last executing test programs: 16m56.354016265s ago: executing program 1 (id=1160): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/7, 0x7) io_uring_setup$auto(0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x2, 0xd}, 0xacc}, 0x3, 0x10000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000040)=""/4099, 0xfd98) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0xf429, 0xb) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="13fd2bbd14c7323c91bb18"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0xd, 0x4000000000df, 0xeb1, 0x401, 0x4000000000008000) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) sendto$auto(r3, 0x0, 0x6fffff9, 0xfffffff8, 0x0, 0x36) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) 16m55.680070103s ago: executing program 1 (id=1163): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x64842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x11, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x222680, 0x0) signalfd4$auto(0xffffffffffffffff, 0x0, 0x8, 0x800) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0x8000, 0x0) 16m54.784083662s ago: executing program 1 (id=1165): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x1e, 0x1, 0x0) getsockname$auto(r1, &(0x7f0000000000), &(0x7f0000000040)=0x3) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x1a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x668001, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(r2, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x0, 0x1002}, 0x5}, 0x2, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) 16m53.190467757s ago: executing program 1 (id=1168): socket(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x4}, @NET_SHAPER_A_LEAVES={0x8, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0x4}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x14) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r3 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x3616, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x8000, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x29, 0xa, 0xfffffffc) ioctl$auto(r7, 0x89a1, 0x24) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000100)="17") sendfile$auto(0xffffffffffffffff, r3, &(0x7f0000000140), 0x101) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae8a, &(0x7f0000000100)={0x66}) 16m51.821471327s ago: executing program 1 (id=1174): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r0 = socket(0xa, 0x2, 0x3a) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x40080) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000e80)=""/215, 0xd7) 16m51.046646635s ago: executing program 1 (id=1176): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) getsockopt$auto(r0, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$auto(r1, 0x8946, 0x24) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x80802, 0x0) ioctl$auto(r2, 0x800264bd, r2) write$auto(0x3, 0x0, 0x7fffffff) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000080)=@batch={0x7, 0x9, 0x1, 0x8, 0x6, r2, 0x2, 0x8}, 0x80) 16m35.99699484s ago: executing program 32 (id=1176): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) getsockopt$auto(r0, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$auto(r1, 0x8946, 0x24) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x80802, 0x0) ioctl$auto(r2, 0x800264bd, r2) write$auto(0x3, 0x0, 0x7fffffff) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000080)=@batch={0x7, 0x9, 0x1, 0x8, 0x6, r2, 0x2, 0x8}, 0x80) 12m3.867626866s ago: executing program 4 (id=1988): close_range$auto(0x2, 0x8, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty38\x00', 0x301, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mkdir$auto(0x0, 0xff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0xffffffffffffffff, 0x6, 0x3, 0x69, 0x8, 0x4, 0xda5, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x3, 0xfffffffffffffff7, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d40, 0x3, 0x2, 0x8000000000000006]}, 0x0) 12m1.530801145s ago: executing program 4 (id=1997): r0 = openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats\x00', 0x80880, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2c, 0x5, 0x8) fstat$auto(r1, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x400c4d02, r2) mmap$auto(0x0, 0x202000f, 0xba, 0xeb1, r0, 0x9) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000080)={0x8f}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x842, 0xfffffffffffffffb, 0x10001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = getpid() openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="67e9117975959cff0b86399df8d9f74c30d92f851d50b7e9032c9b460ea5fa24659849a4eca06a9639d47630f4c9df5a3951d2a753f683ec627b52b87a2b4200e8493837c526ca438b79e450c9edf0b731542b", 0xffffffff}, 0x6, 0x2) r6 = socket(0xa, 0x1, 0x84) setsockopt$auto(r6, 0x0, 0x40, 0x0, 0x10000) prctl$auto(0x3d, 0x800000a141, r5, 0x372, 0x7) madvise$auto(0x9, 0xffffffffffff0004, 0x19) shmget$auto(0x8, 0x10566, 0x52fe) 11m57.432508497s ago: executing program 4 (id=2005): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) memfd_secret$auto(0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a00)={0x50, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x20, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0x26}]}, @typed={0xf, 0xd, 0x0, 0x0, @str='ovs_packet\x00'}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x1, 0x84) r3 = io_uring_setup$auto(0x6, 0x0) r4 = socket(0xa, 0x2, 0x88) r5 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x4, &(0x7f0000000040)=@link_update={r5, @new_prog_fd=r6, 0x1, @old_prog_fd=r3}, 0x9) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r8 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), r7) syz_clone(0x4000000, &(0x7f00000000c0)="6b1d84dbd68e1d6682802029250b6f13308a520d783d44d1abda94cb82bf1c5b8b06241386e146da7582db26625780a1a2ae7a6ffdf4d292feb773cfdc684fe97d75b137482b00e6c1db27dc27cbbb7aabd82500e8f7c54c81208f9e7afb7af40ebdce538c23020212d9037e9f613f7dd711b4a75500cc39f9a92e9c3fd6a0ebe2d36d1cfba80ecad73524f0881f3ecbe9588c5540ca440b644cc357c51dadccdbd6152f2578d2646cff8b9aa3a0f8c0374925428bbc2f677216fa62a67af98ebfc2c4233308ca5969552063ac06a11017e6200c34d516aeeb6c41d3289c3870263ed5ca0bc24d", 0xe7, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="f52263c830300ce48407583927b095a7210a4db03e0ae68e2176264b37411266d55d0413aa61aaeac58db566b30326be7e714f00dc1062699fc0a1c91bf313719da4c79c5a17ec9a817698aaba9cbc1e25fc6ff88ec208ebd920f6e5e3822af69f234c6f6c32ebb4eabc4901e23dd1c3aec6eb57b2b9a89f41e3225b43f34b1c0ecfa0e29c887f365c1dc4b85ff9591a9d606f67876ac6a69acef82db3e1f0a981d2e16cf78be4e985b3575b756ec59db55083778b0e9f5ec3d7b065bbf2fb90abb52e4e3cbe49b84446ae4c3c23cc0fbcbd5a66c67c1c77587677deafbd01e0db5f4cb29408933b1e5cb57846") sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r7, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x100003}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x7825}, @NCSI_ATTR_PACKAGE_LIST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8840) 11m56.05439373s ago: executing program 4 (id=2009): socket(0x2, 0x1, 0x106) r0 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vbi19\x00', 0x68881, 0x0) ioctl$auto(r3, 0x80845663, r3) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x12b742, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) statx$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x7fffffff, 0x61, &(0x7f0000000180)={0xc0a1, 0x1, 0x401, 0x567, 0xee00, 0x0, 0x1, 0x5, 0x8, 0x5, 0x9, 0x3, {0x6, 0x7}, {0x1b, 0x1}, {0x8ba}, {0x8, 0x100}, 0x13ba, 0xf, 0x3, 0x40, 0x1, 0x9, 0x1, 0x100000001, 0x1, 0x1, 0x80009, 0x2, [0xfffffffffffffff0, 0xadb3, 0x4, 0x4, 0x6, 0x3, 0x46514c9e, 0x100, 0x10001]}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x808882, 0x0) write$auto(r5, &(0x7f00000004c0)='1\x00\\\xa0\x04|\xfd\xca\x12\xfa\b\x1c\xc7k\x923\xe05\"3n\x84n#\xd1\xcaso\v\xf0\xda\xbb\x86\xbcX\xb4\x999\\\xa8&;<\xca\xa8\x05\x9d\x9e-\xc3\x93\xaa\xda\x02\x03\xddUbHu\x01\x00\n\x00\xac\xa7\x93T\aA\xbd\xc0\xb8K\xd7\xed\xcbP\xa1\xfe\xc7\xa1\x8b\xa7\x02\xad\xbc\xfaq*0F\xff&\xbb+\x9b\xe2\xbfd\xf7\xde\xb40\x1d=\x99\xe2\x06\xbf\x9cNS\xbf\x82\x9c\xfb', 0x3) r6 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) writev$auto(r6, &(0x7f0000001c80)={0x0, 0x101}, 0x6) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000040)={0x754, 0x5e}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000300), r2) setrlimit$auto(0x1000000007, 0x0) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="7e483683", @ANYRES16=r8, @ANYBLOB="01032dbd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0xa) connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 11m53.551444716s ago: executing program 4 (id=2014): openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats\x00', 0x80880, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2c, 0x5, 0x8) fstat$auto(r0, 0x0) close_range$auto(0x2, 0x8000, 0x0) 11m51.206651403s ago: executing program 4 (id=2018): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$auto(r0, &(0x7f0000000000)=@hci={0x1f, 0x0, 0x1}, 0x1) prctl$auto_PR_SET_MM(0x23, 0x7, r0, 0x24000, 0x9) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x22500, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xe31, r1, 0x7ffc) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xe, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) lchown$auto(0x0, 0xee01, 0xee00) mmap$auto(0x20000000000, 0x810004, 0x400000000ffb, 0x800000000801e, r1, 0x40000000008000) readv$auto(0x4, &(0x7f0000000000)={0x0, 0x10000}, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) write$auto(r3, &(0x7f0000000040)='$\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), r2) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000ffdbdf2505000000a05d27885bd453dba4cab4407a02513117010000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000850) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) msgrcv$auto(0x0, 0x0, 0x4005, 0xffdffffffffffffe, 0x6) rseq$auto(&(0x7f00000001c0)={0x6, 0x2, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4b06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20a7caa52b14b41536c93e9d8cd26bca9d9fa113ee85c4f7537ba70c29a8bbc8192e6d1"}, 0x69d3, 0x3, 0x2af4) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/health/break_health\x00', 0x169c81, 0x0) 11m36.101881242s ago: executing program 33 (id=2018): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$auto(r0, &(0x7f0000000000)=@hci={0x1f, 0x0, 0x1}, 0x1) prctl$auto_PR_SET_MM(0x23, 0x7, r0, 0x24000, 0x9) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x22500, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xe31, r1, 0x7ffc) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xe, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) lchown$auto(0x0, 0xee01, 0xee00) mmap$auto(0x20000000000, 0x810004, 0x400000000ffb, 0x800000000801e, r1, 0x40000000008000) readv$auto(0x4, &(0x7f0000000000)={0x0, 0x10000}, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) write$auto(r3, &(0x7f0000000040)='$\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), r2) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000ffdbdf2505000000a05d27885bd453dba4cab4407a02513117010000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000850) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) msgrcv$auto(0x0, 0x0, 0x4005, 0xffdffffffffffffe, 0x6) rseq$auto(&(0x7f00000001c0)={0x6, 0x2, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4b06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20a7caa52b14b41536c93e9d8cd26bca9d9fa113ee85c4f7537ba70c29a8bbc8192e6d1"}, 0x69d3, 0x3, 0x2af4) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/health/break_health\x00', 0x169c81, 0x0) 4m9.917622156s ago: executing program 2 (id=3212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000200), r0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) setxattrat$auto(r2, &(0x7f0000000000)='./file0\x00', 0x401, &(0x7f0000000080)='netdevsim0\x00', &(0x7f00000000c0)={0x3, 0x6, 0x4}, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) shutdown$auto(0x200000003, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) read$auto_clk_summary_fops_(r2, &(0x7f0000000100)=""/233, 0xe9) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DMABUF_QUEUES={0xc, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 4m9.619009572s ago: executing program 2 (id=3213): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyde/power/autosuspend_delay_ms\x00', 0x1c9440, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) (async) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) (async) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) ioctl$auto_UI_SET_SWBIT(r3, 0x4004556d, 0x0) (async) ioctl$auto_UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = fanotify_init$auto(0x5, 0x2000000000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r6 = socket(0xa, 0x3, 0x6) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0xbf5, 0x8, 0x8001, 0x0, 0xc0, "2a7913b3e15868dea7eb57e0"}) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0xbf5, 0x8, 0x8001, 0x0, 0xc0, "2a7913b3e15868dea7eb57e0"}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r7 = timerfd_create$auto(0x9, 0x0) bpf$auto(0x9, &(0x7f0000000040)=@bpf_attr_5={@target_fd=r7, r5, 0x9e, 0x8, r4, @relative_fd=r2, 0xd}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0x4) r8 = open(0x0, 0x261c2, 0x81) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r8, 0x0, 0x3}, 0xc) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) 4m7.754303031s ago: executing program 2 (id=3218): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000140), 0x20d886, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x7, 0x2817, 0x4, 0x200004, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x5, 0x8}, 0x10) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r1 = socket(0xa, 0x1, 0x84) get_robust_list$auto(0x0, 0xffffffffffffffff, 0x0) getsockopt$auto(r1, 0x0, 0x481, 0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) mmap$auto(0x0, 0x8, 0xdb, 0x9b70, 0x2, 0x93) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40402, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram7/queue/discard_max_bytes\x00', 0x181482, 0x0) read$auto(r2, 0x0, 0x80000) write$auto(0x3, 0x0, 0xfdef) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x88000) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r4, 0x7005, 0x0) 4m5.854216399s ago: executing program 2 (id=3223): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x15, 0x5, 0xfffffff9) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) chdir$auto(0x0) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 4m5.302050574s ago: executing program 2 (id=3225): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x16f) fchmod$auto(r0, 0x7439) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x80, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x0) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x309801, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000480)=""/4083, 0xff3) openat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0xb, 0x8) setreuid$auto(0x4, 0x8) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0xfee) 4m1.465679997s ago: executing program 2 (id=3235): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000e80)=""/206, 0xce) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x90006441, 0xc35) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) mq_open$auto(&(0x7f0000000840)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0xfffffeff, 0x3, &(0x7f0000000980)={0x1, 0x2f46520, 0x2, 0x9}) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) select$auto(0x9, &(0x7f0000000340)={[0x8, 0x5, 0xffff, 0x9, 0xf55c, 0x4, 0x8, 0x1, 0x9, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x2, 0x6, 0x89, 0x3, 0x5]}, &(0x7f00000003c0)={[0x101, 0x9a, 0x10, 0x4, 0x3, 0x1000000000009, 0x5, 0x223d, 0x10000, 0x3, 0x1000, 0x6, 0x4, 0x10000, 0x6, 0x10]}, &(0x7f0000000440)={[0xfffffffffffffff3, 0x8b0, 0x743b, 0x0, 0x10, 0x8, 0xffffffffffffffff, 0x6, 0x5f, 0x9, 0x6, 0x0, 0x401, 0x1, 0x9, 0x3]}, &(0x7f00000004c0)={0x7fff, 0x3}) pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0xfded, 0x3) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r3) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40210}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="1c0001800800030000000080080003000008000008000300e40600004800018008000300fd0d000008000400ff7f000008000100", @ANYRES32=r4, @ANYBLOB="080004000900000008000100", @ANYRES32=r4, @ANYBLOB="14000200626174616476300000000000000000000800030000080000"], 0x17c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x124, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7c7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdd92}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PLCA_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_PLCA_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r4, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) listen$auto(0x3, 0x83) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x100, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 4m0.121436762s ago: executing program 0 (id=3240): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x88, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x88}, 0x1, 0x0, 0x0, 0x4040001}, 0x24048084) (async) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000200)={0x0, 0xfff}, 0x200, &(0x7f00000002c0)={&(0x7f0000000240)="403bad1f997ed659d748", 0xc9fa}, 0x3, 0xfffffffffffffffd) (async, rerun: 64) close_range$auto(r0, r0, 0x6390) (async, rerun: 64) socket(0x2, 0x80802, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101081, 0x0) (async, rerun: 64) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x40d01, 0x0) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8040, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x400803, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (rerun: 32) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/012/001\x00', 0x360240, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) (rerun: 32) sendfile$auto(r3, r3, 0x0, 0xea) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0) (async, rerun: 32) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x4) (rerun: 32) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) sendmsg$auto_NL80211_CMD_JOIN_OCB(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d4070000", @ANYRES16=r5, @ANYRES8=r1], 0x7d4}, 0x1, 0x0, 0x0, 0x40}, 0x28080) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r6 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r6, 0x0, 0xc3) 3m58.543884527s ago: executing program 0 (id=3244): sysinfo$auto(&(0x7f0000000000)={0xc, [0x200, 0x100000000, 0x1], 0xc8, 0x91e2, 0x64, 0xe1d, 0x9, 0x1000, 0x7, 0x0, 0x1910, 0x80, 0x9}) setsockopt$auto(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)=':}*\x00', 0xd7) sysinfo$auto(&(0x7f00000000c0)={0xce33, [0x100, 0x2, 0xffff], 0x9, 0x100000000, 0x41ae, 0x6, 0x1, 0x6a7, 0x5, 0x0, 0x3, 0x2, 0xfffff5a9}) sysinfo$auto(&(0x7f0000000140)={0x5, [0x6, 0x81, 0xffffffff], 0x2, 0x5, 0x401, 0x3, 0xe65, 0x9, 0x9c, 0x0, 0xacf, 0xffffffffffffff97, 0x76a}) r0 = socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch$auto(r0, &(0x7f00000001c0)='./file0\x00', 0x6) r1 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000200)={@_si_pad}, 0xb4, &(0x7f0000000280)={{0x6, 0x1ff}, {0x9, 0x200}, 0xffffffffffffff80, 0x6a, 0xfffffffffffffffa, 0x2, 0x4, 0xc46a, 0x28, 0x9, 0x4, 0x200, 0x0, 0x2, 0x6, 0x8001}) process_vm_readv$auto(r1, &(0x7f0000000380)={&(0x7f0000000340)="564ccb72ba6071ff05ed6d2cc13b3641229a52c103ed91ccef84252952f17878fbe7d1b88194e12b2dbaa1f891b5270c0324b20a5fa5f605f80a1e6d45", 0xe357}, 0xfcfd, &(0x7f00000013c0)={&(0x7f00000003c0)="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", 0x69a}, 0xfffffffffffffff8, 0x3) sysinfo$auto(&(0x7f0000001400)={0xd, [0x800, 0x6, 0x7fffffff], 0xc, 0x4, 0x4, 0x4, 0x2b, 0xbd, 0x7, 0x0, 0xfff, 0x0, 0x1}) r2 = bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001480)=@task_fd_query={r1, r0, 0x942b, 0x2, 0x3ff, 0x1, r0, 0x5, 0x3}, 0x50c) close_range$auto(r4, r0, 0x4) ioctl$auto_PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000001540)={0x2, 0x3a1f}) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000001580)="5b897754f631820bdf8ddc06abd9c67919a73b7b445e72afdd7cf1095710a90223d956532c552987a92498ca452b1545debb95225bcaebd4f9fbdda0493942fb2764ed3d82269f134ac9d96c1e138cd6ecdb58986f18d1f2e824d4148ee886e0c2d885fab19b7ddce5e7ded7f839ac09fb4a8c9d5ac0f360782d02a4ad928c8f31b5f620d9039aaa88215624b5d651fef4d01a84de3268d255ff459654ed20748e07fd", 0xa3) r5 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/ns/cgroup\x00', 0x10040, 0x0) getpid() ioctl$auto_NS_GET_USERNS(r5, 0xb701, 0x0) madvise$auto(0x9, 0x6, 0x2712) sysinfo$auto(&(0x7f0000001680)={0x2, [0x6, 0x5, 0xffffffffffffffff], 0x2, 0x189, 0x5, 0x4, 0xc2, 0x0, 0x6, 0x0, 0x9, 0x1, 0x7}) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/debug/netdevsim/netdevsim4/trap_flow_action_cookie\x00', 0x181042, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ptywc\x00', 0x802000, 0x0) ioctl$auto_TCFLSH2(r6, 0x540b, &(0x7f0000001780)="691e6388ebfbb96ea74eed0b24c472d7e8d12621a66f708653e992f3a048569819659679782b1c07fed40265c703ddbc1f1ff3d0a78f823beaeb41855f3992fb08b90d75f2a06b") r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r5, 0x8004b709, &(0x7f0000001800)=0x3) rt_tgsigqueueinfo$auto_SIGCONT(r7, r3, 0x12, &(0x7f0000001840)={@_si_pad}) epoll_create1$auto(0xffffffff) sysinfo$auto(&(0x7f00000018c0)={0x81, [0x3, 0x7, 0x7], 0x1, 0x7, 0x8, 0x5e9, 0x2, 0x10000, 0x402, 0x0, 0x7fffffff, 0x9, 0x4}) r8 = prctl$auto_PR_SET_MM_ENV_START(0x1, 0xa, r1, 0x2, 0x10) ioctl$auto_FIONCLEX(r8, 0x5450, 0x7fffffffffffffff) socket(0x1, 0x1, 0x100) sysinfo$auto(&(0x7f0000001940)={0x7ff, [0x100000001, 0x8, 0x33a], 0x8, 0x4, 0x2, 0x4, 0x4, 0xffffffffffffff0d, 0xff, 0x0, 0x6, 0x81}) ioctl$auto_FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x3) 3m48.09986183s ago: executing program 0 (id=3258): setresgid$auto(0x81, 0x800000a0, 0x8) r0 = getegid() openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) setfsgid$auto(r0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x35, 0x1, 0x4, 0x65f, 0x2) setsockopt$auto(r1, 0x10000000084, 0xfffffffd, 0x0, 0x10) rt_sigprocmask$auto(0x800, 0x0, 0x0, 0x8) 3m46.100427005s ago: executing program 34 (id=3235): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000e80)=""/206, 0xce) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x90006441, 0xc35) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) mq_open$auto(&(0x7f0000000840)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0xfffffeff, 0x3, &(0x7f0000000980)={0x1, 0x2f46520, 0x2, 0x9}) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) select$auto(0x9, &(0x7f0000000340)={[0x8, 0x5, 0xffff, 0x9, 0xf55c, 0x4, 0x8, 0x1, 0x9, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x2, 0x6, 0x89, 0x3, 0x5]}, &(0x7f00000003c0)={[0x101, 0x9a, 0x10, 0x4, 0x3, 0x1000000000009, 0x5, 0x223d, 0x10000, 0x3, 0x1000, 0x6, 0x4, 0x10000, 0x6, 0x10]}, &(0x7f0000000440)={[0xfffffffffffffff3, 0x8b0, 0x743b, 0x0, 0x10, 0x8, 0xffffffffffffffff, 0x6, 0x5f, 0x9, 0x6, 0x0, 0x401, 0x1, 0x9, 0x3]}, &(0x7f00000004c0)={0x7fff, 0x3}) pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0xfded, 0x3) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r3) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40210}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="1c0001800800030000000080080003000008000008000300e40600004800018008000300fd0d000008000400ff7f000008000100", @ANYRES32=r4, @ANYBLOB="080004000900000008000100", @ANYRES32=r4, @ANYBLOB="14000200626174616476300000000000000000000800030000080000"], 0x17c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x124, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7c7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdd92}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PLCA_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_PLCA_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r4, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) listen$auto(0x3, 0x83) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x100, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 3m41.761050837s ago: executing program 0 (id=3267): socket(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r1 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x98fd3f0000000000, 0x20004000}, 0x100000) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x3616, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(&(0x7f00000000c0)={0x8059, @inferred=r2, 0x2, 0x8000000000000000, 0x35ba}, &(0x7f0000000500)={0x6, 0x7, 0x7, 0x0, 0x20000000, 0x6, 0x800, 0x9, 0x4, 0x2000000, 0x2, 0xf701, 0x7, 0x0, 0x2, 0x80000000, 0xa99, 0x5, 0x9, 0x2, 0x8, 0x1, 0x7, 0x5, 0x62, 0x7, 0x9, 0xc5, 0x7, 0x4, 0x3677, [0x4, 0x204b, 0x2, 0x200, 0x4, 0x1a2, 0x2, 0x0, 0x4, 0x400, 0x2, 0x216, 0x1, 0x7fffffffffffffff, 0x247ec0000000000, 0x0, 0x80000001, 0x10001, 0x2, 0x7f, 0x1, 0x3, 0x3, 0x180, 0x7, 0xe7bf, 0x6, 0x8a88, 0x2, 0x5, 0x8, 0x7, 0x6, 0x66, 0x3b, 0x3, 0x50a5, 0xffffffffffff7fff, 0x9, 0x7, 0x100000001, 0x6, 0x7fffffffffffffff], "dea07cf503f7d5c1b5ba920b5537c230c4b7fbda2352a4fff095a2b06eb3ce55b9831c27a91f39ae41f39b1beac686c3acc041b2d2ab7894a89b7854de778eecdbdf459f6cacdba74793109dc022da45914d04aebf93c003409f3218a555508d1b557bc9f009974f928aac27ffb3555116ff21f1b6804e1f0777a0d983693b183fc686e88a45574d983a6926459a82f57ae9f3405e75e6b8b8d4881a0df2b9df83a214fc673a71dd063a784861467742685e4c3af37274000498864329cd7aa1a93c0ba7d5621add5ade08995cc5b2db17effc5c77468f618f7a88010c304d28529b"}, 0x3, 0x5) r4 = socketcall$auto(0x8000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x29, 0xa, 0xfffffffc) ioctl$auto(r6, 0x89a1, 0x24) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000100)="17") sendfile$auto(0xffffffffffffffff, r1, &(0x7f0000000140), 0x101) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae8a, &(0x7f0000000100)={0x66}) 3m33.20716333s ago: executing program 0 (id=3273): inotify_init1$auto(0x800) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000000)={"fc6ee1de40088185080c6f23db31859e1aa28135b1aeddf36c5a795b059c5d1ad50a04e2703df24d8c114fd481fa0c1ce790a9cdce1d000d6b80385ee5cb7abfb5fa2eb489d476f70fb1512d9039f905b2c28db3ee249f7a517f565a38a773c702840743a16c6a157c337edfb23a63714694c8b0a6105ec34fcef12d0c94c9f8", "6409f5ff5f0eae4d4f04c916fa93935db3a0c7690897b5404f0b684f939e81b0663c52532c661c4bbde17990fd8ecc8600cd3eeb84f4b7c03e5f21781eb4c32a457f217e1afbcfe3dd3b239519b595595a5b9bd599263e26dad63fc2747f546ec7884cea8afd9304cd11cec9e6f460c95c39cdfe0046bc5e1c154a180f794ad0", 0x1f}) r1 = prctl$auto_PR_SYS_DISPATCH_ON(0x8, 0x1, 0x0, 0x9, 0x401) read$auto_ext4_dir_operations_ext4(r1, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x2, 0xdf, 0xeb2, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x1e, 0x1, 0x0) getsockname$auto(r3, &(0x7f0000000000), &(0x7f0000000040)=0x3) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) write$auto(0xffffffffffffffff, 0x0, 0x1a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x5, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(r4, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x0, 0x1102}, 0x5}, 0x2, 0x80100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3m23.497135475s ago: executing program 0 (id=3279): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/card0/dummy_pcm\x00', 0x1c1080, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000010c0)=""/4096, 0x1000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'rose0\x00'}) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x600c000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf251c"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/udp\x00', 0x22180, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000380)=""/122, 0xc7) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000400)=""/241, 0xf1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m8.160026538s ago: executing program 35 (id=3279): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/card0/dummy_pcm\x00', 0x1c1080, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000010c0)=""/4096, 0x1000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'rose0\x00'}) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x600c000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf251c"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/udp\x00', 0x22180, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000380)=""/122, 0xc7) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000400)=""/241, 0xf1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 12.619845597s ago: executing program 6 (id=3677): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto(0x3, 0x541b, 0x38) unshare$auto(0x7fffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0603d06, 0x0) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r3, 0x2) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x86, 0x0) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x7, 0x7}, 0x9, 0x5) landlock_restrict_self$auto(r3, 0x1) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r0, 0x3, 0x44, &(0x7f0000000100)=',}#{\x00', 0xf) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) 11.743733889s ago: executing program 5 (id=3681): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x8) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002ac0)='/$\x00', 0x0, 0x4, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0x9, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/queues/tx-3/xps_cpus\x00', 0x1, 0x0) 10.317544663s ago: executing program 7 (id=3684): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) setreuid$auto(0x9, 0x1) (async) setreuid$auto(0x9, 0x1) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) (async) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40, 0xa0}, 0x18) r1 = setfsuid$auto(0x0) r2 = setfsgid$auto(0x0) setresgid$auto(r2, 0x0, r2) newfstatat$auto(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x8, 0x49e, 0x5, 0x80000001, r1, r2, 0x0, 0x81, 0x3, 0xc, 0x8, 0x3, 0x5, 0x2, 0x39ec, 0x100, 0x6}, 0x6101b485) get_robust_list$auto(0x1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r3) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010025d170f2b333f07d57a7b8695b49facd839e00000000000000000000004200000000644c315cd9f13f7e38b23bcd3daa4052976d7f35e764"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) write$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/ram14\x00', 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0c01, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0c01, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r5 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) (async) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) ioctl$auto(0x3, 0xc0205649, r5) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 9.377798649s ago: executing program 5 (id=3685): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/030/001\x00', 0x2901, 0x0) ioctl$auto(r2, 0x40085511, r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r3, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xffffff00, 0x3, 0x0) 6.866103647s ago: executing program 6 (id=3687): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x8) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002ac0)='/$\x00', 0x0, 0x4, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0x9, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/queues/tx-3/xps_cpus\x00', 0x1, 0x0) 5.691486029s ago: executing program 6 (id=3688): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x6f29, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab8) lchown$auto(&(0x7f00000001c0)='./file0\x00', 0xee01, 0x0) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) r1 = socket$nl_generic(0x10, 0x3, 0x10) readlinkat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='/dev/ptyze\x00\xa0\x8az\xce!M\x14\xcd\"{>\xb7%\xa1\xfb}\xa9\xd2UA@\x1c\xb0-\xb3\x83\x91\xbfa\xa7\x13q\xfcj\x02v\x06\xe0\x84\v\'\xf4\xe0\xb7\x98\xbcF%\xaa\x1b\x94\x14\xfd\x85\xf4H\\\x14\xf7l\x88\xe1\xca\xacFu\xf1V\x1bdC\xd7r\xf2>i\xc4\xdf~\x9c\\\xd7\xd2\x90\x97\x1d\xfe*\a\x10%\xcdo\x98^\x97\xe9x\xfdA\xab@\xa7\x03hh\xc6>\x9e\xc2\xb6\x06\xf2\xe7\xb2\x14\v \xa1\xfeZ\xca\xc1\x17\xa6d\x8d\x1c\xb2\xbc\x0eOJ\t\xbeW\x009\x19\xd1\x05\x1a\xa0bh\xff\x02\x03Ym\xea}B\xb0{A\f\x83\xfe\xe2\x17\xd4\x7fa@,\xe3<\xdcz\xbc\xcb\xf0Jc\xb2\x91\xbc\x86\xdc\x16\xb0\xf2\xa6\xc3\xb87\a*\xaf\rj\xd4\t\xaa\x05\xda\x88hr\xa0\\jU\xee_\x8d\x1a\x91\x8e\xd7!_\xb4\xc2!\r@#\b^b\x14\xde\x03\x1fMSs\x8aE\xb1\xa5\xcdhO2\xdau\x1f\xfe', 0x8021) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyze\x00', 0x4a0004, 0x0) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x80}, 0x20048880) unlink$auto(&(0x7f0000000140)='./file0\x00') 5.686202634s ago: executing program 5 (id=3696): select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0xd3b, 0x8000000000, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x3, 0x80000001, 0xb36, 0x40800000000000, 0x9, 0x8, 0xfffffffffffffff8]}, 0x0) 5.302399486s ago: executing program 5 (id=3689): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyd6\x00', 0x140, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) write$auto(r0, &(0x7f0000000300)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc5k\xf6\xe2\x7f\xe7\xce\b@\xf3\x8d\x89b1\x8b\xaek6o]\xa1\x18\xd6b\xce\x9b\xf6;\"\xcfg\'\t\x00\x00\x00\xde\xf4\xd2\xaf\xd9N|\x9emP\xea\x81\x8e\x10\xc4\xaa\xc9\x1f\f\xf4\x80N\xe0\x1bMOZ\xbe\xcbd\xca!a\x8a\x8a\x88\"\xb0\xd2N\xd5\xa41`\xf7\x82x\xf8\xb6<\xb2\xe5\x85\'\xd7\xb2\xd3b\x00\xf3\x02h?\xe1\xe8C[\x1a\xf8\xff\xff\xff\xff\xff\xff\xffV\"q\xc6\x1a:\x8e\xee6K\xfb-\xea\x90+b\x96\x97\xd6\xecm!\x1d\xb4\x04\xa8\xe1\x03\x8d\xad\xed\xaa\xfa\xe0\xe2\x8c\a\x88g\xed\x93\xad\x9fG\xfd\xc1&\xaf3.\nx5\xd4\x83\xd7\xd7\xaf\xc6\xc1\t\xdc\xff\t\xf1\xe3\x7f\x95\x80\xc5\xe0h!Z\x9a@\xa4A\xee\xbc\x9aR\xdf%\xe8p\xcf\x19\xc2\x8a\xe2\xf5\xb4g\x06]\x13yN\xa0u\xfc\xd3\x9bA\xf6\x97U\xeb8\xb37\xf8X\xaf\xbf\n\xa3q\x0f\x92,\x18\xe4RIB\x80\xdc\xf5)\xdd\xa0\'\xa4\xe5\xd7\t\x7f@1\xbb\xb3=\xd9\x96\x82<\xdd\xb9\xb6i\xa4\x03\xadd', 0xe) mmap$auto(0x20000, 0x4020009, 0x100000000df, 0x50, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x0, 0x1000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000100)='/dev/v4l-subdev5\x00') r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x49, &(0x7f0000000040)='!\x00', 0x1ff) 5.249122647s ago: executing program 6 (id=3690): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mq_timedsend$auto(r2, 0x0, 0x2, 0x9, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) read$auto(r1, 0x0, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x8a2b42, 0x0) socket(0x22, 0x3, 0x0) sendfile$auto(r0, r4, 0x0, 0x1000200) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) socketpair$auto(0xffffffff, 0x0, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x801, 0x106) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x7b, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x79, 0x2, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) socket(0x11, 0x80000, 0x84) 4.540880377s ago: executing program 5 (id=3691): pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) r0 = semctl$auto(0x80001ff, 0x804, 0x13, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = timerfd_create$auto(0x1, 0x0) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0, &(0x7f00000001c0)={0x0, 0xa50, 0x10000}, 0x1000) unshare$auto(0x40000080) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000000)={0x7, 0xa, 0x4, 0x1, 0xfd1b, r0}) prctl$auto_PR_SET_MM_START_CODE(0x8, 0x1, r2, 0x7, 0x8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x7, 0x109, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439d070a00", @raw=0x2}, 0x6, 0x4, 0x6, @raw=0xd7, @integer64={0x442df60c, 0x81, 0x7}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000000c0)={@inferred=r4, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) 4.540530594s ago: executing program 3 (id=3692): r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/0000:00:02.0/state\x00', 0x100, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b72, r0, 0x8000) r1 = socket(0x25, 0x1, 0x9ef) syslog$auto(0xa, 0xfffffffffffffffe, 0x3) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000300)="9855b3caf5d650e17d99d1829330c5606bb4bc9d59654bf8ea1b93de166e52fcf1a0e85a6e90e0b18c45fd512ac52336115eb86a0a82824916b2f6b3b9432d897566314a7b09b705474dbcb4d8721ef36bfd8a0bd09795b96138524427", 0x9, 0x0, 0x7, 0x0, 0x9, 0x7d4}, 0x1}, 0x5, 0x20000002) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x18, 0x4, 0x4) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/16, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) r4 = epoll_create$auto(0x20009) r5 = epoll_create$auto(0x3d) epoll_ctl$auto(r5, 0x1, r4, 0x0) ioctl$auto_USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000080)=&(0x7f0000000380)="b9817d99e05131413140c462df8576144a4eedb81906f623aebc1cbd7a02c04fd5c2f851a9ebfa655df62aba4a6d937bedb6fd5e2e9547d3dc170de4d8f681a893d44a0b26430c1f32bfc0f4db79eba68ae5bfc7ab12cf7cbff5516f8ea6a68eb2dafccc47b2308fff96e042bd67534f4ea92a46c71f74d819fbb89526beda5beedf47aeb133634cb23145ebe7f5b074d48bb18f8ab75c3fe93dc7e7c9cab064b6efe5822a3b4437a8612050e3db7fcb3d858f575a63d1d800d055") prctl$auto(0x26, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYBLOB="020025bd7000fbdb080016003ad8"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r6, 0x40189206, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x200000c0) ioctl$auto_MON_IOCQ_RING_SIZE(r6, 0x9205, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.417570521s ago: executing program 7 (id=3693): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x8) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002ac0)='/$\x00', 0x0, 0x4, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0x9, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) socket(0xa, 0x1, 0x84) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/queues/tx-3/xps_cpus\x00', 0x1, 0x0) 3.411834315s ago: executing program 6 (id=3694): unshare$auto(0x40000080) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) r1 = socketcall$auto(0x1, &(0x7f00000001c0)=0x100000000) ioctl$auto_BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/nbd12/sched/batching\x00', 0x0, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000040)=""/163, 0xa3) r3 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r4, &(0x7f0000000680)='d\n\x1e\x9f\xd0\x92l\x98\x92!Fc\x9c?\xado^\x9b\xf4\x9c\xa8\xd2gn\x1a\xd7\x1c\xe8)\xefA\x7f\xc2x\xd0\x18gS\x1c\xca\xb9\x84\x1ec\xd4>\xc2\xfej\t\x89u\xcb(\x95_3\xdfo\xdc\xa5;t\x05q$zmM\xae\xdb\x1f\xeb\xffe\x91\xd5\xd2[\xa5_F\xc4X\xec\xdb\xdc\x01\xc2d\xa1\x8b\xed=\xb0\x88\xa8tl2\x0e\x13mjH,\xcda\xcab.\x03\xe7\xa4z\xcaA\xe2\x99\xd5n\xa0\x8a\x91K_\xf0~\b\v\xd1W\x97\xd9\x8c}\xff4\xff\tAK\xc4\x16\x13,9}-_\x00\x80\xd2\xfc\x98?\'\xaf\xccyRou\xa1\x12\x9fwZ\x1c\f\xcck\xdb-\xd7;\xbf\xbf\xbe\x04*L\x1e\x9c\x8fVb\xb8\xb4\xa2|\x88\x1e\bX\xba_O\x87f.\xc2\xfa\x01R\xefB\xe9\xf4Xc\x98\xe7', 0x5) read$auto_state_fops_(r3, &(0x7f0000000180)=""/61, 0xfffffeeb) r5 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f0000000200)=0x1b4) syz_open_procfs$namespace(r5, &(0x7f0000000280)='ns/net\x00') openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0xb4300, 0x0) unshare$auto(0x846) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r7, 0x5, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000002100)=""/15, 0xf) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0c/sub6/xrun_injection\x00', 0x440, 0x0) ioctl$NS_GET_PARENT(r1, 0xb701, 0x0) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x20000, 0x0) ioctl$auto_SOUND_PCM_READ_RATE(r8, 0x80045002, &(0x7f0000003700)) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/1:6/max_ratio_fine\x00', 0x1e1842, 0x0) sendfile$auto(r9, r9, 0x0, 0xe00000000) r10 = socket(0xa, 0x5, 0x84) getsockopt$auto(r10, 0x84, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r10) unshare$auto(0x1f) 3.284606857s ago: executing program 3 (id=3695): madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x68080, 0x0) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, @inferred, 0x2, @_sigev_thread={0x0, 0x0}}) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000200)='7\x00\\\xa0\x04|\xf7D\xad\xb7\v\xd6\xc5\xa3R\x03\xcb\x12\xfa\x06\x00\xc7\xde\x9d', 0x81) bpf$auto(0x0, 0x0, 0x6f3) mmap$auto(0x8fc, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffd) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) r1 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)=0x425792c7) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) epoll_pwait2$auto(0x1, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='r\x02', 0x2fb) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000000) bpf$auto(0x200000, &(0x7f0000000000)=@raw_tracepoint={0x7f, 0xffffffffffffffff, 0x0, 0xec5}, 0x102) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x8, 0x0) write$auto(r2, &(0x7f0000000180)='r\x02', 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x9, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x808) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "386ea25c05200a8c522883de50158eec17952e4c04417e2b5ed7097a9515b757"}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x8104) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 2.546833849s ago: executing program 3 (id=3697): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x8) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002ac0)='/$\x00', 0x0, 0x4, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0x9, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/queues/tx-3/xps_cpus\x00', 0x1, 0x0) 2.164584663s ago: executing program 7 (id=3698): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0x664300, 0x0) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x800, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x2, 0x1, 0xdf, 0x1d, 0x2, 0x33f3) ioctl$auto_XFS_IOC_ERROR_CLEARALL(r0, 0x40085875, &(0x7f0000000100)={r0, 0x6}) sendmsg$auto_OVS_METER_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dae7000ffdbdf25040000000800010005000000140003004200000000000000090000000000000014000300b881000000000000010000000000000008000700030000000c0005000800000000000000040002000c000500010000000000000004000600"], 0x6c}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000895) close_range$auto(r3, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r4, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1824ccafdd80500ffffffffdfff1a0e00fffffffe0000000000000000", 0x38) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x7fffffff) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 1.787371625s ago: executing program 3 (id=3699): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x6, 0x0, 0x8040, 0x1}, 0x8}, 0x1, 0x9) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open$dir(0x0, 0x201, 0x14) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)={0x28, r2, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x4000000) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x880) open(&(0x7f00000002c0)='./file0\x00', 0x40a00, 0x1c7) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r5 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0x29, 0x2, 0x0) getsockopt$auto(r6, 0x119, 0x1, 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$auto(r7, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8000) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x80) io_uring_register$auto(r5, 0x3, &(0x7f0000000340)="8f7500b94af8e66703e90a2e32ac45ecbcff121ca0710d42a1269958931872dac39d3bad493fa5ed29b29cfcfab812080599b4882cd830ec3eae666bcbdfaa017ce702b0dddc29351c9354b9c056e2ec8c5b85dc56b5cc6bf1d7a7a97c52a30addd2edcf", 0x5) getpid() sendmsg$auto_NL80211_CMD_EPCS_CFG(r5, 0x0, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0x9, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x7, 0x4, 0x0, 0x4000000000003, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) r8 = socket(0xa, 0x2, 0x0) write$auto(r8, &(0x7f0000000000)='[\x00', 0x90c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 1.670861655s ago: executing program 7 (id=3700): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x800, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(r0, 0x40085875, &(0x7f0000000100)={r0, 0x6}) sendmsg$auto_OVS_METER_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x42, 0x9}}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x8}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x3}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x8}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x1}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0xdb, 0xffff}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000895) close_range$auto(r3, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r4, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1824ccafdd80500ffffffffdfff1a0e00fffffffe0000001f00000000", 0x38) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x7fffffff) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 1.24465278s ago: executing program 7 (id=3701): socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/power_state\x00', 0x40, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty28\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000280)="13") socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0) write$auto(0x3, 0x0, 0x100085) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 587.865678ms ago: executing program 5 (id=3702): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x6, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x6, 0x16, 0x5, 0x100000001, 0xc, 0x9, 0x0, 0x1, 0x7ff, 0xd59, 0x101, 0x6, 0xfffffffffffffffe, 0x80000001]}, 0x0, 0x0) read$auto(0x4, 0x0, 0xfdef) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x21c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x105, 0x7f, "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"}, @NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0x5, 0xee, 0x0, 0x0, @str='\x00'}]}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "e640229435d0b0c20f41d496f46fe01814df377cbc677f82566d"}, @NL80211_ATTR_MLO_TTLM_DLINK={0x9f, 0x148, "372006f827f69c2232e18f284e84bef8e1ee92e0f1d9c875b89d43abcb15a252f160dcd532548c6d8ba9eb6cd4ba9375c480b05b159deb3bf27697486ad08322c3ac0e3bd56a5626ab1a8711fb21fe76cd08aa459540b4532c840cb17d05dbc6620cbf80ae214fe8f6cf1bdc1e72b0a6079e2d3e133538e687357f38504a6413acc0e84509153fecb838005687529b81a7d8186e1f501de8703347"}, @NL80211_ATTR_FILS_ERP_RRK={0xe, 0xfc, "1fe75868af738cdfd10e"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5256}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "ddbf139dddb41598cfea06c4812ac474"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) poll$auto(&(0x7f0000000240)={r0, 0x3, 0x9}, 0x3, 0x8) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x9, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x100) 404.689846ms ago: executing program 3 (id=3703): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r0, 0x80085610, 0x7) 388.819164ms ago: executing program 7 (id=3704): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mq_timedsend$auto(r2, 0x0, 0x2, 0x9, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) read$auto(r1, 0x0, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x8a2b42, 0x0) socket(0x22, 0x3, 0x0) sendfile$auto(r0, r4, 0x0, 0x1000200) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) socketpair$auto(0xffffffff, 0x0, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x801, 0x106) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x7b, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x79, 0x2, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) socket(0x11, 0x80000, 0x84) 352.701004ms ago: executing program 6 (id=3705): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ppoll$auto(&(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x810000000000003a, 0x0) r2 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r2, 0x8, 0xfff, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xffae821f8743b586}, 0x40) r3 = getsockopt$auto(r1, 0x84, 0x1d, 0x0, 0x0) semctl$auto(0x1ff, 0x100000001, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, r3, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 3 (id=3706): unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) (async) move_pages$auto(0x0, 0x4, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x6456, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x1) connect$auto(0x3, 0x0, 0x58) sendmmsg$auto(r1, 0x0, 0x9, 0x7000000) (async) sendmmsg$auto(r1, 0x0, 0x9, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) (async) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0x2d7d, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x2ab01, 0x0) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000000c0)=0x7) (async) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto_USBDEVFS_IOCTL32(r2, 0xc00c5512, 0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x3) kernel console output (not intermixed with test programs): "syz.5.3151" res=0 errno=0 [ 1154.088783][T20304] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3153: iget: checksum invalid [ 1154.451410][T20304] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1154.765633][T20304] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3153: iget: checksum invalid [ 1155.158838][T20304] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1155.455410][T20304] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3153: iget: checksum invalid [ 1155.717842][T20304] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1156.021784][T20304] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3153: iget: checksum invalid [ 1156.305678][T20304] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1156.554406][T20304] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1156.863939][T20304] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1156.967594][T20333] kexec: Could not allocate control_code_buffer [ 1157.898443][T20341] bridge0: port 3(syz_tun) entered blocking state [ 1157.904934][T20341] bridge0: port 3(syz_tun) entered disabled state [ 1157.995531][T20341] syz_tun: entered allmulticast mode [ 1158.047693][T20341] syz_tun: entered promiscuous mode [ 1158.109843][T20341] bridge0: port 3(syz_tun) entered blocking state [ 1158.116378][T20341] bridge0: port 3(syz_tun) entered forwarding state [ 1159.449404][T20364] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3167'. [ 1164.137999][T20400] bridge0: port 3(team0) entered blocking state [ 1164.522202][T20400] bridge0: port 3(team0) entered disabled state [ 1164.528587][T20400] team0: entered allmulticast mode [ 1164.829612][T20400] team_slave_0: entered allmulticast mode [ 1164.837077][T20400] team_slave_1: entered allmulticast mode [ 1164.871863][T20421] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1165.109423][T20400] team0: entered promiscuous mode [ 1165.114495][T20400] team_slave_0: entered promiscuous mode [ 1165.437754][T20400] team_slave_1: entered promiscuous mode [ 1165.443928][T20400] bridge0: port 3(team0) entered blocking state [ 1165.450273][T20400] bridge0: port 3(team0) entered forwarding state [ 1171.273581][T20500] vhci_hcd vhci_hcd.2: invalid port number 252 [ 1171.808331][T20503] kexec: Could not allocate control_code_buffer [ 1172.063825][T20511] FAULT_INJECTION: forcing a failure. [ 1172.063825][T20511] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.245671][T20511] CPU: 0 UID: 0 PID: 20511 Comm: syz.2.3196 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1172.245704][T20511] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1172.245711][T20511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.245721][T20511] Call Trace: [ 1172.245726][T20511] [ 1172.245732][T20511] dump_stack_lvl+0x100/0x190 [ 1172.245760][T20511] should_fail_ex.cold+0x5/0xa [ 1172.245778][T20511] should_failslab+0xc2/0x120 [ 1172.245792][T20511] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1172.245813][T20511] ? __d_alloc+0x34/0xa80 [ 1172.245827][T20511] ? security_inode_alloc+0xcf/0x2c0 [ 1172.245850][T20511] __d_alloc+0x34/0xa80 [ 1172.245863][T20511] ? __ns_ref_active_get+0x9f/0x1b0 [ 1172.245889][T20511] path_from_stashed+0x427/0x750 [ 1172.245904][T20511] ? do_raw_spin_unlock+0x145/0x1e0 [ 1172.245930][T20511] ns_get_path+0x60/0x80 [ 1172.245943][T20511] proc_ns_get_link+0x121/0x230 [ 1172.245963][T20511] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1172.245983][T20511] ? atime_needs_update+0x8b/0x6b0 [ 1172.246004][T20511] pick_link+0xd17/0x13c0 [ 1172.246023][T20511] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1172.246044][T20511] step_into_slowpath+0x9ba/0xf90 [ 1172.246067][T20511] ? __pfx_step_into_slowpath+0x10/0x10 [ 1172.246087][T20511] ? find_held_lock+0x2b/0x80 [ 1172.246106][T20511] path_openat+0xf95/0x31a0 [ 1172.246132][T20511] ? __pfx_path_openat+0x10/0x10 [ 1172.246153][T20511] do_file_open+0x20e/0x430 [ 1172.246168][T20511] ? __pfx_do_file_open+0x10/0x10 [ 1172.246196][T20511] ? alloc_fd+0x476/0x790 [ 1172.246221][T20511] ? do_getname+0x191/0x390 [ 1172.246240][T20511] do_sys_openat2+0x10d/0x1e0 [ 1172.246258][T20511] ? __pfx_do_sys_openat2+0x10/0x10 [ 1172.246277][T20511] ? __fget_files+0x21f/0x3d0 [ 1172.246302][T20511] __x64_sys_openat+0x12d/0x210 [ 1172.246319][T20511] ? __pfx___x64_sys_openat+0x10/0x10 [ 1172.246344][T20511] do_syscall_64+0x106/0xf80 [ 1172.246360][T20511] ? clear_bhb_loop+0x40/0x90 [ 1172.246377][T20511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.246392][T20511] RIP: 0033:0x7f561435cece [ 1172.246405][T20511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1172.246419][T20511] RSP: 002b:00007f56125f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1172.246434][T20511] RAX: ffffffffffffffda RBX: 00007f56125f66c0 RCX: 00007f561435cece [ 1172.246443][T20511] RDX: 0000000000000002 RSI: 00007f56125f5f90 RDI: ffffffffffffff9c [ 1172.246452][T20511] RBP: 00007f5614432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1172.246460][T20511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.246469][T20511] R13: 00007f5614616128 R14: 00007f5614616090 R15: 00007ffc0d5a8258 [ 1172.246489][T20511] [ 1172.936569][T20525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3198'. [ 1173.354917][T20534] zswap: compressor not available [ 1173.538731][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1173.545155][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1174.112782][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 1174.301476][T20557] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3204'. [ 1174.460934][T20557] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3204'. [ 1176.613911][T20585] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1177.203967][T20590] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input35 [ 1178.309701][T20599] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1180.777813][T20618] random: crng reseeded on system resumption [ 1181.096531][T17680] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1181.680936][T20637] random: crng reseeded on system resumption [ 1183.383368][T20656] FAULT_INJECTION: forcing a failure. [ 1183.383368][T20656] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1183.571618][T20656] CPU: 0 UID: 0 PID: 20656 Comm: syz.5.3229 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1183.571647][T20656] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1183.571654][T20656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1183.571662][T20656] Call Trace: [ 1183.571667][T20656] [ 1183.571673][T20656] dump_stack_lvl+0x100/0x190 [ 1183.571699][T20656] should_fail_ex.cold+0x5/0xa [ 1183.571717][T20656] get_futex_key+0x295/0x1620 [ 1183.571737][T20656] ? __pfx_get_futex_key+0x10/0x10 [ 1183.571752][T20656] ? lock_acquire+0x1cf/0x380 [ 1183.571777][T20656] futex_wake+0xea/0x530 [ 1183.571800][T20656] ? __pfx_futex_wake+0x10/0x10 [ 1183.571820][T20656] ? exit_mm_release+0x19/0x30 [ 1183.571843][T20656] do_futex+0x32b/0x350 [ 1183.571861][T20656] ? __pfx_do_futex+0x10/0x10 [ 1183.571877][T20656] ? __might_fault+0xc5/0x140 [ 1183.571901][T20656] mm_release+0x24a/0x2f0 [ 1183.571915][T20656] do_exit+0x675/0x2aa0 [ 1183.571949][T20656] ? __pfx_do_exit+0x10/0x10 [ 1183.571967][T20656] ? do_raw_spin_lock+0x128/0x260 [ 1183.571987][T20656] ? find_held_lock+0x2b/0x80 [ 1183.571999][T20656] ? get_signal+0x7e0/0x21e0 [ 1183.572016][T20656] do_group_exit+0xd5/0x2a0 [ 1183.572035][T20656] get_signal+0x1ec7/0x21e0 [ 1183.572061][T20656] ? __pfx_get_signal+0x10/0x10 [ 1183.572077][T20656] ? do_futex+0x192/0x350 [ 1183.572097][T20656] arch_do_signal_or_restart+0x91/0x770 [ 1183.572119][T20656] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1183.572142][T20656] ? __pfx___x64_sys_futex+0x10/0x10 [ 1183.572164][T20656] exit_to_user_mode_loop+0x86/0x4a0 [ 1183.572184][T20656] do_syscall_64+0x668/0xf80 [ 1183.572200][T20656] ? clear_bhb_loop+0x40/0x90 [ 1183.572218][T20656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.572233][T20656] RIP: 0033:0x7f9eabb9c629 [ 1183.572245][T20656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.572259][T20656] RSP: 002b:00007f9eac9d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1183.572273][T20656] RAX: fffffffffffffe00 RBX: 00007f9eabe16098 RCX: 00007f9eabb9c629 [ 1183.572283][T20656] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9eabe16098 [ 1183.572292][T20656] RBP: 00007f9eabe16090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.572300][T20656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.572308][T20656] R13: 00007f9eabe16128 R14: 00007ffcb662b000 R15: 00007ffcb662b0e8 [ 1183.572327][T20656] [ 1184.846827][T20672] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1185.222476][T20680] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1185.562443][T20691] FAULT_INJECTION: forcing a failure. [ 1185.562443][T20691] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.733504][T17680] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1185.747047][T20691] CPU: 0 UID: 0 PID: 20691 Comm: syz.3.3238 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1185.747075][T20691] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1185.747081][T20691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1185.747090][T20691] Call Trace: [ 1185.747095][T20691] [ 1185.747100][T20691] dump_stack_lvl+0x100/0x190 [ 1185.747127][T20691] should_fail_ex.cold+0x5/0xa [ 1185.747144][T20691] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1185.747159][T20691] should_failslab+0xc2/0x120 [ 1185.747173][T20691] __kmalloc_noprof+0xe0/0x850 [ 1185.747197][T20691] tomoyo_realpath_from_path+0xb6/0x690 [ 1185.747217][T20691] tomoyo_check_open_permission+0x2af/0x3c0 [ 1185.747240][T20691] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1185.747280][T20691] ? do_raw_spin_lock+0x128/0x260 [ 1185.747303][T20691] ? path_get+0x61/0x80 [ 1185.747319][T20691] tomoyo_file_open+0x6b/0x90 [ 1185.747338][T20691] security_file_open+0xb5/0x1e0 [ 1185.747352][T20691] do_dentry_open+0x5aa/0x1660 [ 1185.747376][T20691] ? security_inode_permission+0xbf/0x250 [ 1185.747401][T20691] vfs_open+0x82/0x3f0 [ 1185.747420][T20691] path_openat+0x208c/0x31a0 [ 1185.747440][T20691] ? __pfx_path_openat+0x10/0x10 [ 1185.747461][T20691] do_file_open+0x20e/0x430 [ 1185.747476][T20691] ? __pfx_do_file_open+0x10/0x10 [ 1185.747503][T20691] ? alloc_fd+0x476/0x790 [ 1185.747527][T20691] ? do_getname+0x191/0x390 [ 1185.747545][T20691] do_sys_openat2+0x10d/0x1e0 [ 1185.747563][T20691] ? __pfx_do_sys_openat2+0x10/0x10 [ 1185.747579][T20691] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1185.747600][T20691] ? __fget_files+0x21f/0x3d0 [ 1185.747624][T20691] __x64_sys_openat+0x12d/0x210 [ 1185.747642][T20691] ? __pfx___x64_sys_openat+0x10/0x10 [ 1185.747658][T20691] ? ksys_write+0x1ac/0x250 [ 1185.747686][T20691] do_syscall_64+0x106/0xf80 [ 1185.747701][T20691] ? clear_bhb_loop+0x40/0x90 [ 1185.747719][T20691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.747741][T20691] RIP: 0033:0x7f7af8f9c629 [ 1185.747753][T20691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.747767][T20691] RSP: 002b:00007f7af9ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1185.747782][T20691] RAX: ffffffffffffffda RBX: 00007f7af9215fa0 RCX: 00007f7af8f9c629 [ 1185.747791][T20691] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1185.747801][T20691] RBP: 00007f7af9ece090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.747809][T20691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.747817][T20691] R13: 00007f7af9216038 R14: 00007f7af9215fa0 R15: 00007ffc55f63e48 [ 1185.747837][T20691] [ 1185.747842][T20691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1186.607952][T20698] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3240'. [ 1187.393487][T20733] FAULT_INJECTION: forcing a failure. [ 1187.393487][T20733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.502282][T20733] CPU: 0 UID: 0 PID: 20733 Comm: syz.5.3243 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1187.502312][T20733] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1187.502319][T20733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1187.502328][T20733] Call Trace: [ 1187.502333][T20733] [ 1187.502339][T20733] dump_stack_lvl+0x100/0x190 [ 1187.502365][T20733] should_fail_ex.cold+0x5/0xa [ 1187.502383][T20733] _copy_to_user+0x32/0xd0 [ 1187.502407][T20733] simple_read_from_buffer+0xcb/0x170 [ 1187.502430][T20733] proc_fail_nth_read+0x1af/0x230 [ 1187.502447][T20733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1187.502464][T20733] ? rw_verify_area+0xce/0x6d0 [ 1187.502484][T20733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1187.502499][T20733] vfs_read+0x1e4/0xb30 [ 1187.502523][T20733] ? __pfx_vfs_read+0x10/0x10 [ 1187.502543][T20733] ? __fget_files+0x215/0x3d0 [ 1187.502569][T20733] ? __fget_files+0x21f/0x3d0 [ 1187.502595][T20733] ksys_read+0x12a/0x250 [ 1187.502623][T20733] ? __pfx_ksys_read+0x10/0x10 [ 1187.502649][T20733] do_syscall_64+0x106/0xf80 [ 1187.502665][T20733] ? clear_bhb_loop+0x40/0x90 [ 1187.502682][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.502697][T20733] RIP: 0033:0x7f9eabb5cece [ 1187.502710][T20733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1187.502723][T20733] RSP: 002b:00007f9eac9cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1187.502738][T20733] RAX: ffffffffffffffda RBX: 00007f9eac9d06c0 RCX: 00007f9eabb5cece [ 1187.502747][T20733] RDX: 000000000000000f RSI: 00007f9eac9d00a0 RDI: 0000000000000004 [ 1187.502756][T20733] RBP: 00007f9eac9d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.502764][T20733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.502772][T20733] R13: 00007f9eabe16128 R14: 00007f9eabe16090 R15: 00007ffcb662b0e8 [ 1187.502791][T20733] [ 1188.443198][T20739] usb usb24: usbfs: process 20739 (syz.3.3246) did not claim interface 0 before use [ 1190.582817][T20747] hub 1-0:1.0: USB hub found [ 1190.775495][T20747] hub 1-0:1.0: 1 port detected [ 1196.644459][T20786] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1196.755081][T20786] netlink: 'syz.5.3257': attribute type 64 has an invalid length. [ 1196.762921][T20786] netlink: 74 bytes leftover after parsing attributes in process `syz.5.3257'. [ 1201.296649][T17680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1201.309090][T17680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1201.318595][T17680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1201.330259][T17680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1201.337924][T17680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1202.789392][T20796] chnl_net:caif_netlink_parms(): no params data found [ 1203.369279][T17680] Bluetooth: hci0: command tx timeout [ 1203.462108][T20796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.528833][T20796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.622745][T20796] bridge_slave_0: entered allmulticast mode [ 1203.657982][T20796] bridge_slave_0: entered promiscuous mode [ 1203.767992][T20796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.795395][T20796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.967209][T20796] bridge_slave_1: entered allmulticast mode [ 1203.974829][T20796] bridge_slave_1: entered promiscuous mode [ 1205.438485][T17680] Bluetooth: hci0: command tx timeout [ 1205.532103][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3268'. [ 1205.714899][T20835] FAULT_INJECTION: forcing a failure. [ 1205.714899][T20835] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1205.827051][T20835] CPU: 0 UID: 0 PID: 20835 Comm: syz.5.3268 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1205.827082][T20835] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1205.827089][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1205.827099][T20835] Call Trace: [ 1205.827105][T20835] [ 1205.827111][T20835] dump_stack_lvl+0x100/0x190 [ 1205.827140][T20835] should_fail_ex.cold+0x5/0xa [ 1205.827158][T20835] get_futex_key+0x1d2/0x1620 [ 1205.827178][T20835] ? __pfx_get_futex_key+0x10/0x10 [ 1205.827203][T20835] futex_wake+0xea/0x530 [ 1205.827225][T20835] ? __pfx_futex_wake+0x10/0x10 [ 1205.827248][T20835] ? putname+0xb1/0x110 [ 1205.827261][T20835] ? kmem_cache_free+0x124/0x6a0 [ 1205.827278][T20835] ? do_sys_openat2+0x1b4/0x1e0 [ 1205.827298][T20835] do_futex+0x32b/0x350 [ 1205.827316][T20835] ? __pfx_do_futex+0x10/0x10 [ 1205.827332][T20835] ? __pfx_do_sys_openat2+0x10/0x10 [ 1205.827354][T20835] __x64_sys_futex+0x34f/0x4d0 [ 1205.827373][T20835] ? __x64_sys_openat+0x12d/0x210 [ 1205.827390][T20835] ? __pfx___x64_sys_futex+0x10/0x10 [ 1205.827416][T20835] do_syscall_64+0x106/0xf80 [ 1205.827431][T20835] ? clear_bhb_loop+0x40/0x90 [ 1205.827449][T20835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.827464][T20835] RIP: 0033:0x7f9eabb9c629 [ 1205.827478][T20835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.827492][T20835] RSP: 002b:00007f9eac9af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1205.827507][T20835] RAX: ffffffffffffffda RBX: 00007f9eabe16188 RCX: 00007f9eabb9c629 [ 1205.827517][T20835] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9eabe1618c [ 1205.827526][T20835] RBP: 00007f9eabe16180 R08: 0000000000000000 R09: 0000000000000000 [ 1205.827534][T20835] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1205.827543][T20835] R13: 00007f9eabe16218 R14: 00007ffcb662b000 R15: 00007ffcb662b0e8 [ 1205.827562][T20835] [ 1207.508493][T17680] Bluetooth: hci0: command tx timeout [ 1209.577608][T17680] Bluetooth: hci0: command tx timeout [ 1211.236206][T20847] FAULT_INJECTION: forcing a failure. [ 1211.236206][T20847] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.371910][T20796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.438931][T20847] CPU: 0 UID: 0 PID: 20847 Comm: syz.3.3271 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1211.438962][T20847] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1211.438969][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1211.438978][T20847] Call Trace: [ 1211.438984][T20847] [ 1211.438990][T20847] dump_stack_lvl+0x100/0x190 [ 1211.439018][T20847] should_fail_ex.cold+0x5/0xa [ 1211.439037][T20847] should_failslab+0xc2/0x120 [ 1211.439052][T20847] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1211.439072][T20847] ? __proc_create+0x2cb/0x8c0 [ 1211.439098][T20847] __proc_create+0x2cb/0x8c0 [ 1211.439120][T20847] ? __pfx___proc_create+0x10/0x10 [ 1211.439144][T20847] ? _raw_write_unlock+0x28/0x50 [ 1211.439159][T20847] ? proc_register+0x559/0x8a0 [ 1211.439182][T20847] proc_create_reg+0x75/0x170 [ 1211.439214][T20847] proc_create_net_data+0x8e/0x1c0 [ 1211.439238][T20847] ? __pfx_proc_create_net_data+0x10/0x10 [ 1211.439259][T20847] ? net_generic+0xea/0x2a0 [ 1211.439285][T20847] ? __pfx_vlan_init_net+0x10/0x10 [ 1211.439301][T20847] vlan_proc_init+0xe6/0x160 [ 1211.439324][T20847] ops_init+0x1e2/0x5f0 [ 1211.439343][T20847] setup_net+0x118/0x3a0 [ 1211.439359][T20847] ? __pfx_setup_net+0x10/0x10 [ 1211.439374][T20847] ? lockdep_init_map_type+0x5c/0x250 [ 1211.439394][T20847] ? mutex_init_lockep+0x110/0x150 [ 1211.439415][T20847] copy_net_ns+0x46f/0x7c0 [ 1211.439436][T20847] create_new_namespaces+0x3ea/0xac0 [ 1211.439456][T20847] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1211.439473][T20847] ksys_unshare+0x455/0xab0 [ 1211.439491][T20847] ? __pfx_ksys_unshare+0x10/0x10 [ 1211.439516][T20847] __x64_sys_unshare+0x31/0x40 [ 1211.439533][T20847] do_syscall_64+0x106/0xf80 [ 1211.439548][T20847] ? clear_bhb_loop+0x40/0x90 [ 1211.439565][T20847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.439580][T20847] RIP: 0033:0x7f7af8f9c629 [ 1211.439594][T20847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.439608][T20847] RSP: 002b:00007f7af9ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1211.439623][T20847] RAX: ffffffffffffffda RBX: 00007f7af9216090 RCX: 00007f7af8f9c629 [ 1211.439633][T20847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1211.439641][T20847] RBP: 00007f7af9032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1211.439650][T20847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.439659][T20847] R13: 00007f7af9216128 R14: 00007f7af9216090 R15: 00007ffc55f63e48 [ 1211.439679][T20847] [ 1211.439686][T20847] 8021q: can't create entry in proc filesystem! [ 1211.748673][T20796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.985429][T20796] team0: Port device team_slave_0 added [ 1211.992776][T20796] team0: Port device team_slave_1 added [ 1215.454376][T20796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.685153][T20796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.993396][T20858] FAULT_INJECTION: forcing a failure. [ 1215.993396][T20858] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.012720][T20796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.114266][T20796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.121233][T20796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.172603][T20858] CPU: 0 UID: 0 PID: 20858 Comm: syz.5.3274 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1216.172634][T20858] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1216.172640][T20858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1216.172650][T20858] Call Trace: [ 1216.172655][T20858] [ 1216.172661][T20858] dump_stack_lvl+0x100/0x190 [ 1216.172688][T20858] should_fail_ex.cold+0x5/0xa [ 1216.172706][T20858] should_failslab+0xc2/0x120 [ 1216.172721][T20858] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1216.172750][T20858] ? __d_alloc+0x34/0xa80 [ 1216.172769][T20858] __d_alloc+0x34/0xa80 [ 1216.172787][T20858] d_alloc_pseudo+0x1c/0xc0 [ 1216.172806][T20858] alloc_file_pseudo+0xcf/0x230 [ 1216.172824][T20858] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1216.172843][T20858] ? mas_preallocate+0x411/0xf10 [ 1216.172862][T20858] __shmem_file_setup+0x221/0x490 [ 1216.172881][T20858] ? __pfx___shmem_file_setup+0x10/0x10 [ 1216.172902][T20858] ? vm_area_alloc+0x1f/0x160 [ 1216.172922][T20858] shmem_zero_setup+0x96/0x1b0 [ 1216.172944][T20858] __mmap_region+0x2198/0x29e0 [ 1216.172967][T20858] ? __pfx___mmap_region+0x10/0x10 [ 1216.172990][T20858] ? set_next_entity+0x11b/0x9c0 [ 1216.173014][T20858] ? __lock_acquire+0x4a5/0x2630 [ 1216.173032][T20858] ? update_cfs_rq_load_avg+0x51/0x550 [ 1216.173055][T20858] ? find_held_lock+0x2b/0x80 [ 1216.173067][T20858] ? finish_task_switch.isra.0+0x200/0xb80 [ 1216.173082][T20858] ? finish_task_switch.isra.0+0x200/0xb80 [ 1216.173105][T20858] ? trace_sched_exit_tp+0x13a/0x180 [ 1216.173121][T20858] ? __schedule+0x1000/0x60e0 [ 1216.173159][T20858] ? rcu_is_watching+0x12/0xc0 [ 1216.173185][T20858] mmap_region+0x180/0x3e0 [ 1216.173208][T20858] do_mmap+0xc63/0x12f0 [ 1216.173226][T20858] ? __pfx_do_mmap+0x10/0x10 [ 1216.173240][T20858] ? __pfx_down_write_killable+0x10/0x10 [ 1216.173262][T20858] vm_mmap_pgoff+0x29e/0x470 [ 1216.173280][T20858] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1216.173297][T20858] ? do_futex+0x192/0x350 [ 1216.173315][T20858] ? __pfx_do_futex+0x10/0x10 [ 1216.173336][T20858] ksys_mmap_pgoff+0xe1/0x650 [ 1216.173351][T20858] ? __x64_sys_futex+0x34f/0x4d0 [ 1216.173368][T20858] ? __x64_sys_futex+0x358/0x4d0 [ 1216.173386][T20858] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1216.173400][T20858] ? xfd_validate_state+0x129/0x190 [ 1216.173424][T20858] __x64_sys_mmap+0x125/0x190 [ 1216.173446][T20858] do_syscall_64+0x106/0xf80 [ 1216.173461][T20858] ? clear_bhb_loop+0x40/0x90 [ 1216.173479][T20858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.173494][T20858] RIP: 0033:0x7f9eabb9c629 [ 1216.173508][T20858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.173522][T20858] RSP: 002b:00007f9eac9f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1216.173536][T20858] RAX: ffffffffffffffda RBX: 00007f9eabe15fa0 RCX: 00007f9eabb9c629 [ 1216.173547][T20858] RDX: 0100001000000004 RSI: 0000000000000061 RDI: 0000000000000000 [ 1216.173556][T20858] RBP: 00007f9eabc32b39 R08: 0000000000000400 R09: 0000000000008000 [ 1216.173565][T20858] R10: 000000000000fa31 R11: 0000000000000246 R12: 0000000000000000 [ 1216.173573][T20858] R13: 00007f9eabe16038 R14: 00007f9eabe15fa0 R15: 00007ffcb662b0e8 [ 1216.173593][T20858] [ 1217.058677][T20859] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1217.192915][T20796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.906340][T20796] hsr_slave_0: entered promiscuous mode [ 1218.949378][T20796] hsr_slave_1: entered promiscuous mode [ 1220.405296][T20796] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1221.566762][T20876] FAULT_INJECTION: forcing a failure. [ 1221.566762][T20876] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.672380][T20876] CPU: 0 UID: 0 PID: 20876 Comm: syz.3.3277 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1221.672410][T20876] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1221.672416][T20876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.672425][T20876] Call Trace: [ 1221.672430][T20876] [ 1221.672436][T20876] dump_stack_lvl+0x100/0x190 [ 1221.672463][T20876] should_fail_ex.cold+0x5/0xa [ 1221.672481][T20876] should_failslab+0xc2/0x120 [ 1221.672495][T20876] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1221.672513][T20876] ? alloc_tty_struct+0x96/0x8c0 [ 1221.672535][T20876] alloc_tty_struct+0x96/0x8c0 [ 1221.672554][T20876] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1221.672578][T20876] pty_common_install+0x1c7/0xb30 [ 1221.672596][T20876] ? __pfx_pty_unix98_install+0x10/0x10 [ 1221.672610][T20876] tty_init_dev.part.0+0x9e/0x470 [ 1221.672631][T20876] tty_init_dev+0x60/0x80 [ 1221.672649][T20876] ptmx_open+0x15e/0x3c0 [ 1221.672671][T20876] ? __pfx_ptmx_open+0x10/0x10 [ 1221.672693][T20876] chrdev_open+0x234/0x6a0 [ 1221.672706][T20876] ? __pfx_apparmor_file_open+0x10/0x10 [ 1221.672726][T20876] ? __pfx_chrdev_open+0x10/0x10 [ 1221.672741][T20876] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1221.672769][T20876] do_dentry_open+0x6d8/0x1660 [ 1221.672791][T20876] ? __pfx_chrdev_open+0x10/0x10 [ 1221.672809][T20876] vfs_open+0x82/0x3f0 [ 1221.672828][T20876] path_openat+0x208c/0x31a0 [ 1221.672849][T20876] ? __pfx_path_openat+0x10/0x10 [ 1221.672869][T20876] do_file_open+0x20e/0x430 [ 1221.672885][T20876] ? __pfx_do_file_open+0x10/0x10 [ 1221.672912][T20876] ? alloc_fd+0x476/0x790 [ 1221.672937][T20876] ? do_getname+0x191/0x390 [ 1221.672955][T20876] do_sys_openat2+0x10d/0x1e0 [ 1221.672972][T20876] ? __pfx_do_sys_openat2+0x10/0x10 [ 1221.672988][T20876] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1221.673008][T20876] ? __fget_files+0x21f/0x3d0 [ 1221.673033][T20876] __x64_sys_openat+0x12d/0x210 [ 1221.673051][T20876] ? __pfx___x64_sys_openat+0x10/0x10 [ 1221.673068][T20876] ? ksys_write+0x1ac/0x250 [ 1221.673095][T20876] do_syscall_64+0x106/0xf80 [ 1221.673111][T20876] ? clear_bhb_loop+0x40/0x90 [ 1221.673129][T20876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.673143][T20876] RIP: 0033:0x7f7af8f9c629 [ 1221.673157][T20876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.673171][T20876] RSP: 002b:00007f7af9ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1221.673185][T20876] RAX: ffffffffffffffda RBX: 00007f7af9215fa0 RCX: 00007f7af8f9c629 [ 1221.673195][T20876] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1221.673204][T20876] RBP: 00007f7af9ece090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.673213][T20876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.673221][T20876] R13: 00007f7af9216038 R14: 00007f7af9215fa0 R15: 00007ffc55f63e48 [ 1221.673240][T20876] [ 1223.206638][T20796] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1224.552712][T20873] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3276: iget: checksum invalid [ 1224.700153][T20873] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1224.888748][T20873] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3276: iget: checksum invalid [ 1225.170182][T20873] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1225.395036][T20873] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3276: iget: checksum invalid [ 1225.684870][T20873] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1225.942429][T20873] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.3276: iget: checksum invalid [ 1226.133600][T20873] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1226.320015][T20873] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1226.442511][T20873] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1227.887649][T20686] bridge0: port 3(syz_tun) entered disabled state [ 1230.879822][T20686] syz_tun (unregistering): left allmulticast mode [ 1231.013106][T20686] syz_tun (unregistering): left promiscuous mode [ 1231.078769][T20686] bridge0: port 3(syz_tun) entered disabled state [ 1232.245664][T20712] syz.0.3240 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1233.493606][T20796] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1233.526148][T20712] CPU: 0 UID: 0 PID: 20712 Comm: syz.0.3240 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1233.526177][T20712] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1233.526184][T20712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1233.526193][T20712] Call Trace: [ 1233.526198][T20712] [ 1233.526204][T20712] dump_stack_lvl+0x100/0x190 [ 1233.526231][T20712] dump_header+0xfb/0x606 [ 1233.526248][T20712] oom_kill_process.cold+0xd/0x330 [ 1233.526265][T20712] out_of_memory+0x340/0x14f0 [ 1233.526290][T20712] ? __pfx_out_of_memory+0x10/0x10 [ 1233.526315][T20712] mem_cgroup_out_of_memory+0xc6/0x130 [ 1233.526335][T20712] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1233.526352][T20712] ? find_held_lock+0x2b/0x80 [ 1233.526369][T20712] ? do_raw_spin_unlock+0x145/0x1e0 [ 1233.526390][T20712] ? _raw_spin_unlock+0x28/0x50 [ 1233.526415][T20712] try_charge_memcg+0x652/0xc90 [ 1233.526433][T20712] ? __pfx_try_charge_memcg+0x10/0x10 [ 1233.526447][T20712] ? find_held_lock+0x2b/0x80 [ 1233.526459][T20712] ? rcu_read_unlock+0x17/0x60 [ 1233.526473][T20712] ? rcu_read_unlock+0x17/0x60 [ 1233.526494][T20712] charge_memcg+0xa6/0x280 [ 1233.526508][T20712] __mem_cgroup_charge+0x2b/0x1e0 [ 1233.526525][T20712] shmem_alloc_and_add_folio+0x451/0xd40 [ 1233.526551][T20712] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1233.526573][T20712] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1233.526598][T20712] shmem_get_folio_gfp+0x6ab/0x1900 [ 1233.526623][T20712] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1233.526646][T20712] ? timestamp_truncate+0x22e/0x2f0 [ 1233.526663][T20712] shmem_write_begin+0x1a4/0x420 [ 1233.526686][T20712] ? __pfx_shmem_write_begin+0x10/0x10 [ 1233.526705][T20712] ? rcu_is_watching+0x12/0xc0 [ 1233.526728][T20712] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1233.526747][T20712] generic_perform_write+0x292/0xa40 [ 1233.526773][T20712] ? __pfx_generic_perform_write+0x10/0x10 [ 1233.526791][T20712] ? __mark_inode_dirty+0x55c/0x1790 [ 1233.526812][T20712] ? mnt_put_write_access_file+0x4e/0x100 [ 1233.526835][T20712] ? file_update_time_flags+0x373/0x500 [ 1233.526854][T20712] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1233.526868][T20712] shmem_file_write_iter+0x10e/0x140 [ 1233.526884][T20712] __kernel_write_iter+0x2ac/0x920 [ 1233.526907][T20712] ? __pfx___kernel_write_iter+0x10/0x10 [ 1233.526929][T20712] ? __up_read+0x2c5/0x700 [ 1233.526951][T20712] ? dump_user_range+0x73b/0xb50 [ 1233.526970][T20712] dump_user_range+0x3f9/0xb50 [ 1233.527003][T20712] ? __pfx_dump_user_range+0x10/0x10 [ 1233.527025][T20712] ? __pfx_writenote+0x10/0x10 [ 1233.527045][T20712] elf_core_dump+0x2d5f/0x3d10 [ 1233.527077][T20712] ? __pfx_elf_core_dump+0x10/0x10 [ 1233.527093][T20712] ? kasan_save_stack+0x3f/0x50 [ 1233.527114][T20712] ? kasan_save_stack+0x30/0x50 [ 1233.527133][T20712] ? __kasan_kmalloc+0xaa/0xb0 [ 1233.527152][T20712] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1233.527172][T20712] ? vfs_coredump+0x2105/0x5570 [ 1233.527187][T20712] ? asm_exc_page_fault+0x26/0x30 [ 1233.527203][T20712] ? 0xffffffffff600000 [ 1233.527248][T20712] ? vfs_coredump+0x27bc/0x5570 [ 1233.527260][T20712] vfs_coredump+0x27bc/0x5570 [ 1233.527283][T20712] ? __pfx_vfs_coredump+0x10/0x10 [ 1233.527298][T20712] ? __lock_acquire+0x4a5/0x2630 [ 1233.527324][T20712] ? lock_acquire+0x1cf/0x380 [ 1233.527349][T20712] ? is_bpf_text_address+0x8a/0x1a0 [ 1233.527371][T20712] ? bpf_ksym_find+0x124/0x1c0 [ 1233.527392][T20712] ? __kernel_text_address+0xd/0x30 [ 1233.527412][T20712] ? unwind_get_return_address+0x59/0xa0 [ 1233.527427][T20712] ? arch_stack_walk+0xa6/0xf0 [ 1233.527447][T20712] ? __sigqueue_free+0xbe/0x2a0 [ 1233.527466][T20712] ? stack_trace_save+0x8e/0xc0 [ 1233.527479][T20712] ? __pfx_stack_trace_save+0x10/0x10 [ 1233.527492][T20712] ? kasan_save_stack+0x3f/0x50 [ 1233.527512][T20712] ? stack_depot_save_flags+0x27/0x9d0 [ 1233.527536][T20712] ? __lock_acquire+0x4a5/0x2630 [ 1233.527586][T20712] ? proc_coredump_connector+0x2d3/0x4f0 [ 1233.527606][T20712] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1233.527626][T20712] ? rcu_is_watching+0x12/0xc0 [ 1233.527650][T20712] get_signal+0x1f2a/0x21e0 [ 1233.527672][T20712] ? __pfx_get_signal+0x10/0x10 [ 1233.527686][T20712] ? find_held_lock+0x2b/0x80 [ 1233.527698][T20712] ? bad_area_access_error+0xab/0x1d0 [ 1233.527720][T20712] ? fixup_vdso_exception+0x2d1/0x370 [ 1233.527741][T20712] arch_do_signal_or_restart+0x91/0x770 [ 1233.527760][T20712] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1233.527784][T20712] ? do_user_addr_fault+0x8d6/0x12f0 [ 1233.527810][T20712] irqentry_exit+0x1f8/0x670 [ 1233.527828][T20712] asm_exc_page_fault+0x26/0x30 [ 1233.527842][T20712] RIP: 0033:0x0 [ 1233.527852][T20712] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1233.527860][T20712] RSP: 002b:000000000000000f EFLAGS: 00010217 [ 1233.527871][T20712] RAX: 0000000000000000 RBX: 00007f4eaa416090 RCX: 00007f4eaa19c629 [ 1233.527880][T20712] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020003b46 [ 1233.527889][T20712] RBP: 00007f4eaa232b39 R08: 0000000000000004 R09: 0000000000000000 [ 1233.527897][T20712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.527906][T20712] R13: 00007f4eaa416128 R14: 00007f4eaa416090 R15: 00007ffc6ac11578 [ 1233.527925][T20712] [ 1233.527931][T20712] memory: usage 307200kB, limit 307200kB, failcnt 47080 [ 1234.410288][T20796] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1234.777846][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.784135][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1235.513145][T20472] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.924456][T20472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.272019][T20712] memory+swap: usage 431988kB, limit 9007199254740988kB, failcnt 0 [ 1236.364009][T20712] kmem: usage 3700kB, limit 9007199254740988kB, failcnt 0 [ 1236.440353][T20712] Memory cgroup stats for /syz0: [ 1236.440549][T20712] cache 310251520 [ 1236.494900][T20472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.526870][T20712] rss 237568 [ 1236.530091][T20712] rss_huge 0 [ 1236.533261][T20712] shmem 310251520 [ 1236.598989][T20712] mapped_file 0 [ 1236.637055][T20712] dirty 0 [ 1236.640003][T20712] writeback 0 [ 1236.714380][T20712] workingset_refault_anon 15442 [ 1236.779881][T20712] workingset_refault_file 5793 [ 1236.784660][T20712] swap 127963136 [ 1236.868109][T20712] swapcached 234844160 [ 1236.872195][T20712] pgpgin 937353 [ 1236.879901][T20472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.944648][T20712] pgpgout 875328 [ 1236.948237][T20712] pgfault 667229 [ 1236.951754][T20712] pgmajfault 1509 [ 1237.044002][T20712] inactive_anon 197328896 [ 1237.054187][T20712] active_anon 113188864 [ 1237.096972][T20712] inactive_file 0 [ 1237.100613][T20712] active_file 0 [ 1237.183235][T20712] unevictable 0 [ 1237.207958][T20712] hierarchical_memory_limit 314572800 [ 1237.238381][T20919] netlink: 10104 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1237.290976][T20712] hierarchical_memsw_limit 9223372036854771712 [ 1237.362320][T20712] total_cache 310251520 [ 1237.399039][T20712] total_rss 237568 [ 1237.446135][T20712] total_rss_huge 0 [ 1237.449872][T20712] total_shmem 310251520 [ 1237.517873][T20712] total_mapped_file 0 [ 1237.568152][T20712] total_dirty 0 [ 1237.568186][T20712] total_writeback 0 [ 1237.568192][T20712] total_workingset_refault_anon 15442 [ 1237.568199][T20712] total_workingset_refault_file 5793 [ 1237.568206][T20712] total_swap 127963136 [ 1237.568212][T20712] total_swapcached 234844160 [ 1237.568219][T20712] total_pgpgin 937353 [ 1237.568225][T20712] total_pgpgout 875328 [ 1237.568231][T20712] total_pgfault 667229 [ 1237.568237][T20712] total_pgmajfault 1509 [ 1237.568243][T20712] total_inactive_anon 197328896 [ 1237.568250][T20712] total_active_anon 113188864 [ 1237.568256][T20712] total_inactive_file 0 [ 1237.568263][T20712] total_active_file 0 [ 1237.568269][T20712] total_unevictable 0 [ 1237.568275][T20712] anon_cost 0 [ 1237.568280][T20712] file_cost 0 [ 1237.568287][T20712] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3240,pid=20730,uid=0 [ 1237.569936][T20712] Memory cgroup out of memory: Killed process 20730 (syz.0.3240) total-vm:164980kB, anon-rss:1408kB, file-rss:54848kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:0 [ 1239.010048][ T9235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1239.011462][ T9235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1239.012083][ T9235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1239.012684][ T9235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1239.013081][ T9235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1239.621807][T20472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.801629][ T31] oom_reaper: reaped process 20730 (syz.0.3240), now anon-rss:0kB, file-rss:15016kB, shmem-rss:0kB [ 1241.097638][T17680] Bluetooth: hci3: command tx timeout [ 1241.496555][T20796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.785196][T20796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.951656][T20466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.958773][T20466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.237940][T20474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.245031][T20474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.948787][T20923] chnl_net:caif_netlink_parms(): no params data found [ 1243.164508][T17680] Bluetooth: hci3: command tx timeout [ 1243.622673][T20923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.676577][T20923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.760338][T20923] bridge_slave_0: entered allmulticast mode [ 1243.801267][T20923] bridge_slave_0: entered promiscuous mode [ 1243.985409][T20923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.082449][T20923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.137205][T20923] bridge_slave_1: entered allmulticast mode [ 1244.191426][T20923] bridge_slave_1: entered promiscuous mode [ 1244.445235][T20796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.510184][T20923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.638014][T20923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.934118][T20923] team0: Port device team_slave_0 added [ 1245.027773][T20923] team0: Port device team_slave_1 added [ 1245.232392][T17680] Bluetooth: hci3: command tx timeout [ 1247.300827][T17680] Bluetooth: hci3: command tx timeout [ 1249.485929][T20923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.571872][T20923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.858681][T20923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.017941][T20923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.024892][T20923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.474311][T20923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.316605][T20796] veth0_vlan: entered promiscuous mode [ 1252.414955][T20923] hsr_slave_0: entered promiscuous mode [ 1252.421207][T20923] hsr_slave_1: entered promiscuous mode [ 1252.532240][T20923] debugfs: 'hsr0' already exists in 'hsr' [ 1252.608655][T20923] Cannot create hsr debugfs directory [ 1252.900632][T20796] veth1_vlan: entered promiscuous mode [ 1253.019299][T20979] __vm_enough_memory: pid: 20979, comm: syz.5.3292, bytes: 4398046511104 not enough memory for the allocation [ 1253.221365][T20973] zswap: compressor not available [ 1253.491614][T20472] bridge_slave_1: left allmulticast mode [ 1253.497288][T20472] bridge_slave_1: left promiscuous mode [ 1253.559057][T20472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.837368][T20472] bridge_slave_0: left allmulticast mode [ 1253.843046][T20472] bridge_slave_0: left promiscuous mode [ 1253.939902][T20472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.294528][T20472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.431124][T20472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.518818][T20472] bond0 (unregistering): Released all slaves [ 1255.842923][T20796] veth0_macvtap: entered promiscuous mode [ 1256.145034][T20796] veth1_macvtap: entered promiscuous mode [ 1256.867293][T20796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.479891][T20472] hsr_slave_0: left promiscuous mode [ 1257.537351][T20472] hsr_slave_1: left promiscuous mode [ 1257.589987][T20472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.661615][T20472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.762012][T20472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.814499][T20472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.878802][T20472] veth1_macvtap: left promiscuous mode [ 1257.884296][T20472] veth0_macvtap: left promiscuous mode [ 1258.005896][T20472] veth1_vlan: left promiscuous mode [ 1258.011152][T20472] veth0_vlan: left promiscuous mode [ 1259.133468][T20472] team0 (unregistering): Port device team_slave_1 removed [ 1259.207185][T20472] team0 (unregistering): Port device team_slave_0 removed [ 1259.788993][T20796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.918882][T20467] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.967491][T20923] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1260.064571][T20467] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.124676][T20923] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1260.219923][T20923] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1260.341869][T20467] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.425760][T20467] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.513832][T20923] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1260.891278][T20480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.899111][T20480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.113809][T21025] FAULT_INJECTION: forcing a failure. [ 1261.113809][T21025] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.251498][T21025] CPU: 0 UID: 0 PID: 21025 Comm: syz.5.3293 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1261.251529][T21025] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1261.251537][T21025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1261.251546][T21025] Call Trace: [ 1261.251552][T21025] [ 1261.251558][T21025] dump_stack_lvl+0x100/0x190 [ 1261.251594][T21025] should_fail_ex.cold+0x5/0xa [ 1261.251612][T21025] should_failslab+0xc2/0x120 [ 1261.251628][T21025] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1261.251649][T21025] ? __kernfs_new_node+0xd2/0x960 [ 1261.251672][T21025] __kernfs_new_node+0xd2/0x960 [ 1261.251693][T21025] ? __pfx___kernfs_new_node+0x10/0x10 [ 1261.251716][T21025] ? find_held_lock+0x2b/0x80 [ 1261.251730][T21025] ? kernfs_root+0xee/0x2a0 [ 1261.251749][T21025] ? kernfs_root+0xee/0x2a0 [ 1261.251771][T21025] kernfs_new_node+0x11b/0x1a0 [ 1261.251795][T21025] __kernfs_create_file+0x53/0x350 [ 1261.251812][T21025] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1261.251835][T21025] internal_create_group+0x593/0xf40 [ 1261.251859][T21025] ? __pfx_internal_create_group+0x10/0x10 [ 1261.251881][T21025] ? kernfs_create_link+0x1bd/0x240 [ 1261.251899][T21025] internal_create_groups+0x9d/0x150 [ 1261.251920][T21025] device_add+0x77a/0x1950 [ 1261.251944][T21025] ? __pfx_device_add+0x10/0x10 [ 1261.251964][T21025] ? __pfx___might_resched+0x10/0x10 [ 1261.251984][T21025] ? lockdep_hardirqs_on+0x78/0x100 [ 1261.252006][T21025] __add_disk+0x518/0xe40 [ 1261.252029][T21025] add_disk_fwnode+0x118/0x5c0 [ 1261.252053][T21025] loop_add+0x90b/0xb60 [ 1261.252068][T21025] ? __pfx_loop_add+0x10/0x10 [ 1261.252095][T21025] ? find_held_lock+0x2b/0x80 [ 1261.252107][T21025] ? __fget_files+0x215/0x3d0 [ 1261.252131][T21025] loop_control_ioctl+0xae/0x620 [ 1261.252147][T21025] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1261.252166][T21025] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1261.252182][T21025] __x64_sys_ioctl+0x18e/0x210 [ 1261.252203][T21025] do_syscall_64+0x106/0xf80 [ 1261.252218][T21025] ? clear_bhb_loop+0x40/0x90 [ 1261.252236][T21025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.252251][T21025] RIP: 0033:0x7f9eabb9c629 [ 1261.252264][T21025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.252278][T21025] RSP: 002b:00007f9eac9af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1261.252293][T21025] RAX: ffffffffffffffda RBX: 00007f9eabe16180 RCX: 00007f9eabb9c629 [ 1261.252303][T21025] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000a [ 1261.252313][T21025] RBP: 00007f9eabc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1261.252322][T21025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.252331][T21025] R13: 00007f9eabe16218 R14: 00007f9eabe16180 R15: 00007ffcb662b0e8 [ 1261.252350][T21025] [ 1262.306027][T20925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1262.438121][T20925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1262.552858][T20925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1262.833110][T20925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1262.945925][T20925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1264.052907][T20472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.711166][T20472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.050424][T20472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.208689][T20925] Bluetooth: hci2: command tx timeout [ 1265.862909][T20472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.190953][T20923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.536443][T20923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.952244][T20473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.959423][T20473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.219791][T20479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.226974][T20479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.276953][T20925] Bluetooth: hci2: command tx timeout [ 1267.329193][T21028] chnl_net:caif_netlink_parms(): no params data found [ 1267.392735][T20472] team0: left allmulticast mode [ 1267.440033][T20472] team_slave_0: left allmulticast mode [ 1267.445518][T20472] team_slave_1: left allmulticast mode [ 1267.514857][T20472] team0: left promiscuous mode [ 1267.558733][T20472] team_slave_0: left promiscuous mode [ 1267.613985][T20472] team_slave_1: left promiscuous mode [ 1267.663726][T20472] bridge0: port 3(team0) entered disabled state [ 1267.739562][T20472] bridge_slave_1: left allmulticast mode [ 1267.780629][T20472] bridge_slave_1: left promiscuous mode [ 1267.820542][T20472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.880780][T20472] bridge_slave_0: left allmulticast mode [ 1267.911289][T20472] bridge_slave_0: left promiscuous mode [ 1267.932435][T21075] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1267.967405][T20472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.893665][T20472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.969999][T20472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.031921][T20472] bond0 (unregistering): Released all slaves [ 1269.295981][T20472] ovs_datapath: left promiscuous mode [ 1269.346050][T20925] Bluetooth: hci2: command tx timeout [ 1269.516350][T21087] FAULT_INJECTION: forcing a failure. [ 1269.516350][T21087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.628414][T21028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.646099][T21087] CPU: 0 UID: 0 PID: 21087 Comm: syz.3.3302 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1269.646128][T21087] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1269.646134][T21087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.646143][T21087] Call Trace: [ 1269.646148][T21087] [ 1269.646154][T21087] dump_stack_lvl+0x100/0x190 [ 1269.646180][T21087] should_fail_ex.cold+0x5/0xa [ 1269.646198][T21087] _copy_from_user+0x2e/0xd0 [ 1269.646221][T21087] snd_seq_write+0x413/0x6d0 [ 1269.646247][T21087] ? __pfx_snd_seq_write+0x10/0x10 [ 1269.646268][T21087] ? bpf_lsm_file_permission+0x9/0x10 [ 1269.646290][T21087] ? security_file_permission+0x76/0x210 [ 1269.646313][T21087] ? rw_verify_area+0xce/0x6d0 [ 1269.646334][T21087] vfs_write+0x2aa/0x1070 [ 1269.646357][T21087] ? __pfx_snd_seq_write+0x10/0x10 [ 1269.646378][T21087] ? __pfx_vfs_write+0x10/0x10 [ 1269.646397][T21087] ? find_held_lock+0x2b/0x80 [ 1269.646411][T21087] ? __fget_files+0x215/0x3d0 [ 1269.646431][T21087] ? __fget_files+0x215/0x3d0 [ 1269.646456][T21087] ? __fget_files+0x21f/0x3d0 [ 1269.646491][T21087] ksys_write+0x1f8/0x250 [ 1269.646512][T21087] ? __pfx_ksys_write+0x10/0x10 [ 1269.646538][T21087] do_syscall_64+0x106/0xf80 [ 1269.646554][T21087] ? clear_bhb_loop+0x40/0x90 [ 1269.646572][T21087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.646587][T21087] RIP: 0033:0x7f7af8f9c629 [ 1269.646600][T21087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.646614][T21087] RSP: 002b:00007f7af9ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1269.646628][T21087] RAX: ffffffffffffffda RBX: 00007f7af9215fa0 RCX: 00007f7af8f9c629 [ 1269.646638][T21087] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 0000000000000011 [ 1269.646646][T21087] RBP: 00007f7af9ece090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.646655][T21087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.646663][T21087] R13: 00007f7af9216038 R14: 00007f7af9215fa0 R15: 00007ffc55f63e48 [ 1269.646681][T21087] [ 1270.086543][T21028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.093823][T21028] bridge_slave_0: entered allmulticast mode [ 1270.101273][T21028] bridge_slave_0: entered promiscuous mode [ 1270.247357][T20923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1270.324087][T20923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1271.078996][T20925] Bluetooth: hci4: Malformed LE Event: 0x0b [ 1271.267233][T21028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.274378][T21028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.289687][T21028] bridge_slave_1: entered allmulticast mode [ 1271.376065][T21028] bridge_slave_1: entered promiscuous mode [ 1271.416169][T20925] Bluetooth: hci2: command tx timeout [ 1271.705442][T21028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.043981][T21028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.890398][T21028] team0: Port device team_slave_0 added [ 1272.977793][T21028] team0: Port device team_slave_1 added [ 1273.346974][T20472] hsr_slave_0: left promiscuous mode [ 1273.399476][T20472] hsr_slave_1: left promiscuous mode [ 1273.436087][T20472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.525701][T20472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.619690][T20472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.686140][T20472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.790645][T20472] veth1_macvtap: left promiscuous mode [ 1273.882888][T20472] veth0_macvtap: left promiscuous mode [ 1273.924480][T20472] veth1_vlan: left promiscuous mode [ 1273.929732][T20472] veth0_vlan: left promiscuous mode [ 1275.106476][T20472] team0 (unregistering): Port device team_slave_1 removed [ 1275.204589][T20472] team0 (unregistering): Port device team_slave_0 removed [ 1275.811382][T21028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.864346][T21028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.044065][T21028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.138441][T20923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.211009][T21028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.217962][T21028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.551114][T21028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.927514][T21028] hsr_slave_0: entered promiscuous mode [ 1276.933746][T21028] hsr_slave_1: entered promiscuous mode [ 1277.050169][T21028] debugfs: 'hsr0' already exists in 'hsr' [ 1277.118700][T21028] Cannot create hsr debugfs directory [ 1278.141037][T20923] veth0_vlan: entered promiscuous mode [ 1278.513099][T21028] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.202954][T20923] veth1_vlan: entered promiscuous mode [ 1279.573178][T21028] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.118613][T21028] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.346254][T20923] veth0_macvtap: entered promiscuous mode [ 1280.455333][T20923] veth1_macvtap: entered promiscuous mode [ 1280.637083][T20923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.755921][T21028] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.902203][T20923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.025634][T20479] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.199183][T20472] bridge_slave_1: left allmulticast mode [ 1281.220117][T20472] bridge_slave_1: left promiscuous mode [ 1281.276896][T20472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.369355][T20472] bridge_slave_0: left allmulticast mode [ 1281.393143][T20472] bridge_slave_0: left promiscuous mode [ 1281.439300][T20472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.317183][T20472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.392481][T20472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.466387][T20472] bond0 (unregistering): Released all slaves [ 1282.607210][T20479] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.714867][T20479] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.000037][T20479] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.094992][T21277] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3333'. [ 1284.158625][T20472] hsr_slave_0: left promiscuous mode [ 1284.238462][T20472] hsr_slave_1: left promiscuous mode [ 1284.288903][T20472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.296302][T20472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.456839][T20472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.511395][T20472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.676758][T20472] veth1_macvtap: left promiscuous mode [ 1284.682291][T20472] veth0_macvtap: left promiscuous mode [ 1284.775763][T20472] veth1_vlan: left promiscuous mode [ 1284.781177][T20472] veth0_vlan: left promiscuous mode [ 1286.163586][T20472] team0 (unregistering): Port device team_slave_1 removed [ 1286.275297][T20472] team0 (unregistering): Port device team_slave_0 removed [ 1286.884666][T20479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.984060][T20479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.118336][T21028] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1287.295795][T20469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.320641][T21028] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1287.385156][T20469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.530160][T21028] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1287.630068][T21028] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1288.648250][T21028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.806275][T21028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.957880][T20474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.965023][T20474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.104273][T20474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.111414][T20474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.802002][T21028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.199036][T21028] veth0_vlan: entered promiscuous mode [ 1293.390567][T21028] veth1_vlan: entered promiscuous mode [ 1293.773864][T21028] veth0_macvtap: entered promiscuous mode [ 1293.976421][T21028] veth1_macvtap: entered promiscuous mode [ 1294.237797][T21028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.335496][T21028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.618214][T20467] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.672621][T20467] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.853991][T20467] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.936232][T20467] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.247442][T20479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.360591][T20479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.437481][T20466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.532388][T20466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.773539][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.780176][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1298.092066][T21453] Invalid ELF header magic: != ELF [ 1301.121756][T21503] usbcore.quirks: string doesn't fit in 127 chars. [ 1301.360320][T21510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3366'. [ 1302.474933][T21530] program syz.7.3369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1302.860380][T21530] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1305.412190][T21566] FAULT_INJECTION: forcing a failure. [ 1305.412190][T21566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1305.710589][T21566] CPU: 0 UID: 0 PID: 21566 Comm: syz.5.3378 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1305.710620][T21566] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1305.710627][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1305.710637][T21566] Call Trace: [ 1305.710643][T21566] [ 1305.710650][T21566] dump_stack_lvl+0x100/0x190 [ 1305.710680][T21566] should_fail_ex.cold+0x5/0xa [ 1305.710698][T21566] _copy_to_iter+0x1f3/0x1720 [ 1305.710723][T21566] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1305.710748][T21566] ? __pfx__copy_to_iter+0x10/0x10 [ 1305.710768][T21566] ? is_bpf_text_address+0x94/0x1a0 [ 1305.710793][T21566] ? __skb_recv_datagram+0x1b2/0x220 [ 1305.710820][T21566] simple_copy_to_iter+0x46/0x90 [ 1305.710841][T21566] __skb_datagram_iter+0x129/0x900 [ 1305.710862][T21566] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1305.710886][T21566] ? skb_recv_datagram+0x88/0xc0 [ 1305.710909][T21566] skb_copy_datagram_iter+0xa1/0x270 [ 1305.710940][T21566] netlink_recvmsg+0x27e/0xa90 [ 1305.710959][T21566] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1305.710979][T21566] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1305.711003][T21566] sock_recvmsg+0x1f9/0x250 [ 1305.711024][T21566] sock_read_iter+0x2c6/0x3c0 [ 1305.711044][T21566] ? __pfx_sock_read_iter+0x10/0x10 [ 1305.711069][T21566] ? bpf_lsm_file_permission+0x9/0x10 [ 1305.711091][T21566] ? security_file_permission+0x76/0x210 [ 1305.711115][T21566] ? rw_verify_area+0xce/0x6d0 [ 1305.711135][T21566] ? __pfx_sock_read_iter+0x10/0x10 [ 1305.711155][T21566] vfs_read+0x957/0xb30 [ 1305.711179][T21566] ? __pfx_vfs_read+0x10/0x10 [ 1305.711198][T21566] ? find_held_lock+0x2b/0x80 [ 1305.711224][T21566] ksys_read+0x1f8/0x250 [ 1305.711245][T21566] ? __pfx_ksys_read+0x10/0x10 [ 1305.711271][T21566] do_syscall_64+0x106/0xf80 [ 1305.711287][T21566] ? clear_bhb_loop+0x40/0x90 [ 1305.711306][T21566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.711321][T21566] RIP: 0033:0x7f9eabb9c629 [ 1305.711339][T21566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.711357][T21566] RSP: 002b:00007f9eac9f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1305.711372][T21566] RAX: ffffffffffffffda RBX: 00007f9eabe15fa0 RCX: 00007f9eabb9c629 [ 1305.711382][T21566] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000004 [ 1305.711391][T21566] RBP: 00007f9eac9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.711400][T21566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.711408][T21566] R13: 00007f9eabe16038 R14: 00007f9eabe15fa0 R15: 00007ffcb662b0e8 [ 1305.711428][T21566] [ 1306.921196][T21589] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1310.417048][T21647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3391'. [ 1312.863180][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 1314.293529][T21722] FAULT_INJECTION: forcing a failure. [ 1314.293529][T21722] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.453112][T21722] CPU: 0 UID: 0 PID: 21722 Comm: syz.6.3403 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1314.453144][T21722] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1314.453152][T21722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1314.453161][T21722] Call Trace: [ 1314.453167][T21722] [ 1314.453173][T21722] dump_stack_lvl+0x100/0x190 [ 1314.453201][T21722] should_fail_ex.cold+0x5/0xa [ 1314.453220][T21722] should_failslab+0xc2/0x120 [ 1314.453236][T21722] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1314.453254][T21722] ? __do_sys_timerfd_create+0x1c9/0x3f0 [ 1314.453277][T21722] __do_sys_timerfd_create+0x1c9/0x3f0 [ 1314.453294][T21722] ? do_syscall_64+0x95/0xf80 [ 1314.453311][T21722] do_syscall_64+0x106/0xf80 [ 1314.453326][T21722] ? clear_bhb_loop+0x40/0x90 [ 1314.453344][T21722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.453360][T21722] RIP: 0033:0x7fb2b259c629 [ 1314.453374][T21722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.453388][T21722] RSP: 002b:00007fb2b33fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 1314.453404][T21722] RAX: ffffffffffffffda RBX: 00007fb2b2815fa0 RCX: 00007fb2b259c629 [ 1314.453414][T21722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1314.453422][T21722] RBP: 00007fb2b2632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1314.453431][T21722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.453440][T21722] R13: 00007fb2b2816038 R14: 00007fb2b2815fa0 R15: 00007ffe63711768 [ 1314.453460][T21722] [ 1315.277078][T21737] random: crng reseeded on system resumption [ 1320.067257][T21816] FAULT_INJECTION: forcing a failure. [ 1320.067257][T21816] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.291837][T21816] CPU: 0 UID: 0 PID: 21816 Comm: syz.7.3424 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1320.291868][T21816] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1320.291875][T21816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1320.291885][T21816] Call Trace: [ 1320.291890][T21816] [ 1320.291896][T21816] dump_stack_lvl+0x100/0x190 [ 1320.291924][T21816] should_fail_ex.cold+0x5/0xa [ 1320.291942][T21816] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1320.291959][T21816] should_failslab+0xc2/0x120 [ 1320.291973][T21816] __kmalloc_noprof+0xe0/0x850 [ 1320.291998][T21816] tomoyo_realpath_from_path+0xb6/0x690 [ 1320.292018][T21816] tomoyo_path_number_perm+0x23c/0x580 [ 1320.292039][T21816] ? tomoyo_path_number_perm+0x22e/0x580 [ 1320.292062][T21816] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1320.292103][T21816] ? find_held_lock+0x2b/0x80 [ 1320.292116][T21816] ? __fget_files+0x215/0x3d0 [ 1320.292137][T21816] ? hook_file_ioctl_common+0x146/0x410 [ 1320.292164][T21816] ? __fget_files+0x21f/0x3d0 [ 1320.292189][T21816] security_file_ioctl+0xd3/0x230 [ 1320.292212][T21816] __x64_sys_ioctl+0xb7/0x210 [ 1320.292233][T21816] do_syscall_64+0x106/0xf80 [ 1320.292249][T21816] ? clear_bhb_loop+0x40/0x90 [ 1320.292268][T21816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.292283][T21816] RIP: 0033:0x7fdcbc39c629 [ 1320.292297][T21816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.292311][T21816] RSP: 002b:00007fdcbd2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.292327][T21816] RAX: ffffffffffffffda RBX: 00007fdcbc616090 RCX: 00007fdcbc39c629 [ 1320.292337][T21816] RDX: 0000000000000000 RSI: 0000000040189206 RDI: 0000000000000006 [ 1320.292346][T21816] RBP: 00007fdcbd2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.292355][T21816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.292363][T21816] R13: 00007fdcbc616128 R14: 00007fdcbc616090 R15: 00007ffed9c48118 [ 1320.292383][T21816] [ 1320.292389][T21816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1324.062787][T21873] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1326.363459][ T29] audit: type=1326 audit(4294967532.343:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.7.3442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcbc39c629 code=0x0 [ 1327.190660][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3445'. [ 1328.869497][T21959] __vm_enough_memory: pid: 21959, comm: syz.7.3451, bytes: 4398046511104 not enough memory for the allocation [ 1329.517582][T21973] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1329.736847][T21973] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1330.143127][T21973] blktrace: Concurrent blktraces are not allowed on loop2 [ 1331.865611][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3463'. [ 1332.460626][T22005] team0: Port device team_slave_0 removed [ 1335.499887][T22017] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1337.045815][T20925] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 1337.243116][T22060] netlink: zone id is out of range [ 1337.483052][T22056] netlink: set zone limit has 8 unknown bytes [ 1337.720140][T22061] syz.5.3474 (22061): attempted to duplicate a private mapping with mremap. This is not supported. [ 1337.883662][T22060] netlink: zone id is out of range [ 1337.888801][T22060] netlink: zone id is out of range [ 1337.926853][T22064] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3477'. [ 1338.220120][T22060] netlink: zone id is out of range [ 1338.424698][T22060] netlink: zone id is out of range [ 1338.728175][T22060] netlink: zone id is out of range [ 1338.827082][T22060] netlink: zone id is out of range [ 1338.832911][T22060] netlink: zone id is out of range [ 1339.143591][T22060] netlink: zone id is out of range [ 1341.689590][T22113] FAULT_INJECTION: forcing a failure. [ 1341.689590][T22113] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1341.790988][T22113] CPU: 0 UID: 0 PID: 22113 Comm: syz.5.3488 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1341.791019][T22113] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1341.791026][T22113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1341.791035][T22113] Call Trace: [ 1341.791040][T22113] [ 1341.791047][T22113] dump_stack_lvl+0x100/0x190 [ 1341.791075][T22113] should_fail_ex.cold+0x5/0xa [ 1341.791092][T22113] get_futex_key+0x1d2/0x1620 [ 1341.791113][T22113] ? __pfx_get_futex_key+0x10/0x10 [ 1341.791131][T22113] ? do_mmap+0x93f/0x12f0 [ 1341.791146][T22113] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1341.791173][T22113] futex_wake+0xea/0x530 [ 1341.791196][T22113] ? __pfx_futex_wake+0x10/0x10 [ 1341.791226][T22113] do_futex+0x32b/0x350 [ 1341.791244][T22113] ? __pfx_do_futex+0x10/0x10 [ 1341.791268][T22113] __x64_sys_futex+0x34f/0x4d0 [ 1341.791287][T22113] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1341.791302][T22113] ? __pfx___x64_sys_futex+0x10/0x10 [ 1341.791328][T22113] do_syscall_64+0x106/0xf80 [ 1341.791344][T22113] ? clear_bhb_loop+0x40/0x90 [ 1341.791362][T22113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.791378][T22113] RIP: 0033:0x7f9eabb9c629 [ 1341.791396][T22113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.791411][T22113] RSP: 002b:00007f9eac9f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1341.791426][T22113] RAX: ffffffffffffffda RBX: 00007f9eabe15fa8 RCX: 00007f9eabb9c629 [ 1341.791437][T22113] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9eabe15fac [ 1341.791446][T22113] RBP: 00007f9eabe15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.791455][T22113] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1341.791464][T22113] R13: 00007f9eabe16038 R14: 00007ffcb662b000 R15: 00007ffcb662b0e8 [ 1341.791483][T22113] [ 1345.488614][T22166] net_ratelimit: 5 callbacks suppressed [ 1345.488630][T22166] openvswitch: netlink: IP tunnel dst address not specified [ 1346.541611][T22178] FAULT_INJECTION: forcing a failure. [ 1346.541611][T22178] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.018602][T22178] CPU: 0 UID: 0 PID: 22178 Comm: syz.3.3501 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1347.018634][T22178] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1347.018641][T22178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1347.018651][T22178] Call Trace: [ 1347.018657][T22178] [ 1347.018663][T22178] dump_stack_lvl+0x100/0x190 [ 1347.018692][T22178] should_fail_ex.cold+0x5/0xa [ 1347.018711][T22178] should_failslab+0xc2/0x120 [ 1347.018727][T22178] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1347.018750][T22178] ? __d_alloc+0x34/0xa80 [ 1347.018765][T22178] ? __pfx_stack_trace_save+0x10/0x10 [ 1347.018784][T22178] __d_alloc+0x34/0xa80 [ 1347.018802][T22178] d_alloc_parallel+0x111/0x14e0 [ 1347.018827][T22178] ? find_held_lock+0x2b/0x80 [ 1347.018841][T22178] ? __d_lookup+0x25c/0x4a0 [ 1347.018859][T22178] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1347.018881][T22178] ? __d_lookup+0x266/0x4a0 [ 1347.018904][T22178] lookup_open.isra.0+0x57c/0x11b0 [ 1347.018929][T22178] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1347.018960][T22178] ? lookup_fast+0x2da/0x600 [ 1347.018982][T22178] path_openat+0xa98/0x31a0 [ 1347.019002][T22178] ? __pfx_path_openat+0x10/0x10 [ 1347.019023][T22178] do_file_open+0x20e/0x430 [ 1347.019049][T22178] ? __pfx_do_file_open+0x10/0x10 [ 1347.019078][T22178] ? alloc_fd+0x476/0x790 [ 1347.019103][T22178] ? do_getname+0x191/0x390 [ 1347.019122][T22178] do_sys_openat2+0x10d/0x1e0 [ 1347.019141][T22178] ? __pfx_do_sys_openat2+0x10/0x10 [ 1347.019161][T22178] ? do_raw_spin_unlock+0x145/0x1e0 [ 1347.019186][T22178] __x64_sys_openat+0x12d/0x210 [ 1347.019207][T22178] ? __pfx___x64_sys_openat+0x10/0x10 [ 1347.019233][T22178] do_syscall_64+0x106/0xf80 [ 1347.019250][T22178] ? clear_bhb_loop+0x40/0x90 [ 1347.019268][T22178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.019284][T22178] RIP: 0033:0x7f7af8f9c629 [ 1347.019298][T22178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.019313][T22178] RSP: 002b:00007f7af9e8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1347.019328][T22178] RAX: ffffffffffffffda RBX: 00007f7af9216180 RCX: 00007f7af8f9c629 [ 1347.019338][T22178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1347.019348][T22178] RBP: 00007f7af9032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1347.019357][T22178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.019367][T22178] R13: 00007f7af9216218 R14: 00007f7af9216180 R15: 00007ffc55f63e48 [ 1347.019387][T22178] [ 1349.462845][T22204] Invalid ELF header magic: != ELF [ 1352.714594][T22239] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1354.224793][T22264] netlink: 'syz.3.3521': attribute type 2 has an invalid length. [ 1354.308680][T22263] netlink: 'syz.3.3521': attribute type 2 has an invalid length. [ 1356.205516][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3529'. [ 1356.901126][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.907424][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.034752][T22347] FAULT_INJECTION: forcing a failure. [ 1361.034752][T22347] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1361.209498][T22341] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1361.337182][T22347] CPU: 0 UID: 0 PID: 22347 Comm: syz.6.3543 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1361.337215][T22347] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1361.337222][T22347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1361.337232][T22347] Call Trace: [ 1361.337237][T22347] [ 1361.337244][T22347] dump_stack_lvl+0x100/0x190 [ 1361.337285][T22347] should_fail_ex.cold+0x5/0xa [ 1361.337304][T22347] get_futex_key+0x1d2/0x1620 [ 1361.337325][T22347] ? __pfx_get_futex_key+0x10/0x10 [ 1361.337343][T22347] ? __pfx_msr_io+0x10/0x10 [ 1361.337368][T22347] futex_wake+0xea/0x530 [ 1361.337398][T22347] ? __pfx_futex_wake+0x10/0x10 [ 1361.337424][T22347] ? do_vfs_ioctl+0x226/0x13e0 [ 1361.337448][T22347] do_futex+0x32b/0x350 [ 1361.337467][T22347] ? __pfx_do_futex+0x10/0x10 [ 1361.337486][T22347] ? find_held_lock+0x2b/0x80 [ 1361.337503][T22347] __x64_sys_futex+0x34f/0x4d0 [ 1361.337523][T22347] ? __fget_files+0x21f/0x3d0 [ 1361.337545][T22347] ? __pfx___x64_sys_futex+0x10/0x10 [ 1361.337571][T22347] do_syscall_64+0x106/0xf80 [ 1361.337587][T22347] ? clear_bhb_loop+0x40/0x90 [ 1361.337605][T22347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.337621][T22347] RIP: 0033:0x7fb2b259c629 [ 1361.337638][T22347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.337652][T22347] RSP: 002b:00007fb2b33d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1361.337669][T22347] RAX: ffffffffffffffda RBX: 00007fb2b2816098 RCX: 00007fb2b259c629 [ 1361.337680][T22347] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2b281609c [ 1361.337689][T22347] RBP: 00007fb2b2816090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.337698][T22347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.337707][T22347] R13: 00007fb2b2816128 R14: 00007ffe63711680 R15: 00007ffe63711768 [ 1361.337726][T22347] [ 1362.562301][T22360] sd 0:0:1:0: PR command failed: 1026 [ 1362.568436][T22360] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1362.626055][T22359] sd 0:0:1:0: PR command failed: 1026 [ 1362.653772][T22359] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1362.733644][T22360] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1362.809846][T22359] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1364.135256][T17680] Bluetooth: hci3: command 0x0406 tx timeout [ 1365.122840][T22390] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1365.559391][T22399] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1366.312545][T22409] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1372.589761][T20925] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1373.194057][T22461] FAULT_INJECTION: forcing a failure. [ 1373.194057][T22461] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.255916][T22477] zswap: compressor  not available [ 1374.031561][T22461] CPU: 0 UID: 0 PID: 22461 Comm: syz.7.3569 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1374.031590][T22461] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1374.031598][T22461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1374.031607][T22461] Call Trace: [ 1374.031612][T22461] [ 1374.031618][T22461] dump_stack_lvl+0x100/0x190 [ 1374.031645][T22461] should_fail_ex.cold+0x5/0xa [ 1374.031662][T22461] ? tomoyo_encode2+0xfb/0x3c0 [ 1374.031677][T22461] should_failslab+0xc2/0x120 [ 1374.031692][T22461] __kmalloc_noprof+0xe0/0x850 [ 1374.031713][T22461] ? d_absolute_path+0x136/0x1b0 [ 1374.031734][T22461] tomoyo_encode2+0xfb/0x3c0 [ 1374.031752][T22461] tomoyo_encode+0x29/0x50 [ 1374.031766][T22461] tomoyo_realpath_from_path+0x18c/0x690 [ 1374.031786][T22461] tomoyo_path_number_perm+0x23c/0x580 [ 1374.031807][T22461] ? tomoyo_path_number_perm+0x22e/0x580 [ 1374.031830][T22461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1374.031858][T22461] ? do_raw_spin_lock+0x128/0x260 [ 1374.031879][T22461] ? find_held_lock+0x2b/0x80 [ 1374.031903][T22461] ? __pfx_d_add+0x10/0x10 [ 1374.031919][T22461] ? d_alloc+0x176/0x1e0 [ 1374.031933][T22461] ? current_check_access_path+0x281/0x460 [ 1374.031959][T22461] ? __pfx_current_check_access_path+0x10/0x10 [ 1374.031983][T22461] ? simple_lookup+0x105/0x1d0 [ 1374.032005][T22461] ? lookup_one_qstr_excl+0xb3/0x250 [ 1374.032025][T22461] tomoyo_path_mkdir+0x9b/0xe0 [ 1374.032043][T22461] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 1374.032066][T22461] security_path_mkdir+0x154/0x2e0 [ 1374.032083][T22461] filename_mkdirat+0x168/0x5e0 [ 1374.032100][T22461] ? __pfx_filename_mkdirat+0x10/0x10 [ 1374.032123][T22461] ? strncpy_from_user+0x19d/0x2d0 [ 1374.032148][T22461] ? do_getname+0x191/0x390 [ 1374.032167][T22461] __x64_sys_mkdir+0x6b/0x90 [ 1374.032182][T22461] do_syscall_64+0x106/0xf80 [ 1374.032198][T22461] ? clear_bhb_loop+0x40/0x90 [ 1374.032216][T22461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.032231][T22461] RIP: 0033:0x7fdcbc39c629 [ 1374.032245][T22461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.032259][T22461] RSP: 002b:00007fdcbd286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1374.032273][T22461] RAX: ffffffffffffffda RBX: 00007fdcbc616180 RCX: 00007fdcbc39c629 [ 1374.032283][T22461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1374.032292][T22461] RBP: 00007fdcbc432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1374.032301][T22461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1374.032310][T22461] R13: 00007fdcbc616218 R14: 00007fdcbc616180 R15: 00007ffed9c48118 [ 1374.032330][T22461] [ 1374.032345][T22461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1377.002750][T22514] mkiss: ax0: crc mode is auto. [ 1378.718306][T22521] random: crng reseeded on system resumption [ 1379.836033][T22523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1379.965708][T22523] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1380.153534][T22523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1380.291260][T22523] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1380.508234][T22523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1380.558337][T22523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1380.718644][T22523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1381.883655][T20925] Bluetooth: hci1: command 0x0c1a tx timeout [ 1381.969752][T20925] Bluetooth: hci4: command 0x0c1a tx timeout [ 1382.198550][T20925] Bluetooth: hci3: command 0x0406 tx timeout [ 1382.526025][T20925] Bluetooth: hci2: command 0x0c1a tx timeout [ 1384.268026][T20925] Bluetooth: hci3: command 0x0406 tx timeout [ 1384.586163][T20925] Bluetooth: hci2: command 0x0c1a tx timeout [ 1386.619830][T22630] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1386.657462][T20925] Bluetooth: hci2: command 0x0c1a tx timeout [ 1386.732123][T22630] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1386.972393][T22625] zswap: compressor not available [ 1386.995081][T22637] binder: 22635:22637 ioctl c018620c 0 returned -1 [ 1389.750096][T22661] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1393.897899][T17680] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1393.904408][T20925] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1393.911430][T22708] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1393.922484][T22711] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1393.977621][ T9235] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1394.075830][T22717] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 1394.083593][T22716] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 1394.090266][T22723] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 1394.139365][T22724] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1394.147852][T22727] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1394.154346][T22726] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 1394.164422][T22728] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 1394.176669][T22725] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1394.183298][T22729] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 1394.189706][T22730] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 1394.198612][T22732] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 1394.204994][T22731] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 1394.226083][T22736] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 1394.232729][T22733] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 1394.239176][T22734] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 1394.295829][T22742] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 1394.303320][T22735] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 1394.375206][T22746] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 1394.381847][T22744] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 1394.462538][T22743] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 1394.470432][T22753] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 1394.478057][T22748] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 1394.484540][T22750] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 1394.490988][T22749] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 1394.497570][T22751] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 1394.504565][T22755] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 1394.510948][T22752] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 1394.534878][T22754] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 1395.755800][T22786] blktrace: Concurrent blktraces are not allowed on loop2 [ 1396.236460][T22780] block nbd8: shutting down sockets [ 1399.084484][T22832] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1402.880717][T22897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1402.931248][T22897] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1402.937295][T22897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1403.042277][T22897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1403.359744][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1403.456080][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1403.557985][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1403.696848][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1403.792728][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1403.885967][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1403.959065][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1404.066201][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1404.206024][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1404.324999][T22914] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1404.485561][T22748] Bluetooth: hci1: command 0x0c1a tx timeout [ 1404.972308][T22748] Bluetooth: hci3: command 0x0406 tx timeout [ 1404.978383][T22748] Bluetooth: hci4: command 0x0c1a tx timeout [ 1405.049685][T22748] Bluetooth: hci2: command 0x0c1a tx timeout [ 1407.181725][T22958] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1407.638819][T22962] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1407.694984][T22962] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1407.868093][T22962] veth0_to_bridge: entered allmulticast mode [ 1408.008658][T22962] veth0_to_bridge: entered promiscuous mode [ 1408.102040][T22962] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1408.411354][T22962] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1408.418582][T22962] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1410.084734][T22984] FAULT_INJECTION: forcing a failure. [ 1410.084734][T22984] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.307294][T22984] CPU: 0 UID: 0 PID: 22984 Comm: syz.5.3666 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1410.307326][T22984] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1410.307334][T22984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1410.307344][T22984] Call Trace: [ 1410.307350][T22984] [ 1410.307357][T22984] dump_stack_lvl+0x100/0x190 [ 1410.307385][T22984] should_fail_ex.cold+0x5/0xa [ 1410.307404][T22984] ? tomoyo_encode2+0xfb/0x3c0 [ 1410.307419][T22984] should_failslab+0xc2/0x120 [ 1410.307434][T22984] __kmalloc_noprof+0xe0/0x850 [ 1410.307460][T22984] tomoyo_encode2+0xfb/0x3c0 [ 1410.307478][T22984] tomoyo_encode+0x29/0x50 [ 1410.307492][T22984] tomoyo_realpath_from_path+0x18c/0x690 [ 1410.307512][T22984] tomoyo_path_number_perm+0x23c/0x580 [ 1410.307533][T22984] ? tomoyo_path_number_perm+0x22e/0x580 [ 1410.307563][T22984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1410.307585][T22984] ? futex_wake+0x1ad/0x530 [ 1410.307625][T22984] ? find_held_lock+0x2b/0x80 [ 1410.307640][T22984] ? __fget_files+0x215/0x3d0 [ 1410.307662][T22984] ? hook_file_ioctl_common+0x146/0x410 [ 1410.307687][T22984] ? __fget_files+0x21f/0x3d0 [ 1410.307712][T22984] security_file_ioctl+0xd3/0x230 [ 1410.307735][T22984] __x64_sys_ioctl+0xb7/0x210 [ 1410.307756][T22984] do_syscall_64+0x106/0xf80 [ 1410.307772][T22984] ? clear_bhb_loop+0x40/0x90 [ 1410.307791][T22984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.307807][T22984] RIP: 0033:0x7f9eabb9c629 [ 1410.307822][T22984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.307837][T22984] RSP: 002b:00007f9eac9d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.307852][T22984] RAX: ffffffffffffffda RBX: 00007f9eabe16090 RCX: 00007f9eabb9c629 [ 1410.307862][T22984] RDX: 000000000000007f RSI: 000000000000541b RDI: 0000000000000003 [ 1410.307871][T22984] RBP: 00007f9eabc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1410.307880][T22984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.307889][T22984] R13: 00007f9eabe16128 R14: 00007f9eabe16090 R15: 00007ffcb662b0e8 [ 1410.307910][T22984] [ 1410.307925][T22984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1410.889716][T22976] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1411.403456][T22670] Process accounting resumed [ 1414.013278][T23021] openvswitch: netlink: Missing valid actions attribute. [ 1414.970237][T23027] FAULT_INJECTION: forcing a failure. [ 1414.970237][T23027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.236294][T23027] CPU: 0 UID: 0 PID: 23027 Comm: syz.6.3677 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1415.236336][T23027] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1415.236343][T23027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1415.236353][T23027] Call Trace: [ 1415.236359][T23027] [ 1415.236365][T23027] dump_stack_lvl+0x100/0x190 [ 1415.236394][T23027] should_fail_ex.cold+0x5/0xa [ 1415.236413][T23027] _copy_from_user+0x2e/0xd0 [ 1415.236437][T23027] do_sock_getsockopt+0x30b/0x3d0 [ 1415.236459][T23027] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1415.236479][T23027] ? __pfx_do_futex+0x10/0x10 [ 1415.236506][T23027] __sys_getsockopt+0x133/0x1d0 [ 1415.236527][T23027] ? __x64_sys_getsockopt+0xbd/0x160 [ 1415.236541][T23027] __x64_sys_getsockopt+0xbd/0x160 [ 1415.236556][T23027] ? do_syscall_64+0x95/0xf80 [ 1415.236573][T23027] ? lockdep_hardirqs_on+0x78/0x100 [ 1415.236589][T23027] do_syscall_64+0x106/0xf80 [ 1415.236604][T23027] ? clear_bhb_loop+0x40/0x90 [ 1415.236623][T23027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.236639][T23027] RIP: 0033:0x7fb2b259c629 [ 1415.236653][T23027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.236667][T23027] RSP: 002b:00007fb2b33fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1415.236682][T23027] RAX: ffffffffffffffda RBX: 00007fb2b2815fa0 RCX: 00007fb2b259c629 [ 1415.236693][T23027] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000008 [ 1415.236701][T23027] RBP: 00007fb2b2632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1415.236710][T23027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.236719][T23027] R13: 00007fb2b2816038 R14: 00007fb2b2815fa0 R15: 00007ffe63711768 [ 1415.236738][T23027] [ 1417.037342][T22748] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1417.045154][T22748] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1417.086069][T22754] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1417.096000][T22754] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1418.019591][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1418.025951][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1420.402767][T22748] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1421.500479][T23087] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1421.614712][T23087] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1423.477148][T23107] FAULT_INJECTION: forcing a failure. [ 1423.477148][T23107] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.603700][T23107] CPU: 0 UID: 0 PID: 23107 Comm: syz.3.3695 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1423.603730][T23107] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1423.603739][T23107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1423.603748][T23107] Call Trace: [ 1423.603754][T23107] [ 1423.603761][T23107] dump_stack_lvl+0x100/0x190 [ 1423.603789][T23107] should_fail_ex.cold+0x5/0xa [ 1423.603809][T23107] should_failslab+0xc2/0x120 [ 1423.603824][T23107] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1423.603843][T23107] ? __do_sys_timerfd_create+0x1c9/0x3f0 [ 1423.603865][T23107] __do_sys_timerfd_create+0x1c9/0x3f0 [ 1423.603883][T23107] ? do_syscall_64+0x95/0xf80 [ 1423.603900][T23107] do_syscall_64+0x106/0xf80 [ 1423.603915][T23107] ? clear_bhb_loop+0x40/0x90 [ 1423.603934][T23107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.603950][T23107] RIP: 0033:0x7f7af8f9c629 [ 1423.603963][T23107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1423.603978][T23107] RSP: 002b:00007f7af9ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 1423.603992][T23107] RAX: ffffffffffffffda RBX: 00007f7af9215fa0 RCX: 00007f7af8f9c629 [ 1423.604002][T23107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1423.604011][T23107] RBP: 00007f7af9032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1423.604020][T23107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.604029][T23107] R13: 00007f7af9216038 R14: 00007f7af9215fa0 R15: 00007ffc55f63e48 [ 1423.604048][T23107] [ 1423.608512][T23109] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1426.409238][T23137] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1426.507121][T23137] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1426.648864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.661521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.674154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.686393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.698608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.710800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.723022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.735229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.747482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1426.759680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.631280][ C0] net_ratelimit: 22403 callbacks suppressed [ 1431.631299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.649614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.662017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.674290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.686685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.699034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.711290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.723524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.735716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1431.747924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.615420][ C0] net_ratelimit: 22334 callbacks suppressed [ 1436.615439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.633593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.645781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.657986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.670175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.682376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.694538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.706746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.718898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1436.731105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.599568][ C0] net_ratelimit: 21550 callbacks suppressed [ 1441.599586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.617779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.629984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.642177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.654365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.666605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.678804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.691013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.703425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1441.715708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.583469][ C0] net_ratelimit: 20446 callbacks suppressed [ 1446.583487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.601631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.613880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.626160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.638380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.650589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.662775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.674995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.687212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.699472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.567588][ C0] net_ratelimit: 20663 callbacks suppressed [ 1451.567606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.585745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.597970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.610185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.622381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.634581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.646799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.658994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.671211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.683396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.551771][ C0] net_ratelimit: 20865 callbacks suppressed [ 1456.551788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.569940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.582160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.594399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.606592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.618806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.630995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.643185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.655394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.667611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.535751][ C0] net_ratelimit: 20583 callbacks suppressed [ 1461.535769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.553905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.566140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.578364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.590568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.602761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.614973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.627187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.639404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.651635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.519811][ C0] net_ratelimit: 20673 callbacks suppressed [ 1466.519828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.538004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.550244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.562444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.574640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.586879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.599094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.611341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.623520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.635717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.503992][ C0] net_ratelimit: 20600 callbacks suppressed [ 1471.504010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.522152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.534373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.546568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.558762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.570991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.583176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.595369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.607739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.619961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.487886][ C0] net_ratelimit: 20808 callbacks suppressed [ 1476.487903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.506096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.518308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.530542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.542737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.554966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.567169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.579377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.591581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.603819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.273690][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.286865][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1481.471936][ C0] net_ratelimit: 20537 callbacks suppressed [ 1481.471953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.490076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.502401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.514613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.526798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.538991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.551171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.563323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.575527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.587729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.456010][ C0] net_ratelimit: 20710 callbacks suppressed [ 1486.456027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.474226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1486.486508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.498749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.510948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1486.523532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.535781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.548004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1486.560304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.572519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.440099][ C0] net_ratelimit: 20654 callbacks suppressed [ 1491.440117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.458261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1491.470507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.482722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.494922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1491.507163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.519372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.531558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1491.543802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.555998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.424114][ C0] net_ratelimit: 20440 callbacks suppressed [ 1496.424132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.442313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.454532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1496.466823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.479066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.491274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1496.503528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.515726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.527917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1496.540192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.408144][ C0] net_ratelimit: 20438 callbacks suppressed [ 1501.408161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.426348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.438558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1501.450847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.463078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.475289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1501.487562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.499782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.511977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1501.524263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.392341][ C0] net_ratelimit: 20413 callbacks suppressed [ 1506.392359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1506.410601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.422839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.435042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1506.447317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.459524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.471727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1506.484129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.496370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.508560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1511.376447][ C0] net_ratelimit: 20321 callbacks suppressed [ 1511.376463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1511.394687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.406947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.419130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1511.431383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.443619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.455830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1511.468108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.480318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.492491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1516.360544][ C0] net_ratelimit: 20787 callbacks suppressed [ 1516.360561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.379343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.391571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1516.403831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.416027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.428280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1516.440560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.452767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.464965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1516.477236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.344482][ C0] net_ratelimit: 20649 callbacks suppressed [ 1521.344499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.362692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1521.374956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.387198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.399423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1521.411719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.424103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.437238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1521.449595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.461850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.328822][ C0] net_ratelimit: 17740 callbacks suppressed [ 1526.328839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.346963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.359138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1526.371924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.384173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.396344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1526.409150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.421364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.433541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1526.446318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.024000][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1531.030974][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23029/1:b..l [ 1531.039447][ C0] rcu: (detected by 0, t=10502 jiffies, g=116797, q=7603 ncpus=1) [ 1531.047335][ C0] task:syz.5.3679 state:R running task stack:23240 pid:23029 tgid:23029 ppid:15118 task_flags:0x40064c flags:0x00080001 [ 1531.061811][ C0] Call Trace: [ 1531.065087][ C0] [ 1531.068010][ C0] __schedule+0xfee/0x60e0 [ 1531.072437][ C0] ? __pfx___schedule+0x10/0x10 [ 1531.077270][ C0] ? find_held_lock+0x2b/0x80 [ 1531.081928][ C0] ? rcu_is_watching+0x12/0xc0 [ 1531.086679][ C0] preempt_schedule_irq+0x50/0x90 [ 1531.091683][ C0] irqentry_exit+0x17b/0x670 [ 1531.096261][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1531.102222][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 1531.107404][ C0] Code: 05 7b ae 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 46 4d f5 0e 0f 82 c2 02 00 00 8b 35 0e 81 f5 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d ae 28 12 0f 85 02 03 00 00 48 83 c4 [ 1531.126993][ C0] RSP: 0018:ffffc90003586ec8 EFLAGS: 00000206 [ 1531.133041][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1531.140991][ C0] RDX: 0000000000000000 RSI: ffffffff8de54759 RDI: ffffffff8c1aee20 [ 1531.148959][ C0] RBP: ffffffff8e7e9220 R08: 0000000086db7919 R09: 0000000000000007 [ 1531.156912][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1531.164863][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1531.172826][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1531.178010][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1531.183191][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1531.189331][ C0] unwind_next_frame+0xd1/0x1ea0 [ 1531.194251][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 1531.199342][ C0] ? dentry_unlink_inode+0x2a1/0x490 [ 1531.204618][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1531.210753][ C0] arch_stack_walk+0x94/0xf0 [ 1531.215336][ C0] ? dentry_unlink_inode+0x2a1/0x490 [ 1531.220607][ C0] stack_trace_save+0x8e/0xc0 [ 1531.225264][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1531.230617][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1531.235569][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1531.241356][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1531.246580][ C0] save_stack+0x162/0x1e0 [ 1531.250898][ C0] ? __pfx_save_stack+0x10/0x10 [ 1531.255735][ C0] ? free_unref_folios+0xaea/0x1790 [ 1531.260918][ C0] ? folios_put_refs+0x53c/0x840 [ 1531.265841][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 1531.270939][ C0] ? shmem_evict_inode+0x39e/0xbd0 [ 1531.276207][ C0] ? evict+0x3c2/0xad0 [ 1531.280257][ C0] ? iput.part.0+0x605/0xf50 [ 1531.284914][ C0] ? iput+0x35/0x40 [ 1531.288700][ C0] ? dentry_unlink_inode+0x2a1/0x490 [ 1531.293969][ C0] ? page_ext_put+0x3e/0xd0 [ 1531.298465][ C0] __reset_page_owner+0x84/0x190 [ 1531.303394][ C0] free_unref_folios+0xaea/0x1790 [ 1531.308407][ C0] ? rcu_is_watching+0x12/0xc0 [ 1531.313157][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1531.318948][ C0] folios_put_refs+0x53c/0x840 [ 1531.323703][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1531.328977][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1531.335318][ C0] shmem_undo_range+0x5e5/0x1570 [ 1531.340265][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1531.345663][ C0] shmem_evict_inode+0x39e/0xbd0 [ 1531.350589][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 1531.356294][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1531.361739][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1531.367791][ C0] ? find_held_lock+0x2b/0x80 [ 1531.372446][ C0] ? evict+0x37e/0xad0 [ 1531.376506][ C0] ? evict+0x37e/0xad0 [ 1531.380564][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1531.386011][ C0] evict+0x3c2/0xad0 [ 1531.389887][ C0] ? find_held_lock+0x2b/0x80 [ 1531.394544][ C0] ? __pfx_evict+0x10/0x10 [ 1531.398941][ C0] ? iput.part.0+0x5fd/0xf50 [ 1531.403515][ C0] iput.part.0+0x605/0xf50 [ 1531.407917][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 1531.413188][ C0] iput+0x35/0x40 [ 1531.416802][ C0] dentry_unlink_inode+0x2a1/0x490 [ 1531.421895][ C0] __dentry_kill+0x1d0/0x600 [ 1531.426468][ C0] finish_dput+0x76/0x480 [ 1531.430795][ C0] dput.part.0+0x456/0x570 [ 1531.435194][ C0] dput+0x1f/0x30 [ 1531.438810][ C0] __fput+0x519/0xb40 [ 1531.442779][ C0] task_work_run+0x150/0x240 [ 1531.447375][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1531.452470][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1531.457658][ C0] do_exit+0x829/0x2aa0 [ 1531.461805][ C0] ? __pfx_do_exit+0x10/0x10 [ 1531.466387][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1531.472361][ C0] do_group_exit+0xd5/0x2a0 [ 1531.476851][ C0] get_signal+0x1ec7/0x21e0 [ 1531.481457][ C0] ? __pfx_get_signal+0x10/0x10 [ 1531.486309][ C0] arch_do_signal_or_restart+0x91/0x770 [ 1531.491843][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1531.497988][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 1531.503267][ C0] irqentry_exit+0x1f8/0x670 [ 1531.507850][ C0] asm_exc_page_fault+0x26/0x30 [ 1531.512895][ C0] RIP: 0033:0x7f9eabb9c631 [ 1531.517291][ C0] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 1531.523529][ C0] RAX: 0000000000000000 RBX: 00007f9eabe15fa0 RCX: 00007f9eabb9c629 [ 1531.531480][ C0] RDX: 0000200000002100 RSI: 000000000000000a RDI: 0000000000000001 [ 1531.539431][ C0] RBP: 00007f9eabc32b39 R08: 0000000000000008 R09: 0000000000000000 [ 1531.547382][ C0] R10: 0000200000002140 R11: 0000000000000246 R12: 0000000000000000 [ 1531.555435][ C0] R13: 00007f9eabe16038 R14: 00007f9eabe15fa0 R15: 00007ffcb662b0e8 [ 1531.563434][ C0] [ 1531.566468][ C0] rcu: rcu_preempt kthread starved for 473 jiffies! g116797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1531.577662][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1531.588464][ C0] rcu: RCU grace-period kthread stack dump: [ 1531.594339][ C0] task:rcu_preempt state:R running task stack:28584 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1531.607989][ C0] Call Trace: [ 1531.611475][ C0] [ 1531.614418][ C0] __schedule+0xfee/0x60e0 [ 1531.619032][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1531.623994][ C0] ? __pfx___schedule+0x10/0x10 [ 1531.628954][ C0] ? find_held_lock+0x2b/0x80 [ 1531.633780][ C0] ? schedule+0x2bf/0x390 [ 1531.638278][ C0] schedule+0xdd/0x390 [ 1531.642329][ C0] schedule_timeout+0x127/0x280 [ 1531.647170][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1531.652532][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1531.657835][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1531.663644][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1531.669484][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1531.674295][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1531.679854][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1531.684996][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1531.690209][ C0] ? rcu_is_watching+0x12/0xc0 [ 1531.694966][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1531.700760][ C0] rcu_gp_kthread+0x179/0x230 [ 1531.705428][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1531.710607][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1531.716694][ C0] ? __kthread_parkme+0x18c/0x230 [ 1531.721707][ C0] ? kthread+0x13a/0x450 [ 1531.725933][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1531.731200][ C0] kthread+0x370/0x450 [ 1531.735274][ C0] ? __pfx_kthread+0x10/0x10 [ 1531.739869][ C0] ret_from_fork+0x754/0xd80 [ 1531.744557][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1531.749658][ C0] ? __switch_to+0x7b4/0x1120 [ 1531.754349][ C0] ? __pfx_kthread+0x10/0x10 [ 1531.758930][ C0] ret_from_fork_asm+0x1a/0x30 [ 1531.763692][ C0] [ 1531.766692][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1531.773014][ C0] CPU: 0 UID: 0 PID: 20461 Comm: kworker/u10:48 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1531.784281][ C0] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1531.791672][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1531.801710][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1531.808638][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 1531.815396][ C0] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 [ 1531.834982][ C0] RSP: 0018:ffffc90000007160 EFLAGS: 00000246 [ 1531.841037][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8a65813c [ 1531.848989][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1531.856938][ C0] RBP: ffff88806442cf80 R08: 0000000000000005 R09: 0000000000000000 [ 1531.864887][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805cfab800 [ 1531.872835][ C0] R13: ffff8880a9ed8d10 R14: ffff888028488000 R15: ffffc900000072f8 [ 1531.880796][ C0] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 1531.889707][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1531.896273][ C0] CR2: 00007ff33ac1eb51 CR3: 00000000582f4000 CR4: 00000000003526f0 [ 1531.904332][ C0] Call Trace: [ 1531.907622][ C0] [ 1531.910449][ C0] net_generic+0x19c/0x2a0 [ 1531.914851][ C0] brnf_get_logical_dev+0x22/0x2a0 [ 1531.919943][ C0] br_nf_forward_ip.part.0+0x5b1/0x820 [ 1531.925386][ C0] br_nf_forward+0xfe5/0x19f0 [ 1531.930049][ C0] nf_hook_slow+0xbf/0x220 [ 1531.934453][ C0] __br_forward+0x2f6/0x970 [ 1531.938948][ C0] ? __pfx___br_forward+0x10/0x10 [ 1531.943958][ C0] ? __asan_memcpy+0x3c/0x60 [ 1531.948535][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1531.953978][ C0] ? __skb_clone+0x570/0x760 [ 1531.958562][ C0] maybe_deliver+0xf0/0x180 [ 1531.963052][ C0] br_flood+0x193/0x650 [ 1531.967197][ C0] br_handle_frame_finish+0xf57/0x1f00 [ 1531.972641][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1531.978517][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1531.983790][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 1531.988632][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1531.993728][ C0] ? nf_hook_slow+0x167/0x220 [ 1531.998391][ C0] br_nf_hook_thresh+0x30d/0x420 [ 1532.003329][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1532.009206][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1532.014675][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1532.020549][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1532.025737][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1532.031622][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1532.037506][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 1532.043471][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1532.049349][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 1532.054704][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1532.060578][ C0] ? lock_acquire+0x1cf/0x380 [ 1532.065240][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1532.071719][ C0] ? net_generic+0xea/0x2a0 [ 1532.076207][ C0] br_nf_pre_routing+0x93b/0x1510 [ 1532.081215][ C0] br_handle_frame+0xcdd/0x1520 [ 1532.086051][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1532.091318][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1532.097210][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1532.102474][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3550 [ 1532.109140][ C0] ? mark_held_locks+0x40/0x70 [ 1532.113892][ C0] ? kmem_cache_free+0x124/0x6a0 [ 1532.118813][ C0] ? skb_release_data+0x7a0/0x9d0 [ 1532.123820][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1532.130918][ C0] ? kfree_skbmem+0x19f/0x210 [ 1532.135581][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 1532.140772][ C0] ? ip6_mc_input+0x51a/0xf50 [ 1532.145437][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1532.150452][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1532.155380][ C0] ? process_backlog+0x32a/0x1580 [ 1532.160393][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1532.166188][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1532.172590][ C0] ? lock_acquire+0x1cf/0x380 [ 1532.177255][ C0] ? process_backlog+0x32a/0x1580 [ 1532.182269][ C0] ? process_backlog+0x32a/0x1580 [ 1532.187286][ C0] __netif_receive_skb+0x1f/0x120 [ 1532.192302][ C0] process_backlog+0x37a/0x1580 [ 1532.197184][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1532.202549][ C0] net_rx_action+0xa40/0xf20 [ 1532.207133][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1532.212233][ C0] ? mark_held_locks+0x40/0x70 [ 1532.217069][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1532.222258][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1532.227540][ C0] ? run_timer_base+0x121/0x190 [ 1532.232425][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1532.237617][ C0] handle_softirqs+0x1eb/0x9e0 [ 1532.242404][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1532.247694][ C0] ? wg_socket_send_skb_to_peer+0x145/0x210 [ 1532.253610][ C0] do_softirq+0xac/0xe0 [ 1532.257941][ C0] [ 1532.260858][ C0] [ 1532.263770][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1532.268870][ C0] wg_socket_send_skb_to_peer+0x145/0x210 [ 1532.274677][ C0] wg_socket_send_buffer_to_peer+0x148/0x1a0 [ 1532.280809][ C0] wg_packet_send_handshake_initiation+0x227/0x360 [ 1532.287341][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 1532.294386][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1532.299338][ C0] ? rcu_is_watching+0x12/0xc0 [ 1532.304104][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 1532.310076][ C0] process_one_work+0x9d7/0x1920 [ 1532.315009][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1532.320372][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1532.327036][ C0] worker_thread+0x5da/0xe40 [ 1532.331644][ C0] ? kthread+0x13a/0x450 [ 1532.335884][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1532.340980][ C0] kthread+0x370/0x450 [ 1532.345033][ C0] ? __pfx_kthread+0x10/0x10 [ 1532.349612][ C0] ret_from_fork+0x754/0xd80 [ 1532.354190][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1532.359286][ C0] ? __switch_to+0x7b4/0x1120 [ 1532.363946][ C0] ? __pfx_kthread+0x10/0x10 [ 1532.368521][ C0] ret_from_fork_asm+0x1a/0x30 [ 1532.373275][ C0] [ 1532.376857][ C0] net_ratelimit: 10545 callbacks suppressed [ 1532.376871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1532.395107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1532.408015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1532.420366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1532.432628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1532.445670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1532.457909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1532.470166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1532.483197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1532.495448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1537.351231][ C0] net_ratelimit: 11520 callbacks suppressed [ 1537.351248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1537.369711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1537.382035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1537.395090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1537.407495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1537.419876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1537.432126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:61:c2:37:a2:88, vlan:0) [ 1537.445107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1537.457367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1537.469781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)