, 0xd, 0x1000, 0xfb, 0x1, 0x8, 0x4f, 0x96, 0x100]}, 0x0, 0x0) 508.93992ms ago: executing program 6 (id=2630): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr0\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569) mmap$auto(0x0, 0x800000000006, 0xe3, 0x89b72, 0x2, 0x8) kexec_load$auto(0x0, 0x4, 0x0, 0x1) 501.454443ms ago: executing program 5 (id=2631): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)=@batch={0x6, 0x0, 0xa1a, 0x1, 0x2, r1, 0x16e8, 0x200000000000}, 0xff) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={0x0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf250100000004000180072e01806ca8d1f92f"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x1, 0x0) getsockopt$auto_SO_TIMESTAMP_NEW(r4, 0x1, 0x3f, &(0x7f0000000040)='](\x00', &(0x7f00000000c0)=0x8) r5 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xc, 0xeb1, 0xffffffffffffffff, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x4880, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x32}, &(0x7f0000000300)=""/235, 0xeb, &(0x7f0000000400)=""/222, &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, {r5}}, 0x58) move_pages$auto(r6, 0x1, &(0x7f0000000280)=&(0x7f0000000580)="656b252b8ed7990c11c2c836c439cc55033a3a2db96364060578f00465bddd3a1db9999cb0502c9b8e5dfdbd26ea304fd09fd77be72e9a1057ba3799a5374d968637d1ee172785863f9e837bec6595b009d5867adf1e8d3c27b47b8df5efbcc4073bce707b2465f418855a374c3df2034edbd095a7fe9acdeb348e2015e16be1d9351f", &(0x7f0000000640)=0x1, &(0x7f0000000680)=0x6, 0xc5f9) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.87644ms ago: executing program 0 (id=2632): socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x2, 0x801, 0x84) (async) r1 = socket(0x2, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd70fad0c4819a86185f00", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x24008894) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd70fad0c4819a86185f00", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x24008894) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x400000eb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) (async) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) open_tree$auto(0xffffffffffffffff, 0x0, 0x2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x8182, 0x0) mmap$auto(0x100, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r4, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) 0s ago: executing program 3 (id=2633): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@siginfo_0_0={0x0, 0x0, 0x7ffffffd, @_rt={0xffffffffffffffff}}}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x200001, 0x6b1, 0x9, 0x3, 0x4, 0x54bf, 0x6}) mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) open(0x0, 0x64842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) signalfd4$auto(0xffffffffffffffff, 0x0, 0x8, 0x800) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/036/001\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) kernel console output (not intermixed with test programs): 00000 R11: 0000000000000246 R12: 0000000000000000 [ 687.016210][T17466] R13: 00007f99fa016038 R14: 00007f99fa015fa0 R15: 00007ffce9c60688 [ 687.016249][T17466] [ 689.456298][T17486] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2430'. [ 690.507343][T17510] [U] [ 690.510159][T17510] [U] [ 690.512840][T17510] [U] [ 690.515542][T17510] [U] [ 690.518756][T17510] [U] [ 690.521463][T17510] [U] [ 690.524140][T17510] [U] [ 690.526819][T17510] [U] [ 690.546727][T17510] [U] [ 690.549440][T17510] [U] [ 690.552112][T17510] [U] [ 690.554792][T17510] [U] [ 690.603120][T17510] [U] [ 690.605835][T17510] [U] [ 690.608517][T17510] [U] [ 690.611194][T17510] [U] [ 690.665286][T17510] [U] [ 690.668046][T17510] [U] [ 690.670767][T17510] [U] [ 690.673485][T17510] [U] [ 690.731102][T17510] [U] [ 690.733864][T17510] [U] [ 690.736583][T17510] [U] [ 690.739291][T17510] [U] [ 690.784843][T17510] [U] [ 690.787610][T17510] [U] [ 690.790332][T17510] [U] [ 690.793051][T17510] [U] [ 690.842487][T17510] [U] [ 690.845256][T17510] [U] [ 690.847972][T17510] [U] [ 690.850712][T17510] [U] [ 690.903330][T17510] [U] [ 690.906045][T17510] [U] [ 690.908725][T17510] [U] [ 690.911398][T17510] [U] [ 690.955735][T17510] [U] [ 690.958500][T17510] [U] [ 690.961227][T17510] [U] [ 690.963946][T17510] [U] [ 691.127375][T17510] [U] [ 691.130154][T17510] [U] [ 691.132875][T17510] [U] [ 691.135592][T17510] [U] [ 691.205511][T17510] [U] [ 691.208231][T17510] [U] [ 691.210917][T17510] [U] [ 691.213588][T17510] [U] [ 691.363594][T17510] [U] [ 691.366361][T17510] [U] [ 691.369082][T17510] [U] [ 691.371807][T17510] [U] [ 691.487633][T17510] [U] [ 691.490405][T17510] [U] [ 691.493134][T17510] [U] [ 691.495855][T17510] [U] [ 691.596806][T17510] [U] [ 692.121030][T17538] FAULT_INJECTION: forcing a failure. [ 692.121030][T17538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.155328][T17538] CPU: 1 UID: 0 PID: 17538 Comm: syz.3.2442 Tainted: G U L syzkaller #0 PREEMPT(full) [ 692.155379][T17538] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 692.155391][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.155410][T17538] Call Trace: [ 692.155419][T17538] [ 692.155431][T17538] dump_stack_lvl+0x100/0x190 [ 692.155479][T17538] should_fail_ex.cold+0x5/0xa [ 692.155507][T17538] ? prepare_alloc_pages+0x16d/0x5f0 [ 692.155542][T17538] should_fail_alloc_page+0xeb/0x140 [ 692.155590][T17538] prepare_alloc_pages+0x1f0/0x5f0 [ 692.155621][T17538] ? kernel_text_address+0x8d/0x100 [ 692.155665][T17538] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 692.155707][T17538] ? __lock_acquire+0x4a5/0x2630 [ 692.155744][T17538] ? __lock_acquire+0x4a5/0x2630 [ 692.155787][T17538] ? __lock_acquire+0x4a5/0x2630 [ 692.155823][T17538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 692.155870][T17538] ? __lock_acquire+0x4a5/0x2630 [ 692.155922][T17538] ? find_held_lock+0x2b/0x80 [ 692.155967][T17538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 692.156021][T17538] ? policy_nodemask+0xed/0x4f0 [ 692.156073][T17538] alloc_pages_mpol+0x1fb/0x550 [ 692.156120][T17538] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 692.156169][T17538] ? arch_stack_walk+0xa6/0xf0 [ 692.156203][T17538] ? wiphy_new_nm+0x701/0x21a0 [ 692.156236][T17538] ___kmalloc_large_node+0x104/0x150 [ 692.156278][T17538] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 692.156319][T17538] __kmalloc_large_node_noprof+0x1c/0x70 [ 692.156352][T17538] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 692.156390][T17538] __kmalloc_noprof+0x5be/0x850 [ 692.156435][T17538] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 692.156475][T17538] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 692.156511][T17538] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 692.156544][T17538] wiphy_new_nm+0x701/0x21a0 [ 692.156580][T17538] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 692.156618][T17538] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 692.156655][T17538] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 692.156685][T17538] ieee80211_alloc_hw_nm+0x1ac7/0x22a0 [ 692.156721][T17538] ? __local_bh_enable_ip+0x9e/0x120 [ 692.156755][T17538] mac80211_hwsim_new_radio+0x1e1/0x57d0 [ 692.156811][T17538] ? __asan_memset+0x23/0x50 [ 692.156847][T17538] ? __nla_validate_parse+0x1e7/0x28b0 [ 692.156883][T17538] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 692.156933][T17538] hwsim_new_radio_nl+0xc1f/0x1340 [ 692.156973][T17538] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 692.157021][T17538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 692.157057][T17538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 692.157107][T17538] genl_family_rcv_msg_doit+0x214/0x300 [ 692.157148][T17538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 692.157183][T17538] ? genl_get_cmd+0x3ef/0x720 [ 692.157224][T17538] ? bpf_lsm_capable+0x9/0x10 [ 692.157250][T17538] ? security_capable+0x80/0x260 [ 692.157408][T17538] ? ns_capable+0xd2/0xf0 [ 692.157442][T17538] genl_rcv_msg+0x560/0x800 [ 692.157491][T17538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 692.157532][T17538] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 692.157586][T17538] netlink_rcv_skb+0x159/0x420 [ 692.157622][T17538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 692.157664][T17538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.157705][T17538] ? rcu_is_watching+0x12/0xc0 [ 692.157765][T17538] ? __rcu_read_unlock+0x26a/0x5e0 [ 692.157800][T17538] ? rcu_is_watching+0x12/0xc0 [ 692.157850][T17538] genl_rcv+0x28/0x40 [ 692.157886][T17538] netlink_unicast+0x5aa/0x870 [ 692.157927][T17538] ? __pfx_netlink_unicast+0x10/0x10 [ 692.157978][T17538] netlink_sendmsg+0x8b0/0xda0 [ 692.158021][T17538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.158064][T17538] ? __import_iovec+0x1d2/0x640 [ 692.158115][T17538] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 692.158161][T17538] ____sys_sendmsg+0xa54/0xc30 [ 692.158207][T17538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.158257][T17538] ? __pfx_futex_wake_mark+0x10/0x10 [ 692.158306][T17538] ___sys_sendmsg+0x190/0x1e0 [ 692.158352][T17538] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.158443][T17538] __sys_sendmsg+0x170/0x220 [ 692.158478][T17538] ? __pfx___sys_sendmsg+0x10/0x10 [ 692.158511][T17538] ? __x64_sys_futex+0x34f/0x4d0 [ 692.158572][T17538] do_syscall_64+0x106/0xf80 [ 692.158604][T17538] ? clear_bhb_loop+0x40/0x90 [ 692.158642][T17538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.158674][T17538] RIP: 0033:0x7f6af1d9c629 [ 692.158701][T17538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.158731][T17538] RSP: 002b:00007f6af2c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.158761][T17538] RAX: ffffffffffffffda RBX: 00007f6af2015fa0 RCX: 00007f6af1d9c629 [ 692.158782][T17538] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 692.158802][T17538] RBP: 00007f6af1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 692.158821][T17538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.158838][T17538] R13: 00007f6af2016038 R14: 00007f6af2015fa0 R15: 00007ffdfe54ccc8 [ 692.158879][T17538] [ 693.576803][ T9780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.656741][ T9780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.686412][ T9780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.727922][ T9780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.739070][ T9780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 694.767519][T17564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2444'. [ 694.768658][T17542] chnl_net:caif_netlink_parms(): no params data found [ 695.788028][ T9780] Bluetooth: hci1: command tx timeout [ 697.040136][ T9853] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.646659][ T9853] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.703994][T17542] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.723818][T17542] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.741540][T17542] bridge_slave_0: entered allmulticast mode [ 697.769874][T17542] bridge_slave_0: entered promiscuous mode [ 697.799170][T17542] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.806339][T17542] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.838451][T17542] bridge_slave_1: entered allmulticast mode [ 697.860125][T17542] bridge_slave_1: entered promiscuous mode [ 697.868119][ T9780] Bluetooth: hci1: command tx timeout [ 698.262317][ T9853] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.717610][T17542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.743202][T17542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.267251][ T9853] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.527621][T17542] team0: Port device team_slave_0 added [ 699.542078][T17542] team0: Port device team_slave_1 added [ 699.772873][T17593] zswap: compressor û not available [ 699.809067][T17594] Setting dangerous option i915.mitigations - tainting kernel [ 699.951147][ T9780] Bluetooth: hci1: command tx timeout [ 700.229970][T17542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.238271][T17542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.340056][T17542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.371216][T17542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.378201][T17542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.404325][T17542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.479096][T17542] hsr_slave_0: entered promiscuous mode [ 700.485841][T17542] hsr_slave_1: entered promiscuous mode [ 700.962668][ T9853] team0: left allmulticast mode [ 700.967569][ T9853] team_slave_0: left allmulticast mode [ 701.002096][ T9853] team_slave_1: left allmulticast mode [ 701.007668][ T9853] team0: left promiscuous mode [ 701.046584][ T9853] team_slave_0: left promiscuous mode [ 701.072841][ T9853] team_slave_1: left promiscuous mode [ 701.078646][ T9853] bridge0: port 4(team0) entered disabled state [ 701.170749][T17603] netlink: 'syz.3.2449': attribute type 7 has an invalid length. [ 701.178533][T17603] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2449'. [ 701.221352][T17603] netlink: zone id is out of range [ 701.226513][T17603] netlink: zone id is out of range [ 701.241496][ T9853] gretap0: left allmulticast mode [ 701.246575][ T9853] gretap0: left promiscuous mode [ 701.259882][T17603] netlink: zone id is out of range [ 701.265780][T17603] netlink: zone id is out of range [ 701.301451][ T9853] bridge0: port 3(gretap0) entered disabled state [ 701.355505][T17603] netlink: set zone limit has 8 unknown bytes [ 701.385307][ T9853] bridge_slave_0: left allmulticast mode [ 701.407712][ T9853] bridge_slave_0: left promiscuous mode [ 701.435050][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.653974][T17610] FAULT_INJECTION: forcing a failure. [ 701.653974][T17610] name failslab, interval 1, probability 0, space 0, times 0 [ 701.694562][T17610] CPU: 1 UID: 0 PID: 17610 Comm: syz.3.2450 Tainted: G U L syzkaller #0 PREEMPT(full) [ 701.694612][T17610] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 701.694624][T17610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.694644][T17610] Call Trace: [ 701.694654][T17610] [ 701.694665][T17610] dump_stack_lvl+0x100/0x190 [ 701.694713][T17610] should_fail_ex.cold+0x5/0xa [ 701.694747][T17610] should_failslab+0xc2/0x120 [ 701.694801][T17610] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 701.694843][T17610] ? skb_clone+0x190/0x400 [ 701.694881][T17610] skb_clone+0x190/0x400 [ 701.694915][T17610] netlink_deliver_tap+0xaed/0xcc0 [ 701.694956][T17610] netlink_unicast+0x650/0x870 [ 701.694997][T17610] ? __pfx_netlink_unicast+0x10/0x10 [ 701.695046][T17610] netlink_sendmsg+0x8b0/0xda0 [ 701.695088][T17610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.695119][T17610] ? __import_iovec+0x1d2/0x640 [ 701.695167][T17610] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 701.695217][T17610] ____sys_sendmsg+0xa54/0xc30 [ 701.695259][T17610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.695300][T17610] ? __pfx_futex_wake_mark+0x10/0x10 [ 701.695346][T17610] ___sys_sendmsg+0x190/0x1e0 [ 701.695387][T17610] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.695472][T17610] __sys_sendmsg+0x170/0x220 [ 701.695503][T17610] ? __pfx___sys_sendmsg+0x10/0x10 [ 701.695538][T17610] ? __x64_sys_futex+0x34f/0x4d0 [ 701.695595][T17610] do_syscall_64+0x106/0xf80 [ 701.695623][T17610] ? clear_bhb_loop+0x40/0x90 [ 701.695659][T17610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.695688][T17610] RIP: 0033:0x7f6af1d9c629 [ 701.695712][T17610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.695738][T17610] RSP: 002b:00007f6af2c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.695765][T17610] RAX: ffffffffffffffda RBX: 00007f6af2015fa0 RCX: 00007f6af1d9c629 [ 701.695785][T17610] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 701.695803][T17610] RBP: 00007f6af1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 701.695820][T17610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.695839][T17610] R13: 00007f6af2016038 R14: 00007f6af2015fa0 R15: 00007ffdfe54ccc8 [ 701.695877][T17610] [ 702.043406][ T9780] Bluetooth: hci1: command tx timeout [ 703.073952][ T9853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.120132][ T9853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.213454][ T9853] bond0 (unregistering): Released all slaves [ 703.390918][ T9853] HfR: left promiscuous mode [ 703.844881][ T9853] tipc: Left network mode [ 706.427598][ T9853] hsr_slave_0: left promiscuous mode [ 706.480746][ T9853] hsr_slave_1: left promiscuous mode [ 706.556317][ T9853] veth1_macvtap: left promiscuous mode [ 706.595058][ T9853] veth0_macvtap: left promiscuous mode [ 706.615188][ T9853] veth1_vlan: left promiscuous mode [ 706.639083][ T9853] veth0_vlan: left promiscuous mode [ 707.523286][T17682] FAULT_INJECTION: forcing a failure. [ 707.523286][T17682] name failslab, interval 1, probability 0, space 0, times 0 [ 707.605815][T17682] CPU: 1 UID: 0 PID: 17682 Comm: syz.1.2462 Tainted: G U L syzkaller #0 PREEMPT(full) [ 707.605868][T17682] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 707.605879][T17682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 707.605895][T17682] Call Trace: [ 707.605904][T17682] [ 707.605916][T17682] dump_stack_lvl+0x100/0x190 [ 707.605964][T17682] should_fail_ex.cold+0x5/0xa [ 707.605998][T17682] should_failslab+0xc2/0x120 [ 707.606046][T17682] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 707.606092][T17682] ? kasprintf+0xc7/0x100 [ 707.606146][T17682] kvasprintf+0xbc/0x150 [ 707.606192][T17682] ? __pfx_kvasprintf+0x10/0x10 [ 707.606240][T17682] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 707.606271][T17682] ? lockdep_hardirqs_on+0x78/0x100 [ 707.606303][T17682] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 707.606347][T17682] kasprintf+0xc7/0x100 [ 707.606393][T17682] ? __pfx_kasprintf+0x10/0x10 [ 707.606459][T17682] ieee80211_alloc_led_names+0x1b0/0x420 [ 707.606502][T17682] ieee80211_alloc_hw_nm+0x1934/0x22a0 [ 707.606548][T17682] mac80211_hwsim_new_radio+0x1e1/0x57d0 [ 707.606606][T17682] ? __asan_memset+0x23/0x50 [ 707.606649][T17682] ? __nla_validate_parse+0x1e7/0x28b0 [ 707.606687][T17682] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 707.606739][T17682] hwsim_new_radio_nl+0xc1f/0x1340 [ 707.606783][T17682] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 707.606834][T17682] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 707.606877][T17682] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 707.606931][T17682] genl_family_rcv_msg_doit+0x214/0x300 [ 707.606978][T17682] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 707.607019][T17682] ? genl_get_cmd+0x3ef/0x720 [ 707.607066][T17682] ? bpf_lsm_capable+0x9/0x10 [ 707.607092][T17682] ? security_capable+0x80/0x260 [ 707.607129][T17682] ? ns_capable+0xd2/0xf0 [ 707.607157][T17682] genl_rcv_msg+0x560/0x800 [ 707.607198][T17682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 707.607231][T17682] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 707.607278][T17682] netlink_rcv_skb+0x159/0x420 [ 707.607310][T17682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 707.607357][T17682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 707.607408][T17682] ? netlink_deliver_tap+0x1ae/0xcc0 [ 707.607446][T17682] genl_rcv+0x28/0x40 [ 707.607480][T17682] netlink_unicast+0x5aa/0x870 [ 707.607518][T17682] ? __pfx_netlink_unicast+0x10/0x10 [ 707.607568][T17682] netlink_sendmsg+0x8b0/0xda0 [ 707.607608][T17682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.607640][T17682] ? __import_iovec+0x1d2/0x640 [ 707.607686][T17682] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 707.607725][T17682] ____sys_sendmsg+0xa54/0xc30 [ 707.607768][T17682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.607815][T17682] ? try_to_wake_up+0x644/0x1a80 [ 707.607869][T17682] ___sys_sendmsg+0x190/0x1e0 [ 707.607911][T17682] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.607952][T17682] ? futex_private_hash_put+0x107/0x1c0 [ 707.608029][T17682] __sys_sendmsg+0x170/0x220 [ 707.608062][T17682] ? __pfx___sys_sendmsg+0x10/0x10 [ 707.608090][T17682] ? __x64_sys_futex+0x34f/0x4d0 [ 707.608144][T17682] do_syscall_64+0x106/0xf80 [ 707.608176][T17682] ? clear_bhb_loop+0x40/0x90 [ 707.608212][T17682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.608242][T17682] RIP: 0033:0x7f080c39c629 [ 707.608266][T17682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.608292][T17682] RSP: 002b:00007f080d228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.608329][T17682] RAX: ffffffffffffffda RBX: 00007f080c615fa0 RCX: 00007f080c39c629 [ 707.608349][T17682] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 707.608368][T17682] RBP: 00007f080c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 707.608386][T17682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.608404][T17682] R13: 00007f080c616038 R14: 00007f080c615fa0 R15: 00007ffc3bb062b8 [ 707.608443][T17682] [ 708.648483][ T9853] team0 (unregistering): Port device team_slave_1 removed [ 708.742570][ T9853] team0 (unregistering): Port device team_slave_0 removed [ 709.516831][T17542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 709.605081][T17542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 709.686894][T17542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 709.704044][T17700] dlm: non-version read from control device 255 [ 709.819237][T17542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.756116][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2472'. [ 710.852844][T17542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.110491][T17542] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.174595][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.181811][T12167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.351971][ T9766] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.359235][ T9766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.369065][T17786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2475'. [ 711.388433][T17774] zswap: compressor not available [ 711.845771][T17794] zswap: compressor not available [ 712.145698][T17804] FAULT_INJECTION: forcing a failure. [ 712.145698][T17804] name failslab, interval 1, probability 0, space 0, times 0 [ 712.278490][T17804] CPU: 1 UID: 0 PID: 17804 Comm: syz.4.2476 Tainted: G U L syzkaller #0 PREEMPT(full) [ 712.278540][T17804] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 712.278552][T17804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.278570][T17804] Call Trace: [ 712.278580][T17804] [ 712.278592][T17804] dump_stack_lvl+0x100/0x190 [ 712.278641][T17804] should_fail_ex.cold+0x5/0xa [ 712.278676][T17804] should_failslab+0xc2/0x120 [ 712.278722][T17804] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 712.278782][T17804] ? kvasprintf_const+0x66/0x1a0 [ 712.278838][T17804] kvasprintf+0xbc/0x150 [ 712.278882][T17804] ? __pfx_kvasprintf+0x10/0x10 [ 712.278928][T17804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 712.279001][T17804] ? lockdep_init_map_type+0x5c/0x250 [ 712.279049][T17804] kvasprintf_const+0x66/0x1a0 [ 712.279098][T17804] kobject_set_name_vargs+0x5a/0x140 [ 712.279140][T17804] device_create_groups_vargs+0x1b1/0x270 [ 712.279193][T17804] device_create+0xed/0x130 [ 712.279239][T17804] ? __pfx_device_create+0x10/0x10 [ 712.279279][T17804] ? lockdep_init_map_type+0x5c/0x250 [ 712.279316][T17804] ? timer_init_key+0x150/0x340 [ 712.279352][T17804] ? ieee80211_roc_setup+0x136/0x270 [ 712.279398][T17804] ? ieee80211_alloc_hw_nm+0x19c3/0x22a0 [ 712.279442][T17804] mac80211_hwsim_new_radio+0x37f/0x57d0 [ 712.279499][T17804] ? __asan_memset+0x23/0x50 [ 712.279537][T17804] ? __nla_validate_parse+0x1e7/0x28b0 [ 712.279572][T17804] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 712.279622][T17804] hwsim_new_radio_nl+0xc1f/0x1340 [ 712.279680][T17804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 712.279732][T17804] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 712.279782][T17804] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 712.279833][T17804] genl_family_rcv_msg_doit+0x214/0x300 [ 712.279877][T17804] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 712.279917][T17804] ? genl_get_cmd+0x3ef/0x720 [ 712.279962][T17804] ? bpf_lsm_capable+0x9/0x10 [ 712.279990][T17804] ? security_capable+0x80/0x260 [ 712.280026][T17804] ? ns_capable+0xd2/0xf0 [ 712.280057][T17804] genl_rcv_msg+0x560/0x800 [ 712.280099][T17804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 712.280140][T17804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 712.280190][T17804] netlink_rcv_skb+0x159/0x420 [ 712.280225][T17804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 712.280265][T17804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 712.280315][T17804] ? netlink_deliver_tap+0x1ae/0xcc0 [ 712.280355][T17804] genl_rcv+0x28/0x40 [ 712.280390][T17804] netlink_unicast+0x5aa/0x870 [ 712.280431][T17804] ? __pfx_netlink_unicast+0x10/0x10 [ 712.280481][T17804] netlink_sendmsg+0x8b0/0xda0 [ 712.280522][T17804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.280556][T17804] ? __import_iovec+0x1d2/0x640 [ 712.280603][T17804] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 712.280646][T17804] ____sys_sendmsg+0xa54/0xc30 [ 712.280691][T17804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 712.280737][T17804] ? try_to_wake_up+0x644/0x1a80 [ 712.280802][T17804] ___sys_sendmsg+0x190/0x1e0 [ 712.280847][T17804] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.280889][T17804] ? futex_private_hash_put+0x107/0x1c0 [ 712.280968][T17804] __sys_sendmsg+0x170/0x220 [ 712.281001][T17804] ? __pfx___sys_sendmsg+0x10/0x10 [ 712.281031][T17804] ? __x64_sys_futex+0x34f/0x4d0 [ 712.281091][T17804] do_syscall_64+0x106/0xf80 [ 712.281122][T17804] ? clear_bhb_loop+0x40/0x90 [ 712.281158][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.281189][T17804] RIP: 0033:0x7f0f56d9c629 [ 712.281214][T17804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.281245][T17804] RSP: 002b:00007f0f57bf8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.281273][T17804] RAX: ffffffffffffffda RBX: 00007f0f57015fa0 RCX: 00007f0f56d9c629 [ 712.281294][T17804] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 712.281312][T17804] RBP: 00007f0f56e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 712.281330][T17804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.281348][T17804] R13: 00007f0f57016038 R14: 00007f0f57015fa0 R15: 00007ffc5437f0a8 [ 712.281388][T17804] [ 713.695598][T17542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.050833][T17542] veth0_vlan: entered promiscuous mode [ 714.139623][T17542] veth1_vlan: entered promiscuous mode [ 714.270624][T17542] veth0_macvtap: entered promiscuous mode [ 714.311260][T17542] veth1_macvtap: entered promiscuous mode [ 714.375640][T17542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.421313][T17542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.492015][ T9766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.526286][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.550984][ T9766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.555717][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.581604][ T9766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.597077][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.609798][ T9766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.631468][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.676938][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.719064][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.757151][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.783638][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.814013][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.857135][T17829] netlink: 'syz.1.2478': attribute type 4 has an invalid length. [ 714.948473][T12163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.956338][T12163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.072229][ T9758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.097358][ T9758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.280484][T17834] FAULT_INJECTION: forcing a failure. [ 715.280484][T17834] name failslab, interval 1, probability 0, space 0, times 0 [ 715.320051][T17834] CPU: 1 UID: 0 PID: 17834 Comm: syz.1.2480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 715.320079][T17834] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 715.320084][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.320094][T17834] Call Trace: [ 715.320099][T17834] [ 715.320106][T17834] dump_stack_lvl+0x100/0x190 [ 715.320133][T17834] should_fail_ex.cold+0x5/0xa [ 715.320150][T17834] ? tomoyo_encode2+0xfb/0x3c0 [ 715.320164][T17834] should_failslab+0xc2/0x120 [ 715.320188][T17834] __kmalloc_noprof+0xe0/0x850 [ 715.320209][T17834] ? rcu_is_watching+0x12/0xc0 [ 715.320234][T17834] tomoyo_encode2+0xfb/0x3c0 [ 715.320252][T17834] tomoyo_encode+0x29/0x50 [ 715.320267][T17834] tomoyo_realpath_from_path+0x18c/0x690 [ 715.320287][T17834] tomoyo_check_open_permission+0x2af/0x3c0 [ 715.320310][T17834] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 715.320351][T17834] ? lock_acquire+0x1cf/0x380 [ 715.320369][T17834] ? find_held_lock+0x2b/0x80 [ 715.320398][T17834] tomoyo_file_open+0x6b/0x90 [ 715.320417][T17834] security_file_open+0xb5/0x1e0 [ 715.320431][T17834] do_dentry_open+0x5aa/0x1660 [ 715.320461][T17834] vfs_open+0x82/0x3f0 [ 715.320480][T17834] path_openat+0x208c/0x31a0 [ 715.320500][T17834] ? stack_depot_save_flags+0x27/0x9d0 [ 715.320525][T17834] ? __pfx_path_openat+0x10/0x10 [ 715.320550][T17834] ? kasan_save_stack+0x3f/0x50 [ 715.320570][T17834] ? kasan_save_stack+0x30/0x50 [ 715.320589][T17834] ? kasan_save_track+0x14/0x30 [ 715.320609][T17834] ? __kasan_slab_alloc+0x89/0x90 [ 715.320630][T17834] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 715.320649][T17834] ? do_getname+0x35/0x390 [ 715.320668][T17834] do_file_open+0x20e/0x430 [ 715.320683][T17834] ? __pfx_do_file_open+0x10/0x10 [ 715.320713][T17834] ? find_held_lock+0x2b/0x80 [ 715.320735][T17834] ? __might_fault+0xc5/0x140 [ 715.320761][T17834] ? __might_fault+0xc5/0x140 [ 715.320782][T17834] file_open_name+0x198/0x3b0 [ 715.320799][T17834] ? __pfx_file_open_name+0x10/0x10 [ 715.320821][T17834] ? do_getname+0x191/0x390 [ 715.320839][T17834] acct_on+0xa4/0x9e0 [ 715.320862][T17834] ? __pfx_acct_on+0x10/0x10 [ 715.320882][T17834] ? bpf_lsm_capable+0x9/0x10 [ 715.320896][T17834] ? security_capable+0x80/0x260 [ 715.320917][T17834] __x64_sys_acct+0x81/0x1e0 [ 715.320937][T17834] ? lockdep_hardirqs_on+0x78/0x100 [ 715.320954][T17834] do_syscall_64+0x106/0xf80 [ 715.320970][T17834] ? clear_bhb_loop+0x40/0x90 [ 715.320988][T17834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.321004][T17834] RIP: 0033:0x7f080c39c629 [ 715.321017][T17834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.321032][T17834] RSP: 002b:00007f080d207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 715.321047][T17834] RAX: ffffffffffffffda RBX: 00007f080c616090 RCX: 00007f080c39c629 [ 715.321057][T17834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 715.321066][T17834] RBP: 00007f080d207090 R08: 0000000000000000 R09: 0000000000000000 [ 715.321074][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.321083][T17834] R13: 00007f080c616128 R14: 00007f080c616090 R15: 00007ffc3bb062b8 [ 715.321103][T17834] [ 715.321120][T17834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 716.783022][T17851] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 718.710447][T17884] zswap: compressor not available [ 719.342341][T17905] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2493'. [ 721.026423][T17927] [U] [ 721.026479][T17927] [U] [ 721.026525][T17927] [U] [ 721.026571][T17927] [U] [ 721.026789][T17927] [U] [ 721.026833][T17927] [U] [ 721.026878][T17927] [U] [ 721.026922][T17927] [U] [ 721.027155][T17927] [U] [ 721.027205][T17927] [U] [ 721.027250][T17927] [U] [ 721.027294][T17927] [U] [ 721.036182][T17927] [U] [ 721.036235][T17927] [U] [ 721.036279][T17927] [U] [ 721.036323][T17927] [U] [ 721.036543][T17927] [U] [ 721.036590][T17927] [U] [ 721.036633][T17927] [U] [ 721.036679][T17927] [U] [ 721.036896][T17927] [U] [ 721.036942][T17927] [U] [ 721.036987][T17927] [U] [ 721.037034][T17927] [U] [ 721.037264][T17927] [U] [ 721.037309][T17927] [U] [ 721.037351][T17927] [U] [ 721.037396][T17927] [U] [ 721.059520][T17927] [U] [ 721.059572][T17927] [U] [ 721.059619][T17927] [U] [ 721.059662][T17927] [U] [ 721.059957][T17927] [U] [ 721.060001][T17927] [U] [ 721.060054][T17927] [U] [ 721.060100][T17927] [U] [ 721.060320][T17927] [U] [ 721.060365][T17927] [U] [ 721.060407][T17927] [U] [ 721.060453][T17927] [U] [ 721.060674][T17927] [U] [ 721.060718][T17927] [U] [ 721.060764][T17927] [U] [ 721.060807][T17927] [U] [ 721.061025][T17927] [U] [ 721.061078][T17927] [U] [ 721.061124][T17927] [U] [ 721.061170][T17927] [U] [ 721.061388][T17927] [U] [ 721.061432][T17927] [U] [ 721.061476][T17927] [U] [ 721.061521][T17927] [U] [ 721.061739][T17927] [U] [ 721.061783][T17927] [U] [ 721.061825][T17927] [U] [ 721.061869][T17927] [U] [ 721.062097][T17927] [U] [ 721.062145][T17927] [U] [ 721.062188][T17927] [U] [ 721.062234][T17927] [U] [ 721.062456][T17927] [U] [ 721.062500][T17927] [U] [ 721.062545][T17927] [U] [ 721.062590][T17927] [U] [ 721.062812][T17927] [U] [ 721.062857][T17927] [U] [ 721.062900][T17927] [U] [ 721.062945][T17927] [U] [ 721.063171][T17927] [U] [ 721.063217][T17927] [U] [ 721.063260][T17927] [U] [ 721.063305][T17927] [U] [ 721.063526][T17927] [U] [ 721.063571][T17927] [U] [ 721.063615][T17927] [U] [ 721.063659][T17927] [U] [ 721.063880][T17927] [U] [ 721.063925][T17927] [U] [ 721.063971][T17927] [U] [ 721.064014][T17927] [U] [ 721.064242][T17927] [U] [ 721.064287][T17927] [U] [ 721.064328][T17927] [U] [ 721.064372][T17927] [U] [ 721.064592][T17927] [U] [ 721.064637][T17927] [U] [ 721.064679][T17927] [U] [ 721.064729][T17927] [U] [ 721.064981][T17927] [U] [ 721.065026][T17927] [U] [ 721.065077][T17927] [U] [ 721.065124][T17927] [U] [ 721.065346][T17927] [U] [ 721.065392][T17927] [U] [ 721.065436][T17927] [U] [ 721.065482][T17927] [U] [ 721.065707][T17927] [U] [ 721.065752][T17927] [U] [ 721.065794][T17927] [U] [ 721.065839][T17927] [U] [ 721.066072][T17927] [U] [ 721.066114][T17927] [U] [ 721.066159][T17927] [U] [ 721.066203][T17927] [U] [ 721.066425][T17927] [U] [ 721.066470][T17927] [U] [ 721.066515][T17927] [U] [ 721.066560][T17927] [U] [ 721.066780][T17927] [U] [ 721.066823][T17927] [U] [ 721.066868][T17927] [U] [ 721.066912][T17927] [U] [ 721.067144][T17927] [U] [ 721.067191][T17927] [U] [ 721.067236][T17927] [U] [ 721.067283][T17927] [U] [ 721.140104][T17927] [U] [ 721.140159][T17927] [U] [ 721.140204][T17927] [U] [ 721.140246][T17927] [U] [ 721.140466][T17927] [U] [ 721.140511][T17927] [U] [ 721.140554][T17927] [U] [ 721.140599][T17927] [U] [ 721.149808][T17927] [U] [ 721.149863][T17927] [U] [ 721.149910][T17927] [U] [ 721.149956][T17927] [U] [ 721.150002][T17927] [U] [ 721.151102][T17927] [U] [ 721.151151][T17927] [U] [ 721.151195][T17927] [U] [ 721.151241][T17927] [U] [ 721.151471][T17927] [U] [ 721.151515][T17927] [U] [ 721.151562][T17927] [U] [ 721.151607][T17927] [U] [ 721.151830][T17927] [U] [ 721.151877][T17927] [U] [ 721.151926][T17927] [U] [ 721.151973][T17927] [U] [ 721.157927][T17927] [U] [ 721.157977][T17927] [U] [ 721.158024][T17927] [U] [ 721.158077][T17927] [U] [ 721.158303][T17927] [U] [ 721.158350][T17927] [U] [ 721.158396][T17927] [U] [ 721.158442][T17927] [U] [ 721.158688][T17927] [U] [ 721.158734][T17927] [U] [ 721.158782][T17927] [U] [ 721.158828][T17927] [U] [ 721.178503][T17927] [U] [ 721.178557][T17927] [U] [ 721.178602][T17927] [U] [ 721.178667][T17927] [U] [ 721.178896][T17927] [U] [ 721.178944][T17927] [U] [ 721.178989][T17927] [U] [ 721.179041][T17927] [U] [ 721.179269][T17927] [U] [ 721.179321][T17927] [U] [ 721.179366][T17927] [U] [ 721.179413][T17927] [U] [ 721.189231][T17927] [U] [ 721.189284][T17927] [U] [ 721.189330][T17927] [U] [ 721.189375][T17927] [U] [ 721.191302][T17927] [U] [ 721.191353][T17927] [U] [ 721.191399][T17927] [U] [ 721.191444][T17927] [U] [ 721.199965][T17927] [U] [ 721.200017][T17927] [U] [ 721.200071][T17927] [U] [ 721.200118][T17927] [U] [ 721.200350][T17927] [U] [ 721.200395][T17927] [U] [ 721.200442][T17927] [U] [ 721.200487][T17927] [U] [ 721.200717][T17927] [U] [ 721.200763][T17927] [U] [ 721.200806][T17927] [U] [ 721.200852][T17927] [U] [ 721.214124][T17927] [U] [ 721.214177][T17927] [U] [ 721.214225][T17927] [U] [ 721.214271][T17927] [U] [ 721.214503][T17927] [U] [ 721.214550][T17927] [U] [ 721.214596][T17927] [U] [ 721.214642][T17927] [U] [ 721.214904][T17927] [U] [ 721.214954][T17927] [U] [ 721.215000][T17927] [U] [ 721.215051][T17927] [U] [ 721.220344][T17927] [U] [ 721.220397][T17927] [U] [ 721.220443][T17927] [U] [ 721.220488][T17927] [U] [ 721.220751][T17927] [U] [ 721.220812][T17927] [U] [ 721.220857][T17927] [U] [ 721.220904][T17927] [U] [ 721.221141][T17927] [U] [ 721.221191][T17927] [U] [ 721.221237][T17927] [U] [ 721.221283][T17927] [U] [ 721.235878][T17927] [U] [ 721.235931][T17927] [U] [ 721.235976][T17927] [U] [ 721.236030][T17927] [U] [ 721.236262][T17927] [U] [ 721.236308][T17927] [U] [ 721.236354][T17927] [U] [ 721.236400][T17927] [U] [ 721.236633][T17927] [U] [ 721.236680][T17927] [U] [ 721.236730][T17927] [U] [ 721.236774][T17927] [U] [ 721.242293][T17927] [U] [ 721.242343][T17927] [U] [ 721.242388][T17927] [U] [ 721.242435][T17927] [U] [ 721.242662][T17927] [U] [ 721.242708][T17927] [U] [ 721.242754][T17927] [U] [ 721.242798][T17927] [U] [ 721.243029][T17927] [U] [ 721.243075][T17927] [U] [ 721.243121][T17927] [U] [ 721.243172][T17927] [U] [ 721.253372][T17927] [U] [ 721.253423][T17927] [U] [ 721.253469][T17927] [U] [ 721.253513][T17927] [U] [ 721.255708][T17927] [U] [ 721.255759][T17927] [U] [ 721.255801][T17927] [U] [ 721.255849][T17927] [U] [ 721.256092][T17927] [U] [ 721.256139][T17927] [U] [ 721.256187][T17927] [U] [ 721.256233][T17927] [U] [ 721.256460][T17927] [U] [ 721.256511][T17927] [U] [ 721.256557][T17927] [U] [ 721.256602][T17927] [U] [ 721.266110][T17927] [U] [ 721.266162][T17927] [U] [ 721.266209][T17927] [U] [ 721.266254][T17927] [U] [ 721.266482][T17927] [U] [ 721.266529][T17927] [U] [ 721.266575][T17927] [U] [ 721.266621][T17927] [U] [ 721.266667][T17927] [U] [ 721.277467][T17927] [U] [ 721.277519][T17927] [U] [ 721.277563][T17927] [U] [ 721.277608][T17927] [U] [ 721.277840][T17927] [U] [ 721.277885][T17927] [U] [ 721.277930][T17927] [U] [ 721.277975][T17927] [U] [ 721.278209][T17927] [U] [ 721.278256][T17927] [U] [ 721.278302][T17927] [U] [ 721.278347][T17927] [U] [ 721.292118][T17927] [U] [ 721.292170][T17927] [U] [ 721.292216][T17927] [U] [ 721.292262][T17927] [U] [ 721.294853][T17927] [U] [ 721.294902][T17927] [U] [ 721.294947][T17927] [U] [ 721.294993][T17927] [U] [ 721.295231][T17927] [U] [ 721.295278][T17927] [U] [ 721.295324][T17927] [U] [ 721.295369][T17927] [U] [ 721.295598][T17927] [U] [ 721.295642][T17927] [U] [ 721.295690][T17927] [U] [ 721.295735][T17927] [U] [ 721.302926][T17927] [U] [ 721.302977][T17927] [U] [ 721.303030][T17927] [U] [ 721.303073][T17927] [U] [ 721.303301][T17927] [U] [ 721.303347][T17927] [U] [ 721.303391][T17927] [U] [ 721.303436][T17927] [U] [ 721.303663][T17927] [U] [ 721.303710][T17927] [U] [ 721.303760][T17927] [U] [ 721.303810][T17927] [U] [ 721.312576][T17927] [U] [ 721.312624][T17927] [U] [ 721.312670][T17927] [U] [ 721.312715][T17927] [U] [ 721.312941][T17927] [U] [ 721.312989][T17927] [U] [ 721.313042][T17927] [U] [ 721.313088][T17927] [U] [ 721.313316][T17927] [U] [ 721.313364][T17927] [U] [ 721.313413][T17927] [U] [ 721.313458][T17927] [U] [ 721.325633][T17927] [U] [ 721.325685][T17927] [U] [ 721.325730][T17927] [U] [ 721.325775][T17927] [U] [ 721.325999][T17927] [U] [ 721.326053][T17927] [U] [ 721.326099][T17927] [U] [ 721.326144][T17927] [U] [ 721.326376][T17927] [U] [ 721.326421][T17927] [U] [ 721.326471][T17927] [U] [ 721.326515][T17927] [U] [ 721.333629][T17927] [U] [ 721.333680][T17927] [U] [ 721.333727][T17927] [U] [ 721.333772][T17927] [U] [ 721.334001][T17927] [U] [ 721.334050][T17927] [U] [ 721.334095][T17927] [U] [ 721.334141][T17927] [U] [ 721.334365][T17927] [U] [ 721.334412][T17927] [U] [ 721.334458][T17927] [U] [ 721.334503][T17927] [U] [ 721.351160][T17927] [U] [ 721.351214][T17927] [U] [ 721.351260][T17927] [U] [ 721.351305][T17927] [U] [ 721.351537][T17927] [U] [ 721.351583][T17927] [U] [ 721.351628][T17927] [U] [ 721.351675][T17927] [U] [ 721.351902][T17927] [U] [ 721.351950][T17927] [U] [ 721.351999][T17927] [U] [ 721.352053][T17927] [U] [ 721.356816][T17927] [U] [ 721.356869][T17927] [U] [ 721.356915][T17927] [U] [ 721.356961][T17927] [U] [ 721.359463][T17927] [U] [ 721.359514][T17927] [U] [ 721.359559][T17927] [U] [ 721.359606][T17927] [U] [ 721.359874][T17927] [U] [ 721.359920][T17927] [U] [ 721.359965][T17927] [U] [ 721.360006][T17927] [U] [ 721.360239][T17927] [U] [ 721.360285][T17927] [U] [ 721.360335][T17927] [U] [ 721.360381][T17927] [U] [ 721.371470][T17927] [U] [ 721.371519][T17927] [U] [ 721.371567][T17927] [U] [ 721.371614][T17927] [U] [ 721.371839][T17927] [U] [ 721.371886][T17927] [U] [ 721.371931][T17927] [U] [ 721.371975][T17927] [U] [ 721.372209][T17927] [U] [ 721.372254][T17927] [U] [ 721.372302][T17927] [U] [ 721.372350][T17927] [U] [ 721.379643][T17927] [U] [ 721.379694][T17927] [U] [ 721.379740][T17927] [U] [ 721.379784][T17927] [U] [ 721.384793][T17927] [U] [ 721.384842][T17927] [U] [ 721.384888][T17927] [U] [ 721.384933][T17927] [U] [ 721.385165][T17927] [U] [ 721.385211][T17927] [U] [ 721.385257][T17927] [U] [ 721.385303][T17927] [U] [ 721.385348][T17927] [U] [ 721.385577][T17927] [U] [ 721.385625][T17927] [U] [ 721.385675][T17927] [U] [ 721.385719][T17927] [U] [ 721.395579][T17927] [U] [ 721.395630][T17927] [U] [ 721.395677][T17927] [U] [ 721.395723][T17927] [U] [ 721.395946][T17927] [U] [ 721.395992][T17927] [U] [ 721.396046][T17927] [U] [ 721.396095][T17927] [U] [ 721.396354][T17927] [U] [ 721.396405][T17927] [U] [ 721.396450][T17927] [U] [ 721.396493][T17927] [U] [ 721.413912][T17927] [U] [ 721.413967][T17927] [U] [ 721.414018][T17927] [U] [ 721.414064][T17927] [U] [ 721.414293][T17927] [U] [ 721.414338][T17927] [U] [ 721.414384][T17927] [U] [ 721.414430][T17927] [U] [ 721.414662][T17927] [U] [ 721.414706][T17927] [U] [ 721.414755][T17927] [U] [ 721.414801][T17927] [U] [ 721.421842][T17927] [U] [ 721.421895][T17927] [U] [ 721.421943][T17927] [U] [ 721.421990][T17927] [U] [ 721.422226][T17927] [U] [ 721.422272][T17927] [U] [ 721.422317][T17927] [U] [ 721.422363][T17927] [U] [ 721.422593][T17927] [U] [ 721.422635][T17927] [U] [ 721.422682][T17927] [U] [ 721.422727][T17927] [U] [ 721.429397][T17927] [U] [ 721.429447][T17927] [U] [ 721.429493][T17927] [U] [ 721.429538][T17927] [U] [ 721.429774][T17927] [U] [ 721.429825][T17927] [U] [ 721.429867][T17927] [U] [ 721.429911][T17927] [U] [ 721.445076][T17927] [U] [ 721.445128][T17927] [U] [ 721.445174][T17927] [U] [ 721.445220][T17927] [U] [ 721.445450][T17927] [U] [ 721.445495][T17927] [U] [ 721.445541][T17927] [U] [ 721.445587][T17927] [U] [ 721.445824][T17927] [U] [ 721.445870][T17927] [U] [ 721.445917][T17927] [U] [ 721.445962][T17927] [U] [ 721.450141][T17927] [U] [ 721.450192][T17927] [U] [ 721.450238][T17927] [U] [ 721.450281][T17927] [U] [ 721.450516][T17927] [U] [ 721.450558][T17927] [U] [ 721.450604][T17927] [U] [ 721.450650][T17927] [U] [ 721.450913][T17927] [U] [ 721.450961][T17927] [U] [ 721.451010][T17927] [U] [ 721.451051][T17927] [U] [ 721.457029][T17927] [U] [ 721.457079][T17927] [U] [ 721.457126][T17927] [U] [ 721.457170][T17927] [U] [ 721.457392][T17927] [U] [ 721.457437][T17927] [U] [ 721.457483][T17927] [U] [ 721.457527][T17927] [U] [ 721.457755][T17927] [U] [ 721.457807][T17927] [U] [ 721.457854][T17927] [U] [ 721.457903][T17927] [U] [ 721.467642][T17927] [U] [ 721.467692][T17927] [U] [ 721.467739][T17927] [U] [ 721.467783][T17927] [U] [ 721.468019][T17927] [U] [ 721.468065][T17927] [U] [ 721.468111][T17927] [U] [ 721.468157][T17927] [U] [ 721.468385][T17927] [U] [ 721.468431][T17927] [U] [ 721.468477][T17927] [U] [ 721.468526][T17927] [U] [ 721.476188][T17927] [U] [ 721.476239][T17927] [U] [ 721.476284][T17927] [U] [ 721.476328][T17927] [U] [ 721.476554][T17927] [U] [ 721.476597][T17927] [U] [ 721.476642][T17927] [U] [ 721.476688][T17927] [U] [ 721.476920][T17927] [U] [ 721.476961][T17927] [U] [ 721.477003][T17927] [U] [ 721.477052][T17927] [U] [ 721.483957][T17927] [U] [ 721.484008][T17927] [U] [ 721.484053][T17927] [U] [ 721.484098][T17927] [U] [ 721.484324][T17927] [U] [ 721.484371][T17927] [U] [ 721.484416][T17927] [U] [ 721.484460][T17927] [U] [ 721.491246][T17927] [U] [ 721.491298][T17927] [U] [ 721.491345][T17927] [U] [ 721.491389][T17927] [U] [ 721.491613][T17927] [U] [ 721.491659][T17927] [U] [ 721.491705][T17927] [U] [ 721.491756][T17927] [U] [ 721.491983][T17927] [U] [ 721.492027][T17927] [U] [ 721.492072][T17927] [U] [ 721.492121][T17927] [U] [ 721.492166][T17927] [U] [ 721.501304][T17927] [U] [ 721.501356][T17927] [U] [ 721.501403][T17927] [U] [ 721.501448][T17927] [U] [ 721.501677][T17927] [U] [ 721.501724][T17927] [U] [ 721.501776][T17927] [U] [ 721.501822][T17927] [U] [ 721.502049][T17927] [U] [ 721.502098][T17927] [U] [ 721.502142][T17927] [U] [ 721.502187][T17927] [U] [ 721.511128][T17927] [U] [ 721.511178][T17927] [U] [ 721.511227][T17927] [U] [ 721.511275][T17927] [U] [ 721.513396][T17927] [U] [ 721.513444][T17927] [U] [ 721.513490][T17927] [U] [ 721.513535][T17927] [U] [ 721.513773][T17927] [U] [ 721.513818][T17927] [U] [ 721.513863][T17927] [U] [ 721.513908][T17927] [U] [ 721.514135][T17927] [U] [ 721.514181][T17927] [U] [ 721.514230][T17927] [U] [ 721.514274][T17927] [U] [ 721.522810][T17927] [U] [ 721.522860][T17927] [U] [ 721.522907][T17927] [U] [ 721.522953][T17927] [U] [ 721.523179][T17927] [U] [ 721.523224][T17927] [U] [ 721.523268][T17927] [U] [ 721.523311][T17927] [U] [ 721.523541][T17927] [U] [ 721.523586][T17927] [U] [ 721.523633][T17927] [U] [ 721.523680][T17927] [U] [ 721.533073][T17927] [U] [ 721.533125][T17927] [U] [ 721.533170][T17927] [U] [ 721.533216][T17927] [U] [ 721.533442][T17927] [U] [ 721.533487][T17927] [U] [ 721.533532][T17927] [U] [ 721.533578][T17927] [U] [ 721.533815][T17927] [U] [ 721.533860][T17927] [U] [ 721.533909][T17927] [U] [ 721.533954][T17927] [U] [ 721.544626][T17927] [U] [ 721.544677][T17927] [U] [ 721.544724][T17927] [U] [ 721.544780][T17927] [U] [ 721.545007][T17927] [U] [ 721.545053][T17927] [U] [ 721.545098][T17927] [U] [ 721.545144][T17927] [U] [ 721.545372][T17927] [U] [ 721.545418][T17927] [U] [ 721.545468][T17927] [U] [ 721.545515][T17927] [U] [ 721.560029][T17927] [U] [ 721.560080][T17927] [U] [ 721.560124][T17927] [U] [ 721.560166][T17927] [U] [ 721.560664][T17927] [U] [ 721.560712][T17927] [U] [ 721.560769][T17927] [U] [ 721.560816][T17927] [U] [ 721.561105][T17927] [U] [ 721.561151][T17927] [U] [ 721.561198][T17927] [U] [ 721.561244][T17927] [U] [ 721.561470][T17927] [U] [ 721.561518][T17927] [U] [ 721.561566][T17927] [U] [ 721.561616][T17927] [U] [ 721.561860][T17927] [U] [ 721.561906][T17927] [U] [ 721.561951][T17927] [U] [ 721.561996][T17927] [U] [ 721.572728][T17927] [U] [ 721.572792][T17927] [U] [ 721.572836][T17927] [U] [ 721.572882][T17927] [U] [ 721.573977][T17927] [U] [ 721.574023][T17927] [U] [ 721.574068][T17927] [U] [ 721.574113][T17927] [U] [ 721.574338][T17927] [U] [ 721.574383][T17927] [U] [ 721.574430][T17927] [U] [ 721.574473][T17927] [U] [ 721.574701][T17927] [U] [ 721.574754][T17927] [U] [ 721.574803][T17927] [U] [ 721.574852][T17927] [U] [ 721.586471][T17927] [U] [ 721.586522][T17927] [U] [ 721.586569][T17927] [U] [ 721.586614][T17927] [U] [ 721.586851][T17927] [U] [ 721.586897][T17927] [U] [ 721.586942][T17927] [U] [ 721.586988][T17927] [U] [ 721.587217][T17927] [U] [ 721.587262][T17927] [U] [ 721.587311][T17927] [U] [ 721.587357][T17927] [U] [ 721.590187][T17927] [U] [ 721.590231][T17927] [U] [ 721.590277][T17927] [U] [ 721.590321][T17927] [U] [ 721.590548][T17927] [U] [ 721.590595][T17927] [U] [ 721.590641][T17927] [U] [ 721.590685][T17927] [U] [ 721.590916][T17927] [U] [ 721.590961][T17927] [U] [ 721.591005][T17927] [U] [ 721.591054][T17927] [U] [ 721.591097][T17927] [U] [ 721.606619][T17927] [U] [ 721.606673][T17927] [U] [ 721.606719][T17927] [U] [ 721.606775][T17927] [U] [ 721.607001][T17927] [U] [ 721.607044][T17927] [U] [ 721.607090][T17927] [U] [ 721.607136][T17927] [U] [ 721.607363][T17927] [U] [ 721.607409][T17927] [U] [ 721.607459][T17927] [U] [ 721.607505][T17927] [U] [ 721.619071][T17927] [U] [ 721.619122][T17927] [U] [ 721.619169][T17927] [U] [ 721.619215][T17927] [U] [ 721.619439][T17927] [U] [ 721.619488][T17927] [U] [ 721.619533][T17927] [U] [ 721.619578][T17927] [U] [ 721.619812][T17927] [U] [ 721.619858][T17927] [U] [ 721.619905][T17927] [U] [ 721.619952][T17927] [U] [ 721.638010][T17927] [U] [ 721.638065][T17927] [U] [ 721.638109][T17927] [U] [ 721.638153][T17927] [U] [ 721.638379][T17927] [U] [ 721.638426][T17927] [U] [ 721.638471][T17927] [U] [ 721.638516][T17927] [U] [ 721.638768][T17927] [U] [ 721.638815][T17927] [U] [ 721.638862][T17927] [U] [ 721.638907][T17927] [U] [ 721.639133][T17927] [U] [ 721.639178][T17927] [U] [ 721.639224][T17927] [U] [ 721.639270][T17927] [U] [ 721.639493][T17927] [U] [ 721.639539][T17927] [U] [ 721.639584][T17927] [U] [ 721.639628][T17927] [U] [ 721.639863][T17927] [U] [ 721.639911][T17927] [U] [ 721.639951][T17927] [U] [ 721.639991][T17927] [U] [ 721.700189][T17927] [U] [ 721.700241][T17927] [U] [ 721.700288][T17927] [U] [ 721.700334][T17927] [U] [ 721.700561][T17927] [U] [ 721.700608][T17927] [U] [ 721.700654][T17927] [U] [ 721.700700][T17927] [U] [ 721.700940][T17927] [U] [ 721.700986][T17927] [U] [ 721.701032][T17927] [U] [ 721.701077][T17927] [U] [ 721.701307][T17927] [U] [ 721.701355][T17927] [U] [ 721.701398][T17927] [U] [ 721.701444][T17927] [U] [ 721.701669][T17927] [U] [ 721.701716][T17927] [U] [ 721.701771][T17927] [U] [ 721.701815][T17927] [U] [ 721.702014][T17927] [U] [ 721.702060][T17927] [U] [ 721.702107][T17927] [U] [ 721.702153][T17927] [U] [ 721.702377][T17927] [U] [ 721.702423][T17927] [U] [ 721.702469][T17927] [U] [ 721.702515][T17927] [U] [ 721.702748][T17927] [U] [ 721.702794][T17927] [U] [ 721.702839][T17927] [U] [ 721.702885][T17927] [U] [ 721.703109][T17927] [U] [ 721.703155][T17927] [U] [ 721.703199][T17927] [U] [ 721.703245][T17927] [U] [ 721.703470][T17927] [U] [ 721.703515][T17927] [U] [ 721.703561][T17927] [U] [ 721.703605][T17927] [U] [ 721.703843][T17927] [U] [ 721.703889][T17927] [U] [ 721.703934][T17927] [U] [ 721.703977][T17927] [U] [ 721.704203][T17927] [U] [ 721.704249][T17927] [U] [ 721.704294][T17927] [U] [ 721.704339][T17927] [U] [ 721.704568][T17927] [U] [ 721.704613][T17927] [U] [ 721.704659][T17927] [U] [ 721.704704][T17927] [U] [ 721.704941][T17927] [U] [ 721.704986][T17927] [U] [ 721.705031][T17927] [U] [ 721.705076][T17927] [U] [ 721.705304][T17927] [U] [ 721.705350][T17927] [U] [ 721.705395][T17927] [U] [ 721.705440][T17927] [U] [ 721.705671][T17927] [U] [ 721.705717][T17927] [U] [ 721.705768][T17927] [U] [ 721.705814][T17927] [U] [ 721.706086][T17927] [U] [ 721.706133][T17927] [U] [ 721.706179][T17927] [U] [ 721.706224][T17927] [U] [ 721.706454][T17927] [U] [ 721.706501][T17927] [U] [ 721.706546][T17927] [U] [ 721.706592][T17927] [U] [ 721.706823][T17927] [U] [ 721.706866][T17927] [U] [ 721.706907][T17927] [U] [ 721.706953][T17927] [U] [ 721.707176][T17927] [U] [ 721.707222][T17927] [U] [ 721.707268][T17927] [U] [ 721.707313][T17927] [U] [ 721.707358][T17927] [U] [ 721.707580][T17927] [U] [ 721.707625][T17927] [U] [ 721.707671][T17927] [U] [ 721.707715][T17927] [U] [ 721.707941][T17927] [U] [ 721.707985][T17927] [U] [ 721.708031][T17927] [U] [ 721.708076][T17927] [U] [ 721.708301][T17927] [U] [ 721.708347][T17927] [U] [ 721.708392][T17927] [U] [ 721.708438][T17927] [U] [ 721.708664][T17927] [U] [ 721.708709][T17927] [U] [ 721.708760][T17927] [U] [ 721.708805][T17927] [U] [ 721.709031][T17927] [U] [ 721.709077][T17927] [U] [ 721.709121][T17927] [U] [ 721.709167][T17927] [U] [ 721.709391][T17927] [U] [ 721.709436][T17927] [U] [ 721.709482][T17927] [U] [ 721.709528][T17927] [U] [ 721.709758][T17927] [U] [ 721.709804][T17927] [U] [ 721.709850][T17927] [U] [ 721.709896][T17927] [U] [ 721.770251][T17927] [U] [ 721.770301][T17927] [U] [ 721.770346][T17927] [U] [ 721.770391][T17927] [U] [ 721.770615][T17927] [U] [ 721.770658][T17927] [U] [ 721.770703][T17927] [U] [ 721.770752][T17927] [U] [ 721.770971][T17927] [U] [ 721.771017][T17927] [U] [ 721.771063][T17927] [U] [ 721.771108][T17927] [U] [ 721.771371][T17927] [U] [ 721.771418][T17927] [U] [ 721.771463][T17927] [U] [ 721.771509][T17927] [U] [ 721.771744][T17927] [U] [ 721.771791][T17927] [U] [ 721.771836][T17927] [U] [ 721.771881][T17927] [U] [ 721.772109][T17927] [U] [ 721.772156][T17927] [U] [ 721.772201][T17927] [U] [ 721.772246][T17927] [U] [ 721.772482][T17927] [U] [ 721.772527][T17927] [U] [ 721.772573][T17927] [U] [ 721.772618][T17927] [U] [ 721.772855][T17927] [U] [ 721.772901][T17927] [U] [ 721.772946][T17927] [U] [ 721.772991][T17927] [U] [ 721.773211][T17927] [U] [ 721.773256][T17927] [U] [ 721.773300][T17927] [U] [ 721.773345][T17927] [U] [ 721.773555][T17927] [U] [ 721.773602][T17927] [U] [ 721.773646][T17927] [U] [ 721.773690][T17927] [U] [ 721.773925][T17927] [U] [ 721.773969][T17927] [U] [ 721.774015][T17927] [U] [ 721.774059][T17927] [U] [ 721.774285][T17927] [U] [ 721.774332][T17927] [U] [ 721.774377][T17927] [U] [ 721.774423][T17927] [U] [ 721.774650][T17927] [U] [ 721.774695][T17927] [U] [ 721.774747][T17927] [U] [ 721.774796][T17927] [U] [ 721.775019][T17927] [U] [ 721.775063][T17927] [U] [ 721.775109][T17927] [U] [ 721.775154][T17927] [U] [ 721.775382][T17927] [U] [ 721.775428][T17927] [U] [ 721.775476][T17927] [U] [ 721.775519][T17927] [U] [ 721.775751][T17927] [U] [ 721.775798][T17927] [U] [ 721.775845][T17927] [U] [ 721.775889][T17927] [U] [ 721.776118][T17927] [U] [ 721.776164][T17927] [U] [ 721.776211][T17927] [U] [ 721.776256][T17927] [U] [ 721.776482][T17927] [U] [ 721.776529][T17927] [U] [ 721.776574][T17927] [U] [ 721.776619][T17927] [U] [ 721.776854][T17927] [U] [ 721.776899][T17927] [U] [ 721.776946][T17927] [U] [ 721.776989][T17927] [U] [ 721.777216][T17927] [U] [ 721.777264][T17927] [U] [ 721.777310][T17927] [U] [ 721.777356][T17927] [U] [ 721.777585][T17927] [U] [ 721.777632][T17927] [U] [ 721.777677][T17927] [U] [ 721.777728][T17927] [U] [ 721.777956][T17927] [U] [ 721.778001][T17927] [U] [ 721.778046][T17927] [U] [ 721.778092][T17927] [U] [ 721.778317][T17927] [U] [ 721.778364][T17927] [U] [ 721.778409][T17927] [U] [ 721.778455][T17927] [U] [ 721.778705][T17927] [U] [ 721.778754][T17927] [U] [ 721.778801][T17927] [U] [ 721.778848][T17927] [U] [ 721.779074][T17927] [U] [ 721.779121][T17927] [U] [ 721.779168][T17927] [U] [ 721.779213][T17927] [U] [ 721.779258][T17927] [U] [ 721.779492][T17927] [U] [ 721.779538][T17927] [U] [ 721.779587][T17927] [U] [ 721.779631][T17927] [U] [ 721.779886][T17927] [U] [ 721.779931][T17927] [U] [ 721.779979][T17927] [U] [ 721.780020][T17927] [U] [ 721.847388][T17927] [U] [ 721.847441][T17927] [U] [ 721.847487][T17927] [U] [ 721.847534][T17927] [U] [ 721.847771][T17927] [U] [ 721.847817][T17927] [U] [ 721.847863][T17927] [U] [ 721.847909][T17927] [U] [ 721.848133][T17927] [U] [ 721.848179][T17927] [U] [ 721.848224][T17927] [U] [ 721.848271][T17927] [U] [ 721.848529][T17927] [U] [ 721.848576][T17927] [U] [ 721.848620][T17927] [U] [ 721.848666][T17927] [U] [ 721.848904][T17927] [U] [ 721.848950][T17927] [U] [ 721.848996][T17927] [U] [ 721.849040][T17927] [U] [ 721.849269][T17927] [U] [ 721.849316][T17927] [U] [ 721.849359][T17927] [U] [ 721.849405][T17927] [U] [ 721.849632][T17927] [U] [ 721.849679][T17927] [U] [ 721.849735][T17927] [U] [ 721.849780][T17927] [U] [ 721.850015][T17927] [U] [ 721.850057][T17927] [U] [ 721.850103][T17927] [U] [ 721.850147][T17927] [U] [ 721.868446][T17927] [U] [ 721.868499][T17927] [U] [ 721.868545][T17927] [U] [ 721.868587][T17927] [U] [ 721.868825][T17927] [U] [ 721.868872][T17927] [U] [ 721.868917][T17927] [U] [ 721.868961][T17927] [U] [ 721.869184][T17927] [U] [ 721.869231][T17927] [U] [ 721.869277][T17927] [U] [ 721.869321][T17927] [U] [ 721.869551][T17927] [U] [ 721.869596][T17927] [U] [ 721.869640][T17927] [U] [ 721.869686][T17927] [U] [ 721.869923][T17927] [U] [ 721.869968][T17927] [U] [ 721.870017][T17927] [U] [ 721.870058][T17927] [U] [ 721.898275][T17927] [U] [ 722.862423][T17960] FAULT_INJECTION: forcing a failure. [ 722.862423][T17960] name failslab, interval 1, probability 0, space 0, times 0 [ 722.862499][T17960] CPU: 1 UID: 0 PID: 17960 Comm: syz.3.2504 Tainted: G U L syzkaller #0 PREEMPT(full) [ 722.862546][T17960] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 722.862557][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.862574][T17960] Call Trace: [ 722.862583][T17960] [ 722.862595][T17960] dump_stack_lvl+0x100/0x190 [ 722.862645][T17960] should_fail_ex.cold+0x5/0xa [ 722.862680][T17960] should_failslab+0xc2/0x120 [ 722.862727][T17960] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 722.862767][T17960] ? skb_clone+0x190/0x400 [ 722.862807][T17960] skb_clone+0x190/0x400 [ 722.862850][T17960] dev_queue_xmit_nit+0x255/0xa60 [ 722.862898][T17960] dev_hard_start_xmit+0x2f5/0x7d0 [ 722.862949][T17960] __dev_queue_xmit+0x6dd/0x4750 [ 722.863007][T17960] ? __pfx___dev_queue_xmit+0x10/0x10 [ 722.863071][T17960] ? rcu_is_watching+0x12/0xc0 [ 722.863116][T17960] ? __asan_memcpy+0x3c/0x60 [ 722.863154][T17960] ? __asan_memcpy+0x3c/0x60 [ 722.863191][T17960] ? __skb_clone+0x570/0x760 [ 722.863246][T17960] netlink_deliver_tap+0xa4d/0xcc0 [ 722.863288][T17960] netlink_unicast+0x70c/0x870 [ 722.863328][T17960] ? __pfx_netlink_unicast+0x10/0x10 [ 722.863363][T17960] ? __alloc_skb+0x5b7/0x710 [ 722.863391][T17960] ? genl_rcv_msg+0x4be/0x800 [ 722.863441][T17960] netlink_ack+0x655/0xb80 [ 722.863488][T17960] netlink_rcv_skb+0x333/0x420 [ 722.863522][T17960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 722.863564][T17960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 722.863615][T17960] ? netlink_deliver_tap+0x1ae/0xcc0 [ 722.863655][T17960] genl_rcv+0x28/0x40 [ 722.863690][T17960] netlink_unicast+0x5aa/0x870 [ 722.863733][T17960] ? __pfx_netlink_unicast+0x10/0x10 [ 722.863784][T17960] netlink_sendmsg+0x8b0/0xda0 [ 722.863833][T17960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.863875][T17960] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 722.863919][T17960] __sys_sendto+0x4aa/0x520 [ 722.863949][T17960] ? __pfx___sys_sendto+0x10/0x10 [ 722.863992][T17960] ? fd_install+0x223/0x580 [ 722.864048][T17960] ? __pfx___sys_socket+0x10/0x10 [ 722.864100][T17960] __x64_sys_sendto+0xe0/0x1c0 [ 722.864128][T17960] ? do_syscall_64+0x95/0xf80 [ 722.864158][T17960] ? lockdep_hardirqs_on+0x78/0x100 [ 722.864188][T17960] do_syscall_64+0x106/0xf80 [ 722.864218][T17960] ? clear_bhb_loop+0x40/0x90 [ 722.864255][T17960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.864287][T17960] RIP: 0033:0x7f6af1d5cece [ 722.864312][T17960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 722.864342][T17960] RSP: 002b:00007f6af2c90e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 722.864371][T17960] RAX: ffffffffffffffda RBX: 00007f6af2c926c0 RCX: 00007f6af1d5cece [ 722.864391][T17960] RDX: 0000000000000028 RSI: 00007f6af2c91000 RDI: 000000000000000a [ 722.864410][T17960] RBP: 0000000000000000 R08: 00007f6af2c90f04 R09: 000000000000000c [ 722.864429][T17960] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 722.864446][T17960] R13: 00007f6af2c90f58 R14: 00007f6af2c91000 R15: 0000000000000000 [ 722.864485][T17960] [ 724.665570][T17969] FAULT_INJECTION: forcing a failure. [ 724.665570][T17969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.665622][T17969] CPU: 0 UID: 0 PID: 17969 Comm: syz.3.2505 Tainted: G U L syzkaller #0 PREEMPT(full) [ 724.665668][T17969] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 724.665681][T17969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 724.665699][T17969] Call Trace: [ 724.665709][T17969] [ 724.665720][T17969] dump_stack_lvl+0x100/0x190 [ 724.665768][T17969] should_fail_ex.cold+0x5/0xa [ 724.665803][T17969] _copy_to_iter+0x1f3/0x1720 [ 724.665852][T17969] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 724.665899][T17969] ? __pfx__copy_to_iter+0x10/0x10 [ 724.665946][T17969] ? __skb_recv_datagram+0x1b2/0x220 [ 724.666000][T17969] simple_copy_to_iter+0x46/0x90 [ 724.666042][T17969] __skb_datagram_iter+0x129/0x900 [ 724.666084][T17969] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 724.666133][T17969] ? skb_recv_datagram+0x88/0xc0 [ 724.666182][T17969] skb_copy_datagram_iter+0xa1/0x270 [ 724.666231][T17969] netlink_recvmsg+0x27e/0xa90 [ 724.666268][T17969] ? __pfx_netlink_recvmsg+0x10/0x10 [ 724.666295][T17969] ? __fget_files+0x215/0x3d0 [ 724.666334][T17969] ? __fget_files+0x215/0x3d0 [ 724.666382][T17969] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 724.666435][T17969] sock_recvmsg+0x1f9/0x250 [ 724.666477][T17969] __sys_recvfrom+0x200/0x300 [ 724.666510][T17969] ? __pfx___sys_recvfrom+0x10/0x10 [ 724.666551][T17969] ? fd_install+0x223/0x580 [ 724.666606][T17969] ? __pfx___sys_socket+0x10/0x10 [ 724.666657][T17969] __x64_sys_recvfrom+0xe0/0x1c0 [ 724.666687][T17969] ? do_syscall_64+0x95/0xf80 [ 724.666719][T17969] ? lockdep_hardirqs_on+0x78/0x100 [ 724.666751][T17969] do_syscall_64+0x106/0xf80 [ 724.666781][T17969] ? clear_bhb_loop+0x40/0x90 [ 724.666817][T17969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.666847][T17969] RIP: 0033:0x7f6af1d5cece [ 724.666872][T17969] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 724.666900][T17969] RSP: 002b:00007f6af2c90ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 724.666928][T17969] RAX: ffffffffffffffda RBX: 00007f6af2c926c0 RCX: 00007f6af1d5cece [ 724.666949][T17969] RDX: 0000000000001000 RSI: 00007f6af2c91000 RDI: 000000000000000a [ 724.666968][T17969] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 724.666985][T17969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 724.667002][T17969] R13: 00007f6af2c90fb0 R14: 0000000000000013 R15: 0000000000000000 [ 724.667040][T17969] [ 725.213483][T17973] FAULT_INJECTION: forcing a failure. [ 725.213483][T17973] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 725.213547][T17973] CPU: 1 UID: 0 PID: 17973 Comm: syz.0.2506 Tainted: G U L syzkaller #0 PREEMPT(full) [ 725.213592][T17973] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 725.213611][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.213628][T17973] Call Trace: [ 725.213638][T17973] [ 725.213649][T17973] dump_stack_lvl+0x100/0x190 [ 725.213697][T17973] should_fail_ex.cold+0x5/0xa [ 725.213725][T17973] ? prepare_alloc_pages+0x16d/0x5f0 [ 725.213761][T17973] should_fail_alloc_page+0xeb/0x140 [ 725.213810][T17973] prepare_alloc_pages+0x1f0/0x5f0 [ 725.213839][T17973] ? kernel_text_address+0x8d/0x100 [ 725.213886][T17973] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 725.213930][T17973] ? __lock_acquire+0x4a5/0x2630 [ 725.213968][T17973] ? __lock_acquire+0x4a5/0x2630 [ 725.214011][T17973] ? __lock_acquire+0x4a5/0x2630 [ 725.214048][T17973] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 725.214093][T17973] ? __lock_acquire+0x4a5/0x2630 [ 725.214149][T17973] ? find_held_lock+0x2b/0x80 [ 725.214192][T17973] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 725.214239][T17973] ? policy_nodemask+0xed/0x4f0 [ 725.214288][T17973] alloc_pages_mpol+0x1fb/0x550 [ 725.214337][T17973] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 725.214384][T17973] ? arch_stack_walk+0xa6/0xf0 [ 725.214418][T17973] ? wiphy_new_nm+0x701/0x21a0 [ 725.214449][T17973] ___kmalloc_large_node+0x104/0x150 [ 725.214484][T17973] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 725.214522][T17973] __kmalloc_large_node_noprof+0x1c/0x70 [ 725.214556][T17973] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 725.214601][T17973] __kmalloc_noprof+0x5be/0x850 [ 725.214649][T17973] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 725.214689][T17973] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 725.214729][T17973] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 725.214761][T17973] wiphy_new_nm+0x701/0x21a0 [ 725.214797][T17973] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 725.214835][T17973] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 725.214872][T17973] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 725.214904][T17973] ieee80211_alloc_hw_nm+0x1ac7/0x22a0 [ 725.214939][T17973] ? __local_bh_enable_ip+0x9e/0x120 [ 725.214974][T17973] mac80211_hwsim_new_radio+0x1e1/0x57d0 [ 725.215030][T17973] ? __asan_memset+0x23/0x50 [ 725.215067][T17973] ? __nla_validate_parse+0x1e7/0x28b0 [ 725.215104][T17973] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 725.215154][T17973] hwsim_new_radio_nl+0xc1f/0x1340 [ 725.215197][T17973] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 725.215245][T17973] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 725.215288][T17973] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 725.215336][T17973] genl_family_rcv_msg_doit+0x214/0x300 [ 725.215380][T17973] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 725.215420][T17973] ? genl_get_cmd+0x3ef/0x720 [ 725.215466][T17973] ? bpf_lsm_capable+0x9/0x10 [ 725.215492][T17973] ? security_capable+0x80/0x260 [ 725.215529][T17973] ? ns_capable+0xd2/0xf0 [ 725.215559][T17973] genl_rcv_msg+0x560/0x800 [ 725.215612][T17973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 725.215652][T17973] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 725.215704][T17973] netlink_rcv_skb+0x159/0x420 [ 725.215740][T17973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 725.215780][T17973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 725.215831][T17973] ? netlink_deliver_tap+0x1ae/0xcc0 [ 725.215870][T17973] genl_rcv+0x28/0x40 [ 725.215904][T17973] netlink_unicast+0x5aa/0x870 [ 725.215945][T17973] ? __pfx_netlink_unicast+0x10/0x10 [ 725.215995][T17973] netlink_sendmsg+0x8b0/0xda0 [ 725.216037][T17973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.216069][T17973] ? __import_iovec+0x1d2/0x640 [ 725.216118][T17973] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 725.216162][T17973] ____sys_sendmsg+0xa54/0xc30 [ 725.216207][T17973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.216253][T17973] ? try_to_wake_up+0x644/0x1a80 [ 725.216309][T17973] ___sys_sendmsg+0x190/0x1e0 [ 725.216352][T17973] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.216392][T17973] ? futex_private_hash_put+0x107/0x1c0 [ 725.216469][T17973] __sys_sendmsg+0x170/0x220 [ 725.216503][T17973] ? __pfx___sys_sendmsg+0x10/0x10 [ 725.216540][T17973] ? __x64_sys_futex+0x34f/0x4d0 [ 725.216609][T17973] do_syscall_64+0x106/0xf80 [ 725.216641][T17973] ? clear_bhb_loop+0x40/0x90 [ 725.216679][T17973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.216709][T17973] RIP: 0033:0x7f294359c629 [ 725.216735][T17973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.216765][T17973] RSP: 002b:00007f29417f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.216792][T17973] RAX: ffffffffffffffda RBX: 00007f2943815fa0 RCX: 00007f294359c629 [ 725.216813][T17973] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 725.216832][T17973] RBP: 00007f2943632b39 R08: 0000000000000000 R09: 0000000000000000 [ 725.216850][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.216867][T17973] R13: 00007f2943816038 R14: 00007f2943815fa0 R15: 00007fff08b08b28 [ 725.216908][T17973] [ 731.114834][T18000] futex_wake_op: syz.0.2511 tries to shift op by -2048; fix this program [ 731.115017][T18000] futex_wake_op: syz.0.2511 tries to shift op by -2048; fix this program [ 731.116408][T18000] 0x000000000001-0x000000020000 : "" [ 731.191023][T18000] ftl_cs: FTL header corrupt! [ 736.658489][ T9760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 736.660334][ T9760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 736.661225][ T9760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 736.670646][ T9760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 736.671358][ T9760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.328631][T18006] chnl_net:caif_netlink_parms(): no params data found [ 737.611111][T18006] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.611291][T18006] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.611448][T18006] bridge_slave_0: entered allmulticast mode [ 737.613362][T18006] bridge_slave_0: entered promiscuous mode [ 737.631649][T18006] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.638397][T18006] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.638600][T18006] bridge_slave_1: entered allmulticast mode [ 737.640584][T18006] bridge_slave_1: entered promiscuous mode [ 737.739164][ T9780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 737.747341][T18006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.868809][ T9780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 737.878450][T18006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.884696][ T9780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 737.918133][T18006] team0: Port device team_slave_0 added [ 737.921930][ T9780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 737.942955][T18006] team0: Port device team_slave_1 added [ 737.950362][ T9780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 737.985438][T18006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.604773][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.688528][ T9760] Bluetooth: hci3: command tx timeout [ 738.711808][T18006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.951636][T18006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.020205][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.128706][T18006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.600101][T12171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.697958][T18006] hsr_slave_0: entered promiscuous mode [ 739.714925][T18006] hsr_slave_1: entered promiscuous mode [ 739.730139][T18006] debugfs: 'hsr0' already exists in 'hsr' [ 739.746114][T18006] Cannot create hsr debugfs directory [ 739.861211][T12171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.016489][T12171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.030785][T18038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2520'. [ 740.226476][T12171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.299502][ T9760] Bluetooth: hci5: command tx timeout [ 740.411833][T18044] validate_nla: 24 callbacks suppressed [ 740.411859][T18044] netlink: 'syz.0.2521': attribute type 7 has an invalid length. [ 740.445921][T18044] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2521'. [ 740.771660][ T9760] Bluetooth: hci3: command tx timeout [ 740.807881][T18018] chnl_net:caif_netlink_parms(): no params data found [ 740.849091][T12171] bridge_slave_1: left allmulticast mode [ 740.855509][T12171] bridge_slave_1: left promiscuous mode [ 740.868218][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.892605][T12171] bridge_slave_0: left allmulticast mode [ 740.898521][T12171] bridge_slave_0: left promiscuous mode [ 740.906103][T12171] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.208973][T12171] tunl0 (unregistering): left allmulticast mode [ 741.300499][T12171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.339411][T12171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.364883][T12171] bond0 (unregistering): Released all slaves [ 741.501097][T12171] ovs_: left promiscuous mode [ 741.635097][T12171] HfR: left promiscuous mode [ 741.790126][T18006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 741.840523][T18006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 741.953343][T18006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 741.998905][T18006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 742.043976][T18063] netlink: 'syz.0.2524': attribute type 7 has an invalid length. [ 742.068069][T18063] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2524'. [ 742.115295][T18018] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.140435][T18018] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.147799][T18018] bridge_slave_0: entered allmulticast mode [ 742.164276][T18018] bridge_slave_0: entered promiscuous mode [ 742.213701][T18018] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.258531][T18018] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.295004][T18018] bridge_slave_1: entered allmulticast mode [ 742.319950][T18018] bridge_slave_1: entered promiscuous mode [ 742.375925][ T9760] Bluetooth: hci5: command tx timeout [ 742.479072][T18018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.553375][T18018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.575813][T18085] random: crng reseeded on system resumption [ 742.639242][T12171] hsr_slave_0: left promiscuous mode [ 742.651811][T12171] hsr_slave_1: left promiscuous mode [ 742.662610][T12171] veth1_macvtap: left promiscuous mode [ 742.668157][T12171] veth0_macvtap: left promiscuous mode [ 742.851026][ T9760] Bluetooth: hci3: command tx timeout [ 742.871834][T12171] team0 (unregistering): Port device team_slave_1 removed [ 742.886866][T12171] team0 (unregistering): Port device team_slave_0 removed [ 743.005750][T18018] team0: Port device team_slave_0 added [ 743.016026][T18018] team0: Port device team_slave_1 added [ 743.097882][T18018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.105387][T18018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.144808][T18018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.196951][T18018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.204552][T18018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.231884][T18018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.561388][T18018] hsr_slave_0: entered promiscuous mode [ 743.582512][T18018] hsr_slave_1: entered promiscuous mode [ 743.631710][T18018] debugfs: 'hsr0' already exists in 'hsr' [ 743.637492][T18018] Cannot create hsr debugfs directory [ 743.704728][T18006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.971662][T18006] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.250289][T12171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.280052][T18114] FAULT_INJECTION: forcing a failure. [ 744.280052][T18114] name fail_futex, interval 1, probability 0, space 0, times 0 [ 744.293666][T18114] CPU: 1 UID: 0 PID: 18114 Comm: syz.0.2530 Tainted: G U L syzkaller #0 PREEMPT(full) [ 744.293714][T18114] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 744.293725][T18114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.293739][T18114] Call Trace: [ 744.293748][T18114] [ 744.293758][T18114] dump_stack_lvl+0x100/0x190 [ 744.293807][T18114] should_fail_ex.cold+0x5/0xa [ 744.293834][T18114] get_futex_key+0x1d2/0x1620 [ 744.293867][T18114] ? __pfx_get_futex_key+0x10/0x10 [ 744.293909][T18114] futex_wake+0xea/0x530 [ 744.293945][T18114] ? __pfx_futex_wake+0x10/0x10 [ 744.293982][T18114] ? do_vfs_ioctl+0x226/0x13e0 [ 744.294020][T18114] do_futex+0x32b/0x350 [ 744.294050][T18114] ? __pfx_do_futex+0x10/0x10 [ 744.294080][T18114] ? find_held_lock+0x2b/0x80 [ 744.294122][T18114] __x64_sys_futex+0x34f/0x4d0 [ 744.294156][T18114] ? __fget_files+0x21f/0x3d0 [ 744.294203][T18114] ? __pfx___x64_sys_futex+0x10/0x10 [ 744.294243][T18114] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 744.294282][T18114] ? syscall_user_dispatch+0x76/0x130 [ 744.294325][T18114] do_syscall_64+0x106/0xf80 [ 744.294356][T18114] ? clear_bhb_loop+0x40/0x90 [ 744.294393][T18114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.294420][T18114] RIP: 0033:0x7f294359c629 [ 744.294440][T18114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.294464][T18114] RSP: 002b:00007f29417f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 744.294492][T18114] RAX: ffffffffffffffda RBX: 00007f2943815fa8 RCX: 00007f294359c629 [ 744.294511][T18114] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2943815fac [ 744.294526][T18114] RBP: 00007f2943815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 744.294542][T18114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.294557][T18114] R13: 00007f2943816038 R14: 00007fff08b08a40 R15: 00007fff08b08b28 [ 744.294593][T18114] [ 744.298746][ T9758] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.501666][ T9758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.526710][ T9760] Bluetooth: hci5: command tx timeout [ 744.694171][T12171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.778698][ T9758] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.785954][ T9758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.848513][T12171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.932609][ T9760] Bluetooth: hci3: command tx timeout [ 745.104029][T12171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.397405][T18018] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 745.481627][T18018] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 745.576336][T18018] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 745.709962][T18018] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 746.023789][T12171] bridge_slave_1: left allmulticast mode [ 746.029646][T12171] bridge_slave_1: left promiscuous mode [ 746.057959][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.115939][T12171] bridge_slave_0: left allmulticast mode [ 746.121636][T12171] bridge_slave_0: left promiscuous mode [ 746.139669][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.145765][T12171] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.146299][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.615286][ T9760] Bluetooth: hci5: command tx timeout [ 746.635769][T18159] FAULT_INJECTION: forcing a failure. [ 746.635769][T18159] name failslab, interval 1, probability 0, space 0, times 0 [ 746.649075][T18159] CPU: 1 UID: 0 PID: 18159 Comm: syz.0.2535 Tainted: G U L syzkaller #0 PREEMPT(full) [ 746.649121][T18159] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 746.649133][T18159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.649149][T18159] Call Trace: [ 746.649157][T18159] [ 746.649168][T18159] dump_stack_lvl+0x100/0x190 [ 746.649223][T18159] should_fail_ex.cold+0x5/0xa [ 746.649257][T18159] should_failslab+0xc2/0x120 [ 746.649304][T18159] __kmalloc_cache_noprof+0x7a/0x6f0 [ 746.649338][T18159] ? binder_get_thread+0x201/0x850 [ 746.649377][T18159] binder_get_thread+0x201/0x850 [ 746.649413][T18159] binder_ioctl+0x26b/0x7710 [ 746.649451][T18159] ? tomoyo_path_number_perm+0x28f/0x580 [ 746.649493][T18159] ? tomoyo_path_number_perm+0x28f/0x580 [ 746.649540][T18159] ? tomoyo_path_number_perm+0x188/0x580 [ 746.649581][T18159] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 746.649620][T18159] ? futex_wait+0x125/0x380 [ 746.649666][T18159] ? __pfx_binder_ioctl+0x10/0x10 [ 746.649707][T18159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 746.649754][T18159] ? do_vfs_ioctl+0x226/0x13e0 [ 746.649787][T18159] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 746.649830][T18159] ? find_held_lock+0x2b/0x80 [ 746.649872][T18159] ? __fget_files+0x215/0x3d0 [ 746.649910][T18159] ? hook_file_ioctl_common+0x146/0x410 [ 746.649956][T18159] ? __fget_files+0x21f/0x3d0 [ 746.650004][T18159] ? __pfx_binder_ioctl+0x10/0x10 [ 746.650044][T18159] __x64_sys_ioctl+0x18e/0x210 [ 746.650086][T18159] do_syscall_64+0x106/0xf80 [ 746.650118][T18159] ? clear_bhb_loop+0x40/0x90 [ 746.650154][T18159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.650185][T18159] RIP: 0033:0x7f294359c629 [ 746.650215][T18159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.650245][T18159] RSP: 002b:00007f29417f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.650273][T18159] RAX: ffffffffffffffda RBX: 00007f2943815fa0 RCX: 00007f294359c629 [ 746.650293][T18159] RDX: 0000000000000000 RSI: 0000000040046207 RDI: 0000000000000002 [ 746.650311][T18159] RBP: 00007f2943632b39 R08: 0000000000000000 R09: 0000000000000000 [ 746.650328][T18159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.650346][T18159] R13: 00007f2943816038 R14: 00007f2943815fa0 R15: 00007fff08b08b28 [ 746.650384][T18159] [ 746.650397][T18159] binder: 18158:18159 ioctl 40046207 0 returned -12 [ 746.926006][T18163] FAULT_INJECTION: forcing a failure. [ 746.926006][T18163] name failslab, interval 1, probability 0, space 0, times 0 [ 746.952908][T18163] CPU: 1 UID: 0 PID: 18163 Comm: syz.3.2536 Tainted: G U L syzkaller #0 PREEMPT(full) [ 746.952959][T18163] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 746.952971][T18163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.952990][T18163] Call Trace: [ 746.952998][T18163] [ 746.953007][T18163] dump_stack_lvl+0x100/0x190 [ 746.953055][T18163] should_fail_ex.cold+0x5/0xa [ 746.953089][T18163] should_failslab+0xc2/0x120 [ 746.953134][T18163] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 746.953183][T18163] ? kasprintf+0xc7/0x100 [ 746.953238][T18163] kvasprintf+0xbc/0x150 [ 746.953283][T18163] ? __pfx_kvasprintf+0x10/0x10 [ 746.953331][T18163] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 746.953361][T18163] ? lockdep_hardirqs_on+0x78/0x100 [ 746.953393][T18163] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 746.953429][T18163] kasprintf+0xc7/0x100 [ 746.953473][T18163] ? __pfx_kasprintf+0x10/0x10 [ 746.953536][T18163] ieee80211_alloc_led_names+0x11b/0x420 [ 746.953579][T18163] ieee80211_alloc_hw_nm+0x1934/0x22a0 [ 746.953623][T18163] mac80211_hwsim_new_radio+0x1e1/0x57d0 [ 746.953682][T18163] ? __asan_memset+0x23/0x50 [ 746.953720][T18163] ? __nla_validate_parse+0x1e7/0x28b0 [ 746.953756][T18163] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 746.953806][T18163] hwsim_new_radio_nl+0xc1f/0x1340 [ 746.953848][T18163] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 746.953898][T18163] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 746.953940][T18163] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 746.953990][T18163] genl_family_rcv_msg_doit+0x214/0x300 [ 746.954035][T18163] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 746.954076][T18163] ? genl_get_cmd+0x3ef/0x720 [ 746.954120][T18163] ? bpf_lsm_capable+0x9/0x10 [ 746.954147][T18163] ? security_capable+0x80/0x260 [ 746.954192][T18163] ? ns_capable+0xd2/0xf0 [ 746.954223][T18163] genl_rcv_msg+0x560/0x800 [ 746.954270][T18163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.954312][T18163] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 746.954365][T18163] netlink_rcv_skb+0x159/0x420 [ 746.954402][T18163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.954445][T18163] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.954496][T18163] ? netlink_deliver_tap+0x1ae/0xcc0 [ 746.954536][T18163] genl_rcv+0x28/0x40 [ 746.954570][T18163] netlink_unicast+0x5aa/0x870 [ 746.954611][T18163] ? __pfx_netlink_unicast+0x10/0x10 [ 746.954662][T18163] netlink_sendmsg+0x8b0/0xda0 [ 746.954704][T18163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.954737][T18163] ? __import_iovec+0x1d2/0x640 [ 746.954784][T18163] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 746.954828][T18163] ____sys_sendmsg+0xa54/0xc30 [ 746.954873][T18163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.954920][T18163] ? try_to_wake_up+0x644/0x1a80 [ 746.954975][T18163] ___sys_sendmsg+0x190/0x1e0 [ 746.955020][T18163] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.955061][T18163] ? futex_private_hash_put+0x107/0x1c0 [ 746.955139][T18163] __sys_sendmsg+0x170/0x220 [ 746.955179][T18163] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.955211][T18163] ? __x64_sys_futex+0x34f/0x4d0 [ 746.955272][T18163] do_syscall_64+0x106/0xf80 [ 746.955303][T18163] ? clear_bhb_loop+0x40/0x90 [ 746.955341][T18163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.955372][T18163] RIP: 0033:0x7f6af1d9c629 [ 746.955398][T18163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.955427][T18163] RSP: 002b:00007f6af2c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.955455][T18163] RAX: ffffffffffffffda RBX: 00007f6af2015fa0 RCX: 00007f6af1d9c629 [ 746.955476][T18163] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 746.955495][T18163] RBP: 00007f6af1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 746.955514][T18163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.955531][T18163] R13: 00007f6af2016038 R14: 00007f6af2015fa0 R15: 00007ffdfe54ccc8 [ 746.955571][T18163] [ 747.500181][T12171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.520253][T12171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.557576][T12171] bond0 (unregistering): Released all slaves [ 747.734049][T12171] HfR: left promiscuous mode [ 747.917059][T18006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.934980][T18173] FAULT_INJECTION: forcing a failure. [ 747.934980][T18173] name failslab, interval 1, probability 0, space 0, times 0 [ 747.967908][T18018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.974925][T18173] CPU: 1 UID: 0 PID: 18173 Comm: syz.0.2538 Tainted: G U L syzkaller #0 PREEMPT(full) [ 747.974976][T18173] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 747.974988][T18173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.975007][T18173] Call Trace: [ 747.975017][T18173] [ 747.975028][T18173] dump_stack_lvl+0x100/0x190 [ 747.975085][T18173] should_fail_ex.cold+0x5/0xa [ 747.975120][T18173] should_failslab+0xc2/0x120 [ 747.975169][T18173] __kmalloc_cache_noprof+0x7a/0x6f0 [ 747.975202][T18173] ? binder_get_thread+0x201/0x850 [ 747.975244][T18173] binder_get_thread+0x201/0x850 [ 747.975284][T18173] binder_ioctl+0x26b/0x7710 [ 747.975323][T18173] ? tomoyo_path_number_perm+0x28f/0x580 [ 747.975365][T18173] ? tomoyo_path_number_perm+0x28f/0x580 [ 747.975412][T18173] ? tomoyo_path_number_perm+0x188/0x580 [ 747.975455][T18173] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 747.975496][T18173] ? futex_wait+0x125/0x380 [ 747.975542][T18173] ? __pfx_binder_ioctl+0x10/0x10 [ 747.975585][T18173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 747.975652][T18173] ? do_vfs_ioctl+0x226/0x13e0 [ 747.975692][T18173] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 747.975744][T18173] ? find_held_lock+0x2b/0x80 [ 747.975789][T18173] ? __fget_files+0x215/0x3d0 [ 747.975831][T18173] ? hook_file_ioctl_common+0x146/0x410 [ 747.975885][T18173] ? __fget_files+0x21f/0x3d0 [ 747.975934][T18173] ? __pfx_binder_ioctl+0x10/0x10 [ 747.975974][T18173] __x64_sys_ioctl+0x18e/0x210 [ 747.976016][T18173] do_syscall_64+0x106/0xf80 [ 747.976048][T18173] ? clear_bhb_loop+0x40/0x90 [ 747.976092][T18173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.976123][T18173] RIP: 0033:0x7f294359c629 [ 747.976147][T18173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.976176][T18173] RSP: 002b:00007f29417d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.976204][T18173] RAX: ffffffffffffffda RBX: 00007f2943816090 RCX: 00007f294359c629 [ 747.976221][T18173] RDX: 0000000000000000 RSI: 0000000040046207 RDI: 0000000000000002 [ 747.976237][T18173] RBP: 00007f2943632b39 R08: 0000000000000000 R09: 0000000000000000 [ 747.976253][T18173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.976270][T18173] R13: 00007f2943816128 R14: 00007f2943816090 R15: 00007fff08b08b28 [ 747.976304][T18173] [ 747.976386][T18173] binder: 18170:18173 ioctl 40046207 0 returned -12 [ 748.101333][T18018] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.347648][ T9758] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.354981][ T9758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.412756][ T9758] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.420092][ T9758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.416371][T12171] hsr_slave_0: left promiscuous mode [ 749.450180][T12171] hsr_slave_1: left promiscuous mode [ 749.464560][T12171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.476951][T12171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.546817][T12171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.555015][T12171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.580673][T12171] veth1_macvtap: left promiscuous mode [ 749.592859][T12171] veth0_macvtap: left promiscuous mode [ 749.603059][T12171] veth1_vlan: left promiscuous mode [ 749.610985][T12171] veth0_vlan: left promiscuous mode [ 750.161422][T12171] team0 (unregistering): Port device team_slave_1 removed [ 750.183812][T12171] team0 (unregistering): Port device team_slave_0 removed [ 750.412633][T18006] veth0_vlan: entered promiscuous mode [ 750.462731][T18006] veth1_vlan: entered promiscuous mode [ 750.467422][T18227] netlink: 'syz.3.2545': attribute type 7 has an invalid length. [ 750.476135][T18227] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2545'. [ 750.660550][T18018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.742115][T18006] veth0_macvtap: entered promiscuous mode [ 750.782603][T18006] veth1_macvtap: entered promiscuous mode [ 750.825414][T18231] FAULT_INJECTION: forcing a failure. [ 750.825414][T18231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 750.873596][T18006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.909355][T18006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.926618][T18231] CPU: 0 UID: 0 PID: 18231 Comm: syz.3.2546 Tainted: G U L syzkaller #0 PREEMPT(full) [ 750.926668][T18231] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 750.926679][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 750.926695][T18231] Call Trace: [ 750.926705][T18231] [ 750.926716][T18231] dump_stack_lvl+0x100/0x190 [ 750.926762][T18231] should_fail_ex.cold+0x5/0xa [ 750.926791][T18231] ? prepare_alloc_pages+0x16d/0x5f0 [ 750.926823][T18231] should_fail_alloc_page+0xeb/0x140 [ 750.926871][T18231] prepare_alloc_pages+0x1f0/0x5f0 [ 750.926900][T18231] ? kernel_text_address+0x8d/0x100 [ 750.926944][T18231] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 750.926985][T18231] ? __lock_acquire+0x4a5/0x2630 [ 750.927021][T18231] ? __lock_acquire+0x4a5/0x2630 [ 750.927061][T18231] ? __lock_acquire+0x4a5/0x2630 [ 750.927096][T18231] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 750.927138][T18231] ? __lock_acquire+0x4a5/0x2630 [ 750.927188][T18231] ? find_held_lock+0x2b/0x80 [ 750.927224][T18231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 750.927268][T18231] ? policy_nodemask+0xed/0x4f0 [ 750.927310][T18231] alloc_pages_mpol+0x1fb/0x550 [ 750.927353][T18231] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 750.927398][T18231] ? arch_stack_walk+0xa6/0xf0 [ 750.927433][T18231] ? wiphy_new_nm+0x701/0x21a0 [ 750.927474][T18231] ___kmalloc_large_node+0x104/0x150 [ 750.927509][T18231] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 750.927548][T18231] __kmalloc_large_node_noprof+0x1c/0x70 [ 750.927584][T18231] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 750.927624][T18231] __kmalloc_noprof+0x5be/0x850 [ 750.927671][T18231] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 750.927708][T18231] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 750.927746][T18231] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 750.927780][T18231] wiphy_new_nm+0x701/0x21a0 [ 750.927815][T18231] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 750.927854][T18231] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 750.927893][T18231] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 750.927926][T18231] ieee80211_alloc_hw_nm+0x1ac7/0x22a0 [ 750.927962][T18231] ? __local_bh_enable_ip+0x9e/0x120 [ 750.927998][T18231] mac80211_hwsim_new_radio+0x1e1/0x57d0 [ 750.928051][T18231] ? __asan_memset+0x23/0x50 [ 750.928086][T18231] ? __nla_validate_parse+0x1e7/0x28b0 [ 750.928121][T18231] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 750.928171][T18231] hwsim_new_radio_nl+0xc1f/0x1340 [ 750.928213][T18231] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 750.928262][T18231] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 750.928304][T18231] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 750.928353][T18231] genl_family_rcv_msg_doit+0x214/0x300 [ 750.928398][T18231] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 750.928438][T18231] ? genl_get_cmd+0x3ef/0x720 [ 750.928489][T18231] ? bpf_lsm_capable+0x9/0x10 [ 750.928515][T18231] ? security_capable+0x80/0x260 [ 750.928546][T18231] ? ns_capable+0xd2/0xf0 [ 750.928573][T18231] genl_rcv_msg+0x560/0x800 [ 750.928612][T18231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 750.928652][T18231] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 750.928703][T18231] netlink_rcv_skb+0x159/0x420 [ 750.928738][T18231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 750.928781][T18231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 750.928834][T18231] ? netlink_deliver_tap+0x1ae/0xcc0 [ 750.928868][T18231] genl_rcv+0x28/0x40 [ 750.928902][T18231] netlink_unicast+0x5aa/0x870 [ 750.928944][T18231] ? __pfx_netlink_unicast+0x10/0x10 [ 750.928995][T18231] netlink_sendmsg+0x8b0/0xda0 [ 750.929036][T18231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.929069][T18231] ? __import_iovec+0x1d2/0x640 [ 750.929120][T18231] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 750.929165][T18231] ____sys_sendmsg+0xa54/0xc30 [ 750.929211][T18231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 750.929261][T18231] ? __pfx_futex_wake_mark+0x10/0x10 [ 750.929308][T18231] ___sys_sendmsg+0x190/0x1e0 [ 750.929349][T18231] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.929433][T18231] __sys_sendmsg+0x170/0x220 [ 750.929477][T18231] ? __pfx___sys_sendmsg+0x10/0x10 [ 750.929509][T18231] ? __x64_sys_futex+0x34f/0x4d0 [ 750.929569][T18231] do_syscall_64+0x106/0xf80 [ 750.929600][T18231] ? clear_bhb_loop+0x40/0x90 [ 750.929631][T18231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.929660][T18231] RIP: 0033:0x7f6af1d9c629 [ 750.929686][T18231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.929713][T18231] RSP: 002b:00007f6af2c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.929740][T18231] RAX: ffffffffffffffda RBX: 00007f6af2015fa0 RCX: 00007f6af1d9c629 [ 750.929759][T18231] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 750.929777][T18231] RBP: 00007f6af1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 750.929794][T18231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.929811][T18231] R13: 00007f6af2016038 R14: 00007f6af2015fa0 R15: 00007ffdfe54ccc8 [ 750.929851][T18231] [ 751.608952][T12163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.618195][T12163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.627048][T12163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.678915][T12163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.951900][T12163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.965535][T12163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.041848][T18018] veth0_vlan: entered promiscuous mode [ 752.117714][T18018] veth1_vlan: entered promiscuous mode [ 752.132245][T12171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.146636][T12171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.220988][T18018] veth0_macvtap: entered promiscuous mode [ 752.253492][T18018] veth1_macvtap: entered promiscuous mode [ 752.306191][T18018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.334963][T18018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.385647][T12171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.405590][ T9766] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.414778][T12167] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.424823][T12167] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.051104][T12167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.071463][T12167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.134689][T12167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.163579][T12167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.039136][T18312] FAULT_INJECTION: forcing a failure. [ 754.039136][T18312] name failslab, interval 1, probability 0, space 0, times 0 [ 754.066773][T18312] CPU: 1 UID: 0 PID: 18312 Comm: syz.3.2555 Tainted: G U L syzkaller #0 PREEMPT(full) [ 754.066824][T18312] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 754.066836][T18312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 754.066855][T18312] Call Trace: [ 754.066864][T18312] [ 754.066876][T18312] dump_stack_lvl+0x100/0x190 [ 754.066924][T18312] should_fail_ex.cold+0x5/0xa [ 754.066958][T18312] should_failslab+0xc2/0x120 [ 754.067005][T18312] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 754.067044][T18312] ? alloc_empty_file+0x55/0x1c0 [ 754.067085][T18312] alloc_empty_file+0x55/0x1c0 [ 754.067119][T18312] alloc_file_pseudo+0x13a/0x230 [ 754.067153][T18312] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 754.067187][T18312] ? alloc_fd+0x476/0x790 [ 754.067236][T18312] sock_alloc_file+0x50/0x210 [ 754.067272][T18312] __sys_socket+0x1c0/0x260 [ 754.067313][T18312] ? __pfx___sys_socket+0x10/0x10 [ 754.067366][T18312] __x64_sys_socket+0x72/0xb0 [ 754.067407][T18312] ? lockdep_hardirqs_on+0x78/0x100 [ 754.067439][T18312] do_syscall_64+0x106/0xf80 [ 754.067476][T18312] ? clear_bhb_loop+0x40/0x90 [ 754.067512][T18312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.067543][T18312] RIP: 0033:0x7f6af1d9c629 [ 754.067568][T18312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.067598][T18312] RSP: 002b:00007f6af2c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 754.067627][T18312] RAX: ffffffffffffffda RBX: 00007f6af2015fa0 RCX: 00007f6af1d9c629 [ 754.067647][T18312] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 754.067665][T18312] RBP: 00007f6af1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 754.067684][T18312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.067701][T18312] R13: 00007f6af2016038 R14: 00007f6af2015fa0 R15: 00007ffdfe54ccc8 [ 754.067740][T18312] [ 756.138210][T18373] FAULT_INJECTION: forcing a failure. [ 756.138210][T18373] name failslab, interval 1, probability 0, space 0, times 0 [ 756.157419][T18373] CPU: 0 UID: 0 PID: 18373 Comm: syz.3.2562 Tainted: G U L syzkaller #0 PREEMPT(full) [ 756.157469][T18373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 756.157481][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.157500][T18373] Call Trace: [ 756.157511][T18373] [ 756.157523][T18373] dump_stack_lvl+0x100/0x190 [ 756.157572][T18373] should_fail_ex.cold+0x5/0xa [ 756.157607][T18373] should_failslab+0xc2/0x120 [ 756.157655][T18373] __kmalloc_cache_noprof+0x7a/0x6f0 [ 756.157690][T18373] ? binder_get_thread+0x201/0x850 [ 756.157733][T18373] binder_get_thread+0x201/0x850 [ 756.157774][T18373] binder_ioctl+0x26b/0x7710 [ 756.157816][T18373] ? tomoyo_path_number_perm+0x28f/0x580 [ 756.157868][T18373] ? tomoyo_path_number_perm+0x28f/0x580 [ 756.157919][T18373] ? tomoyo_path_number_perm+0x188/0x580 [ 756.157966][T18373] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 756.158007][T18373] ? futex_wait+0x125/0x380 [ 756.158054][T18373] ? __pfx_binder_ioctl+0x10/0x10 [ 756.158095][T18373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.158145][T18373] ? do_vfs_ioctl+0x226/0x13e0 [ 756.158184][T18373] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 756.158231][T18373] ? find_held_lock+0x2b/0x80 [ 756.158275][T18373] ? __fget_files+0x215/0x3d0 [ 756.158317][T18373] ? hook_file_ioctl_common+0x146/0x410 [ 756.158368][T18373] ? __fget_files+0x21f/0x3d0 [ 756.158415][T18373] ? __pfx_binder_ioctl+0x10/0x10 [ 756.158455][T18373] __x64_sys_ioctl+0x18e/0x210 [ 756.158496][T18373] do_syscall_64+0x106/0xf80 [ 756.158528][T18373] ? clear_bhb_loop+0x40/0x90 [ 756.158564][T18373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.158595][T18373] RIP: 0033:0x7f6af1d9c629 [ 756.158619][T18373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.158647][T18373] RSP: 002b:00007f6af2c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.158675][T18373] RAX: ffffffffffffffda RBX: 00007f6af2015fa0 RCX: 00007f6af1d9c629 [ 756.158696][T18373] RDX: 0000000000000000 RSI: 0000000040046207 RDI: 0000000000000002 [ 756.158714][T18373] RBP: 00007f6af1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 756.158733][T18373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.158752][T18373] R13: 00007f6af2016038 R14: 00007f6af2015fa0 R15: 00007ffdfe54ccc8 [ 756.158791][T18373] [ 756.158804][T18373] binder: 18371:18373 ioctl 40046207 0 returned -12 [ 756.437718][T18379] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 756.694363][ T29] audit: type=1800 audit(3543463651.961:30): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2564" name="dbroot" dev="configfs" ino=233585 res=0 errno=0 [ 756.730637][T18386] db_root: not a directory: /dev/audio1 [ 758.160898][T18423] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 758.452181][T18429] FAULT_INJECTION: forcing a failure. [ 758.452181][T18429] name failslab, interval 1, probability 0, space 0, times 0 [ 758.527067][T18429] CPU: 1 UID: 0 PID: 18429 Comm: syz.0.2570 Tainted: G U L syzkaller #0 PREEMPT(full) [ 758.527119][T18429] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 758.527131][T18429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 758.527149][T18429] Call Trace: [ 758.527160][T18429] [ 758.527172][T18429] dump_stack_lvl+0x100/0x190 [ 758.527220][T18429] should_fail_ex.cold+0x5/0xa [ 758.527255][T18429] should_failslab+0xc2/0x120 [ 758.527301][T18429] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 758.527343][T18429] ? skb_clone+0x190/0x400 [ 758.527381][T18429] skb_clone+0x190/0x400 [ 758.527415][T18429] netlink_deliver_tap+0xaed/0xcc0 [ 758.527457][T18429] netlink_unicast+0x650/0x870 [ 758.527498][T18429] ? __pfx_netlink_unicast+0x10/0x10 [ 758.527547][T18429] netlink_sendmsg+0x8b0/0xda0 [ 758.527597][T18429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.527631][T18429] ? __import_iovec+0x1d2/0x640 [ 758.527680][T18429] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 758.527724][T18429] ____sys_sendmsg+0xa54/0xc30 [ 758.527768][T18429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.527817][T18429] ? __pfx_futex_wake_mark+0x10/0x10 [ 758.527867][T18429] ___sys_sendmsg+0x190/0x1e0 [ 758.527911][T18429] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.527999][T18429] __sys_sendmsg+0x170/0x220 [ 758.528031][T18429] ? __pfx___sys_sendmsg+0x10/0x10 [ 758.528062][T18429] ? __x64_sys_futex+0x34f/0x4d0 [ 758.528124][T18429] do_syscall_64+0x106/0xf80 [ 758.528157][T18429] ? clear_bhb_loop+0x40/0x90 [ 758.528194][T18429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.528224][T18429] RIP: 0033:0x7f294359c629 [ 758.528249][T18429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.528276][T18429] RSP: 002b:00007f29417f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.528306][T18429] RAX: ffffffffffffffda RBX: 00007f2943815fa0 RCX: 00007f294359c629 [ 758.528327][T18429] RDX: 0000000000000810 RSI: 0000200000000cc0 RDI: 000000000000000a [ 758.528344][T18429] RBP: 00007f2943632b39 R08: 0000000000000000 R09: 0000000000000000 [ 758.528358][T18429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.528373][T18429] R13: 00007f2943816038 R14: 00007f2943815fa0 R15: 00007fff08b08b28 [ 758.528407][T18429] [ 760.300462][T18478] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 760.630315][T18487] netlink: 'syz.3.2580': attribute type 7 has an invalid length. [ 760.638107][T18487] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2580'. [ 761.185348][ T9760] Bluetooth: hci5: unexpected event 0x32 length: 727 > 9 [ 761.662004][T18515] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2586'. [ 763.837370][T18570] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2592'. [ 765.393955][T18594] FAULT_INJECTION: forcing a failure. [ 765.393955][T18594] name fail_futex, interval 1, probability 0, space 0, times 0 [ 765.412002][T18594] CPU: 0 UID: 0 PID: 18594 Comm: syz.0.2595 Tainted: G U L syzkaller #0 PREEMPT(full) [ 765.412052][T18594] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 765.412063][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.412080][T18594] Call Trace: [ 765.412090][T18594] [ 765.412108][T18594] dump_stack_lvl+0x100/0x190 [ 765.412157][T18594] should_fail_ex.cold+0x5/0xa [ 765.412191][T18594] get_futex_key+0x1d2/0x1620 [ 765.412230][T18594] ? __pfx_get_futex_key+0x10/0x10 [ 765.412277][T18594] futex_wake+0xea/0x530 [ 765.412322][T18594] ? __pfx_futex_wake+0x10/0x10 [ 765.412366][T18594] ? do_vfs_ioctl+0x226/0x13e0 [ 765.412410][T18594] do_futex+0x32b/0x350 [ 765.412447][T18594] ? __pfx_do_futex+0x10/0x10 [ 765.412485][T18594] ? find_held_lock+0x2b/0x80 [ 765.412535][T18594] __x64_sys_futex+0x34f/0x4d0 [ 765.412573][T18594] ? __fget_files+0x21f/0x3d0 [ 765.412616][T18594] ? __pfx___x64_sys_futex+0x10/0x10 [ 765.412667][T18594] do_syscall_64+0x106/0xf80 [ 765.412698][T18594] ? clear_bhb_loop+0x40/0x90 [ 765.412735][T18594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.412765][T18594] RIP: 0033:0x7f294359c629 [ 765.412790][T18594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.412817][T18594] RSP: 002b:00007f29417d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 765.412844][T18594] RAX: ffffffffffffffda RBX: 00007f2943816098 RCX: 00007f294359c629 [ 765.412863][T18594] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f294381609c [ 765.412881][T18594] RBP: 00007f2943816090 R08: 0000000000000000 R09: 0000000000000000 [ 765.412900][T18594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.412918][T18594] R13: 00007f2943816128 R14: 00007fff08b08a40 R15: 00007fff08b08b28 [ 765.412957][T18594] [ 766.933152][T18612] netlink: 'syz.5.2599': attribute type 7 has an invalid length. [ 766.960300][T18612] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2599'. [ 767.536370][T18634] FAULT_INJECTION: forcing a failure. [ 767.536370][T18634] name fail_futex, interval 1, probability 0, space 0, times 0 [ 767.556061][T18634] CPU: 0 UID: 0 PID: 18634 Comm: syz.0.2604 Tainted: G U L syzkaller #0 PREEMPT(full) [ 767.556113][T18634] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 767.556124][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.556142][T18634] Call Trace: [ 767.556151][T18634] [ 767.556163][T18634] dump_stack_lvl+0x100/0x190 [ 767.556212][T18634] should_fail_ex.cold+0x5/0xa [ 767.556247][T18634] get_futex_key+0x1d2/0x1620 [ 767.556287][T18634] ? __pfx_get_futex_key+0x10/0x10 [ 767.556334][T18634] futex_wake+0xea/0x530 [ 767.556380][T18634] ? __pfx_futex_wake+0x10/0x10 [ 767.556430][T18634] ? do_vfs_ioctl+0x226/0x13e0 [ 767.556474][T18634] do_futex+0x32b/0x350 [ 767.556512][T18634] ? __pfx_do_futex+0x10/0x10 [ 767.556551][T18634] ? find_held_lock+0x2b/0x80 [ 767.556610][T18634] __x64_sys_futex+0x34f/0x4d0 [ 767.556651][T18634] ? __fget_files+0x21f/0x3d0 [ 767.556693][T18634] ? __pfx___x64_sys_futex+0x10/0x10 [ 767.556741][T18634] do_syscall_64+0x106/0xf80 [ 767.556774][T18634] ? clear_bhb_loop+0x40/0x90 [ 767.556811][T18634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.556842][T18634] RIP: 0033:0x7f294359c629 [ 767.556867][T18634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.556897][T18634] RSP: 002b:00007f29417d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 767.556927][T18634] RAX: ffffffffffffffda RBX: 00007f2943816098 RCX: 00007f294359c629 [ 767.556948][T18634] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f294381609c [ 767.556968][T18634] RBP: 00007f2943816090 R08: 0000000000000000 R09: 0000000000000000 [ 767.556987][T18634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.557006][T18634] R13: 00007f2943816128 R14: 00007fff08b08a40 R15: 00007fff08b08b28 [ 767.557046][T18634] [ 770.184951][T18686] netlink: 'syz.0.2610': attribute type 7 has an invalid length. [ 770.192736][T18686] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2610'. [ 770.561054][T18696] __vm_enough_memory: 56 callbacks suppressed [ 770.561089][T18696] __vm_enough_memory: pid: 18696, comm: syz.0.2611, bytes: 4398046511104 not enough memory for the allocation [ 770.788524][T18698] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 771.287467][T18704] FAULT_INJECTION: forcing a failure. [ 771.287467][T18704] name failslab, interval 1, probability 0, space 0, times 0 [ 771.304865][T18704] CPU: 1 UID: 0 PID: 18704 Comm: syz.5.2613 Tainted: G U L syzkaller #0 PREEMPT(full) [ 771.304917][T18704] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 771.304930][T18704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 771.304947][T18704] Call Trace: [ 771.304956][T18704] [ 771.304965][T18704] dump_stack_lvl+0x100/0x190 [ 771.305010][T18704] should_fail_ex.cold+0x5/0xa [ 771.305041][T18704] should_failslab+0xc2/0x120 [ 771.305082][T18704] __kmalloc_cache_noprof+0x7a/0x6f0 [ 771.305113][T18704] ? binder_get_thread+0x201/0x850 [ 771.305150][T18704] binder_get_thread+0x201/0x850 [ 771.305185][T18704] binder_ioctl+0x26b/0x7710 [ 771.305220][T18704] ? tomoyo_path_number_perm+0x28f/0x580 [ 771.305257][T18704] ? tomoyo_path_number_perm+0x28f/0x580 [ 771.305300][T18704] ? tomoyo_path_number_perm+0x188/0x580 [ 771.305341][T18704] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 771.305378][T18704] ? futex_wait+0x125/0x380 [ 771.305419][T18704] ? __pfx_binder_ioctl+0x10/0x10 [ 771.305462][T18704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.305508][T18704] ? do_vfs_ioctl+0x226/0x13e0 [ 771.305543][T18704] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 771.305587][T18704] ? find_held_lock+0x2b/0x80 [ 771.305627][T18704] ? __fget_files+0x215/0x3d0 [ 771.305664][T18704] ? hook_file_ioctl_common+0x146/0x410 [ 771.305709][T18704] ? __fget_files+0x21f/0x3d0 [ 771.305754][T18704] ? __pfx_binder_ioctl+0x10/0x10 [ 771.305789][T18704] __x64_sys_ioctl+0x18e/0x210 [ 771.305826][T18704] do_syscall_64+0x106/0xf80 [ 771.305854][T18704] ? clear_bhb_loop+0x40/0x90 [ 771.305887][T18704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.305915][T18704] RIP: 0033:0x7f129239c629 [ 771.305937][T18704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.305963][T18704] RSP: 002b:00007f129321d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.305987][T18704] RAX: ffffffffffffffda RBX: 00007f1292615fa0 RCX: 00007f129239c629 [ 771.306004][T18704] RDX: 0000000000000000 RSI: 0000000040046207 RDI: 0000000000000002 [ 771.306021][T18704] RBP: 00007f1292432b39 R08: 0000000000000000 R09: 0000000000000000 [ 771.306037][T18704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.306053][T18704] R13: 00007f1292616038 R14: 00007f1292615fa0 R15: 00007ffd1fbbafd8 [ 771.306088][T18704] [ 771.306131][T18704] binder: 18703:18704 ioctl 40046207 0 returned -12 [ 771.915240][ T29] audit: type=1326 audit(3543464690.176:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18716 comm="syz.0.2616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f294359c629 code=0x0 [ 772.125272][ T29] audit: type=1800 audit(3543464690.386:32): pid=18723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2616" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 772.600828][T18735] netlink: 'syz.6.2619': attribute type 7 has an invalid length. [ 772.695091][T18735] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2619'. [ 772.872362][T18741] FAULT_INJECTION: forcing a failure. [ 772.872362][T18741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 772.965738][T18741] CPU: 1 UID: 0 PID: 18741 Comm: syz.0.2620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 772.965789][T18741] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 772.965801][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.965819][T18741] Call Trace: [ 772.965830][T18741] [ 772.965841][T18741] dump_stack_lvl+0x100/0x190 [ 772.965889][T18741] should_fail_ex.cold+0x5/0xa [ 772.965917][T18741] ? prepare_alloc_pages+0x16d/0x5f0 [ 772.965953][T18741] should_fail_alloc_page+0xeb/0x140 [ 772.966013][T18741] prepare_alloc_pages+0x1f0/0x5f0 [ 772.966052][T18741] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 772.966099][T18741] ? __pfx_validate_mm+0x10/0x10 [ 772.966134][T18741] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 772.966182][T18741] ? vms_complete_munmap_vmas+0x7ac/0xdd0 [ 772.966218][T18741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.966262][T18741] ? percpu_counter_add_batch+0xb9/0x230 [ 772.966304][T18741] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 772.966366][T18741] ? lock_acquire+0x1cf/0x380 [ 772.966403][T18741] ? find_held_lock+0x2b/0x80 [ 772.966448][T18741] ? page_table_check_set+0x49a/0xa10 [ 772.966491][T18741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.966540][T18741] ? policy_nodemask+0xed/0x4f0 [ 772.966589][T18741] alloc_pages_mpol+0x1fb/0x550 [ 772.966637][T18741] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 772.966695][T18741] folio_alloc_mpol_noprof+0x36/0x340 [ 772.966731][T18741] vma_alloc_folio_noprof+0xed/0x1d0 [ 772.966764][T18741] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 772.966810][T18741] do_anonymous_page+0xb3a/0x1fb0 [ 772.966860][T18741] __handle_mm_fault+0x1d42/0x2b60 [ 772.966908][T18741] ? __pfx___handle_mm_fault+0x10/0x10 [ 772.966948][T18741] ? pte_offset_map_lock+0x174/0x320 [ 772.967004][T18741] ? find_held_lock+0x2b/0x80 [ 772.967063][T18741] ? follow_page_pte+0x5b3/0x1400 [ 772.967102][T18741] handle_mm_fault+0x36d/0xa20 [ 772.967147][T18741] __get_user_pages+0xf9c/0x34d0 [ 772.967192][T18741] ? __pfx___get_user_pages+0x10/0x10 [ 772.967232][T18741] populate_vma_page_range+0x267/0x3f0 [ 772.967268][T18741] ? __pfx_populate_vma_page_range+0x10/0x10 [ 772.967299][T18741] ? __pfx_find_vma_intersection+0x10/0x10 [ 772.967348][T18741] ? do_mmap+0x93f/0x12f0 [ 772.967382][T18741] __mm_populate+0x107/0x3a0 [ 772.967416][T18741] ? __pfx___mm_populate+0x10/0x10 [ 772.967451][T18741] ? up_write+0x290/0x4f0 [ 772.967495][T18741] vm_mmap_pgoff+0x37f/0x470 [ 772.967530][T18741] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 772.967563][T18741] ? do_futex+0x192/0x350 [ 772.967600][T18741] ? __pfx_do_futex+0x10/0x10 [ 772.967633][T18741] ? __pfx_do_sys_openat2+0x10/0x10 [ 772.967675][T18741] ksys_mmap_pgoff+0xe1/0x650 [ 772.967723][T18741] ? __x64_sys_futex+0x34f/0x4d0 [ 772.967758][T18741] ? __x64_sys_futex+0x358/0x4d0 [ 772.967795][T18741] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 772.967843][T18741] ? xfd_validate_state+0x129/0x190 [ 772.967891][T18741] __x64_sys_mmap+0x125/0x190 [ 772.967938][T18741] do_syscall_64+0x106/0xf80 [ 772.967976][T18741] ? clear_bhb_loop+0x40/0x90 [ 772.968014][T18741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.968045][T18741] RIP: 0033:0x7f294359c629 [ 772.968071][T18741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.968099][T18741] RSP: 002b:00007f29417f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 772.968128][T18741] RAX: ffffffffffffffda RBX: 00007f2943815fa0 RCX: 00007f294359c629 [ 772.968148][T18741] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 772.968167][T18741] RBP: 00007f2943632b39 R08: 0000000000000007 R09: 0000000000028000 [ 772.968186][T18741] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 772.968205][T18741] R13: 00007f2943816038 R14: 00007f2943815fa0 R15: 00007fff08b08b28 [ 772.968245][T18741] [ 772.972096][T18742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.760194][ T29] audit: type=1326 audit(3543464692.015:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.0.2623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f294359c629 code=0x0 [ 773.845504][T18747] zswap: compressor d_ not available [ 774.829534][T18777] FAULT_INJECTION: forcing a failure. [ 774.829534][T18777] name failslab, interval 1, probability 0, space 0, times 0 [ 774.853415][T18777] CPU: 1 UID: 0 PID: 18777 Comm: syz.5.2629 Tainted: G U L syzkaller #0 PREEMPT(full) [ 774.853467][T18777] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 774.853479][T18777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.853497][T18777] Call Trace: [ 774.853507][T18777] [ 774.853519][T18777] dump_stack_lvl+0x100/0x190 [ 774.853569][T18777] should_fail_ex.cold+0x5/0xa [ 774.853605][T18777] ? iter_file_splice_write+0x1d3/0x10a0 [ 774.853650][T18777] should_failslab+0xc2/0x120 [ 774.853697][T18777] __kmalloc_noprof+0xe0/0x850 [ 774.853746][T18777] iter_file_splice_write+0x1d3/0x10a0 [ 774.853789][T18777] ? lockdep_hardirqs_on+0x78/0x100 [ 774.853825][T18777] ? copy_splice_read+0x734/0xb90 [ 774.853876][T18777] ? kfree+0x1f6/0x6b0 [ 774.853919][T18777] ? __pfx_iter_file_splice_write+0x10/0x10 [ 774.853967][T18777] ? __lock_acquire+0x4a5/0x2630 [ 774.854007][T18777] ? __pfx_copy_splice_read+0x10/0x10 [ 774.854077][T18777] ? __pfx_iter_file_splice_write+0x10/0x10 [ 774.854127][T18777] direct_splice_actor+0x192/0x6c0 [ 774.854177][T18777] splice_direct_to_actor+0x345/0xa30 [ 774.854225][T18777] ? __pfx_direct_splice_actor+0x10/0x10 [ 774.854277][T18777] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 774.854332][T18777] do_splice_direct+0x174/0x240 [ 774.854377][T18777] ? __pfx_do_splice_direct+0x10/0x10 [ 774.854422][T18777] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 774.854472][T18777] ? rw_verify_area+0xce/0x6d0 [ 774.854515][T18777] do_sendfile+0xadc/0xe20 [ 774.854563][T18777] ? __pfx_do_sendfile+0x10/0x10 [ 774.854603][T18777] ? __sys_sendmsg+0x18f/0x220 [ 774.854638][T18777] ? __x64_sys_futex+0x34f/0x4d0 [ 774.854675][T18777] ? __x64_sys_futex+0x358/0x4d0 [ 774.854715][T18777] __x64_sys_sendfile64+0x1d8/0x220 [ 774.854748][T18777] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 774.854789][T18777] do_syscall_64+0x106/0xf80 [ 774.854820][T18777] ? clear_bhb_loop+0x40/0x90 [ 774.854856][T18777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.854888][T18777] RIP: 0033:0x7f129239c629 [ 774.854914][T18777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.854941][T18777] RSP: 002b:00007f129321d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 774.854970][T18777] RAX: ffffffffffffffda RBX: 00007f1292615fa0 RCX: 00007f129239c629 [ 774.854990][T18777] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 774.855007][T18777] RBP: 00007f1292432b39 R08: 0000000000000000 R09: 0000000000000000 [ 774.855033][T18777] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 774.855051][T18777] R13: 00007f1292616038 R14: 00007f1292615fa0 R15: 00007ffd1fbbafd8 [ 774.855092][T18777] [ 775.466534][T18788] netlink: 'syz.5.2631': attribute type 7 has an invalid length. [ 775.500787][T18790] FAULT_INJECTION: forcing a failure. [ 775.500787][T18790] name failslab, interval 1, probability 0, space 0, times 0 [ 775.536106][T18790] CPU: 1 UID: 0 PID: 18790 Comm: syz.6.2630 Tainted: G U L syzkaller #0 PREEMPT(full) [ 775.536155][T18790] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 775.536165][T18790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 775.536181][T18790] Call Trace: [ 775.536189][T18790] [ 775.536201][T18790] dump_stack_lvl+0x100/0x190 [ 775.536243][T18790] should_fail_ex.cold+0x5/0xa [ 775.536274][T18790] should_failslab+0xc2/0x120 [ 775.536317][T18790] __kmalloc_cache_noprof+0x7a/0x6f0 [ 775.536353][T18790] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 775.536397][T18790] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 775.536440][T18790] vidtv_mux_init+0x8a6/0xbf0 [ 775.536477][T18790] vidtv_start_feed+0x33e/0x4c0 [ 775.536515][T18790] ? __pfx_vidtv_start_feed+0x10/0x10 [ 775.536557][T18790] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 775.536615][T18790] ? mark_held_locks+0x40/0x70 [ 775.536658][T18790] ? __pfx_vidtv_start_feed+0x10/0x10 [ 775.536712][T18790] dmx_ts_feed_start_filtering+0xf6/0x220 [ 775.536754][T18790] dvb_dmxdev_start_feed+0x273/0x3f0 [ 775.536797][T18790] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 775.536848][T18790] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 775.536894][T18790] dvb_demux_do_ioctl+0xe64/0x1200 [ 775.536950][T18790] dvb_usercopy+0x167/0x340 [ 775.536988][T18790] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 775.537037][T18790] ? __pfx_dvb_usercopy+0x10/0x10 [ 775.537094][T18790] ? __fget_files+0x21f/0x3d0 [ 775.537150][T18790] dvb_demux_ioctl+0x29/0x40 [ 775.537190][T18790] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 775.537230][T18790] __x64_sys_ioctl+0x18e/0x210 [ 775.537268][T18790] do_syscall_64+0x106/0xf80 [ 775.537298][T18790] ? clear_bhb_loop+0x40/0x90 [ 775.537333][T18790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.537367][T18790] RIP: 0033:0x7f212e59c629 [ 775.537394][T18790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.537421][T18790] RSP: 002b:00007f212f3d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.537449][T18790] RAX: ffffffffffffffda RBX: 00007f212e815fa0 RCX: 00007f212e59c629 [ 775.537469][T18790] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 775.537486][T18790] RBP: 00007f212e632b39 R08: 0000000000000000 R09: 0000000000000000 [ 775.537504][T18790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.537522][T18790] R13: 00007f212e816038 R14: 00007f212e815fa0 R15: 00007ffda0bcb328 [ 775.537564][T18790] [ 775.918268][T18788] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2631'. [ 775.937523][T16662] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 775.949472][T16662] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 775.957889][T16662] CPU: 0 UID: 0 PID: 16662 Comm: kworker/0:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 775.968929][T16662] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 775.974110][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 775.984162][T16662] Workqueue: events vidtv_mux_tick [ 775.989284][T16662] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 775.995886][T16662] Code: cc b0 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 776.015497][T16662] RSP: 0018:ffffc90005c5f3f8 EFLAGS: 00010202 [ 776.021561][T16662] RAX: 0000000000000002 RBX: ffffc90005c5f678 RCX: 0000000000000002 [ 776.029529][T16662] RDX: 0000000000000000 RSI: ffffffff882b4a34 RDI: ffff88805d0a5ac0 [ 776.037496][T16662] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 776.045464][T16662] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90005c5f698 [ 776.053431][T16662] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 776.061401][T16662] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 776.070332][T16662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.076916][T16662] CR2: 00007f1b5adcefe0 CR3: 00000000764c4000 CR4: 00000000003526f0 [ 776.084887][T16662] Call Trace: [ 776.088163][T16662] [ 776.091091][T16662] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 776.097439][T16662] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 776.103002][T16662] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 776.109090][T16662] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 776.114825][T16662] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 776.120921][T16662] ? __skb_to_sgvec+0x541/0xad0 [ 776.125802][T16662] vidtv_mux_push_si+0x932/0xe80 [ 776.130745][T16662] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 776.136218][T16662] ? __pfx_vidtv_ts_pcr_write_into+0x10/0x10 [ 776.142215][T16662] ? do_raw_spin_lock+0x128/0x260 [ 776.147251][T16662] ? debug_object_activate+0x331/0x490 [ 776.152724][T16662] vidtv_mux_tick+0xe9b/0x1480 [ 776.157492][T16662] ? debug_object_activate+0x331/0x490 [ 776.162962][T16662] ? __lock_acquire+0x4a5/0x2630 [ 776.167911][T16662] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 776.173114][T16662] ? __lock_acquire+0x4a5/0x2630 [ 776.178057][T16662] ? debug_object_deactivate+0x2e4/0x3b0 [ 776.183696][T16662] ? finish_task_switch.isra.0+0x200/0xb80 [ 776.189506][T16662] ? rcu_is_watching+0x12/0xc0 [ 776.194282][T16662] process_one_work+0x9d7/0x1920 [ 776.199235][T16662] ? __pfx_process_one_work+0x10/0x10 [ 776.204620][T16662] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 776.209821][T16662] worker_thread+0x5da/0xe40 [ 776.214421][T16662] ? __pfx_worker_thread+0x10/0x10 [ 776.219543][T16662] ? kthread+0x13a/0x450 [ 776.223789][T16662] ? __pfx_worker_thread+0x10/0x10 [ 776.228906][T16662] kthread+0x370/0x450 [ 776.232980][T16662] ? __pfx_kthread+0x10/0x10 [ 776.237576][T16662] ret_from_fork+0x754/0xd80 [ 776.242179][T16662] ? __pfx_ret_from_fork+0x10/0x10 [ 776.247299][T16662] ? __switch_to+0x7b4/0x1120 [ 776.251976][T16662] ? __pfx_kthread+0x10/0x10 [ 776.256572][T16662] ret_from_fork_asm+0x1a/0x30 [ 776.261342][T16662] [ 776.264351][T16662] Modules linked in: [ 776.269782][T16662] ---[ end trace 0000000000000000 ]--- [ 776.327751][T18788] netlink: zone id is out of range [ 776.377761][T18788] netlink: zone id is out of range [ 776.475078][T18788] netlink: set zone limit has 8 unknown bytes [ 776.498150][T16662] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 776.505122][T16662] Code: cc b0 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 776.528197][T16662] RSP: 0018:ffffc90005c5f3f8 EFLAGS: 00010202 [ 776.534307][T16662] RAX: 0000000000000002 RBX: ffffc90005c5f678 RCX: 0000000000000002 [ 776.544391][T16662] RDX: 0000000000000000 RSI: ffffffff882b4a34 RDI: ffff88805d0a5ac0 [ 776.565068][T16662] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 776.573341][T16662] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90005c5f698 [ 776.581377][T16662] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 776.589403][T16662] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 776.608629][T16662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.621371][T16662] CR2: 00007f12931daff8 CR3: 000000004be1c000 CR4: 00000000003526f0 [ 776.667656][T16662] Kernel panic - not syncing: Fatal exception [ 776.674101][T16662] Kernel Offset: disabled [ 776.678414][T16662] Rebooting in 86400 seconds..