last executing test programs: 20m2.43389751s ago: executing program 32 (id=3): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram4\x00', 0x14be02, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x3, 0x2) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2c, 0x3, 0x0) socket(0x11, 0x2, 0x73) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f0000000000)=""/39, 0x27) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r2, 0x80a86f3d, 0x38) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(0x2, 0x8, 0xfffffffd) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x800082) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x0, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) setsockopt$auto(r3, 0x4, 0x0, 0x0, 0x4c92519e) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8905, &(0x7f0000000200)={'ip6tnl0\x00'}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop9/queue/discard_zeroes_data\x00', 0x20000, 0x0) ioctl$auto(r5, 0x1, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 15m42.797898533s ago: executing program 3 (id=922): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x4000003, 0x9, 0x5) r0 = fsopen$auto(0x0, 0x1) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) statmount$auto(0x0, 0x0, 0x7, 0x281) r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x18000, 0x0) close_range$auto(0x2, r1, 0x0) open(0x0, 0x22240, 0x155) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0xa, 0x1) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stack\x00', 0x40080, 0x0) bpf$auto(0x0, 0x0, 0x10) r3 = socket(0x2, 0x801, 0x106) setsockopt$auto(r3, 0x6, 0x19, 0x0, 0x9) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34048854}, 0x200408c4) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r4 = fsmount$auto(0xffffffffffffffff, 0x62, 0x5) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, r4, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0xa0100, 0x0) bpf$auto(0xb91d, &(0x7f0000000380)=@bpf_attr_7={@start_id=0x6, 0x4, 0x800800, r3}, 0x0) 15m41.98168276s ago: executing program 3 (id=927): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setresgid$auto(0x81, 0x800000a0, 0x8) 15m41.446235609s ago: executing program 3 (id=930): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000200)="624d1bfe595046ab5c98199adfff0600de16b8ef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be18ecfdf9b0a051779efa1a756fdbf986a298215baf3e6bd7a97b26aebb478bfaac553da2f50d0e1531162fd9c6c6ca7d2316eb660cab29b8e5c0ce1574ef9370005da1efe6c293cb02d95ffe803df1c59b6ccc0b02ec896766cfe3c729ffce659ca157173397d4c5c5e74218ddf46aed92103afc30c34f52", 0xb0) io_uring_setup$auto(0x86, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x4004820) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) 15m40.380808706s ago: executing program 3 (id=933): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x141f02, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) readv$auto(0x6, &(0x7f00000000c0)={0x0, 0x1}, 0x1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 15m38.587179303s ago: executing program 3 (id=941): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r2 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred=r2, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) 15m37.303695715s ago: executing program 3 (id=943): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(0x0, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00\x00\x02\x81\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x1000040000a, 0xdf, 0x49b72, 0x2, 0x8000) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_PROFILE(r2, 0x40045017, &(0x7f0000000180)="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") ioctl$auto_HPET_IRQFREQ(0xffffffffffffffff, 0x40086806, &(0x7f0000000280)=0x3) getsockopt$auto(r2, 0xe, 0xbe1a, &(0x7f00000002c0)='/dev/tty12\x00', &(0x7f0000000300)=0xfa3a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) pkey_free$auto(0x8) rseq$auto(&(0x7f0000000380)={0x0, 0x80000001, 0x6, 0x8, 0x8001, 0x8, "9024516e1c4c64288fd7715ba9bd542f0efec9a0355e9eabfa6b2eb9da452d9349da381d5a644ebc65ca0e180725d5c7413669a4e2f7ace031b43692da6176ff40c17397c7d9e017d3a0bca391514a2617ac57c11e68d9784a171393c489b256a399a0e6477afc54ede7"}, 0x401, 0x1, 0x6) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000040)={0x1, 0xff, 0x2, 0x1, 0x5, 0x0, "309b6e391a764c9271071b427eb2d7c651371c905f0e9272ec0b15d87632be077568a4be9f76fb680a9f2cef448d1d3016bb0182"}, 0xffffb428, 0x2, 0x8000) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) semctl$auto(0xfffffbff, 0x5, 0x37, 0xc6) 15m22.214392658s ago: executing program 33 (id=943): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(0x0, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00\x00\x02\x81\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x1000040000a, 0xdf, 0x49b72, 0x2, 0x8000) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_PROFILE(r2, 0x40045017, &(0x7f0000000180)="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") ioctl$auto_HPET_IRQFREQ(0xffffffffffffffff, 0x40086806, &(0x7f0000000280)=0x3) getsockopt$auto(r2, 0xe, 0xbe1a, &(0x7f00000002c0)='/dev/tty12\x00', &(0x7f0000000300)=0xfa3a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) pkey_free$auto(0x8) rseq$auto(&(0x7f0000000380)={0x0, 0x80000001, 0x6, 0x8, 0x8001, 0x8, "9024516e1c4c64288fd7715ba9bd542f0efec9a0355e9eabfa6b2eb9da452d9349da381d5a644ebc65ca0e180725d5c7413669a4e2f7ace031b43692da6176ff40c17397c7d9e017d3a0bca391514a2617ac57c11e68d9784a171393c489b256a399a0e6477afc54ede7"}, 0x401, 0x1, 0x6) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000040)={0x1, 0xff, 0x2, 0x1, 0x5, 0x0, "309b6e391a764c9271071b427eb2d7c651371c905f0e9272ec0b15d87632be077568a4be9f76fb680a9f2cef448d1d3016bb0182"}, 0xffffb428, 0x2, 0x8000) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) semctl$auto(0xfffffbff, 0x5, 0x37, 0xc6) 2m54.068039068s ago: executing program 4 (id=2795): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) r1 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwflags\x00', 0x101741, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) recvmmsg$auto(r1, &(0x7f0000005980)={{&(0x7f0000000080)="d3b88b80e789d320bfd5f9e804", 0x7, &(0x7f0000005900)={&(0x7f0000005840)="60ee6e5f6b309c1852209403b1f202ea56a84df3f26eb186ce17223d0f1e13dc1a5b236774e60e73623213f6d91d87815b689b50fc80bcb9559ff094d51a115b655b48b53bc25d67aa314cc2b985b06aa36b11b11aba8f497dd947d6cdb3673552a97ae8782d55141b85a3ba33800094dddef7dd1d9d03040d7b81cc2668e2d72e9f808c91a0da6f854b940f9454a82d920f15", 0x6}, 0x4, &(0x7f0000005940)="4be833398e3f09ecedc08b1acae70c", 0x8, 0xd}, 0x14}, 0xeb02, 0xfc9431b, &(0x7f00000059c0)={0x8, 0xda0}) write$auto(r0, 0x0, 0x7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/can/stats\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000280)=""/59, 0x3b) 2m53.592941247s ago: executing program 4 (id=2797): r0 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001000)='/dev/binderfs/binder0\x00', 0x28000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000040)={@sival_int=0x375, @inferred, 0x1}) writev$auto(0x3, &(0x7f00000001c0)={0x0, 0x7111}, 0x8) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) fanotify_init$auto(0x5, 0x0) read$auto(0x3, 0x0, 0x80) rt_sigqueueinfo$auto(r0, 0xb, &(0x7f0000000080)={@siginfo_0_0={0x3, 0x401, 0x4, @_timer={r0, 0xd, @sival_int=0x9c, 0x62}}}) 2m53.304138399s ago: executing program 4 (id=2798): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) r1 = prctl$auto_PR_SET_MM_END_CODE(0x4, 0x2, 0x0, 0xfffffffffffffffd, 0x9961) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141002, 0x0) close_range$auto(r3, r2, 0x8) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r2) ioctl$auto_EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=[0x3, 0xa4c]) r4 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r4, &(0x7f0000000100)="e0674c2e3834c8be805cf97ab0df2e80c0fc29039b80ec0bad9c32a9d15a8ca9f5789b164b9c5b13c4c71f947543f3d42458f6a459c800cf92b247afd5cc0f030bedbda3d352c49185fb98e493f97e1f6cc0e242fa1f662f7b4471c2b95a6f7238a84bb2a97f416de10aa204abdd9be2", 0xe9, &(0x7f0000000180)="b5c23956a3117f72724b47cfb272f65bda1a3bd488e063757c6db8e0387203da794d1efb54c7fb7690", 0x70000000, &(0x7f00000001c0)="66e35f76d8005ddf4807e09667322cf4601ec3dc68b0ba49a7286b2cc01f047c9a052e35dc77e770316cb95dd6e56ea88e006b05d7553b7cee089c30460f90c4a3fe1ef0157c807267b2eda24a15b198575d206117ca36c3e4b3d77ef79a66a60a900c68cfc7374703bbfffd87cbe481a64ce897ec765b1636e653a42f8f0b5a2d656dbe5fde23f7f2c4e17dd62a9b55d520b2a8de122a8eb11dee1428b00aa692ad6ab774b019e6ce3e8670a5691ec9fd2f1a038aa218b99ba190dcdc1465c79104d4759167ed7c033be11f960681fac7a324342194348bd6217d1594e0147c6687e4946342af90bb84315662bd", &(0x7f00000002c0)=0x5}) setsockopt$auto_SO_BUSY_POLL(r5, 0x80000000, 0x2e, &(0x7f0000000340)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x60e) socket(0xa, 0x2, 0x3a) (async) setsockopt$auto(r0, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) (async) prctl$auto_PR_SET_MM_END_CODE(0x4, 0x2, 0x0, 0xfffffffffffffffd, 0x9961) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141002, 0x0) (async) close_range$auto(r3, r2, 0x8) (async) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r2) (async) ioctl$auto_EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=[0x3, 0xa4c]) (async) socket(0x2, 0x801, 0x106) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) (async) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r4, &(0x7f0000000100)="e0674c2e3834c8be805cf97ab0df2e80c0fc29039b80ec0bad9c32a9d15a8ca9f5789b164b9c5b13c4c71f947543f3d42458f6a459c800cf92b247afd5cc0f030bedbda3d352c49185fb98e493f97e1f6cc0e242fa1f662f7b4471c2b95a6f7238a84bb2a97f416de10aa204abdd9be2", 0xe9, &(0x7f0000000180)="b5c23956a3117f72724b47cfb272f65bda1a3bd488e063757c6db8e0387203da794d1efb54c7fb7690", 0x70000000, &(0x7f00000001c0)="66e35f76d8005ddf4807e09667322cf4601ec3dc68b0ba49a7286b2cc01f047c9a052e35dc77e770316cb95dd6e56ea88e006b05d7553b7cee089c30460f90c4a3fe1ef0157c807267b2eda24a15b198575d206117ca36c3e4b3d77ef79a66a60a900c68cfc7374703bbfffd87cbe481a64ce897ec765b1636e653a42f8f0b5a2d656dbe5fde23f7f2c4e17dd62a9b55d520b2a8de122a8eb11dee1428b00aa692ad6ab774b019e6ce3e8670a5691ec9fd2f1a038aa218b99ba190dcdc1465c79104d4759167ed7c033be11f960681fac7a324342194348bd6217d1594e0147c6687e4946342af90bb84315662bd", &(0x7f00000002c0)=0x5}) (async) setsockopt$auto_SO_BUSY_POLL(r5, 0x80000000, 0x2e, &(0x7f0000000340)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x60e) (async) 2m52.332423275s ago: executing program 4 (id=2803): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(0x0, 0x22240, 0x154) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x39, 0x65f, 0x80000001, 0xb, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x200000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x480000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) read$auto_fops_atomic_t_ro_(r1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x12b742, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0) sendmmsg$auto(r2, 0x0, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x268, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x34, 0xbe, "a1acbb9486e2e9f55acca95f32e48a6a988c6b38779dcc78cd72cad484c683d407215eb218de5174f46bbad2761cd57e"}, @NL80211_ATTR_MAC_ADDRS={0x20f, 0xa6, 0x0, 0x1, [@generic="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", @generic="f55e1424672ac690be3278c70e5d630b79e46d296aea1f15bf44cec4885a", @generic="3e8db46c011e42260ef4bd6d0f5bbc56bd5e56ef215fbc972fc74db117eebe51bc31d7f3b4f24b1d936724ee8ea7ae858536e08b31521e4d1e3f37dabea8f49573f38829d989289b070c8c127a212f6fe9d222f29fc77e82901065ed3d814a27b6c9bc933bcf9724cd0d5d574087d64cb2f0b9a4f8dbcdc35b277d19b8d30f1f3d9d97823b8ec73da8a987a45bb9997c000025db", @generic="63bff37fb5315fde272e10b15c649d67fc9381e38aff592cfa0cf9a2b87347ee1a6f0e1f13cf4b382c22294182bd1fd45d233b75749473f55a888b7df73a4c131e18b40e19b879667467eed16f99af47f7cbcaba", @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x3}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x8}]}, 0x268}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m51.985034968s ago: executing program 4 (id=2804): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) 2m50.34257163s ago: executing program 4 (id=2806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008050) 2m48.556547783s ago: executing program 1 (id=2808): r0 = fsopen$auto(&(0x7f0000000000)='!\x00', 0x0) r1 = prctl$auto_PR_SYS_DISPATCH_OFF(0x7fffffff, 0x0, 0x0, 0x2, 0x5) ioctl$auto(r0, 0x9, r1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MLD_ADDR={0xdd, 0x13a, "0622908864752b918716c5cbe6d2c318d040f7dc4f1e8eb4a2ff43d107b76bee762ca8c4f78e4ed178eac8256818f22efee4edc819f73764b88e9b329004762188e458ce5e05209230707927bd565fb90a8a9544a60d2e78ecf269ce2df4845cce2712d739089165ff16e72e6dd9158e2cbebcc61b6892dea950a0ffa3e4d9c626b3b48f7f00450e43c3ec6e3aa9a1dbfad5658892851bbfe9f1819ab2b949cc3fa578a68c64bfcdcdbd1158a9ca44d113950a5e983dd6d666de9be5f39ce1f5b451d32dd938acdee87b8b3cf03bf21221fe7e4a43e38d4b6b"}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8004}, 0x840) unshare$auto(0x5) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_FTM_RESPONDER={0xa0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x97, 0x2, "7bf25d0b6f2b744146d107a146b2787aba8fff24c7003c21961445692ce72cfbecde849cda6bdcb1b7f3e0abb1d0d2cf62f44fcc8b1372a7a91c469d743f7399d6baf44ac6a9a74715a5a20da46e1d827959866da94845959b01fa579919a61b9bfb373283fb152e3e40f0dcc1d8291f774f05cd9d95670f711593aa9aa1dc905ea45ae3064fb1df356d809c303568908aa434"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc840}, 0x4000) mmap$auto(0xffffffff, 0x4, 0x3b, 0x13, r1, 0x7) r3 = clone3$auto(&(0x7f00000003c0)={0x100000000, 0x9, 0x81, 0x7, 0x21c, 0x4000, 0x9, 0x7, 0x7f1, 0x4, 0x8}, 0x5) capget$auto(&(0x7f0000000440)={0xfffffffd, r3}, &(0x7f0000000480)={0x10, 0x2, 0xffffffbd}) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000500), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd8, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x80}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x3}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xb4, 0x19, 0x0, 0x1, [@generic="8d7f9d046f0a85e301280a1827eae8c6d27fb31763d669a0336121e9c0551f003bee14d4482650226fa9cc9873fdd8a964e05355a8813406d87a04767d513ff0f8065c31f4bc1a3a748e05ab6acf58d90984a0347ed1a10a53869eeed1f108f193735f6597888e9e7fe46fa1c800a336f6678cd09c449e716a895e028ce6313df3bdace2566a4ecb89a7844ef521fefedeed2555b3eab0e0fd7640aa04fe7b85", @nested={0x8, 0xf1, 0x0, 0x1, [@nested={0x4, 0xcb}]}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4c080}, 0x4800) close_range$auto(r0, r1, 0xfffffffe) ioctl$auto_FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000006c0)=0xfffff987) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000700)="bf") r5 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) bpf$auto(0xff, &(0x7f00000007c0)=@batch={0x8496, 0x9, 0xff, 0x5, 0x7, r6, 0x3, 0xf}, 0x5) ioctl$auto_USBDEVFS_REAPURB32(r0, 0x4004550c, &(0x7f0000000880)=0x4) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r7, 0x2fc) socket$nl_generic(0x10, 0x3, 0x10) capset$auto(&(0x7f00000008c0)={0x8, r3}, &(0x7f0000000900)={0x80, 0x10, 0x2}) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000940), 0x40, 0x0) close_range$auto(r1, r5, 0x8) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000009c0), r0) sendmsg$auto_NL80211_CMD_DEL_KEY(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x90, r9, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_MLD_ADDR={0x68, 0x13a, "ed7dcdfb8dd8ac88e8e6b119128ca1bbfb4cdab9cf8ded886ee5a537405135a107a5cbe483583449b7756073b9c60b2fbdcc3e0854f110f53f476cce6e55fc1110e9d360b864ebf7da492ca8e87aa38ff452399617434736629c289305a173670f582a50"}, @NL80211_ATTR_HE_CAPABILITY={0xa, 0x10d, "69412ec54088"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20008811) writev$auto(r5, &(0x7f0000000c00)={&(0x7f0000000b40)="bfaa89d0bb8a7e104ffa6584997baa4dad42dee318736307a4b10350f0768d45f68d64df4a4ddba28e518898d0d73b9a9800037f47f78c2eeb3a254b1e2631b5e4ee3df7c7fd6b2ff86fcdd5a67340eb960a5a43bca5c428c2b539a916d9755e1949f3c8171178a83dc33b5662f7b57569ad61564ea274c39a907e72055bfb9cd6877b", 0x7}, 0xffffffff) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/devices/platform/vivid.0/cec27/dev\x00', 0x1, 0x0) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000c80)=@bpf_attr_3={0x8, 0xfffffff2, 0xfe07, 0x3, 0x5, 0x0, 0x9f, 0x0, 0x1bf5321c, "3b8647fceafa0f1eb785e0f4e89e85de", 0x0, 0xfffffff8, r7, 0x8, 0x8f6e, 0xffff, 0xffffffff, 0x6e8, 0x8, 0x80000000, @attach_btf_obj_fd=r6, 0x0, 0x8, 0x2, 0x8001, 0xf, r1, r10}, 0x61db) kcmp$auto(r8, r3, 0x401, r6, r6) 2m48.123465645s ago: executing program 1 (id=2809): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000000)=@l2={0x1f, 0x8, @any, 0x6, 0x1}, 0x58) socket(0xa, 0x4, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x2000048}) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) writev$auto(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto(0x3, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r3, r3, 0x0, 0x71) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3670400000000000000ba441c1b", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000080)={"189293fdc48189c0141b0a2c558f1e3904c4a5773bda7495fb65b670cf0b128b", 0x5, 0x2, 0x5, 0x9, 0x4, 0x0}) pidfd_open$auto(r4, 0x7) shutdown$auto(0x200000003, 0x2) kill$auto(0xffffffffffffffff, 0x8) 2m46.660918953s ago: executing program 1 (id=2813): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, 0x0, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) 2m43.128003622s ago: executing program 1 (id=2822): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x402600, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000040)=@bpf_attr_4={0xffffffffffffffff, r0, 0x6, r0}, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x80010, r1, 0xb4) kill$auto(0xffffffffffffffff, 0x8) 2m42.718197636s ago: executing program 1 (id=2825): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000240)='nfsd\x00', 0x10400, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1) getdents$auto(r0, 0x0, 0x62d4) 2m41.55095902s ago: executing program 1 (id=2827): mmap$auto(0x0, 0x100000001, 0x3, 0x11, 0xfffffffffffffffa, 0x9) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a8, 0x7000000) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000140)=@task_fd_query={0xffffffffffffffff, r0, 0xfffff800, 0x8, 0xd, 0x1000, r0, 0x9, 0x1}, 0x5) write$auto_nsim_pp_hold_fops_netdev(r1, &(0x7f0000000200)="a0cd6ef068ad4a3ab50ae426d75c1307fe1682893e23993c52738090881ea8997d3b0edc89b04e9e489dc2afcd30b2e8aad4f9f8b7bb15e64901cb01afaf", 0x3e) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0x2000000003, 0x0) socket(0x2, 0x1, 0x0) socket(0x1e, 0x6, 0x87) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xfa3, 0x0) bpf$auto(0x5, &(0x7f00000000c0)=@bpf_attr_0={0x5, 0xe, 0x100, 0x80000001, 0x6fca, 0xffffffffffffffff, 0x5, "31b63adcc97aa60ffd8c28b17c06a76e", 0x0, 0xffffffffffffffff, 0x61, 0xffffffff, 0x4, 0x8, 0xffffffffffffffff}, 0x9) ioctl$auto_BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000180)={0xfffffffffffffff8, 0x1, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x0, 0xfffffffffffffffd}, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) mmap$auto(0x2f000000000, 0x20000000202000b, 0x3, 0xeb1, r1, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') io_submit$auto(0x4, 0x8, &(0x7f00000000c0)=&(0x7f0000000080)={0x0, 0x4, 0x5c58, 0x2, 0xd, r3, 0x10001, 0xc7, 0x8, 0x0, 0x4, r3}) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r4, 0x5, 0x100000000, 0x2) socket(0xa, 0x5, 0x0) setsockopt$auto(0x2, 0x1, 0xa, &(0x7f0000000000)='\x00', 0x40) 2m35.218192344s ago: executing program 34 (id=2806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008050) 2m25.920610594s ago: executing program 35 (id=2827): mmap$auto(0x0, 0x100000001, 0x3, 0x11, 0xfffffffffffffffa, 0x9) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a8, 0x7000000) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000140)=@task_fd_query={0xffffffffffffffff, r0, 0xfffff800, 0x8, 0xd, 0x1000, r0, 0x9, 0x1}, 0x5) write$auto_nsim_pp_hold_fops_netdev(r1, &(0x7f0000000200)="a0cd6ef068ad4a3ab50ae426d75c1307fe1682893e23993c52738090881ea8997d3b0edc89b04e9e489dc2afcd30b2e8aad4f9f8b7bb15e64901cb01afaf", 0x3e) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0x2000000003, 0x0) socket(0x2, 0x1, 0x0) socket(0x1e, 0x6, 0x87) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xfa3, 0x0) bpf$auto(0x5, &(0x7f00000000c0)=@bpf_attr_0={0x5, 0xe, 0x100, 0x80000001, 0x6fca, 0xffffffffffffffff, 0x5, "31b63adcc97aa60ffd8c28b17c06a76e", 0x0, 0xffffffffffffffff, 0x61, 0xffffffff, 0x4, 0x8, 0xffffffffffffffff}, 0x9) ioctl$auto_BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000180)={0xfffffffffffffff8, 0x1, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x0, 0xfffffffffffffffd}, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) mmap$auto(0x2f000000000, 0x20000000202000b, 0x3, 0xeb1, r1, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') io_submit$auto(0x4, 0x8, &(0x7f00000000c0)=&(0x7f0000000080)={0x0, 0x4, 0x5c58, 0x2, 0xd, r3, 0x10001, 0xc7, 0x8, 0x0, 0x4, r3}) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r4, 0x5, 0x100000000, 0x2) socket(0xa, 0x5, 0x0) setsockopt$auto(0x2, 0x1, 0xa, &(0x7f0000000000)='\x00', 0x40) 1m55.683147614s ago: executing program 6 (id=2931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000240), r1) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x9714bc159c570cc}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="080028bd7000fddbdf2503000000080009000200000008000a0000100000"], 0x24}, 0x1, 0x0, 0x0, 0x8180}, 0x48040) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x19, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [@typed={0xc, 0x37, 0x0, 0x0, @u64=0x3809}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x805) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000004c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x9, 0x0, 0x8) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x1, 0x70bdab, 0x25dfdbfe, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x4) 1m52.004180945s ago: executing program 6 (id=2940): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/video42/power/control\x00', 0xc2902, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/video42/power/control\x00', 0xc2902, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = syz_genetlink_get_family_id$auto_nlctrl(0x0, r4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, 0x0, 0x7, 0x4}, 0x9}, 0x7, 0x4008) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r7 = socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r8, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) recvmmsg$auto(r8, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r7, 0x89f0, 0x24) read$auto(r3, 0x0, 0x20) (async) read$auto(r3, 0x0, 0x20) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) 1m50.020635475s ago: executing program 6 (id=2946): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xea6) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@task_fd_query={r3, 0xffffffffffffffff, 0x6, 0xa, 0x5, 0x5, 0xffffffffffffffff, 0x3, 0xffff}, 0x19) setfsgid$auto(0xee01) socket(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r2, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) r6 = syz_genetlink_get_family_id$auto_ipvs(0x0, r4) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xc8, r6, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xb2, 0x2, 0x0, 0x1, [@typed={0x6d, 0xdd, 0x0, 0x0, @binary="c7e037f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df385810c218a3cd1ac0573a14fd8ca299abbc437cff9709f"}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic, @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 1m47.385951662s ago: executing program 0 (id=2963): r0 = socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xa4}) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r3) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfff7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4044001) 1m46.779662693s ago: executing program 6 (id=2957): r0 = socket(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) bind$auto(r1, &(0x7f0000000040)=@generic={0x10, "26300628afe90504fc2bbe91f2eb"}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1m46.493113296s ago: executing program 6 (id=2958): r0 = socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000380)='nfsd\x00\xee\x1a\x8fg\x1b\f\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\xf7\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00\xb6l\x8f\xc7h\x1c\x10\x946\x00\xd3f a\xa7\x97\xcdM\xa6 \xd1\x9dW\r\xaapdx\xa2\xc9$\xbb)T\x19\xd7\x86\xd3\xe8\x7f\xdf\x9d\x83 I\xb9R\xf7\x87\a\xc7\x93\xb3]\xba\x0ed\x9d\xfc\x83Ox\x12\xcb\x986\xb2\x1f\xcf\xc7\af\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x3) socket(0x23, 0x2, 0x0) mq_timedsend$auto(r1, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0xd0d2, 0x2, &(0x7f0000000080)={0x39f2, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m45.883470806s ago: executing program 6 (id=2961): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c7, 0xffffffffffffffff) r1 = io_uring_setup$auto(0x6, 0x0) shmctl$auto_SHM_INFO(0x9, 0xe, &(0x7f0000000400)={{0x449, 0xffffffffffffffff, 0xee01, 0x6, 0xe1b3, 0x401}, 0x4d38, 0x6, 0xfffffffffffffffe, 0x5, @raw, @inferred, 0x2, 0x0, &(0x7f00000001c0)="221871d01e3f2a9fef38234da64a305b0c2e067e3846e3cc1e540a66112d357e2350c2eb8093ffca45f50536800ebcd448d644624c1eddff80cec8b6e1e268ac93bbcc3f4e8030b9862f9b2ea2d2aea0b09fc9fb04d8038235e317c06dcc6176b484809a56a527e5c6a7bc2518ee697ec6e1a3246efd7ef64ab73e7404a9cb6796d368970aed82f33fdb5040221f6adb24b36de6", &(0x7f0000000340)="1dc5a3ead6ff9c5e79e6d1160f2530d18381f17ab46e9e36094e8679a62d8ced09df4109a1e1db3e52a6cab9e06b67e2f3404c52445903ec6d4c187109e777befb7ce86388e70f4eec28c01d47b439e4dd77716c13b281b12d74f56b74225551df9e5bfde66fc0dded8f76b41a28b33d1f81b4c49a34ff9baacfd35f3987fb829ee05cc1671d4a804609defc7fce3748de5b58bd3eafc21b4e6527944b91a314ed2f9d55dd6d"}) (async) shmctl$auto_SHM_INFO(0x9, 0xe, &(0x7f0000000400)={{0x449, 0xffffffffffffffff, 0xee01, 0x6, 0xe1b3, 0x401}, 0x4d38, 0x6, 0xfffffffffffffffe, 0x5, @raw, @inferred, 0x2, 0x0, &(0x7f00000001c0)="221871d01e3f2a9fef38234da64a305b0c2e067e3846e3cc1e540a66112d357e2350c2eb8093ffca45f50536800ebcd448d644624c1eddff80cec8b6e1e268ac93bbcc3f4e8030b9862f9b2ea2d2aea0b09fc9fb04d8038235e317c06dcc6176b484809a56a527e5c6a7bc2518ee697ec6e1a3246efd7ef64ab73e7404a9cb6796d368970aed82f33fdb5040221f6adb24b36de6", &(0x7f0000000340)="1dc5a3ead6ff9c5e79e6d1160f2530d18381f17ab46e9e36094e8679a62d8ced09df4109a1e1db3e52a6cab9e06b67e2f3404c52445903ec6d4c187109e777befb7ce86388e70f4eec28c01d47b439e4dd77716c13b281b12d74f56b74225551df9e5bfde66fc0dded8f76b41a28b33d1f81b4c49a34ff9baacfd35f3987fb829ee05cc1671d4a804609defc7fce3748de5b58bd3eafc21b4e6527944b91a314ed2f9d55dd6d"}) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/mapper/control\x00', &(0x7f0000000100)="8a39b0827a3c949708eba891b4efc9237a04f9f421ca32320f5e56494b0d0c6ea15b30547a06a3897cf605954812375b31029783a63470ed4585", r2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0x8000016, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0x8000016, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r1, &(0x7f0000000140)="ca1b77be721e2e8f439d2eab2cafdb31", 0x10) getrandom$auto(0x0, 0x3, 0x80000001) (async) getrandom$auto(0x0, 0x3, 0x80000001) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, 0x0) (async) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) userfaultfd$auto(0x1) msync$auto(0x110c230000, 0x200001, 0x6) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/028/001\x00', 0xa801, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r4, 0x8, 0x3, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) (async) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m43.577367694s ago: executing program 0 (id=2968): getrandom$auto(0x0, 0x3, 0x7) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = inotify_init1$auto(0x3000000000000) getrandom$auto(&(0x7f0000000000)='$],\x00', 0x9, 0x2) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0xc0, &(0x7f0000000080)="611e427a1fd945f8383ae3104cfd888bdeefc79a2a53c9e0cb5e3de91b0e868002a7f4e17d6e0ddc83ef3f2afa7f69a89c8e95c2ea2e6192") getrandom$auto(&(0x7f00000000c0)='\'-[)\x00', 0xe, 0x5) 1m42.493225479s ago: executing program 0 (id=2970): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x121040, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x3) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f0000000100)={0x5, @ptr=0xffffffffffffff7f, 0xf54}) 1m42.431598561s ago: executing program 0 (id=2971): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000240)='nfsd\x00', 0x10400, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1) getdents$auto(r0, 0x0, 0x62d4) 1m42.104781784s ago: executing program 0 (id=2973): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xbd, 0x5, 0x2) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x220c8881}, 0x404c105) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4085) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x4) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x10001) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r6 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r6, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x8}, 0x400}, 0x7, 0x7, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710f}, 0xa) 1m30.169653155s ago: executing program 36 (id=2961): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c7, 0xffffffffffffffff) r1 = io_uring_setup$auto(0x6, 0x0) shmctl$auto_SHM_INFO(0x9, 0xe, &(0x7f0000000400)={{0x449, 0xffffffffffffffff, 0xee01, 0x6, 0xe1b3, 0x401}, 0x4d38, 0x6, 0xfffffffffffffffe, 0x5, @raw, @inferred, 0x2, 0x0, &(0x7f00000001c0)="221871d01e3f2a9fef38234da64a305b0c2e067e3846e3cc1e540a66112d357e2350c2eb8093ffca45f50536800ebcd448d644624c1eddff80cec8b6e1e268ac93bbcc3f4e8030b9862f9b2ea2d2aea0b09fc9fb04d8038235e317c06dcc6176b484809a56a527e5c6a7bc2518ee697ec6e1a3246efd7ef64ab73e7404a9cb6796d368970aed82f33fdb5040221f6adb24b36de6", &(0x7f0000000340)="1dc5a3ead6ff9c5e79e6d1160f2530d18381f17ab46e9e36094e8679a62d8ced09df4109a1e1db3e52a6cab9e06b67e2f3404c52445903ec6d4c187109e777befb7ce86388e70f4eec28c01d47b439e4dd77716c13b281b12d74f56b74225551df9e5bfde66fc0dded8f76b41a28b33d1f81b4c49a34ff9baacfd35f3987fb829ee05cc1671d4a804609defc7fce3748de5b58bd3eafc21b4e6527944b91a314ed2f9d55dd6d"}) (async) shmctl$auto_SHM_INFO(0x9, 0xe, &(0x7f0000000400)={{0x449, 0xffffffffffffffff, 0xee01, 0x6, 0xe1b3, 0x401}, 0x4d38, 0x6, 0xfffffffffffffffe, 0x5, @raw, @inferred, 0x2, 0x0, &(0x7f00000001c0)="221871d01e3f2a9fef38234da64a305b0c2e067e3846e3cc1e540a66112d357e2350c2eb8093ffca45f50536800ebcd448d644624c1eddff80cec8b6e1e268ac93bbcc3f4e8030b9862f9b2ea2d2aea0b09fc9fb04d8038235e317c06dcc6176b484809a56a527e5c6a7bc2518ee697ec6e1a3246efd7ef64ab73e7404a9cb6796d368970aed82f33fdb5040221f6adb24b36de6", &(0x7f0000000340)="1dc5a3ead6ff9c5e79e6d1160f2530d18381f17ab46e9e36094e8679a62d8ced09df4109a1e1db3e52a6cab9e06b67e2f3404c52445903ec6d4c187109e777befb7ce86388e70f4eec28c01d47b439e4dd77716c13b281b12d74f56b74225551df9e5bfde66fc0dded8f76b41a28b33d1f81b4c49a34ff9baacfd35f3987fb829ee05cc1671d4a804609defc7fce3748de5b58bd3eafc21b4e6527944b91a314ed2f9d55dd6d"}) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/mapper/control\x00', &(0x7f0000000100)="8a39b0827a3c949708eba891b4efc9237a04f9f421ca32320f5e56494b0d0c6ea15b30547a06a3897cf605954812375b31029783a63470ed4585", r2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0x8000016, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0x8000016, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r1, &(0x7f0000000140)="ca1b77be721e2e8f439d2eab2cafdb31", 0x10) getrandom$auto(0x0, 0x3, 0x80000001) (async) getrandom$auto(0x0, 0x3, 0x80000001) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, 0x0) (async) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) userfaultfd$auto(0x1) msync$auto(0x110c230000, 0x200001, 0x6) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/028/001\x00', 0xa801, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r4, 0x8, 0x3, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) (async) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m26.847613042s ago: executing program 37 (id=2973): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xbd, 0x5, 0x2) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x220c8881}, 0x404c105) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4085) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x4) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x10001) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r6 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r6, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x8}, 0x400}, 0x7, 0x7, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710f}, 0xa) 54.060962751s ago: executing program 9 (id=3065): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x1a342, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, r1, 0x10000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000300)={0x68ee6ec7, 0x9, 0x0, 0xcf, 0xbd0, "39079d5d2389501fa49dbf2fb3ae59ac040d4f6e8b2ca44d2472a6352071980c517e563c339b2b5fd33aa908da23393d4c1bc6ac5b39cc48329e3ea7d804a85c", "13e7bb22f0911e6edd621b9e9b3a1be573398fb4f08d9867bca984b73a78be9564f02579f334183b20d01350cbcfb6cefbfa104c280557d222ca076c6373400e4d49da811aadc88f9f9106b8b0def1fa", "652be83efe2206a90ebd3ccf7e10f97f222cbcb246b67009bc6621912f5a2771", 0x6, 0x8, 0x3, "9f86f3647bf605374061b4d21cb36713379352ba564d407c8aea8a1adb371d8c786e0612ad3f79a18daf637b3999548a00"}) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000080)={0x5, 0xfffffffb, [0xffffffff, 0x3ff, 0xc7, 0x80000001, 0x7]}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r4, 0xc0085504, &(0x7f0000000100)={0x9, 0x1, 0x5}) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x1) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x523000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r5, 0x8, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x2000, 0x0) ioctl$auto_BLKBSZSET(r6, 0x40081271, &(0x7f0000000180)=0x800) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r7, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x4, 0x6, 0x12a0) 52.283779331s ago: executing program 9 (id=3070): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb) capset$auto(&(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x10, 0xfffff801}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f00000003c0)=0x8) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket(0x2, 0x3, 0xa) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000400)={[0x5, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x7, 0x800, 0x6d3f, 0x6, 0x8, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0) read$auto_stats_fops_(r3, 0x0, 0x0) unshare$auto(0x3) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x3, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0xfffffffffffffffc, 0x40000, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x6a5, 0x0, 0x2, 0x0, 0x8000000000000000, 0x0, 0x5, 0x0, 0x9, 0x7, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x40000000000, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x5]}, 0x1fe, 0x1) keyctl$auto_KEYCTL_REJECT(0x13, 0xe8, 0xffffffffffffff2e, 0x7fffffff, 0x10) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) 49.396220624s ago: executing program 9 (id=3088): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(r2, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x100000, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x271c, 0xfffffffffffffffc, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r4 = io_uring_setup$auto(0x8000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x101840, 0x0) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008140}, 0x2404c044) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x400000000, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) fallocate$auto(r4, 0x80, 0xf, 0x6ad5) 48.295428914s ago: executing program 9 (id=3082): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x101000, 0x0) setuid$auto(0x800000000008) (async) ioctl$auto_IOC_PR_RELEASE(r0, 0x801070cf, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x7f) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size\x00', 0xa001, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) 47.716795406s ago: executing program 9 (id=3084): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) (async) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r0 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) write$auto(r1, &(0x7f0000000000), 0x9) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x401, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) 47.439481455s ago: executing program 9 (id=3086): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1ac}}, 0x40000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x189000, 0x0) socket(0x2, 0x1, 0x106) fcntl$auto_F_GETSIG(r0, 0xb, 0xab8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) write$auto(r1, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb4, 0x40000000000a1, 0x8000) r2 = socket(0xa, 0x1, 0x100) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) ioctl$auto(r3, 0xab00, r2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x2, 0x0) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r5, 0x3b93, r4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x29, 0x5, 0x0) r7 = socket(0x10, 0x3, 0xb) setsockopt$auto(r7, 0x104000000000010e, 0x1, 0x0, 0x16) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r6) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r8, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 35.27607778s ago: executing program 5 (id=3116): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0xfffffffffffffff9, 0x7, 0x3, 0x7184, 0xfffffff9, 0x7, 0x3, 0xd, 0x5, 0x80003, 0x4, 0x200000000000, 0x200b4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22010, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0xf7fc, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe8, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x1fe, 0xd) r1 = pidfd_open$auto(0x0, 0x0) setns(r1, 0x2000000) (async) mmap$auto(0x0, 0xb, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x0, 0xffffeffe, 0x2) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x15, 0x5, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x110c230000, 0x1, 0x9) (async, rerun: 32) getrandom$auto(0x0, 0x3, 0x80000001) (rerun: 32) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x22002, 0x200, 0x0, 0x62f, 0x6, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) (async) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd0c, &(0x7f00000001c0)) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async, rerun: 64) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async, rerun: 64) msync$auto(0x110c230000, 0x200001, 0x6) 32.91753719s ago: executing program 5 (id=3120): close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000300", @ANYRES16, @ANYBLOB="01002bbd7000fedbdf2516000000050002000000000018000180140002006e657464657673696d300000000000000500040002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) (async) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 32.661561157s ago: executing program 5 (id=3122): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.controllers\x00', 0x2, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x3, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4111, 0x100f) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x134) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') mount$auto(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@l\xf2\xb1\xcf$\xa4\x8a\xaa\\ \xe0\xd9u\xac[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\x0f\x81\xd7\xfa\xb2\a\x17\xef\xda\xa3\x81\x94T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x84\xc5|-\aN\xc2P1\x81\xf0\xa3\xa2\xe4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8ez\x95\xd9t\xfeX\xd1\xc0|0\xc2\x00|\x15#S\xd0\xccP>I\xb8\xb2M\x8fE\x95{\xbc2\x18\x15\xdfM\xf4\x16g\x9f\x0e\xcd\xae\x04B@1-\xee\x9d,\t\x92\x06@*4\xe4\x13\x85>k\xd8\x1a\x06N\x1f?\xde\xc3\xdc=\xe4\nT\xfd\xf6\x98\xf6\xed\b\xb3F\x9c\xb0Zp\xef\xeaB_\xe0Eu\xd1\xfb\x10-\x89Y\x04\x17D\x01\'||P \x97\xb1\xd9', 0x5, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, &(0x7f0000000000)=""/3, 0x3) r3 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r2) msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000200)={{0xffffff76, 0x0, 0xee01, 0x2, 0x2, 0x7, 0x3}, &(0x7f0000000180)=0xe, &(0x7f00000001c0), 0x6, 0x2c, 0x80000000, 0x7, 0x7f, 0x6, 0x30c4, 0x6, @raw=0x40, @raw=0x4000}) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000440)={{0x9, 0xee00, 0xee01, 0x3, 0x0, 0x1, 0x8}, 0xdb, 0x6, 0x1, 0x3, @inferred=0xffffffffffffffff, @raw=0x8, 0x1, 0x0, &(0x7f0000000280)="8251c5aec44a9acca861e95d07ae80200d8ddd74ea2ffbdaa25e3d82e951c031b3cf067a2de50f62615262cab4a038069bde008d39dc85", &(0x7f00000002c0)="19ea643e63d49842196150bb5371a9ae61880d0854e84fd0c660"}) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) write$auto(r7, &(0x7f0000000400)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\xee\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hl\x9d\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x92r0, 0x7, @_sigev_thread={&(0x7f0000001700)=&(0x7f00000016c0)=0x9e, &(0x7f0000001740)="e97dc744"}}, &(0x7f00000017c0)=0x81a) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000001800), 0x400, 0x0) (async, rerun: 32) r10 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001880), r4) (rerun: 32) shmctl$auto_SHM_STAT_ANY(0x5, 0xf, &(0x7f0000001a80)={{0x1000, 0xffffffffffffffff, 0xee00, 0x7, 0x7, 0x7, 0x3}, 0x1a89b96a, 0xa3a1, 0x9, 0x5, @raw=0x800, @raw=0xcbd8, 0x80, 0x0, &(0x7f00000018c0)="18b59aadf98dfda83182811fff698786d2ff352b360194c975387cb68c9619a4a5c6ac27ff500d9af4fddcdb00a48a1844ca65d0624b9a2c9a9e10a5aa234478e68eb9b7e2b6f37edcfccbb6a881932093b0078b60f1296a4a6fd4b01781a723785c4cbb4718593e8e5891381529534be09314a8abeddf57118d7cc0d3577c9d982f976730", &(0x7f0000001980)="a6f6e43118f02acc91181746674dc9eb4687151f26daa0d91e22af8db9b52da48b06ac58d1cb10db66467731f4c0ca29387b8589013bc54fe23e9b6c1117deca597974dababe7c58ebda56a30793c8c47acf8fe2f864545c448ee22422e31c3b6310b929ba72402ca19f6c08e1cfb59a024fbe93a3fe3297d3bc88022e4e158a233dfba74868f9a69087788c20f169a1e71467fb80c12fe57ab855f472cc50e365d284ea2f837865b8d8549b5c057579ea573ef0262a53cda09fbb0c26c5335ad1a198a8"}) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000002ec0)={&(0x7f0000001840), 0xc, &(0x7f0000002e80)={&(0x7f0000001b00)={0x134c, r10, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0x1338, 0x13, 0x0, 0x1, [@typed={0x4, 0x142}, @nested={0x4, 0x5}, @nested={0xec, 0x46, 0x0, 0x1, [@nested={0x4, 0x13c}, @nested={0x4, 0x28}, @nested={0x4, 0xc3}, @generic="d4fad17bd4dee0146bd937105e255b39fd6eb75585b7ec719bdf1faf014a3fd7ba536bd748114ca64fe245921a75ee2f25f4708b4217321206bf9ee07e3798c3e8fb1b1aac43ba2f855ee11111c7ff57d671c2f1e2015fd685447014e96c3579fea2307cf23183f43ca119e2d0090fb2b2ccebce9e33afd5b0de7629ddbc4af2494f522915877641c1f5d10f3774fe0a6284301208b55347f0bfcf7e4c8815cf1fb1733b752052855793f705c278cd0fce", @generic="f91f53e82eb9703559e3670a2f518a0dd854d4bcbc55dd5c3a04e87a81e827", @nested={0x4, 0x81}, @typed={0x8, 0xa3, 0x0, 0x0, @fd=r5}]}, @typed={0x8, 0x122, 0x0, 0x0, @u32=0x1}, @nested={0x235, 0xe0, 0x0, 0x1, [@generic="85fa1914c9eb781dff82", @nested={0x4, 0x145}, @typed={0x8, 0xc1, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x107, 0x0, 0x0, @uid=r11}, @generic="d5a976b2344007f2cbea671cbc0940e6355e1f58f7ece2177ea3856ba1a043cc447a74b74db321f562c1899f372c9fb44fd0fd894a195cfa08", @nested={0x4, 0x123}, @generic="efbdc1c65cd9adce5697caf66e41b321005b89ae46a7827911d7db6a20cee90d974815317aaacfed195604c39dd68b1c62f38f0efb55da18cdb6b96b94023b41621478fbd29512d9c56bb33494adf2589fbf16595ccd160beeac40b1852842d7a0bbdf85c20e81602bece993e51f1416d97cff88770b91512b62c6a9e94969a3c5fb4b6c4bcd1c10c3f32b35356beef1f25278e504beac7bf88a56cb1a14", @generic="6802bacfe2ff9faeb364b217898d9eba124006a352cc9c7349aa409fd7aa5721148fdf27d85f4e02c8e7ce36745a66c28911ca54efa28e0876116c5fb3216c245fce0b399f104667eff344ca815241b1fed0636514b77bf60485b11c97b6e4", @generic="b221ed7370cc0f7e4d697a91799bbb736947eff9407e5d222ae797abfe90d50ba130eecbfbd65e9222827a0c776528802b5acdf5af802dfeb0b07d2e9daadeb4636677f37247641de9f059a93126942c69269f272bf10cd300fd80f37a6ebfe5f0fa35ec39ba7c65f6df29b44983f88cab969e75c8d85ce1a95e0f57909c627d3b4dc7edd0ed9774dd87b4a3e2179fb50ae8a3b8f76667fbbefdfae6bd80d4", @generic="61033a5e1cac3ae85577fc68892275fbfc839e0bb7953367b28bdd5d4eb63e393b2689257578f9552afbe752c95df7d9cd69e7c68ee8d838d85b"]}, @generic="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"]}]}, 0x134c}, 0x1, 0x0, 0x0, 0x4001}, 0x4080) 31.642973561s ago: executing program 5 (id=3128): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x84) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x100000002) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) ioctl$auto_PPPIOCSMRRU(r1, 0x4004743b, 0x0) 30.759851394s ago: executing program 5 (id=3130): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0xffff, 0x4, 0x10000000000df, 0xeb2, 0x401, 0x8001) ioctl$auto(0x3, 0x81484d11, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto_SO_MAX_PACING_RATE(r0, 0x7fffffff, 0x2f, &(0x7f0000000000)='*\x00', &(0x7f0000000040)=0x1) open(&(0x7f00000001c0)='./file0\x00', 0x595002, 0x68e) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getdents$auto(r2, &(0x7f0000000380)={0x4, 0xff, 0x9, "f992bb2e1eaa6e2fd00eb2811516b09a49e4c8f3e48f5b93c4e92292503c2f23145418b402827c5a773989329cd693f7d0e0ab314b26852457ad0f4df70aec668f58bac155fe9c5e00499e45805fd940247eeb36729646e6ad5d8354273715590c87249c4687a879c99aaa824e5219f38b07c5e94f706770fdc380e0c1fba64608e752b923cfb6a90147498cdc84acab08a91cf9d2c4bab75b57d041d639c44a57d379b68407"}, 0x9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x9, 0x200007, 0xffff) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) 15.062880368s ago: executing program 39 (id=3130): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0xffff, 0x4, 0x10000000000df, 0xeb2, 0x401, 0x8001) ioctl$auto(0x3, 0x81484d11, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto_SO_MAX_PACING_RATE(r0, 0x7fffffff, 0x2f, &(0x7f0000000000)='*\x00', &(0x7f0000000040)=0x1) open(&(0x7f00000001c0)='./file0\x00', 0x595002, 0x68e) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getdents$auto(r2, &(0x7f0000000380)={0x4, 0xff, 0x9, "f992bb2e1eaa6e2fd00eb2811516b09a49e4c8f3e48f5b93c4e92292503c2f23145418b402827c5a773989329cd693f7d0e0ab314b26852457ad0f4df70aec668f58bac155fe9c5e00499e45805fd940247eeb36729646e6ad5d8354273715590c87249c4687a879c99aaa824e5219f38b07c5e94f706770fdc380e0c1fba64608e752b923cfb6a90147498cdc84acab08a91cf9d2c4bab75b57d041d639c44a57d379b68407"}, 0x9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x9, 0x200007, 0xffff) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) 13.508608423s ago: executing program 7 (id=3146): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) (async) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) socket(0x15, 0x5, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dmmidi2\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x849a, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x200008000) (async) unshare$auto(0x40000080) semctl$auto_SETVAL(0x2, 0x5, 0x10, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) (async) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) 12.006093759s ago: executing program 7 (id=3150): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000040)=0xddc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r1) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010127bd7000fcdb00250600000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r3, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r4) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r5, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) 9.314632614s ago: executing program 8 (id=3156): mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100842, 0x0) memfd_create$auto(0x0, 0x73) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x181441, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) read$auto_snd_timer_f_ops_timer(r1, &(0x7f0000000100)=""/98, 0xfffffc67) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r1, 0x5420, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x200008000) r2 = socket(0xa, 0x5, 0x0) setsockopt$auto(r2, 0x10000000084, 0x13, 0x0, 0x4) 9.068943556s ago: executing program 7 (id=3157): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "03afa530df1b1700"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000b, 0x0) r1 = socket(0x5, 0x1, 0x40d67) getsockopt$auto(r1, 0x28, 0x8, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, r1, 0x8000) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x4, 0x100, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) pread64$auto(0xffffffffffffffff, 0x0, 0xd, 0x6e9) r2 = gettid() timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000180)={@sival_ptr=&(0x7f0000000100)="17483cc328a559f1f8977685f7c151e985588eaf8c5503581b69507ab600e3382f89989ea5e8b2cbedcfedb1897ac79be22dd10aba6eab97174468b16a5d055650784f766aacd92ae6", @raw=0x2, 0x0, @_tid=r2}, &(0x7f00000001c0)) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0xffffffff, 0x0, 0x4005, &(0x7f0000000b40)={{0xffffffffffffffff}, {0xfffffffffffff4c5, 0x2}, 0x408, 0x8, 0x0, 0xdd0, 0x7, 0x400000000000010, 0x0, 0x4, 0x7, 0x3, 0x100000, 0x96bd, 0x7ff, 0xbf0}) write$auto(r3, 0x0, 0x8587) preadv$auto(0x3, &(0x7f00000000c0)={0x0, 0x3}, 0x3, 0x2, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x8000000000000000, 0xeb1, 0x401, 0x1000018000) 8.870841449s ago: executing program 8 (id=3158): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x3ca82, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x30000, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) lsm_list_modules$auto(0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) eventfd$auto(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x700, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf253d00000004003b0104003a01"], 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4004810) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.8/usb25/25-0:1.0/usb25-port8/power/runtime_suspended_time\x00', 0x101004, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000400)=""/202, 0xca) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) ioctl$auto(r2, 0x89f0, 0x24) r4 = socketpair$auto(0xfffffffd, 0x20000005, 0xffffffff, 0x0) unshare$auto(0x40000080) ioctl$auto_AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000002c0)=0x7) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r1, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0xffffffff) 7.739559341s ago: executing program 7 (id=3159): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0xf0d, @inferred, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64"}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x4000005) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x485, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0xdc483, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0x4]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0xfffffffffffffffb, 0x1, 0x400000000004, 0x3, 0x3, 0x3, 0xfffffffeffffffff, 0x3, 0x8000000000400100, 0xffff, 0x6d3c, 0x3, 0xb, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) mmap$auto(0x0, 0x40000c, 0xdf, 0x14, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x3, 0x4) getsockopt$auto(r3, 0x1, 0x22, 0x0, 0x0) 5.555384494s ago: executing program 2 (id=3163): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) setresuid$auto(0x0, 0x8, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) 5.291325914s ago: executing program 2 (id=3164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_SMC_NETLINK_GET_LINK_SMCR(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, "6c2aaf91c881d87c5143b9a8f6c3662eff1022055799e55bd94b8f72a73aefb6358dbd8eb42deea83e5ccea50af735169ee001c760a720db92923359c03fd566cbe318c76caa0930d30f97a959fa"}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x91f5}, 0x800000001, &(0x7f0000001080)={&(0x7f00000010c0)="837c43558323d5db424689e7e6cb5c40ad091e4374c10000000025", 0x1ffffffff}, 0x2, 0x0) socket(0x2c, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = pipe$auto(0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/psaux\x00', 0x40002, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, r5) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdc00, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x20009}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20008084) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x4b72, r8) ioctl$auto(r1, 0xc040564a, r0) r9 = socket(0x2, 0x5, 0x0) getsockopt$auto(r9, 0x84, 0xd, 0x0, 0x0) r10 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), r4) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r10, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x98, 0x4, "c6f81158245d5a235a02e87d0fd7c169b0a8dcce5b8aabaffec683b122eaa1317857085291b32de89bd1c26d5bfea838d9fe71495497b704ca4957ea28bfe3160a4e4392385922ebe369d3a900f07dca781f1cde45da5a65160f9844f2bd5768aaebfca979f202aea6b1d41e04208a3ef154850a602d6b27010ff09d0ee27615a108eee81f4250aa383b0586eeeaf376e723ca78"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x73b4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 4.930184393s ago: executing program 8 (id=3165): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x409002, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7fffffff, 0x10) r0 = socket(0x23, 0x80805, 0x0) setsockopt$auto_SO_OOBINLINE(r0, 0x80000001, 0xa, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88000, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mlock$auto(0x7c88, 0x7fff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x5}}, 0x100003, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) read$auto_vrr_range_fops_(r2, &(0x7f0000000280)=""/125, 0x7d) (async) read$auto_vrr_range_fops_(r2, &(0x7f0000000280)=""/125, 0x7d) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x7}) (async) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x7}) socket(0x2b, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto_SO_RCVBUF(r3, 0x4, 0x8, &(0x7f0000000000)='^}{z\x00', 0x1) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) 4.516565204s ago: executing program 8 (id=3166): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/i8042/serio0/softraw\x00', 0x141042, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) (async) newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0x5) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) io_uring_setup$auto(0x6, 0x0) (async) mknod$auto(0x0, 0x1081, 0x3) (async) open(0x0, 0xa240, 0x15e) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa00, 0x100) sysfs$auto(0x2, 0x1e, 0x0) (async) setuid$auto(0xe) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x80000008000) (async, rerun: 32) r2 = socket(0xa, 0x2, 0x0) (rerun: 32) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0xae41, r2) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r3, 0x8188aea6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x6, 0x1000000000000005, 0x0, 0xfffffffffffffff6, 0xffffffffffffffff, 0xfffffffffffdff7f, 0xdffffffffffffff8, 0x80000001, 0x0, 0x10000005e58296f, 0x4, 0x7f, 0x0, 0x8, 0x1, 0x9]}, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) 4.398832155s ago: executing program 2 (id=3167): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x2b, 0x5, 0x1000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffdb8, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4000841) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) fsopen$auto(0x0, 0x1) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x9, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x5) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="7dba2f6c3cca10bfa25ed5ba2585f80befb2951d17dcd1febadc0e6896c15766a11aa935403487649a5cb2e528d18f56e8f45592a3e29c3e936d7f95633fcb4e93b1ce6aeebad1ab5b2d84f582ec906fb8aa7ad324398afec7824bece2739f4dbf48163eb5e997d9fb09d43e487356b278e031c7532455d1c48525b5fc52824a9a7c1f994b53a42fae716f09e8", 0x4, &(0x7f0000000540)={&(0x7f0000000080)="9e7d3bb775b44f25e2192b8fcc1283fbfd4d165d6cc9ea5fa05650a3883a19f97672551d339e58d91666948a856f3146d80c28d1d55284c72451e236ed78d8fe3e6f09f23664ba", 0xfffffffffffffffd}, 0xb8b7, &(0x7f0000000580)="9fea39571fd1d7292168a356375e5e498ea18a986c672d2885e56c79ad126fe8ba4504677989686f998d0db2e516a757e6cf96fdaa6f16998de824a129f3e8f436db7fa794ba310807c90c315e", 0xff, 0x1}, 0x1}, 0x5, 0xdc, &(0x7f0000000640)={0x8000000000000000, 0x1}) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) 2.45862925s ago: executing program 7 (id=3168): mmap$auto(0x0, 0x6, 0xe1, 0x16, 0x405, 0xfd) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_pid\x00', 0xa0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) ioctl$auto(0x1, 0x8983, 0x4) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x98bf, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff034}}) write$auto(r0, 0x0, 0x6) semctl$auto(0x7, 0x2, 0x13, 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x560a, r1) 1.000653095s ago: executing program 8 (id=3169): r0 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/trap_flow_action_cookie\x00', 0x8000, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000040)=""/5, 0x5) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) write$auto(r1, &(0x7f00000000c0)='[*\xe4+\x00', 0x4) r2 = fcntl$auto_F_WRLCK(r0, 0x626, 0x1) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xd0}, 0x4008000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r2) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}]}, 0x20}}, 0x8080) stat$auto(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xa4, 0x401, 0x1, 0x3, 0xee01, 0xee00, 0x0, 0x4, 0x0, 0x70230, 0x8, 0xffffffffffff7fff, 0x6, 0x3d4e, 0xfffffffffffffb34, 0x3, 0xfffffffffffffffc}) msgctl$auto_IPC_INFO(0x301, 0x3, &(0x7f0000000540)={{0x2, 0x0, 0xee01, 0x8, 0x8, 0xffff0000, 0x9}, &(0x7f00000004c0)=0xc, &(0x7f0000000500)=0x3, 0x6, 0x9, 0x6, 0x100000000, 0x5, 0x101, 0x718c, 0x4, @raw=0x7, @inferred=0x0}) lstat$auto(&(0x7f0000000380)='./file0\x00', &(0x7f00000005c0)={0x5, 0x8, 0x5, 0x8, r5, r6, 0x0, 0x7, 0x9, 0x7, 0x6, 0x865, 0x2, 0x4, 0x7, 0x330, 0x81}) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000680), r2) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040080) ioctl$auto_CEC_ADAP_G_CONNECTOR_INFO(r2, 0x8044610a, &(0x7f00000007c0)={0x6, @drm={0x8, 0x6}}) r8 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/netdevsim/netdevsim4/max_vfs\x00', 0x8000, 0x0) r9 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f00000008c0), 0x101000, 0x0) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2b0, r3, 0x80, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x2}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x237, 0x6e, 0x0, 0x1, [@nested={0xd4, 0x73, 0x0, 0x1, [@typed={0x8, 0xaf, 0x0, 0x0, @fd=r8}, @generic="b4fb073cde561b8802717148c24d81443754cbd20d17342f4efe3adf73fd81e4ccdebdacf688b929ee9306c205a9ae567787082b12e6e81b4b01c38dc50991662b49426a4d07f7c2f3f3390c6fb53fd75ff852faf3f3c26b7b20b5371fa7a4857ed3da0d23da9c850dd505982e910e02168093a10b7cc5e4e4af0d192ca93fdc334437e983c95e7ff3c640c47742d98e80c773f1a8a9d93b34920ba74ad3859242476f4d286cbf0e7cab9bb3bf03acdf8a618614", @nested={0x4, 0x8f}, @typed={0x8, 0x123, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x30, 0x3a, 0x0, 0x1, [@nested={0x4, 0x84}, @typed={0x14, 0x14b, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0xb8, 0x12a, 0x0, 0x1, [@nested={0x4, 0x103}, @typed={0x8, 0x51, 0x0, 0x0, @u32=0x9}, @typed={0x8d, 0x90, 0x0, 0x0, @binary="27fc05f9777442ef6c920e3ff41a554ac6272aa1b0b6f656743003fa7b256e9948bad7dadccafd9bbd4d0dd71c6b0e3934e207f757c1a0f1ea712aef1424a1655165e072f9c3469abd9ce98a94ea14ad64acb66a8cc44a06db500ea047f852adbd2ca1e462694b251182645d19dc6596f649e538c2b012b2d22f1ba59e63edc85d795ef18952e8d17b"}, @nested={0x4, 0xa0}, @nested={0x4, 0x106}, @typed={0x8, 0x12c, 0x0, 0x0, @fd=r9}, @nested={0x4, 0x96}, @nested={0x4, 0x19}]}, @nested={0xc, 0xdd, 0x0, 0x1, [@nested={0x4, 0x154}, @typed={0x4, 0x83}]}, @generic="ca95e90346911136f040eb68102974e1bf97d1cedcb10001b352980af49580b13ddca2cb0b5f7f6d82c30e8ba37f02345a986b1a2c86b69789c08655e63ca0dedf70b7e88a598f0082d387d905bd2cb3a1e9aaf6b8912ab463104d917f90ddc3a059caed3c0cafbc87b73d"]}, @NL80211_ATTR_IE_RIC={0x44, 0xb2, "f95143aa74bf708d26c196903a62b20af7a4f95f66cc63bc8f78b613cbb2b88f96073aaca32972d5b130fa574c8c72d30588a9db456c247beefd3a15f452fcf1"}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0xad}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x2000021}, 0x10000) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0xffff}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xe}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040480}, 0x20000000) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r2, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_GOV={0x1ae, 0xc, 0x0, 0x1, [@nested={0x98, 0x79, 0x0, 0x1, [@generic="ec36a12038b23f136709b62a563f0bda5deca4a9af97a54ccfbd6beff5fb94fcc23bae22c4d26419005f78f5f8e23f87159aca3d8ec4b65ad9e88fd4d3750875334e4eb7d870b603667fd193e2c8a4ddd7c999b5651e14bed8de1029c8f5feea33a0551903327e19b2899dbfa057c2edc2d100bf6d5feb9049d9097b6e3c6c5b6c6a729c", @typed={0xc, 0xee, 0x0, 0x0, @u64=0xea}, @nested={0x4, 0x70}]}, @generic="5971d47aef591bfb3e3d7f729db4bcf3d275c3058da53b84fa279bfaed58fcb3bcf0905d71752070c2d4bbb62a51974b3f28c268cfedce75a1ec2e338c3ae0b510ff446131b0704d8b1527d3c9333bf039fcf52eacbecf59c9d8fd14998d12610976bd9e12dff7488d8f6b0d74bfeed0eec0f4f39c0a3930dc049efbf3421a0b", @generic="b08c8bce5e7446a5c6be32cbe5641c076daef50a3ace2a6145c87159834cbe4105cecd5402a5215440814bfc708afac0901ddd9830d3ba05b9cd8b68dda1c28958679e5e32bf6ede97e4702d7ff4ae51e382cef9ca37024c16d6af82374c311cfe98c15ee7742787d521a5fa40604cab00f5e69b75bdadebe720a2d75d71b39680ceffa6e89c4f9d8a1a6351027d518128d1"]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20040400}, 0x4) init_module$auto(&(0x7f0000001000)="3e796faefd90b007701046ab4ffff50fc889bc9e579cdf90267b4faf0570da5ba0a5b30bc12518e3fb6c4a7f861570c8d57971f54ff95f23f4e9a4104b96b0585cf39d3ed164ef6078af5d25527d5384ccec63bfdd518df3f5645224", 0x3, &(0x7f0000001080)='/sys/kernel/debug/netdevsim/netdevsim4/max_vfs\x00') init_module$auto(&(0x7f00000010c0)="857e73afe9f353b9c20810541df98eec0c5d2d7517c0f25951902053b98ba3c659077f95b30526b551ff9bf73b84d57c6a9c5f195a264990b785ec636099e0e133b1fcfd718df8eaa733230ae49494759110cd30896bc7210591060ef4ac352b", 0x0, &(0x7f0000001140)='!%\x00') madvise$auto(0x0, 0xffffffffffffff80, 0xfd) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/kernel/debug/ieee80211/phy17/misc\x00', 0x82880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/devices/virtual/tty/ptyc5/power/runtime_suspended_time\x00', 0x208000, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000001200), 0x640200, 0x0) r10 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) fanotify_mark$auto(r10, 0x101, 0x5, r2, &(0x7f0000001280)='./file0\x00') close_range$auto(r10, r10, 0x1) sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x124, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xc3, 0x7, "f6ba5a8226b3d5290927d35f5b109ace896b824487959674d3834b513d02901f132de09564bc1c77f8f3e42addeaf2b51d4d374036b30a8af12174a7e488488c70c33bd23d0452b9d70c666765754e741908446cf190991c911b93c48497405b92cea2fad162792f59c4272c789f48389c7321bc6166031acd58ece3c64aaa5b1932aac6aded0d474f260d75f94f6a00dc678a1e632e5b911a586861a3104897d362da29aeb2ad850603d313ee6ee219f672d8f6fcdf217afec0b88adc092b"}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x124}, 0x1, 0x0, 0x0, 0x8001}, 0x4001) 676.017758ms ago: executing program 8 (id=3170): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) r1 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffc, 0x1, 0x9, 0xe8, 0x0, 0x2, 0x0, 0x2}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd", @ANYRES32=r7, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x4) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x2a58, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0xfff, 0x4, r4}, 0xa) ptrace$auto(0x10, r1, 0x2, 0x1007ff) 631.930459ms ago: executing program 2 (id=3171): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0305602, 0xffffffffffffffff) mmap$auto(0x0, 0x3, 0xdf, 0xfffffffffffff010, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0x1, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x8, 0xfffffffc], {0x6, 0x10001, 0x0, 0x9, 0x504, 0xfffffffe, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x2, 0x76c5, 0xd11e, 0x7ffffffffffffffe}}) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) getdents$auto(0xffffffffffffffff, &(0x7f0000000340)={0x800, 0x48, 0xe, "c0e2f5b61684fc6d9ba754876c5738bdc981b9f374d80f9b3bbf25821b72d446586c95a3a3d8f1fd747c28091dd053b458aaaa6a2a72cdbcac38d93b4ed49103c82a095f253ed83334fcdbeb85307144501d523115d6dbf9e182ac9e0a7c868f99007b271b011173a2ab82a73754732199da86796ca451253f5f0a2bfba4611fd8cc3a69f6c6c1aa8eefeb411b98020088d5a8"}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x60, 0x0, 0x0, 0x1ff}, 0x7}, 0x3, 0x1f00) 322.844178ms ago: executing program 2 (id=3172): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x488081, 0x0) setresuid$auto(0x0, 0x8, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) 215.1224ms ago: executing program 7 (id=3173): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) epoll_create$auto(0x3e) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/udplite6\x00', 0x88000, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) socket(0x2, 0x3, 0x100) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/189, 0xbd) (async) socket(0x10, 0x2, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x2, 0x0) (rerun: 32) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r1, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r3) (rerun: 64) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x186, 0x3}]}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (rerun: 64) 0s ago: executing program 2 (id=3174): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf2503000000200003801c00018015002d800800b500", @ANYRES32=0x0, @ANYBLOB="894f0700000000000000000004000380040002"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4844) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@OVS_PACKET_ATTR_ACTIONS={0xbf, 0x3, 0x0, 0x1, [@generic="4e0b89f6f5ef054c0a46cc5a1b3a6db8e7e1f3711e40e4f6ce7423e31ec065614f0c67f9fc5adabb231485cde372b62b869e5e4a7041d4c2497d579906b7913fd5be70c407a6704ea26b6c9bbad067363557c8633c7bf0555ce8f927b86978d5ae0be0615e709a7058ca9f071ee6ea9ae6c66830e76beb7f8a42d054a5976646e0ee4295ef5a6bf53ede8577ab5ce2121adf0dc8e2324c46cf6429f0874188da5dddf82d22897ca04c8190141e89eb372fc6d6373b0efbbaff4ba2"]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "16effc72c45113f67200696dbbcb"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000001}, 0x10000811) socket(0x2, 0x80002, 0x73) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x100, 0x0) io_uring_setup$auto(0x8, &(0x7f0000000000)={0xe2b, 0x7, 0x5, 0x3, 0x3cb, 0xffffffff, r1, [0x1, 0xa, 0x9], {0x7ff, 0x6, 0xfeb7, 0x2, 0xce89, 0x10001, 0xfffffffd, 0x2b, 0xbc4e}, {0x2, 0x9aa8, 0x7, 0x7, 0x6, 0x2, 0x6, 0x9, 0x647}}) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x2402, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x8138ae83, 0x0) kernel console output (not intermixed with test programs): /0xf80 [ 1153.847765][T19996] ? clear_bhb_loop+0x40/0x90 [ 1153.847787][T19996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.847807][T19996] RIP: 0033:0x7f513299c819 [ 1153.847823][T19996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.847842][T19996] RSP: 002b:00007f5133794028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 1153.847861][T19996] RAX: ffffffffffffffda RBX: 00007f5132c15fa0 RCX: 00007f513299c819 [ 1153.847873][T19996] RDX: 0000000000000006 RSI: 0000002000000005 RDI: 0000000000200000 [ 1153.847885][T19996] RBP: 00007f5132a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1153.847896][T19996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.847907][T19996] R13: 00007f5132c16038 R14: 00007f5132c15fa0 R15: 00007ffc836c6c58 [ 1153.847931][T19996] [ 1154.949827][T20008] Invalid ELF header magic: != ELF [ 1155.021794][T20011] FAULT_INJECTION: forcing a failure. [ 1155.021794][T20011] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.068613][T20011] CPU: 0 UID: 0 PID: 20011 Comm: syz.0.2843 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1155.068657][T20011] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1155.068668][T20011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1155.068679][T20011] Call Trace: [ 1155.068687][T20011] [ 1155.068695][T20011] dump_stack_lvl+0x100/0x190 [ 1155.068728][T20011] should_fail_ex.cold+0x5/0xa [ 1155.068752][T20011] should_failslab+0xc2/0x120 [ 1155.068774][T20011] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1155.068804][T20011] ? __d_alloc+0x34/0xa80 [ 1155.068830][T20011] __d_alloc+0x34/0xa80 [ 1155.068854][T20011] d_alloc+0x4a/0x1e0 [ 1155.068877][T20011] lookup_one_qstr_excl+0x175/0x250 [ 1155.068905][T20011] start_dirop+0x59/0xb0 [ 1155.068924][T20011] simple_start_creating+0xf9/0x110 [ 1155.068944][T20011] ? __pfx_simple_start_creating+0x10/0x10 [ 1155.068963][T20011] ? mntput+0x70/0xa0 [ 1155.068979][T20011] ? simple_pin_fs+0xa3/0x190 [ 1155.069008][T20011] debugfs_start_creating.part.0+0x82/0x170 [ 1155.069032][T20011] __debugfs_create_file+0xb3/0x4f0 [ 1155.069057][T20011] debugfs_create_file_full+0x41/0x60 [ 1155.069081][T20011] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1155.069108][T20011] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1155.069134][T20011] ? rcu_is_watching+0x12/0xc0 [ 1155.069192][T20011] ? lockdep_init_map_type+0x5c/0x250 [ 1155.069221][T20011] preinit_net.part.0+0x24e/0x8f0 [ 1155.069243][T20011] copy_net_ns+0x339/0x7c0 [ 1155.069267][T20011] create_new_namespaces+0x3ea/0xac0 [ 1155.069294][T20011] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1155.069317][T20011] ksys_unshare+0x473/0xad0 [ 1155.069343][T20011] ? __pfx_ksys_unshare+0x10/0x10 [ 1155.069375][T20011] __x64_sys_unshare+0x31/0x40 [ 1155.069400][T20011] do_syscall_64+0x106/0xf80 [ 1155.069418][T20011] ? clear_bhb_loop+0x40/0x90 [ 1155.069440][T20011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.069460][T20011] RIP: 0033:0x7f134939c819 [ 1155.069476][T20011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.069493][T20011] RSP: 002b:00007f134a2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1155.069517][T20011] RAX: ffffffffffffffda RBX: 00007f1349615fa0 RCX: 00007f134939c819 [ 1155.069531][T20011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1155.069542][T20011] RBP: 00007f1349432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1155.069553][T20011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.069564][T20011] R13: 00007f1349616038 R14: 00007f1349615fa0 R15: 00007fff45e6cbe8 [ 1155.069587][T20011] [ 1156.390992][T16100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1156.416530][T16100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1156.425220][T16100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1156.433945][T16100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1156.441970][T16100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1156.813224][T20023] FAULT_INJECTION: forcing a failure. [ 1156.813224][T20023] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.873062][T20023] CPU: 0 UID: 0 PID: 20023 Comm: syz.5.2846 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1156.873104][T20023] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1156.873114][T20023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1156.873125][T20023] Call Trace: [ 1156.873132][T20023] [ 1156.873140][T20023] dump_stack_lvl+0x100/0x190 [ 1156.873173][T20023] should_fail_ex.cold+0x5/0xa [ 1156.873196][T20023] should_failslab+0xc2/0x120 [ 1156.873218][T20023] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1156.873248][T20023] ? __d_alloc+0x34/0xa80 [ 1156.873269][T20023] ? __pfx_stack_trace_save+0x10/0x10 [ 1156.873292][T20023] __d_alloc+0x34/0xa80 [ 1156.873317][T20023] d_alloc_parallel+0x111/0x14e0 [ 1156.873368][T20023] ? find_held_lock+0x2b/0x80 [ 1156.873389][T20023] ? __d_lookup+0x25c/0x4a0 [ 1156.873417][T20023] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1156.873448][T20023] ? __d_lookup+0x266/0x4a0 [ 1156.873481][T20023] lookup_open.isra.0+0x57c/0x11b0 [ 1156.873515][T20023] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1156.873558][T20023] ? mnt_get_write_access+0x1e9/0x2f0 [ 1156.873587][T20023] path_openat+0xa98/0x31a0 [ 1156.873615][T20023] ? __pfx_path_openat+0x10/0x10 [ 1156.873645][T20023] do_file_open+0x20e/0x430 [ 1156.873667][T20023] ? __pfx_do_file_open+0x10/0x10 [ 1156.873704][T20023] ? alloc_fd+0x476/0x790 [ 1156.873725][T20023] ? do_getname+0x191/0x390 [ 1156.873752][T20023] do_sys_openat2+0x10d/0x1e0 [ 1156.873778][T20023] ? __pfx_do_sys_openat2+0x10/0x10 [ 1156.873812][T20023] __x64_sys_openat+0x12d/0x210 [ 1156.873838][T20023] ? __pfx___x64_sys_openat+0x10/0x10 [ 1156.873873][T20023] do_syscall_64+0x106/0xf80 [ 1156.873892][T20023] ? clear_bhb_loop+0x40/0x90 [ 1156.873915][T20023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.873934][T20023] RIP: 0033:0x7f513299c819 [ 1156.873951][T20023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.873969][T20023] RSP: 002b:00007f5133794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1156.873988][T20023] RAX: ffffffffffffffda RBX: 00007f5132c15fa0 RCX: 00007f513299c819 [ 1156.874000][T20023] RDX: 0000000000022001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1156.874011][T20023] RBP: 00007f5132a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1156.874022][T20023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.874033][T20023] R13: 00007f5132c16038 R14: 00007f5132c15fa0 R15: 00007ffc836c6c58 [ 1156.874056][T20023] [ 1158.296268][T20036] block nbd2: not configured, cannot reconfigure [ 1158.366995][T20020] chnl_net:caif_netlink_parms(): no params data found [ 1158.512255][T16100] Bluetooth: hci4: command tx timeout [ 1159.477517][T20020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.561931][T20020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.775217][T20020] bridge_slave_0: entered allmulticast mode [ 1159.912297][T20020] bridge_slave_0: entered promiscuous mode [ 1159.980666][T20029] program syz.5.2847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1160.012639][T20020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.204422][T20020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.211845][T20020] bridge_slave_1: entered allmulticast mode [ 1160.414049][T20020] bridge_slave_1: entered promiscuous mode [ 1160.592904][T16100] Bluetooth: hci4: command tx timeout [ 1160.870860][T20020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.943989][T20020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.051071][T20020] team0: Port device team_slave_0 added [ 1161.128356][T20020] team0: Port device team_slave_1 added [ 1161.244517][T20020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.282005][T20020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.369217][T20020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.461883][T20020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.491901][T20020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.572904][T20020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.881776][T20020] hsr_slave_0: entered promiscuous mode [ 1161.908498][T20020] hsr_slave_1: entered promiscuous mode [ 1161.938138][T20020] debugfs: 'hsr0' already exists in 'hsr' [ 1161.973103][T20020] Cannot create hsr debugfs directory [ 1162.674049][T16100] Bluetooth: hci4: command tx timeout [ 1162.729151][T20020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1162.768103][T20020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1162.799631][T20020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1162.842503][T20020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1163.191038][T20020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.297189][T20020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.360339][T17924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.367563][T17924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.438616][T17924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.445909][T17924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.633020][T20020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1163.723253][T20020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1164.017753][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2857'. [ 1164.591511][T20020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.755193][T16100] Bluetooth: hci4: command tx timeout [ 1165.799596][T20020] veth0_vlan: entered promiscuous mode [ 1165.908528][T20020] veth1_vlan: entered promiscuous mode [ 1165.922456][T12037] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1165.934887][T12037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1165.944489][T12037] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1165.959048][T12037] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1165.968121][T12037] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1166.148747][T20110] FAULT_INJECTION: forcing a failure. [ 1166.148747][T20110] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.163677][T20020] veth0_macvtap: entered promiscuous mode [ 1166.223449][T20020] veth1_macvtap: entered promiscuous mode [ 1166.304454][T20020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.318672][T20110] CPU: 0 UID: 0 PID: 20110 Comm: syz.5.2861 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1166.318716][T20110] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1166.318727][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1166.318738][T20110] Call Trace: [ 1166.318745][T20110] [ 1166.318753][T20110] dump_stack_lvl+0x100/0x190 [ 1166.318786][T20110] should_fail_ex.cold+0x5/0xa [ 1166.318809][T20110] should_failslab+0xc2/0x120 [ 1166.318830][T20110] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1166.318860][T20110] ? __proc_create+0x2cb/0x8c0 [ 1166.318883][T20110] __proc_create+0x2cb/0x8c0 [ 1166.318912][T20110] ? __pfx___proc_create+0x10/0x10 [ 1166.318934][T20110] ? _raw_write_unlock+0x28/0x50 [ 1166.318952][T20110] ? proc_register+0x559/0x8a0 [ 1166.318973][T20110] proc_create_reg+0x75/0x170 [ 1166.318995][T20110] proc_create_data+0x86/0x110 [ 1166.319016][T20110] ? __pfx_proc_create_data+0x10/0x10 [ 1166.319037][T20110] ? cache_register_net+0x137/0x5e0 [ 1166.319058][T20110] ? cache_register_net+0x137/0x5e0 [ 1166.319082][T20110] cache_register_net+0x25a/0x5e0 [ 1166.319104][T20110] gss_svc_init_net+0x98/0x640 [ 1166.319132][T20110] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1166.319152][T20110] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1166.319182][T20110] ops_init+0x1e2/0x5f0 [ 1166.319204][T20110] setup_net+0x118/0x3a0 [ 1166.319222][T20110] ? __pfx_setup_net+0x10/0x10 [ 1166.319239][T20110] ? lockdep_init_map_type+0x5c/0x250 [ 1166.319266][T20110] ? mutex_init_lockep+0x110/0x150 [ 1166.319295][T20110] copy_net_ns+0x46f/0x7c0 [ 1166.319318][T20110] create_new_namespaces+0x3ea/0xac0 [ 1166.319344][T20110] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1166.319367][T20110] ksys_unshare+0x473/0xad0 [ 1166.319393][T20110] ? __pfx_ksys_unshare+0x10/0x10 [ 1166.319426][T20110] __x64_sys_unshare+0x31/0x40 [ 1166.319449][T20110] do_syscall_64+0x106/0xf80 [ 1166.319467][T20110] ? clear_bhb_loop+0x40/0x90 [ 1166.319490][T20110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.319509][T20110] RIP: 0033:0x7f513299c819 [ 1166.319526][T20110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.319544][T20110] RSP: 002b:00007f5133794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1166.319562][T20110] RAX: ffffffffffffffda RBX: 00007f5132c15fa0 RCX: 00007f513299c819 [ 1166.319574][T20110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1166.319585][T20110] RBP: 00007f5132a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1166.319595][T20110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.319606][T20110] R13: 00007f5132c16038 R14: 00007f5132c15fa0 R15: 00007ffc836c6c58 [ 1166.319629][T20110] [ 1167.093060][T20020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.235258][T17921] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.281682][T17921] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.343937][T17921] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.377061][T17921] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.570906][T17923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.597149][T17923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.715043][T17929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.731285][T17929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.788605][T20115] chnl_net:caif_netlink_parms(): no params data found [ 1168.036417][T12037] Bluetooth: hci6: command tx timeout [ 1168.205762][T20115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.324358][T20115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.359481][T20115] bridge_slave_0: entered allmulticast mode [ 1168.417895][T20115] bridge_slave_0: entered promiscuous mode [ 1168.474332][T20115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.520984][T20115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.567942][T20115] bridge_slave_1: entered allmulticast mode [ 1168.613378][T20115] bridge_slave_1: entered promiscuous mode [ 1168.764304][T20141] [U] ^Z [ 1168.801810][T20150] FAULT_INJECTION: forcing a failure. [ 1168.801810][T20150] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.815444][T20115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.865284][T20115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.927381][T20150] CPU: 0 UID: 0 PID: 20150 Comm: syz.0.2867 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1168.927424][T20150] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1168.927434][T20150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1168.927445][T20150] Call Trace: [ 1168.927452][T20150] [ 1168.927460][T20150] dump_stack_lvl+0x100/0x190 [ 1168.927493][T20150] should_fail_ex.cold+0x5/0xa [ 1168.927519][T20150] ? tomoyo_encode2+0xfb/0x3c0 [ 1168.927548][T20150] should_failslab+0xc2/0x120 [ 1168.927571][T20150] __kmalloc_noprof+0xe0/0x850 [ 1168.927600][T20150] ? d_absolute_path+0x136/0x1b0 [ 1168.927630][T20150] tomoyo_encode2+0xfb/0x3c0 [ 1168.927660][T20150] tomoyo_encode+0x29/0x50 [ 1168.927686][T20150] tomoyo_realpath_from_path+0x18c/0x690 [ 1168.927722][T20150] tomoyo_check_open_permission+0x2af/0x3c0 [ 1168.927747][T20150] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1168.927793][T20150] ? do_raw_spin_lock+0x128/0x260 [ 1168.927823][T20150] ? path_get+0x61/0x80 [ 1168.927848][T20150] tomoyo_file_open+0x6b/0x90 [ 1168.927868][T20150] security_file_open+0xb5/0x1e0 [ 1168.927896][T20150] do_dentry_open+0x5aa/0x1660 [ 1168.927919][T20150] ? security_inode_permission+0xbf/0x250 [ 1168.927954][T20150] vfs_open+0x82/0x3f0 [ 1168.927981][T20150] path_openat+0x208c/0x31a0 [ 1168.928009][T20150] ? __pfx_path_openat+0x10/0x10 [ 1168.928042][T20150] do_file_open+0x20e/0x430 [ 1168.928067][T20150] ? __pfx_do_file_open+0x10/0x10 [ 1168.928103][T20150] ? alloc_fd+0x476/0x790 [ 1168.928125][T20150] ? do_getname+0x191/0x390 [ 1168.928153][T20150] do_sys_openat2+0x10d/0x1e0 [ 1168.928181][T20150] ? __pfx_do_sys_openat2+0x10/0x10 [ 1168.928224][T20150] __x64_sys_openat+0x12d/0x210 [ 1168.928252][T20150] ? __pfx___x64_sys_openat+0x10/0x10 [ 1168.928287][T20150] do_syscall_64+0x106/0xf80 [ 1168.928306][T20150] ? clear_bhb_loop+0x40/0x90 [ 1168.928329][T20150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.928349][T20150] RIP: 0033:0x7f134939c819 [ 1168.928366][T20150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.928385][T20150] RSP: 002b:00007f134a2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1168.928404][T20150] RAX: ffffffffffffffda RBX: 00007f1349615fa0 RCX: 00007f134939c819 [ 1168.928416][T20150] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1168.928428][T20150] RBP: 00007f1349432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1168.928439][T20150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.928450][T20150] R13: 00007f1349616038 R14: 00007f1349615fa0 R15: 00007fff45e6cbe8 [ 1168.928473][T20150] [ 1168.928491][T20150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1169.467237][T20157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2868'. [ 1169.492249][T20146] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1169.729805][T20115] team0: Port device team_slave_0 added [ 1169.757809][T20115] team0: Port device team_slave_1 added [ 1169.911251][T20115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.967496][T20115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.087620][T20115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.130110][T20115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.151773][T12037] Bluetooth: hci6: command tx timeout [ 1170.167784][T20115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.254637][T20115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.621528][T20115] hsr_slave_0: entered promiscuous mode [ 1170.632285][T20168] netlink: 'syz.0.2870': attribute type 11 has an invalid length. [ 1170.645206][T20115] hsr_slave_1: entered promiscuous mode [ 1170.671787][T20115] debugfs: 'hsr0' already exists in 'hsr' [ 1170.681720][T20168] netlink: 'syz.0.2870': attribute type 11 has an invalid length. [ 1170.702486][T20115] Cannot create hsr debugfs directory [ 1170.715146][T20168] netlink: 'syz.0.2870': attribute type 11 has an invalid length. [ 1170.772780][T20168] netlink: 'syz.0.2870': attribute type 11 has an invalid length. [ 1171.388325][T20182] program syz.0.2874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1172.059460][T20189] FAULT_INJECTION: forcing a failure. [ 1172.059460][T20189] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.152063][T20189] CPU: 0 UID: 0 PID: 20189 Comm: syz.0.2875 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1172.152111][T20189] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1172.152123][T20189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1172.152135][T20189] Call Trace: [ 1172.152143][T20189] [ 1172.152151][T20189] dump_stack_lvl+0x100/0x190 [ 1172.152184][T20189] should_fail_ex.cold+0x5/0xa [ 1172.152207][T20189] should_failslab+0xc2/0x120 [ 1172.152229][T20189] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1172.152259][T20189] ? vm_area_dup+0x27/0x8e0 [ 1172.152289][T20189] vm_area_dup+0x27/0x8e0 [ 1172.152316][T20189] copy_vma+0x643/0xac0 [ 1172.152349][T20189] ? __pfx_copy_vma+0x10/0x10 [ 1172.152384][T20189] ? __lock_acquire+0x4a5/0x2630 [ 1172.152421][T20189] ? finish_task_switch.isra.0+0x200/0xb80 [ 1172.152446][T20189] copy_vma_and_data+0x1cf/0x7c0 [ 1172.152476][T20189] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1172.152525][T20189] ? __vma_start_write+0x17f/0x280 [ 1172.152550][T20189] ? __pfx___vma_start_write+0x10/0x10 [ 1172.152583][T20189] move_vma+0x51b/0x1890 [ 1172.152615][T20189] ? __pfx_move_vma+0x10/0x10 [ 1172.152646][T20189] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1172.152670][T20189] ? cap_mmap_addr+0x4b/0x120 [ 1172.152689][T20189] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1172.152709][T20189] ? security_mmap_addr+0x71/0x1e0 [ 1172.152734][T20189] ? __get_unmapped_area+0x255/0x3e0 [ 1172.152758][T20189] ? vrm_set_new_addr+0x204/0x290 [ 1172.152787][T20189] mremap_to+0x1b7/0x450 [ 1172.152816][T20189] do_mremap+0xb76/0x2130 [ 1172.152861][T20189] ? __pfx_do_mremap+0x10/0x10 [ 1172.152894][T20189] ? rcu_is_watching+0x12/0xc0 [ 1172.152922][T20189] ? __do_sys_listmount+0x1ce/0xee0 [ 1172.152951][T20189] ? kfree+0x2ec/0x6b0 [ 1172.152979][T20189] __do_sys_mremap+0x126/0x170 [ 1172.153009][T20189] ? __pfx___do_sys_mremap+0x10/0x10 [ 1172.153045][T20189] ? __x64_sys_futex+0x34f/0x4d0 [ 1172.153083][T20189] do_syscall_64+0x106/0xf80 [ 1172.153101][T20189] ? clear_bhb_loop+0x40/0x90 [ 1172.153124][T20189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.153143][T20189] RIP: 0033:0x7f134939c819 [ 1172.153160][T20189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.153178][T20189] RSP: 002b:00007f134a2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1172.153196][T20189] RAX: ffffffffffffffda RBX: 00007f1349615fa0 RCX: 00007f134939c819 [ 1172.153208][T20189] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 1172.153219][T20189] RBP: 00007f1349432c91 R08: 0000000100000000 R09: 0000000000000000 [ 1172.153230][T20189] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1172.153240][T20189] R13: 00007f1349616038 R14: 00007f1349615fa0 R15: 00007fff45e6cbe8 [ 1172.153263][T20189] [ 1172.477035][T20189] netlink: 130 bytes leftover after parsing attributes in process `syz.0.2875'. [ 1172.844640][T12037] Bluetooth: hci6: command tx timeout [ 1173.173646][T20197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2879'. [ 1173.637416][T20211] netlink: 'syz.6.2881': attribute type 11 has an invalid length. [ 1173.673921][T20211] netlink: 'syz.6.2881': attribute type 11 has an invalid length. [ 1173.721548][T20211] netlink: 'syz.6.2881': attribute type 11 has an invalid length. [ 1173.750950][T20211] netlink: 'syz.6.2881': attribute type 11 has an invalid length. [ 1174.112987][T20115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1174.278544][T20115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1174.337621][T20115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1174.394177][T20115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1174.873051][T20115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.925974][T16100] Bluetooth: hci6: command tx timeout [ 1175.052058][T20115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.117521][T17923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.124711][T17923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.227334][T17924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.234599][T17924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.398968][T20115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1175.481803][T20238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1175.488051][T20238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1175.525890][T20115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1175.537509][T20233] FAULT_INJECTION: forcing a failure. [ 1175.537509][T20233] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.777332][T20238] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1175.823680][T20238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1175.850193][T20233] CPU: 0 UID: 0 PID: 20233 Comm: syz.6.2884 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1175.850238][T20233] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1175.850249][T20233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1175.850261][T20233] Call Trace: [ 1175.850268][T20233] [ 1175.850276][T20233] dump_stack_lvl+0x100/0x190 [ 1175.850310][T20233] should_fail_ex.cold+0x5/0xa [ 1175.850334][T20233] should_failslab+0xc2/0x120 [ 1175.850355][T20233] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1175.850385][T20233] ? security_file_alloc+0x34/0x2c0 [ 1175.850410][T20233] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1175.850435][T20233] security_file_alloc+0x34/0x2c0 [ 1175.850460][T20233] init_file+0x95/0x480 [ 1175.850483][T20233] alloc_empty_file+0x73/0x1c0 [ 1175.850509][T20233] path_openat+0xe8/0x31a0 [ 1175.850527][T20233] ? kasan_save_stack+0x3f/0x50 [ 1175.850544][T20233] ? kasan_save_stack+0x30/0x50 [ 1175.850561][T20233] ? kasan_save_track+0x14/0x30 [ 1175.850577][T20233] ? __kasan_slab_alloc+0x89/0x90 [ 1175.850595][T20233] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1175.850622][T20233] ? do_getname+0x35/0x390 [ 1175.850644][T20233] ? do_sys_openat2+0xc5/0x1e0 [ 1175.850669][T20233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.850691][T20233] ? __pfx_path_openat+0x10/0x10 [ 1175.850719][T20233] do_file_open+0x20e/0x430 [ 1175.850741][T20233] ? __pfx_do_file_open+0x10/0x10 [ 1175.850776][T20233] ? alloc_fd+0x476/0x790 [ 1175.850798][T20233] ? do_getname+0x191/0x390 [ 1175.850833][T20233] do_sys_openat2+0x10d/0x1e0 [ 1175.850863][T20233] ? __pfx_do_sys_openat2+0x10/0x10 [ 1175.850897][T20233] __x64_sys_openat+0x12d/0x210 [ 1175.850924][T20233] ? __pfx___x64_sys_openat+0x10/0x10 [ 1175.850959][T20233] do_syscall_64+0x106/0xf80 [ 1175.850978][T20233] ? clear_bhb_loop+0x40/0x90 [ 1175.851000][T20233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.851019][T20233] RIP: 0033:0x7fd3a0b9c819 [ 1175.851036][T20233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.851053][T20233] RSP: 002b:00007fd39edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1175.851071][T20233] RAX: ffffffffffffffda RBX: 00007fd3a0e15fa0 RCX: 00007fd3a0b9c819 [ 1175.851083][T20233] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 1175.851095][T20233] RBP: 00007fd3a0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1175.851106][T20233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.851117][T20233] R13: 00007fd3a0e16038 R14: 00007fd3a0e15fa0 R15: 00007ffc1807a698 [ 1175.851141][T20233] [ 1176.172896][T20238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1176.179035][T20238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1176.185511][T20238] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1176.774692][T20115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.234568][T20238] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1177.326123][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.332973][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.376272][T20238] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1177.419932][T20238] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1177.474345][T20238] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1177.536347][T20115] veth0_vlan: entered promiscuous mode [ 1177.566781][T16100] Bluetooth: hci2: command 0x0406 tx timeout [ 1177.574741][T12037] Bluetooth: hci1: command 0x0c1a tx timeout [ 1177.634862][T20115] veth1_vlan: entered promiscuous mode [ 1177.750181][T20115] veth0_macvtap: entered promiscuous mode [ 1177.802390][T16100] Bluetooth: hci5: command 0x0c1a tx timeout [ 1177.847401][T20115] veth1_macvtap: entered promiscuous mode [ 1177.881385][T16100] Bluetooth: hci0: command 0x0c1a tx timeout [ 1177.953145][T20115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.018347][T20115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.080021][T20266] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2888'. [ 1178.237660][T17924] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.269094][T17924] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.421277][T17924] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.467028][T17924] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.522222][T16100] Bluetooth: hci4: command 0x0c1a tx timeout [ 1178.529412][T12037] Bluetooth: hci3: command 0x0c1a tx timeout [ 1179.030475][T17923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.090129][T17923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.403807][T16100] Bluetooth: hci6: command 0x0c1a tx timeout [ 1179.583266][T17921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.619904][T17921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.604065][T16100] Bluetooth: hci4: command 0x0c1a tx timeout [ 1181.486017][T16100] Bluetooth: hci6: command 0x0c1a tx timeout [ 1181.843654][T20289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2893'. [ 1182.683764][T16100] Bluetooth: hci4: command 0x0c1a tx timeout [ 1183.563877][T16100] Bluetooth: hci6: command 0x0c1a tx timeout [ 1184.132429][T20323] netlink: 110 bytes leftover after parsing attributes in process `syz.6.2900'. [ 1186.048796][T20351] FAULT_INJECTION: forcing a failure. [ 1186.048796][T20351] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1186.235783][T20351] CPU: 0 UID: 0 PID: 20351 Comm: syz.7.2907 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1186.235826][T20351] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1186.235838][T20351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1186.235849][T20351] Call Trace: [ 1186.235856][T20351] [ 1186.235864][T20351] dump_stack_lvl+0x100/0x190 [ 1186.235908][T20351] should_fail_ex.cold+0x5/0xa [ 1186.235929][T20351] ? __kernel_text_address+0xd/0x30 [ 1186.235960][T20351] get_futex_key+0x1d2/0x1620 [ 1186.235987][T20351] ? __pfx_get_futex_key+0x10/0x10 [ 1186.236011][T20351] ? putname+0xb1/0x110 [ 1186.236032][T20351] ? stack_trace_save+0x8e/0xc0 [ 1186.236051][T20351] ? __pfx_stack_trace_save+0x10/0x10 [ 1186.236072][T20351] futex_wait_setup+0x83/0x510 [ 1186.236108][T20351] __futex_wait+0x19f/0x300 [ 1186.236140][T20351] ? __pfx___futex_wait+0x10/0x10 [ 1186.236172][T20351] ? __pfx_futex_wake_mark+0x10/0x10 [ 1186.236203][T20351] ? futex_hash+0x2c5/0x380 [ 1186.236232][T20351] futex_wait+0xed/0x380 [ 1186.236260][T20351] ? __pfx_futex_wait+0x10/0x10 [ 1186.236294][T20351] ? putname+0xb1/0x110 [ 1186.236313][T20351] ? kmem_cache_free+0x124/0x6a0 [ 1186.236344][T20351] do_futex+0x1ef/0x350 [ 1186.236369][T20351] ? __pfx_do_futex+0x10/0x10 [ 1186.236391][T20351] ? __pfx_do_sys_openat2+0x10/0x10 [ 1186.236422][T20351] __x64_sys_futex+0x34f/0x4d0 [ 1186.236453][T20351] ? __x64_sys_openat+0x12d/0x210 [ 1186.236479][T20351] ? __pfx___x64_sys_futex+0x10/0x10 [ 1186.236513][T20351] do_syscall_64+0x106/0xf80 [ 1186.236531][T20351] ? clear_bhb_loop+0x40/0x90 [ 1186.236554][T20351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.236574][T20351] RIP: 0033:0x7f9e5559c819 [ 1186.236590][T20351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.236607][T20351] RSP: 002b:00007f9e563bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1186.236626][T20351] RAX: ffffffffffffffda RBX: 00007f9e55815fa8 RCX: 00007f9e5559c819 [ 1186.236637][T20351] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e55815fa8 [ 1186.236648][T20351] RBP: 00007f9e55815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.236659][T20351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.236670][T20351] R13: 00007f9e55816038 R14: 00007ffeec977bc0 R15: 00007ffeec977ca8 [ 1186.236693][T20351] [ 1187.183300][T20355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1190.088016][T16100] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 1192.112877][T20421] FAULT_INJECTION: forcing a failure. [ 1192.112877][T20421] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.304299][T20424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2923'. [ 1192.334862][T20421] CPU: 0 UID: 0 PID: 20421 Comm: syz.5.2922 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1192.334906][T20421] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1192.334917][T20421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1192.334929][T20421] Call Trace: [ 1192.334937][T20421] [ 1192.334945][T20421] dump_stack_lvl+0x100/0x190 [ 1192.334979][T20421] should_fail_ex.cold+0x5/0xa [ 1192.335002][T20421] should_failslab+0xc2/0x120 [ 1192.335025][T20421] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1192.335054][T20421] ? do_getname+0x35/0x390 [ 1192.335082][T20421] do_getname+0x35/0x390 [ 1192.335108][T20421] do_sys_openat2+0xc5/0x1e0 [ 1192.335134][T20421] ? __pfx_do_sys_openat2+0x10/0x10 [ 1192.335167][T20421] __x64_sys_openat+0x12d/0x210 [ 1192.335193][T20421] ? __pfx___x64_sys_openat+0x10/0x10 [ 1192.335227][T20421] do_syscall_64+0x106/0xf80 [ 1192.335245][T20421] ? clear_bhb_loop+0x40/0x90 [ 1192.335269][T20421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.335288][T20421] RIP: 0033:0x7f513299c819 [ 1192.335305][T20421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.335322][T20421] RSP: 002b:00007f5133794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1192.335349][T20421] RAX: ffffffffffffffda RBX: 00007f5132c15fa0 RCX: 00007f513299c819 [ 1192.335361][T20421] RDX: 0000000000022001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1192.335378][T20421] RBP: 00007f5132a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1192.335389][T20421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.335400][T20421] R13: 00007f5132c16038 R14: 00007f5132c15fa0 R15: 00007ffc836c6c58 [ 1192.335423][T20421] [ 1193.521657][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2925'. [ 1194.670013][T20445] netlink: 306 bytes leftover after parsing attributes in process `syz.6.2926'. [ 1196.896450][T20476] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2932'. [ 1197.739803][T20479] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2933'. [ 1198.393685][T20491] zswap: compressor not available [ 1202.051664][T20562] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1204.052372][T20588] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1206.379745][T20608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2962'. [ 1207.718957][T20628] FAULT_INJECTION: forcing a failure. [ 1207.718957][T20628] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.770594][T20630] FAULT_INJECTION: forcing a failure. [ 1207.770594][T20630] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.800756][T20628] CPU: 0 UID: 0 PID: 20628 Comm: syz.5.2967 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1207.800799][T20628] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1207.800809][T20628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1207.800820][T20628] Call Trace: [ 1207.800828][T20628] [ 1207.800836][T20628] dump_stack_lvl+0x100/0x190 [ 1207.800870][T20628] should_fail_ex.cold+0x5/0xa [ 1207.800894][T20628] should_failslab+0xc2/0x120 [ 1207.800916][T20628] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1207.800946][T20628] ? mas_alloc_nodes+0x280/0x390 [ 1207.800978][T20628] mas_alloc_nodes+0x280/0x390 [ 1207.801008][T20628] mas_preallocate+0x39c/0xf10 [ 1207.801033][T20628] ? __pfx_mas_preallocate+0x10/0x10 [ 1207.801058][T20628] ? vm_area_alloc+0x1f/0x160 [ 1207.801086][T20628] ? lockdep_init_map_type+0x5c/0x250 [ 1207.801115][T20628] __mmap_region+0x12b5/0x29e0 [ 1207.801147][T20628] ? __pfx___mmap_region+0x10/0x10 [ 1207.801180][T20628] ? set_next_entity+0x11e/0x9c0 [ 1207.801211][T20628] ? __lock_acquire+0x4a5/0x2630 [ 1207.801235][T20628] ? update_cfs_rq_load_avg+0x51/0x550 [ 1207.801265][T20628] ? find_held_lock+0x2b/0x80 [ 1207.801283][T20628] ? finish_task_switch.isra.0+0x200/0xb80 [ 1207.801304][T20628] ? finish_task_switch.isra.0+0x200/0xb80 [ 1207.801333][T20628] ? trace_sched_exit_tp+0x13a/0x180 [ 1207.801364][T20628] ? __schedule+0x1000/0x6120 [ 1207.801419][T20628] ? rcu_is_watching+0x12/0xc0 [ 1207.801447][T20628] ? cap_capable+0x107/0x460 [ 1207.801470][T20628] mmap_region+0x180/0x3e0 [ 1207.801503][T20628] do_mmap+0xc63/0x12f0 [ 1207.801529][T20628] ? __pfx_do_mmap+0x10/0x10 [ 1207.801550][T20628] ? __pfx_down_write_killable+0x10/0x10 [ 1207.801577][T20628] vm_mmap_pgoff+0x29e/0x470 [ 1207.801604][T20628] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1207.801627][T20628] ? do_futex+0x192/0x350 [ 1207.801653][T20628] ? __pfx_do_futex+0x10/0x10 [ 1207.801682][T20628] ksys_mmap_pgoff+0xe1/0x650 [ 1207.801703][T20628] ? __x64_sys_futex+0x34f/0x4d0 [ 1207.801727][T20628] ? __x64_sys_futex+0x358/0x4d0 [ 1207.801752][T20628] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1207.801773][T20628] ? xfd_validate_state+0x129/0x190 [ 1207.801804][T20628] __x64_sys_mmap+0x125/0x190 [ 1207.801834][T20628] do_syscall_64+0x106/0xf80 [ 1207.801852][T20628] ? clear_bhb_loop+0x40/0x90 [ 1207.801875][T20628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.801895][T20628] RIP: 0033:0x7f513299c819 [ 1207.801911][T20628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.801929][T20628] RSP: 002b:00007f5133794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1207.801947][T20628] RAX: ffffffffffffffda RBX: 00007f5132c15fa0 RCX: 00007f513299c819 [ 1207.801959][T20628] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1207.801970][T20628] RBP: 00007f5132a32c91 R08: 0000000000000401 R09: 0000000000008000 [ 1207.801981][T20628] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1207.801992][T20628] R13: 00007f5132c16038 R14: 00007f5132c15fa0 R15: 00007ffc836c6c58 [ 1207.802015][T20628] [ 1208.446350][T20630] CPU: 0 UID: 0 PID: 20630 Comm: syz.0.2968 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1208.446394][T20630] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1208.446404][T20630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1208.446416][T20630] Call Trace: [ 1208.446424][T20630] [ 1208.446431][T20630] dump_stack_lvl+0x100/0x190 [ 1208.446463][T20630] should_fail_ex.cold+0x5/0xa [ 1208.446486][T20630] should_failslab+0xc2/0x120 [ 1208.446508][T20630] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1208.446534][T20630] ? do_inotify_init+0xa4/0x5e0 [ 1208.446558][T20630] ? mutex_init_lockep+0x110/0x150 [ 1208.446587][T20630] do_inotify_init+0xa4/0x5e0 [ 1208.446615][T20630] __x64_sys_inotify_init1+0x30/0x40 [ 1208.446642][T20630] do_syscall_64+0x106/0xf80 [ 1208.446660][T20630] ? clear_bhb_loop+0x40/0x90 [ 1208.446682][T20630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.446702][T20630] RIP: 0033:0x7f134939c819 [ 1208.446718][T20630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.446736][T20630] RSP: 002b:00007f134a2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 1208.446755][T20630] RAX: ffffffffffffffda RBX: 00007f1349615fa0 RCX: 00007f134939c819 [ 1208.446767][T20630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 1208.446778][T20630] RBP: 00007f1349432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1208.446789][T20630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.446801][T20630] R13: 00007f1349616038 R14: 00007f1349615fa0 R15: 00007fff45e6cbe8 [ 1208.446824][T20630] [ 1210.649398][ T30] audit: type=1800 audit(2147483797.174:45): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2975" name="dummy_udc" dev="gadgetfs" ino=6868 res=0 errno=0 [ 1211.779440][T20673] FAULT_INJECTION: forcing a failure. [ 1211.779440][T20673] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.828041][T20673] CPU: 0 UID: 0 PID: 20673 Comm: syz.5.2977 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1211.828086][T20673] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1211.828096][T20673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1211.828107][T20673] Call Trace: [ 1211.828115][T20673] [ 1211.828123][T20673] dump_stack_lvl+0x100/0x190 [ 1211.828156][T20673] should_fail_ex.cold+0x5/0xa [ 1211.828180][T20673] should_failslab+0xc2/0x120 [ 1211.828202][T20673] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1211.828231][T20673] ? mas_alloc_nodes+0x280/0x390 [ 1211.828272][T20673] mas_alloc_nodes+0x280/0x390 [ 1211.828302][T20673] mas_preallocate+0x39c/0xf10 [ 1211.828326][T20673] ? __pfx_mas_preallocate+0x10/0x10 [ 1211.828352][T20673] ? vm_area_alloc+0x1f/0x160 [ 1211.828380][T20673] ? lockdep_init_map_type+0x5c/0x250 [ 1211.828409][T20673] __mmap_region+0x12b5/0x29e0 [ 1211.828441][T20673] ? __pfx___mmap_region+0x10/0x10 [ 1211.828474][T20673] ? set_next_entity+0x11e/0x9c0 [ 1211.828504][T20673] ? __lock_acquire+0x4a5/0x2630 [ 1211.828527][T20673] ? update_cfs_rq_load_avg+0x51/0x550 [ 1211.828557][T20673] ? find_held_lock+0x2b/0x80 [ 1211.828575][T20673] ? finish_task_switch.isra.0+0x200/0xb80 [ 1211.828596][T20673] ? finish_task_switch.isra.0+0x200/0xb80 [ 1211.828625][T20673] ? trace_sched_exit_tp+0x13a/0x180 [ 1211.828648][T20673] ? __schedule+0x1000/0x6120 [ 1211.828702][T20673] ? rcu_is_watching+0x12/0xc0 [ 1211.828731][T20673] ? cap_capable+0x107/0x460 [ 1211.828753][T20673] mmap_region+0x180/0x3e0 [ 1211.828785][T20673] do_mmap+0xc63/0x12f0 [ 1211.828811][T20673] ? __pfx_do_mmap+0x10/0x10 [ 1211.828832][T20673] ? __pfx_down_write_killable+0x10/0x10 [ 1211.828859][T20673] vm_mmap_pgoff+0x29e/0x470 [ 1211.828885][T20673] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1211.828908][T20673] ? do_futex+0x192/0x350 [ 1211.828933][T20673] ? __pfx_do_futex+0x10/0x10 [ 1211.828961][T20673] ksys_mmap_pgoff+0xe1/0x650 [ 1211.828982][T20673] ? __x64_sys_futex+0x34f/0x4d0 [ 1211.829005][T20673] ? __x64_sys_futex+0x358/0x4d0 [ 1211.829030][T20673] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1211.829051][T20673] ? xfd_validate_state+0x129/0x190 [ 1211.829082][T20673] __x64_sys_mmap+0x125/0x190 [ 1211.829112][T20673] do_syscall_64+0x106/0xf80 [ 1211.829130][T20673] ? clear_bhb_loop+0x40/0x90 [ 1211.829152][T20673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.829172][T20673] RIP: 0033:0x7f513299c819 [ 1211.829189][T20673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.829208][T20673] RSP: 002b:00007f5133794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1211.829226][T20673] RAX: ffffffffffffffda RBX: 00007f5132c15fa0 RCX: 00007f513299c819 [ 1211.829246][T20673] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1211.829258][T20673] RBP: 00007f5132a32c91 R08: 0000000000000401 R09: 0000000000008000 [ 1211.829269][T20673] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1211.829279][T20673] R13: 00007f5132c16038 R14: 00007f5132c15fa0 R15: 00007ffc836c6c58 [ 1211.829303][T20673] [ 1214.914155][T20691] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2982'. [ 1215.053999][T20696] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2983'. [ 1215.150000][T20696] mac80211_hwsim hwsim68 wlan1: entered promiscuous mode [ 1215.196784][T20696] mac80211_hwsim hwsim68 wlan1: entered allmulticast mode [ 1216.595777][T20706] syz.7.2984 (20706): attempted to duplicate a private mapping with mremap. This is not supported. [ 1216.890004][T20705] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2984'. [ 1219.752347][T20728] FAULT_INJECTION: forcing a failure. [ 1219.752347][T20728] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.272212][T20728] CPU: 0 UID: 0 PID: 20728 Comm: syz.7.2988 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1220.272255][T20728] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1220.272266][T20728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1220.272277][T20728] Call Trace: [ 1220.272284][T20728] [ 1220.272292][T20728] dump_stack_lvl+0x100/0x190 [ 1220.272324][T20728] should_fail_ex.cold+0x5/0xa [ 1220.272348][T20728] should_failslab+0xc2/0x120 [ 1220.272370][T20728] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1220.272399][T20728] ? security_inode_alloc+0x3b/0x2c0 [ 1220.272421][T20728] ? lockdep_init_map_type+0x5c/0x250 [ 1220.272451][T20728] security_inode_alloc+0x3b/0x2c0 [ 1220.272473][T20728] inode_init_always_gfp+0xced/0x1040 [ 1220.272497][T20728] alloc_inode+0x8e/0x250 [ 1220.272523][T20728] new_inode+0x22/0x1c0 [ 1220.272547][T20728] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1220.272571][T20728] shmem_get_inode+0x212/0x1040 [ 1220.272600][T20728] ? __pfx_shmem_get_inode+0x10/0x10 [ 1220.272624][T20728] ? rcu_is_watching+0x12/0xc0 [ 1220.272651][T20728] ? percpu_counter_add_batch+0xb9/0x230 [ 1220.272682][T20728] __shmem_file_setup+0x3ac/0x490 [ 1220.272708][T20728] ? __pfx___shmem_file_setup+0x10/0x10 [ 1220.272738][T20728] ? vm_area_alloc+0x1f/0x160 [ 1220.272766][T20728] shmem_zero_setup+0x96/0x1b0 [ 1220.272786][T20728] __mmap_region+0x2198/0x29e0 [ 1220.272818][T20728] ? __pfx___mmap_region+0x10/0x10 [ 1220.272845][T20728] ? update_cfs_rq_load_avg+0x51/0x550 [ 1220.272889][T20728] ? sched_clock+0x38/0x60 [ 1220.272925][T20728] ? lockdep_hardirqs_on+0x78/0x100 [ 1220.272944][T20728] ? finish_task_switch.isra.0+0x205/0xb80 [ 1220.272966][T20728] ? rcu_is_watching+0x12/0xc0 [ 1220.273020][T20728] ? rcu_is_watching+0x12/0xc0 [ 1220.273049][T20728] ? cap_capable+0x107/0x460 [ 1220.273079][T20728] mmap_region+0x180/0x3e0 [ 1220.273112][T20728] do_mmap+0xc63/0x12f0 [ 1220.273138][T20728] ? __pfx_do_mmap+0x10/0x10 [ 1220.273161][T20728] ? __pfx_down_write_killable+0x10/0x10 [ 1220.273189][T20728] vm_mmap_pgoff+0x29e/0x470 [ 1220.273216][T20728] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1220.273241][T20728] ? do_futex+0x192/0x350 [ 1220.273266][T20728] ? __pfx_do_futex+0x10/0x10 [ 1220.273294][T20728] ksys_mmap_pgoff+0xe1/0x650 [ 1220.273315][T20728] ? __x64_sys_futex+0x34f/0x4d0 [ 1220.273339][T20728] ? __x64_sys_futex+0x358/0x4d0 [ 1220.273364][T20728] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1220.273385][T20728] ? xfd_validate_state+0x129/0x190 [ 1220.273416][T20728] __x64_sys_mmap+0x125/0x190 [ 1220.273446][T20728] do_syscall_64+0x106/0xf80 [ 1220.273464][T20728] ? clear_bhb_loop+0x40/0x90 [ 1220.273486][T20728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.273506][T20728] RIP: 0033:0x7f9e5559c819 [ 1220.273523][T20728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.273541][T20728] RSP: 002b:00007f9e563bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1220.273559][T20728] RAX: ffffffffffffffda RBX: 00007f9e55815fa0 RCX: 00007f9e5559c819 [ 1220.273571][T20728] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1220.273581][T20728] RBP: 00007f9e55632c91 R08: 0000000000000401 R09: 0000000000008000 [ 1220.273593][T20728] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1220.273603][T20728] R13: 00007f9e55816038 R14: 00007f9e55815fa0 R15: 00007ffeec977ca8 [ 1220.273626][T20728] [ 1221.584591][T20735] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1221.596269][T20735] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1221.605276][T20735] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1221.613910][T20735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1221.621900][T20735] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1222.311277][T20733] chnl_net:caif_netlink_parms(): no params data found [ 1222.628794][T20733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.669637][T20733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.684801][T20746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2992'. [ 1222.704739][T20733] bridge_slave_0: entered allmulticast mode [ 1222.750985][T20733] bridge_slave_0: entered promiscuous mode [ 1222.780097][T20733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.844126][T20733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.883757][T20733] bridge_slave_1: entered allmulticast mode [ 1222.923619][T20733] bridge_slave_1: entered promiscuous mode [ 1223.035951][T20760] FAULT_INJECTION: forcing a failure. [ 1223.035951][T20760] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.065861][T20733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.125791][T20733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.205563][T20760] CPU: 0 UID: 0 PID: 20760 Comm: syz.7.2994 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1223.205606][T20760] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1223.205617][T20760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1223.205628][T20760] Call Trace: [ 1223.205635][T20760] [ 1223.205643][T20760] dump_stack_lvl+0x100/0x190 [ 1223.205676][T20760] should_fail_ex.cold+0x5/0xa [ 1223.205698][T20760] ? alloc_pipe_info+0x1ec/0x590 [ 1223.205719][T20760] should_failslab+0xc2/0x120 [ 1223.205740][T20760] __kmalloc_noprof+0xe0/0x850 [ 1223.205768][T20760] ? bpf_lsm_capable+0x9/0x10 [ 1223.205796][T20760] ? security_capable+0x80/0x260 [ 1223.205817][T20760] alloc_pipe_info+0x1ec/0x590 [ 1223.205840][T20760] splice_direct_to_actor+0x78f/0xa30 [ 1223.205862][T20760] ? __lock_acquire+0x4a5/0x2630 [ 1223.205885][T20760] ? __pfx_direct_splice_actor+0x10/0x10 [ 1223.205908][T20760] ? __pfx_aa_file_perm+0x10/0x10 [ 1223.205937][T20760] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1223.205963][T20760] do_splice_direct+0x174/0x240 [ 1223.205984][T20760] ? __pfx_do_splice_direct+0x10/0x10 [ 1223.206005][T20760] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1223.206039][T20760] ? rw_verify_area+0xce/0x6d0 [ 1223.206069][T20760] do_sendfile+0xadc/0xe20 [ 1223.206109][T20760] ? __pfx_do_sendfile+0x10/0x10 [ 1223.206141][T20760] ? __x64_sys_futex+0x34f/0x4d0 [ 1223.206165][T20760] ? __x64_sys_futex+0x358/0x4d0 [ 1223.206191][T20760] __x64_sys_sendfile64+0x1d8/0x220 [ 1223.206214][T20760] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1223.206243][T20760] do_syscall_64+0x106/0xf80 [ 1223.206263][T20760] ? clear_bhb_loop+0x40/0x90 [ 1223.206286][T20760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.206306][T20760] RIP: 0033:0x7f9e5559c819 [ 1223.206322][T20760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.206341][T20760] RSP: 002b:00007f9e563bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1223.206359][T20760] RAX: ffffffffffffffda RBX: 00007f9e55815fa0 RCX: 00007f9e5559c819 [ 1223.206372][T20760] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1223.206382][T20760] RBP: 00007f9e55632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1223.206393][T20760] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1223.206404][T20760] R13: 00007f9e55816038 R14: 00007f9e55815fa0 R15: 00007ffeec977ca8 [ 1223.206426][T20760] [ 1223.932644][T20735] Bluetooth: hci7: command tx timeout [ 1224.818065][T16100] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1224.829746][T16100] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1224.840456][T16100] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1224.848445][T16100] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1224.857217][T16100] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1224.941481][T20733] team0: Port device team_slave_0 added [ 1224.985778][T20733] team0: Port device team_slave_1 added [ 1225.110696][T20733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.150387][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.280252][T20733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.366455][T20733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.401616][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.511493][T20733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.724538][T20733] hsr_slave_0: entered promiscuous mode [ 1225.745892][T20733] hsr_slave_1: entered promiscuous mode [ 1225.815771][T20733] debugfs: 'hsr0' already exists in 'hsr' [ 1225.822082][T20733] Cannot create hsr debugfs directory [ 1225.985912][T16100] Bluetooth: hci7: command tx timeout [ 1226.491306][T20767] chnl_net:caif_netlink_parms(): no params data found [ 1226.818156][T20783] netlink: 'syz.7.2999': attribute type 4 has an invalid length. [ 1226.865768][T20783] netlink: 314 bytes leftover after parsing attributes in process `syz.7.2999'. [ 1226.946998][T16100] Bluetooth: hci8: command tx timeout [ 1227.046681][T20789] FAULT_INJECTION: forcing a failure. [ 1227.046681][T20789] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.150386][T20789] CPU: 0 UID: 0 PID: 20789 Comm: syz.7.2999 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1227.150428][T20789] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1227.150439][T20789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1227.150451][T20789] Call Trace: [ 1227.150458][T20789] [ 1227.150466][T20789] dump_stack_lvl+0x100/0x190 [ 1227.150500][T20789] should_fail_ex.cold+0x5/0xa [ 1227.150522][T20789] ? constrain_params_by_rules+0x175/0xcc0 [ 1227.150550][T20789] should_failslab+0xc2/0x120 [ 1227.150572][T20789] __kmalloc_noprof+0xe0/0x850 [ 1227.150605][T20789] constrain_params_by_rules+0x175/0xcc0 [ 1227.150633][T20789] ? arch_stack_walk+0xa6/0xf0 [ 1227.150660][T20789] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1227.150687][T20789] ? stack_trace_save+0x8e/0xc0 [ 1227.150710][T20789] ? kfree+0x1f6/0x6b0 [ 1227.150733][T20789] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 1227.150763][T20789] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1227.150786][T20789] ? snd_pcm_oss_sync+0x265/0x840 [ 1227.150809][T20789] ? snd_pcm_oss_release+0x238/0x300 [ 1227.150831][T20789] ? __fput+0x3ff/0xb40 [ 1227.150852][T20789] ? task_work_run+0x150/0x240 [ 1227.150877][T20789] ? exit_to_user_mode_loop+0x100/0x4a0 [ 1227.150903][T20789] ? snd_interval_refine+0x2d0/0x580 [ 1227.150924][T20789] snd_pcm_hw_refine+0x7e7/0xad0 [ 1227.150978][T20789] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1227.151027][T20789] snd_pcm_hw_param_last+0x2b2/0x660 [ 1227.151056][T20789] snd_pcm_hw_param_near.constprop.0+0x546/0x850 [ 1227.151085][T20789] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1227.151111][T20789] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 1227.151138][T20789] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 1227.151169][T20789] snd_pcm_oss_change_params_locked+0x193a/0x39f0 [ 1227.151206][T20789] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1227.151232][T20789] ? locks_remove_posix+0xff/0x500 [ 1227.151255][T20789] ? __pfx___mutex_lock+0x10/0x10 [ 1227.151287][T20789] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1227.151314][T20789] snd_pcm_oss_sync+0x265/0x840 [ 1227.151341][T20789] snd_pcm_oss_release+0x238/0x300 [ 1227.151366][T20789] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1227.151392][T20789] __fput+0x3ff/0xb40 [ 1227.151419][T20789] task_work_run+0x150/0x240 [ 1227.151447][T20789] ? __pfx_task_work_run+0x10/0x10 [ 1227.151481][T20789] exit_to_user_mode_loop+0x100/0x4a0 [ 1227.151509][T20789] do_syscall_64+0x668/0xf80 [ 1227.151527][T20789] ? clear_bhb_loop+0x40/0x90 [ 1227.151550][T20789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.151569][T20789] RIP: 0033:0x7f9e5559c819 [ 1227.151586][T20789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.151604][T20789] RSP: 002b:00007f9e533f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1227.151622][T20789] RAX: 0000000000000000 RBX: 00007f9e55816270 RCX: 00007f9e5559c819 [ 1227.151634][T20789] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000002 [ 1227.151645][T20789] RBP: 00007f9e55632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1227.151655][T20789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.151666][T20789] R13: 00007f9e55816308 R14: 00007f9e55816270 R15: 00007ffeec977ca8 [ 1227.151688][T20789] [ 1228.224066][T16100] Bluetooth: hci7: command tx timeout [ 1228.670039][T20733] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1228.758227][T20767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.765387][T20767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.800717][T20767] bridge_slave_0: entered allmulticast mode [ 1228.828501][T20767] bridge_slave_0: entered promiscuous mode [ 1228.862277][T20767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.884584][T20767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.913358][T20767] bridge_slave_1: entered allmulticast mode [ 1228.938191][T20767] bridge_slave_1: entered promiscuous mode [ 1228.965767][T20733] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1229.036583][T16100] Bluetooth: hci8: command tx timeout [ 1229.099362][T20733] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1229.233521][T20733] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1229.275128][T20767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.353238][T20767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.528524][T20767] team0: Port device team_slave_0 added [ 1229.573633][T20767] team0: Port device team_slave_1 added [ 1229.704323][T20767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.737819][T20767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.864513][T20767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.964912][T20767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.990028][T20767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.095100][T20767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.304324][T20733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.312582][T16100] Bluetooth: hci7: command tx timeout [ 1230.436846][T20733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.506980][T20767] hsr_slave_0: entered promiscuous mode [ 1230.539771][T20767] hsr_slave_1: entered promiscuous mode [ 1230.579235][T20767] debugfs: 'hsr0' already exists in 'hsr' [ 1230.615801][T20767] Cannot create hsr debugfs directory [ 1230.895144][T15181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.902821][T15181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.972556][T15181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.979922][T15181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.114522][T16100] Bluetooth: hci8: command tx timeout [ 1232.180180][T20767] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1232.259823][T20767] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1232.323465][T20767] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1232.400536][T20767] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1232.537717][T20733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.747493][T20829] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3006'. [ 1232.854529][T20767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.992915][T20767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.083132][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.090328][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.170732][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.177989][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.199009][T16100] Bluetooth: hci8: command tx timeout [ 1233.434004][T20767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1233.804865][T20733] veth0_vlan: entered promiscuous mode [ 1233.875761][T20733] veth1_vlan: entered promiscuous mode [ 1234.053140][T20733] veth0_macvtap: entered promiscuous mode [ 1234.107774][T20733] veth1_macvtap: entered promiscuous mode [ 1234.223772][T20733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.314754][T20733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.365355][T20767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.458776][T17919] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.502125][T17919] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.588998][T17919] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.649688][T17919] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.934323][T14998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.993796][T14998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.206432][ T6267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.244378][ T6267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.493508][T20863] FAULT_INJECTION: forcing a failure. [ 1235.493508][T20863] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.588424][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.7.3008 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1235.588465][T20863] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1235.588476][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1235.588487][T20863] Call Trace: [ 1235.588494][T20863] [ 1235.588502][T20863] dump_stack_lvl+0x100/0x190 [ 1235.588535][T20863] should_fail_ex.cold+0x5/0xa [ 1235.588558][T20863] should_failslab+0xc2/0x120 [ 1235.588580][T20863] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1235.588609][T20863] ? __proc_create+0x2cb/0x8c0 [ 1235.588633][T20863] __proc_create+0x2cb/0x8c0 [ 1235.588652][T20863] ? __pfx___proc_create+0x10/0x10 [ 1235.588671][T20863] ? _raw_write_unlock+0x28/0x50 [ 1235.588696][T20863] proc_create_reg+0x75/0x170 [ 1235.588718][T20863] proc_create_net_data+0x8e/0x1c0 [ 1235.588739][T20863] ? __pfx_proc_create_net_data+0x10/0x10 [ 1235.588758][T20863] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1235.588785][T20863] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1235.588814][T20863] ? __pfx_dev_mc_net_init+0x10/0x10 [ 1235.588848][T20863] dev_mc_net_init+0x50/0x80 [ 1235.588873][T20863] ops_init+0x1e2/0x5f0 [ 1235.588895][T20863] setup_net+0x118/0x3a0 [ 1235.588914][T20863] ? __pfx_setup_net+0x10/0x10 [ 1235.588931][T20863] ? lockdep_init_map_type+0x5c/0x250 [ 1235.588958][T20863] ? mutex_init_lockep+0x110/0x150 [ 1235.588988][T20863] copy_net_ns+0x46f/0x7c0 [ 1235.589011][T20863] create_new_namespaces+0x3ea/0xac0 [ 1235.589037][T20863] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1235.589060][T20863] ksys_unshare+0x473/0xad0 [ 1235.589087][T20863] ? __pfx_ksys_unshare+0x10/0x10 [ 1235.589119][T20863] __x64_sys_unshare+0x31/0x40 [ 1235.589143][T20863] do_syscall_64+0x106/0xf80 [ 1235.589162][T20863] ? clear_bhb_loop+0x40/0x90 [ 1235.589190][T20863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.589209][T20863] RIP: 0033:0x7f9e5559c819 [ 1235.589226][T20863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.589243][T20863] RSP: 002b:00007f9e5639b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1235.589262][T20863] RAX: ffffffffffffffda RBX: 00007f9e55816090 RCX: 00007f9e5559c819 [ 1235.589274][T20863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1235.589285][T20863] RBP: 00007f9e55632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1235.589297][T20863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.589308][T20863] R13: 00007f9e55816128 R14: 00007f9e55816090 R15: 00007ffeec977ca8 [ 1235.589332][T20863] [ 1236.236606][T20767] veth0_vlan: entered promiscuous mode [ 1236.375933][T20876] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1236.422801][T20767] veth1_vlan: entered promiscuous mode [ 1236.610838][T20767] veth0_macvtap: entered promiscuous mode [ 1236.649311][T20767] veth1_macvtap: entered promiscuous mode [ 1236.796685][T20767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.855249][T20767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.917462][T15181] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.957654][T15181] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.031607][T20884] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3013'. [ 1237.154186][T15181] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.187420][T15181] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.540857][ T6267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.570876][ T6267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.753953][T14998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.797757][T14998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.811251][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.820087][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.874224][T20910] netlink: 'syz.8.3018': attribute type 11 has an invalid length. [ 1238.925575][T20910] netlink: 'syz.8.3018': attribute type 11 has an invalid length. [ 1238.985990][T20910] netlink: 'syz.8.3018': attribute type 11 has an invalid length. [ 1239.909487][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3023'. [ 1240.598874][T20945] netlink: 'syz.8.3028': attribute type 11 has an invalid length. [ 1240.644427][T20945] netlink: 'syz.8.3028': attribute type 11 has an invalid length. [ 1240.685267][T20945] netlink: 'syz.8.3028': attribute type 11 has an invalid length. [ 1241.334634][T20956] vivid-007: ================= START STATUS ================= [ 1241.391375][T20956] vivid-007: Generate PTS: true [ 1241.432028][T20956] vivid-007: Generate SCR: true [ 1241.459799][T20956] tpg source WxH: 320x240 (Y'CbCr) [ 1241.491926][T20956] tpg field: 1 [ 1241.543758][T20956] tpg crop: (0,0)/320x240 [ 1241.579737][T20956] tpg compose: (0,0)/320x240 [ 1241.640750][T20956] tpg colorspace: 8 [ 1241.685877][T20956] tpg transfer function: 0/0 [ 1241.788570][T20956] tpg Y'CbCr encoding: 0/0 [ 1241.816993][T20956] tpg quantization: 0/0 [ 1241.892861][T20956] tpg RGB range: 0/2 [ 1241.957390][T20956] vivid-007: ================== END STATUS ================== [ 1242.124961][T20969] netlink: 'syz.8.3032': attribute type 4 has an invalid length. [ 1242.575575][T20990] nvme_fcloop: unknown parameter or missing value '0' [ 1243.471801][T21012] FAULT_INJECTION: forcing a failure. [ 1243.471801][T21012] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1243.515847][T21003] FAULT_INJECTION: forcing a failure. [ 1243.515847][T21003] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1243.576686][T21012] CPU: 0 UID: 0 PID: 21012 Comm: syz.7.3039 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1243.576730][T21012] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1243.576741][T21012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1243.576752][T21012] Call Trace: [ 1243.576759][T21012] [ 1243.576767][T21012] dump_stack_lvl+0x100/0x190 [ 1243.576802][T21012] should_fail_ex.cold+0x5/0xa [ 1243.576821][T21012] ? prepare_alloc_pages+0x16d/0x5f0 [ 1243.576847][T21012] should_fail_alloc_page+0xeb/0x140 [ 1243.576870][T21012] prepare_alloc_pages+0x1f0/0x5f0 [ 1243.576896][T21012] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1243.576932][T21012] ? __lock_acquire+0x4a5/0x2630 [ 1243.576959][T21012] ? __lock_acquire+0x4a5/0x2630 [ 1243.576986][T21012] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1243.577027][T21012] ? __lock_acquire+0x4a5/0x2630 [ 1243.577062][T21012] ? find_held_lock+0x2b/0x80 [ 1243.577080][T21012] ? is_bpf_text_address+0x8a/0x1a0 [ 1243.577109][T21012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1243.577131][T21012] ? policy_nodemask+0xed/0x4f0 [ 1243.577156][T21012] alloc_pages_mpol+0x1fb/0x550 [ 1243.577177][T21012] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1243.577198][T21012] ? arch_stack_walk+0xa6/0xf0 [ 1243.577222][T21012] folio_alloc_mpol_noprof+0x36/0x340 [ 1243.577248][T21012] shmem_alloc_folio+0x135/0x160 [ 1243.577274][T21012] shmem_alloc_and_add_folio+0x371/0xd40 [ 1243.577314][T21012] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1243.577345][T21012] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1243.577380][T21012] shmem_get_folio_gfp+0x6ab/0x1900 [ 1243.577414][T21012] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1243.577444][T21012] ? filemap_map_pages+0xe69/0x2020 [ 1243.577476][T21012] shmem_fault+0x1f9/0xa20 [ 1243.577504][T21012] ? __lock_acquire+0x4a5/0x2630 [ 1243.577528][T21012] ? __pfx_shmem_fault+0x10/0x10 [ 1243.577560][T21012] ? rcu_is_watching+0x12/0xc0 [ 1243.577589][T21012] ? __pfx_filemap_map_pages+0x10/0x10 [ 1243.577623][T21012] __do_fault+0x10d/0x550 [ 1243.577645][T21012] do_fault+0xabb/0x18e0 [ 1243.577667][T21012] ? __pmd_alloc+0x3fb/0x950 [ 1243.577691][T21012] __handle_mm_fault+0x1815/0x2b60 [ 1243.577721][T21012] ? mt_find+0x45e/0x8e0 [ 1243.577742][T21012] ? __pfx___handle_mm_fault+0x10/0x10 [ 1243.577769][T21012] ? __pfx_mt_find+0x10/0x10 [ 1243.577801][T21012] ? find_vma+0xbf/0x140 [ 1243.577819][T21012] ? __pfx_find_vma+0x10/0x10 [ 1243.577841][T21012] handle_mm_fault+0x36d/0xa20 [ 1243.577872][T21012] do_user_addr_fault+0x74c/0x12f0 [ 1243.577899][T21012] exc_page_fault+0x6f/0xd0 [ 1243.577918][T21012] asm_exc_page_fault+0x26/0x30 [ 1243.577937][T21012] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1243.577963][T21012] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1243.577980][T21012] RSP: 0018:ffffc90004c5fe38 EFLAGS: 00050202 [ 1243.578004][T21012] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 1243.578016][T21012] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004c5fe90 [ 1243.578026][T21012] RBP: 000000000000000c R08: 0000000000000001 R09: fffff5200098bfd3 [ 1243.578037][T21012] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1243.578047][T21012] R13: ffffc90004c5fe90 R14: 0000000000000001 R15: 0000000000000003 [ 1243.578071][T21012] _copy_from_user+0x98/0xd0 [ 1243.578097][T21012] __x64_sys_epoll_ctl+0x131/0x1e0 [ 1243.578121][T21012] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1243.578149][T21012] do_syscall_64+0x106/0xf80 [ 1243.578167][T21012] ? clear_bhb_loop+0x40/0x90 [ 1243.578190][T21012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.578210][T21012] RIP: 0033:0x7f9e5559c819 [ 1243.578225][T21012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.578242][T21012] RSP: 002b:00007f9e563bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1243.578259][T21012] RAX: ffffffffffffffda RBX: 00007f9e55815fa0 RCX: 00007f9e5559c819 [ 1243.578271][T21012] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000003 [ 1243.578282][T21012] RBP: 00007f9e55632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1243.578293][T21012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.578304][T21012] R13: 00007f9e55816038 R14: 00007f9e55815fa0 R15: 00007ffeec977ca8 [ 1243.578327][T21012] [ 1244.046015][T21003] CPU: 0 UID: 0 PID: 21003 Comm: syz.8.3037 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1244.046058][T21003] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1244.046069][T21003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1244.046082][T21003] Call Trace: [ 1244.046088][T21003] [ 1244.046096][T21003] dump_stack_lvl+0x100/0x190 [ 1244.046129][T21003] should_fail_ex.cold+0x5/0xa [ 1244.046152][T21003] get_futex_key+0x1d2/0x1620 [ 1244.046179][T21003] ? __pfx_get_futex_key+0x10/0x10 [ 1244.046210][T21003] futex_wake+0xea/0x530 [ 1244.046241][T21003] ? __pfx_futex_wake+0x10/0x10 [ 1244.046272][T21003] ? putname+0xb1/0x110 [ 1244.046292][T21003] ? kmem_cache_free+0x124/0x6a0 [ 1244.046323][T21003] do_futex+0x32b/0x350 [ 1244.046348][T21003] ? __pfx_do_futex+0x10/0x10 [ 1244.046371][T21003] ? __pfx_do_sys_openat2+0x10/0x10 [ 1244.046402][T21003] __x64_sys_futex+0x34f/0x4d0 [ 1244.046428][T21003] ? __x64_sys_openat+0x12d/0x210 [ 1244.046454][T21003] ? __pfx___x64_sys_futex+0x10/0x10 [ 1244.046488][T21003] do_syscall_64+0x106/0xf80 [ 1244.046507][T21003] ? clear_bhb_loop+0x40/0x90 [ 1244.046529][T21003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.046549][T21003] RIP: 0033:0x7fd7c6f9c819 [ 1244.046565][T21003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.046583][T21003] RSP: 002b:00007fd7c7e7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1244.046602][T21003] RAX: ffffffffffffffda RBX: 00007fd7c7215fa8 RCX: 00007fd7c6f9c819 [ 1244.046614][T21003] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd7c7215fac [ 1244.046625][T21003] RBP: 00007fd7c7215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.046636][T21003] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1244.046652][T21003] R13: 00007fd7c7216038 R14: 00007fffc8651800 R15: 00007fffc86518e8 [ 1244.046676][T21003] [ 1245.115621][T21021] FAULT_INJECTION: forcing a failure. [ 1245.115621][T21021] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.155303][T21021] CPU: 0 UID: 0 PID: 21021 Comm: syz.7.3048 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1245.155346][T21021] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1245.155357][T21021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1245.155368][T21021] Call Trace: [ 1245.155375][T21021] [ 1245.155383][T21021] dump_stack_lvl+0x100/0x190 [ 1245.155416][T21021] should_fail_ex.cold+0x5/0xa [ 1245.155439][T21021] should_failslab+0xc2/0x120 [ 1245.155461][T21021] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1245.155490][T21021] ? ptlock_alloc+0x1f/0x70 [ 1245.155520][T21021] ptlock_alloc+0x1f/0x70 [ 1245.155545][T21021] pte_alloc_one+0x82/0x3d0 [ 1245.155567][T21021] do_fault+0x88e/0x18e0 [ 1245.155588][T21021] ? __pmd_alloc+0x3fb/0x950 [ 1245.155613][T21021] __handle_mm_fault+0x1815/0x2b60 [ 1245.155642][T21021] ? mt_find+0x45e/0x8e0 [ 1245.155664][T21021] ? __pfx___handle_mm_fault+0x10/0x10 [ 1245.155688][T21021] ? __pfx_mt_find+0x10/0x10 [ 1245.155747][T21021] ? find_vma+0xbf/0x140 [ 1245.155766][T21021] ? __pfx_find_vma+0x10/0x10 [ 1245.155788][T21021] handle_mm_fault+0x36d/0xa20 [ 1245.155822][T21021] do_user_addr_fault+0x74c/0x12f0 [ 1245.155848][T21021] exc_page_fault+0x6f/0xd0 [ 1245.155867][T21021] asm_exc_page_fault+0x26/0x30 [ 1245.155885][T21021] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1245.155911][T21021] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1245.155929][T21021] RSP: 0018:ffffc90004b8fe38 EFLAGS: 00050202 [ 1245.155945][T21021] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 1245.155956][T21021] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004b8fe90 [ 1245.155967][T21021] RBP: 000000000000000c R08: 0000000000000001 R09: fffff52000971fd3 [ 1245.155978][T21021] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1245.155988][T21021] R13: ffffc90004b8fe90 R14: 0000000000000001 R15: 0000000000000006 [ 1245.156010][T21021] _copy_from_user+0x98/0xd0 [ 1245.156035][T21021] __x64_sys_epoll_ctl+0x131/0x1e0 [ 1245.156058][T21021] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1245.156086][T21021] do_syscall_64+0x106/0xf80 [ 1245.156104][T21021] ? clear_bhb_loop+0x40/0x90 [ 1245.156126][T21021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.156145][T21021] RIP: 0033:0x7f9e5559c819 [ 1245.156161][T21021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.156178][T21021] RSP: 002b:00007f9e563bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1245.156194][T21021] RAX: ffffffffffffffda RBX: 00007f9e55815fa0 RCX: 00007f9e5559c819 [ 1245.156206][T21021] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 1245.156216][T21021] RBP: 00007f9e55632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1245.156227][T21021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.156238][T21021] R13: 00007f9e55816038 R14: 00007f9e55815fa0 R15: 00007ffeec977ca8 [ 1245.156261][T21021] [ 1246.873143][T21035] netlink: 'syz.9.3042': attribute type 4 has an invalid length. [ 1246.924773][T21035] netlink: 314 bytes leftover after parsing attributes in process `syz.9.3042'. [ 1247.137538][T21039] FAULT_INJECTION: forcing a failure. [ 1247.137538][T21039] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.176875][T21043] FAULT_INJECTION: forcing a failure. [ 1247.176875][T21043] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.264032][T21043] CPU: 0 UID: 0 PID: 21043 Comm: syz.5.3044 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1247.264074][T21043] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1247.264085][T21043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1247.264096][T21043] Call Trace: [ 1247.264103][T21043] [ 1247.264110][T21043] dump_stack_lvl+0x100/0x190 [ 1247.264146][T21043] should_fail_ex.cold+0x5/0xa [ 1247.264168][T21043] should_failslab+0xc2/0x120 [ 1247.264190][T21043] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1247.264220][T21043] ? sock_alloc_inode+0x25/0x1c0 [ 1247.264244][T21043] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1247.264266][T21043] sock_alloc_inode+0x25/0x1c0 [ 1247.264286][T21043] alloc_inode+0x68/0x250 [ 1247.264313][T21043] sock_alloc+0x44/0x280 [ 1247.264331][T21043] ? security_socket_create+0x7f/0x250 [ 1247.264353][T21043] __sock_create+0xc2/0x860 [ 1247.264379][T21043] __sys_socket+0x14d/0x260 [ 1247.264403][T21043] ? __pfx___sys_socket+0x10/0x10 [ 1247.264434][T21043] __x64_sys_socket+0x72/0xb0 [ 1247.264457][T21043] ? lockdep_hardirqs_on+0x78/0x100 [ 1247.264481][T21043] do_syscall_64+0x106/0xf80 [ 1247.264499][T21043] ? clear_bhb_loop+0x40/0x90 [ 1247.264522][T21043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.264541][T21043] RIP: 0033:0x7f513299c819 [ 1247.264557][T21043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.264576][T21043] RSP: 002b:00007f5133794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1247.264594][T21043] RAX: ffffffffffffffda RBX: 00007f5132c15fa0 RCX: 00007f513299c819 [ 1247.264606][T21043] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1247.264617][T21043] RBP: 00007f5132a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1247.264628][T21043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.264639][T21043] R13: 00007f5132c16038 R14: 00007f5132c15fa0 R15: 00007ffc836c6c58 [ 1247.264662][T21043] [ 1247.264693][T21043] socket: no more sockets [ 1247.538711][T21039] CPU: 0 UID: 0 PID: 21039 Comm: syz.9.3042 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1247.538756][T21039] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1247.538766][T21039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1247.538778][T21039] Call Trace: [ 1247.538785][T21039] [ 1247.538793][T21039] dump_stack_lvl+0x100/0x190 [ 1247.538826][T21039] should_fail_ex.cold+0x5/0xa [ 1247.538848][T21039] ? constrain_params_by_rules+0x175/0xcc0 [ 1247.538876][T21039] should_failslab+0xc2/0x120 [ 1247.538898][T21039] __kmalloc_noprof+0xe0/0x850 [ 1247.538931][T21039] constrain_params_by_rules+0x175/0xcc0 [ 1247.538959][T21039] ? arch_stack_walk+0xa6/0xf0 [ 1247.538986][T21039] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1247.539013][T21039] ? stack_trace_save+0x8e/0xc0 [ 1247.539036][T21039] ? kfree+0x1f6/0x6b0 [ 1247.539059][T21039] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 1247.539090][T21039] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1247.539113][T21039] ? snd_pcm_oss_sync+0x265/0x840 [ 1247.539136][T21039] ? snd_pcm_oss_release+0x238/0x300 [ 1247.539159][T21039] ? __fput+0x3ff/0xb40 [ 1247.539180][T21039] ? task_work_run+0x150/0x240 [ 1247.539205][T21039] ? exit_to_user_mode_loop+0x100/0x4a0 [ 1247.539230][T21039] ? snd_interval_refine+0x2d0/0x580 [ 1247.539251][T21039] snd_pcm_hw_refine+0x7e7/0xad0 [ 1247.539281][T21039] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1247.539322][T21039] snd_pcm_hw_param_last+0x2b2/0x660 [ 1247.539351][T21039] snd_pcm_hw_param_near.constprop.0+0x546/0x850 [ 1247.539379][T21039] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1247.539406][T21039] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 1247.539431][T21039] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 1247.539463][T21039] snd_pcm_oss_change_params_locked+0x193a/0x39f0 [ 1247.539498][T21039] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1247.539523][T21039] ? locks_remove_posix+0xff/0x500 [ 1247.539547][T21039] ? __pfx___mutex_lock+0x10/0x10 [ 1247.539579][T21039] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1247.539606][T21039] snd_pcm_oss_sync+0x265/0x840 [ 1247.539634][T21039] snd_pcm_oss_release+0x238/0x300 [ 1247.539658][T21039] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1247.539696][T21039] __fput+0x3ff/0xb40 [ 1247.539724][T21039] task_work_run+0x150/0x240 [ 1247.539758][T21039] ? __pfx_task_work_run+0x10/0x10 [ 1247.539793][T21039] exit_to_user_mode_loop+0x100/0x4a0 [ 1247.539820][T21039] do_syscall_64+0x668/0xf80 [ 1247.539839][T21039] ? clear_bhb_loop+0x40/0x90 [ 1247.539862][T21039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.539881][T21039] RIP: 0033:0x7f5c5899c819 [ 1247.539897][T21039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.539915][T21039] RSP: 002b:00007f5c598bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1247.539934][T21039] RAX: 0000000000000000 RBX: 00007f5c58c16270 RCX: 00007f5c5899c819 [ 1247.539946][T21039] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000002 [ 1247.539957][T21039] RBP: 00007f5c58a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1247.539968][T21039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.539978][T21039] R13: 00007f5c58c16308 R14: 00007f5c58c16270 R15: 00007ffee1406d98 [ 1247.540001][T21039] [ 1251.406779][T21083] i2c i2c-0: delete_device: Can't find device in list [ 1251.661736][T21086] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1251.803728][T21087] FAULT_INJECTION: forcing a failure. [ 1251.803728][T21087] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.883915][T21087] CPU: 0 UID: 0 PID: 21087 Comm: syz.9.3053 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1251.883959][T21087] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1251.883971][T21087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1251.883982][T21087] Call Trace: [ 1251.883989][T21087] [ 1251.883997][T21087] dump_stack_lvl+0x100/0x190 [ 1251.884032][T21087] should_fail_ex.cold+0x5/0xa [ 1251.884057][T21087] should_failslab+0xc2/0x120 [ 1251.884079][T21087] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1251.884109][T21087] ? __d_alloc+0x34/0xa80 [ 1251.884135][T21087] __d_alloc+0x34/0xa80 [ 1251.884159][T21087] d_alloc_pseudo+0x1c/0xc0 [ 1251.884187][T21087] alloc_file_pseudo+0xcf/0x230 [ 1251.884213][T21087] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1251.884263][T21087] __shmem_file_setup+0x221/0x490 [ 1251.884292][T21087] ? __pfx___shmem_file_setup+0x10/0x10 [ 1251.884322][T21087] ? vm_area_alloc+0x1f/0x160 [ 1251.884351][T21087] shmem_zero_setup+0x96/0x1b0 [ 1251.884371][T21087] __mmap_region+0x2198/0x29e0 [ 1251.884405][T21087] ? __pfx___mmap_region+0x10/0x10 [ 1251.884457][T21087] ? sched_clock+0x38/0x60 [ 1251.884492][T21087] ? lockdep_hardirqs_on+0x78/0x100 [ 1251.884511][T21087] ? finish_task_switch.isra.0+0x205/0xb80 [ 1251.884534][T21087] ? rcu_is_watching+0x12/0xc0 [ 1251.884588][T21087] ? rcu_is_watching+0x12/0xc0 [ 1251.884616][T21087] ? cap_capable+0x107/0x460 [ 1251.884639][T21087] mmap_region+0x180/0x3e0 [ 1251.884672][T21087] do_mmap+0xc63/0x12f0 [ 1251.884698][T21087] ? __pfx_do_mmap+0x10/0x10 [ 1251.884720][T21087] ? __pfx_down_write_killable+0x10/0x10 [ 1251.884749][T21087] vm_mmap_pgoff+0x29e/0x470 [ 1251.884775][T21087] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1251.884799][T21087] ? do_futex+0x192/0x350 [ 1251.884831][T21087] ? __pfx_do_futex+0x10/0x10 [ 1251.884860][T21087] ksys_mmap_pgoff+0xe1/0x650 [ 1251.884881][T21087] ? __x64_sys_futex+0x34f/0x4d0 [ 1251.884904][T21087] ? __x64_sys_futex+0x358/0x4d0 [ 1251.884930][T21087] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1251.884951][T21087] ? xfd_validate_state+0x129/0x190 [ 1251.884982][T21087] __x64_sys_mmap+0x125/0x190 [ 1251.885013][T21087] do_syscall_64+0x106/0xf80 [ 1251.885032][T21087] ? clear_bhb_loop+0x40/0x90 [ 1251.885054][T21087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.885074][T21087] RIP: 0033:0x7f5c5899c819 [ 1251.885090][T21087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.885108][T21087] RSP: 002b:00007f5c598ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1251.885126][T21087] RAX: ffffffffffffffda RBX: 00007f5c58c16090 RCX: 00007f5c5899c819 [ 1251.885139][T21087] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1251.885150][T21087] RBP: 00007f5c58a32c91 R08: 0000000000000401 R09: 0000000000008000 [ 1251.885161][T21087] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1251.885172][T21087] R13: 00007f5c58c16128 R14: 00007f5c58c16090 R15: 00007ffee1406d98 [ 1251.885194][T21087] [ 1253.281751][T21104] netlink: 'syz.8.3058': attribute type 4 has an invalid length. [ 1253.362731][T21104] netlink: 314 bytes leftover after parsing attributes in process `syz.8.3058'. [ 1253.488508][T21109] FAULT_INJECTION: forcing a failure. [ 1253.488508][T21109] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.591496][T21109] CPU: 0 UID: 0 PID: 21109 Comm: syz.8.3058 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1253.591540][T21109] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1253.591552][T21109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1253.591564][T21109] Call Trace: [ 1253.591571][T21109] [ 1253.591578][T21109] dump_stack_lvl+0x100/0x190 [ 1253.591611][T21109] should_fail_ex.cold+0x5/0xa [ 1253.591635][T21109] ? constrain_params_by_rules+0x175/0xcc0 [ 1253.591662][T21109] should_failslab+0xc2/0x120 [ 1253.591683][T21109] __kmalloc_noprof+0xe0/0x850 [ 1253.591716][T21109] constrain_params_by_rules+0x175/0xcc0 [ 1253.591744][T21109] ? arch_stack_walk+0xa6/0xf0 [ 1253.591771][T21109] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1253.591798][T21109] ? stack_trace_save+0x8e/0xc0 [ 1253.591821][T21109] ? kfree+0x1f6/0x6b0 [ 1253.591851][T21109] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 1253.591882][T21109] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1253.591906][T21109] ? snd_pcm_oss_sync+0x265/0x840 [ 1253.591929][T21109] ? snd_pcm_oss_release+0x238/0x300 [ 1253.591952][T21109] ? __fput+0x3ff/0xb40 [ 1253.591974][T21109] ? task_work_run+0x150/0x240 [ 1253.592000][T21109] ? exit_to_user_mode_loop+0x100/0x4a0 [ 1253.592025][T21109] ? snd_interval_refine+0x2d0/0x580 [ 1253.592047][T21109] snd_pcm_hw_refine+0x7e7/0xad0 [ 1253.592080][T21109] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1253.592121][T21109] snd_pcm_hw_param_last+0x2b2/0x660 [ 1253.592150][T21109] snd_pcm_hw_param_near.constprop.0+0x546/0x850 [ 1253.592179][T21109] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1253.592206][T21109] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 1253.592231][T21109] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 1253.592262][T21109] snd_pcm_oss_change_params_locked+0x193a/0x39f0 [ 1253.592299][T21109] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1253.592324][T21109] ? locks_remove_posix+0xff/0x500 [ 1253.592347][T21109] ? __pfx___mutex_lock+0x10/0x10 [ 1253.592381][T21109] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1253.592408][T21109] snd_pcm_oss_sync+0x265/0x840 [ 1253.592437][T21109] snd_pcm_oss_release+0x238/0x300 [ 1253.592461][T21109] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1253.592486][T21109] __fput+0x3ff/0xb40 [ 1253.592514][T21109] task_work_run+0x150/0x240 [ 1253.592541][T21109] ? __pfx_task_work_run+0x10/0x10 [ 1253.592577][T21109] exit_to_user_mode_loop+0x100/0x4a0 [ 1253.592604][T21109] do_syscall_64+0x668/0xf80 [ 1253.592623][T21109] ? clear_bhb_loop+0x40/0x90 [ 1253.592645][T21109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.592664][T21109] RIP: 0033:0x7fd7c6f9c819 [ 1253.592680][T21109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.592697][T21109] RSP: 002b:00007fd7c7e19028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1253.592716][T21109] RAX: 0000000000000000 RBX: 00007fd7c7216270 RCX: 00007fd7c6f9c819 [ 1253.592728][T21109] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000002 [ 1253.592739][T21109] RBP: 00007fd7c7032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1253.592750][T21109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.592761][T21109] R13: 00007fd7c7216308 R14: 00007fd7c7216270 R15: 00007fffc86518e8 [ 1253.592785][T21109] [ 1261.172709][T21188] netlink: 'syz.5.3077': attribute type 11 has an invalid length. [ 1261.402261][T21191] vhci_hcd vhci_hcd.2: invalid port number 111 [ 1261.512764][T21191] vhci_hcd vhci_hcd.2: default hub control req: a356 va1b7 i006f l230 [ 1262.266106][T21193] nbd: couldn't find a device at index 35644 [ 1263.095602][T21221] sd 0:0:1:0: PR command failed: 1026 [ 1263.206531][T21221] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1263.263778][T21221] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1264.289055][T21213] random: crng reseeded on system resumption [ 1264.334963][T21241] FAULT_INJECTION: forcing a failure. [ 1264.334963][T21241] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.403511][T21241] CPU: 0 UID: 0 PID: 21241 Comm: syz.7.3087 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1264.403552][T21241] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1264.403563][T21241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1264.403581][T21241] Call Trace: [ 1264.403588][T21241] [ 1264.403596][T21241] dump_stack_lvl+0x100/0x190 [ 1264.403629][T21241] should_fail_ex.cold+0x5/0xa [ 1264.403652][T21241] should_failslab+0xc2/0x120 [ 1264.403684][T21241] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1264.403704][T21241] ? __split_page_owner+0x1f9/0x350 [ 1264.403724][T21241] ? __get_vm_area_node+0x101/0x330 [ 1264.403751][T21241] __get_vm_area_node+0x101/0x330 [ 1264.403778][T21241] __vmalloc_node_range_noprof+0x213/0x1530 [ 1264.403805][T21241] ? n_tty_open+0x1a/0x170 [ 1264.403834][T21241] ? n_tty_open+0x1a/0x170 [ 1264.403862][T21241] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1264.403888][T21241] ? __pfx___might_resched+0x10/0x10 [ 1264.403917][T21241] ? do_raw_spin_lock+0x128/0x260 [ 1264.403948][T21241] ? find_held_lock+0x2b/0x80 [ 1264.403965][T21241] ? n_tty_open+0x12b/0x170 [ 1264.403985][T21241] ? n_tty_open+0x12b/0x170 [ 1264.404007][T21241] ? n_tty_open+0x1a/0x170 [ 1264.404027][T21241] __vmalloc_node_noprof+0xad/0xf0 [ 1264.404051][T21241] ? n_tty_open+0x1a/0x170 [ 1264.404073][T21241] ? __pfx_n_tty_open+0x10/0x10 [ 1264.404094][T21241] n_tty_open+0x1a/0x170 [ 1264.404114][T21241] tty_ldisc_open+0xa2/0x120 [ 1264.404141][T21241] tty_ldisc_setup+0x87/0xf0 [ 1264.404169][T21241] tty_init_dev.part.0+0x1b5/0x470 [ 1264.404191][T21241] tty_init_dev+0x60/0x80 [ 1264.404211][T21241] ptmx_open+0x15e/0x3c0 [ 1264.404236][T21241] ? __pfx_ptmx_open+0x10/0x10 [ 1264.404260][T21241] chrdev_open+0x234/0x6a0 [ 1264.404281][T21241] ? __pfx_apparmor_file_open+0x10/0x10 [ 1264.404302][T21241] ? __pfx_chrdev_open+0x10/0x10 [ 1264.404324][T21241] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1264.404351][T21241] do_dentry_open+0x6d8/0x1660 [ 1264.404370][T21241] ? __pfx_chrdev_open+0x10/0x10 [ 1264.404396][T21241] vfs_open+0x82/0x3f0 [ 1264.404425][T21241] path_openat+0x208c/0x31a0 [ 1264.404454][T21241] ? __pfx_path_openat+0x10/0x10 [ 1264.404484][T21241] do_file_open+0x20e/0x430 [ 1264.404507][T21241] ? __pfx_do_file_open+0x10/0x10 [ 1264.404546][T21241] ? alloc_fd+0x476/0x790 [ 1264.404569][T21241] ? do_getname+0x191/0x390 [ 1264.404595][T21241] do_sys_openat2+0x10d/0x1e0 [ 1264.404621][T21241] ? __pfx_do_sys_openat2+0x10/0x10 [ 1264.404656][T21241] __x64_sys_openat+0x12d/0x210 [ 1264.404689][T21241] ? __pfx___x64_sys_openat+0x10/0x10 [ 1264.404724][T21241] do_syscall_64+0x106/0xf80 [ 1264.404743][T21241] ? clear_bhb_loop+0x40/0x90 [ 1264.404766][T21241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.404786][T21241] RIP: 0033:0x7f9e5559c819 [ 1264.404804][T21241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.404822][T21241] RSP: 002b:00007f9e563bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1264.404841][T21241] RAX: ffffffffffffffda RBX: 00007f9e55815fa0 RCX: 00007f9e5559c819 [ 1264.404853][T21241] RDX: 0000000000002a01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1264.404865][T21241] RBP: 00007f9e55632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1264.404876][T21241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.404886][T21241] R13: 00007f9e55816038 R14: 00007f9e55815fa0 R15: 00007ffeec977ca8 [ 1264.404910][T21241] [ 1266.296784][T21241] syz.7.3087: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1266.372714][T21241] CPU: 0 UID: 0 PID: 21241 Comm: syz.7.3087 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1266.372758][T21241] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1266.372769][T21241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1266.372780][T21241] Call Trace: [ 1266.372787][T21241] [ 1266.372794][T21241] dump_stack_lvl+0x100/0x190 [ 1266.372827][T21241] warn_alloc.cold+0x95/0x1c1 [ 1266.372860][T21241] ? __pfx_warn_alloc+0x10/0x10 [ 1266.372888][T21241] ? trace_kmalloc+0x101/0x130 [ 1266.372911][T21241] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 1266.372934][T21241] ? __kasan_kmalloc+0x8a/0xb0 [ 1266.372952][T21241] ? __get_vm_area_node+0x208/0x330 [ 1266.372980][T21241] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1266.373011][T21241] ? n_tty_open+0x1a/0x170 [ 1266.373039][T21241] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1266.373065][T21241] ? __pfx___might_resched+0x10/0x10 [ 1266.373093][T21241] ? do_raw_spin_lock+0x128/0x260 [ 1266.373122][T21241] ? find_held_lock+0x2b/0x80 [ 1266.373140][T21241] ? n_tty_open+0x12b/0x170 [ 1266.373159][T21241] ? n_tty_open+0x12b/0x170 [ 1266.373181][T21241] ? n_tty_open+0x1a/0x170 [ 1266.373200][T21241] __vmalloc_node_noprof+0xad/0xf0 [ 1266.373224][T21241] ? n_tty_open+0x1a/0x170 [ 1266.373245][T21241] ? __pfx_n_tty_open+0x10/0x10 [ 1266.373266][T21241] n_tty_open+0x1a/0x170 [ 1266.373287][T21241] tty_ldisc_open+0xa2/0x120 [ 1266.373314][T21241] tty_ldisc_setup+0x87/0xf0 [ 1266.373341][T21241] tty_init_dev.part.0+0x1b5/0x470 [ 1266.373363][T21241] tty_init_dev+0x60/0x80 [ 1266.373383][T21241] ptmx_open+0x15e/0x3c0 [ 1266.373414][T21241] ? __pfx_ptmx_open+0x10/0x10 [ 1266.373438][T21241] chrdev_open+0x234/0x6a0 [ 1266.373458][T21241] ? __pfx_apparmor_file_open+0x10/0x10 [ 1266.373480][T21241] ? __pfx_chrdev_open+0x10/0x10 [ 1266.373501][T21241] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1266.373527][T21241] do_dentry_open+0x6d8/0x1660 [ 1266.373547][T21241] ? __pfx_chrdev_open+0x10/0x10 [ 1266.373573][T21241] vfs_open+0x82/0x3f0 [ 1266.373600][T21241] path_openat+0x208c/0x31a0 [ 1266.373629][T21241] ? __pfx_path_openat+0x10/0x10 [ 1266.373658][T21241] do_file_open+0x20e/0x430 [ 1266.373681][T21241] ? __pfx_do_file_open+0x10/0x10 [ 1266.373719][T21241] ? alloc_fd+0x476/0x790 [ 1266.373745][T21241] ? do_getname+0x191/0x390 [ 1266.373772][T21241] do_sys_openat2+0x10d/0x1e0 [ 1266.373797][T21241] ? __pfx_do_sys_openat2+0x10/0x10 [ 1266.373831][T21241] __x64_sys_openat+0x12d/0x210 [ 1266.373858][T21241] ? __pfx___x64_sys_openat+0x10/0x10 [ 1266.373893][T21241] do_syscall_64+0x106/0xf80 [ 1266.373911][T21241] ? clear_bhb_loop+0x40/0x90 [ 1266.373934][T21241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.373954][T21241] RIP: 0033:0x7f9e5559c819 [ 1266.373971][T21241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.373989][T21241] RSP: 002b:00007f9e563bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1266.374008][T21241] RAX: ffffffffffffffda RBX: 00007f9e55815fa0 RCX: 00007f9e5559c819 [ 1266.374021][T21241] RDX: 0000000000002a01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1266.374032][T21241] RBP: 00007f9e55632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1266.374043][T21241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.374054][T21241] R13: 00007f9e55816038 R14: 00007f9e55815fa0 R15: 00007ffeec977ca8 [ 1266.374078][T21241] [ 1266.374143][T21241] Mem-Info: [ 1268.114550][T21241] active_anon:37633 inactive_anon:100 isolated_anon:0 [ 1268.114550][T21241] active_file:4729 inactive_file:55109 isolated_file:0 [ 1268.114550][T21241] unevictable:768 dirty:5 writeback:0 [ 1268.114550][T21241] slab_reclaimable:13611 slab_unreclaimable:118793 [ 1268.114550][T21241] mapped:71269 shmem:25081 pagetables:2162 [ 1268.114550][T21241] sec_pagetables:0 bounce:0 [ 1268.114550][T21241] kernel_misc_reclaimable:0 [ 1268.114550][T21241] free:1197366 free_pcp:11425 free_cma:0 [ 1268.400857][T21241] Node 0 active_anon:155004kB inactive_anon:400kB active_file:17940kB inactive_file:219116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:287128kB dirty:12kB writeback:0kB shmem:103052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15680kB pagetables:8472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1268.548527][T21241] Node 1 active_anon:0kB inactive_anon:0kB active_file:976kB inactive_file:1320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:2160kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1268.702323][T21241] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.815477][T21241] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1268.835923][T21241] Node 0 DMA32 free:832132kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:159944kB inactive_anon:400kB active_file:17940kB inactive_file:219116kB unevictable:1536kB writepending:220kB zspages:948kB present:3129332kB managed:2537284kB mlocked:0kB bounce:0kB free_pcp:36796kB local_pcp:36796kB free_cma:0kB [ 1268.975911][T21241] lowmem_reserve[]: 0 0 1 1 1 [ 1268.999352][T21241] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.138902][T21241] lowmem_reserve[]: 0 0 0 0 0 [ 1269.159536][T21241] Node 1 Normal free:3931928kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:976kB inactive_file:1320kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10768kB local_pcp:10768kB free_cma:0kB [ 1269.322155][T21241] lowmem_reserve[]: 0 0 0 0 0 [ 1269.345969][T21241] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1269.393411][T21241] Node 0 DMA32: 304*4kB (U) 4274*8kB (UM) 2579*16kB (U) 1539*32kB (UM) 1274*64kB (UME) 731*128kB (UME) 522*256kB (UME) 267*512kB (UME) 118*1024kB (UM) 2*2048kB (ME) 31*4096kB (M) = 823264kB [ 1269.466627][T21241] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1269.506014][T21241] Node 1 Normal: 16*4kB (UM) 25*8kB (UM) 33*16kB (UM) 30*32kB (UM) 15*64kB (UM) 5*128kB (UM) 4*256kB (U) 5*512kB (UM) 1*1024kB (U) 2*2048kB (M) 957*4096kB (UM) = 3931928kB [ 1269.598360][T21241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.628315][T21241] Node 0 hugepages_total=5 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1269.668114][T21241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.700780][T21241] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1269.737241][T21241] 90186 total pagecache pages [ 1269.750330][T21241] 40 pages in swap cache [ 1269.776394][T21241] Free swap = 123496kB [ 1269.788220][T21241] Total swap = 124996kB [ 1269.806804][T21241] 2097051 pages RAM [ 1269.819077][T21241] 0 pages HighMem/MovableOnly [ 1269.851693][T21241] 430852 pages reserved [ 1269.857944][T21241] 0 pages cma reserved [ 1269.874986][T21241] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1270.475964][T21287] netlink: 'syz.7.3097': attribute type 11 has an invalid length. [ 1270.523977][T21287] netlink: 'syz.7.3097': attribute type 11 has an invalid length. [ 1270.572904][T21287] netlink: 'syz.7.3097': attribute type 11 has an invalid length. [ 1270.614150][T21287] netlink: 'syz.7.3097': attribute type 11 has an invalid length. [ 1271.916266][T21307] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3102'. [ 1273.955085][T21335] netlink: 'syz.8.3107': attribute type 11 has an invalid length. [ 1274.066585][T21335] netlink: 'syz.8.3107': attribute type 11 has an invalid length. [ 1274.246855][T21335] netlink: 'syz.8.3107': attribute type 11 has an invalid length. [ 1274.317141][T21335] netlink: 'syz.8.3107': attribute type 11 has an invalid length. [ 1274.432363][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3108'. [ 1274.480146][T21341] netlink: 25 bytes leftover after parsing attributes in process `syz.7.3108'. [ 1275.143328][T21355] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3112'. [ 1276.337114][T21375] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 1277.783832][T21394] netlink: 'syz.8.3118': attribute type 11 has an invalid length. [ 1277.895793][T21394] netlink: 'syz.8.3118': attribute type 11 has an invalid length. [ 1278.023565][T21394] netlink: 'syz.8.3118': attribute type 11 has an invalid length. [ 1278.188631][T21394] netlink: 'syz.8.3118': attribute type 11 has an invalid length. [ 1278.684132][T21406] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 1279.368948][T21422] program syz.5.3127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1279.662545][T20735] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1279.669670][T20735] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1279.670816][T20735] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1279.671422][T20735] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1279.672374][T20735] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1280.716699][T21426] chnl_net:caif_netlink_parms(): no params data found [ 1281.580577][T21426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.628352][T21426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.667573][T21426] bridge_slave_0: entered allmulticast mode [ 1281.707875][T21426] bridge_slave_0: entered promiscuous mode [ 1281.754154][T21426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.782711][T20735] Bluetooth: hci9: command tx timeout [ 1281.825374][T21426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.876980][T21426] bridge_slave_1: entered allmulticast mode [ 1281.917620][T21426] bridge_slave_1: entered promiscuous mode [ 1282.218613][T21463] FAULT_INJECTION: forcing a failure. [ 1282.218613][T21463] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.306925][T21463] CPU: 0 UID: 0 PID: 21463 Comm: syz.7.3134 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1282.306968][T21463] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1282.306978][T21463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1282.306990][T21463] Call Trace: [ 1282.306997][T21463] [ 1282.307006][T21463] dump_stack_lvl+0x100/0x190 [ 1282.307039][T21463] should_fail_ex.cold+0x5/0xa [ 1282.307062][T21463] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1282.307098][T21463] should_failslab+0xc2/0x120 [ 1282.307120][T21463] __kmalloc_noprof+0xe0/0x850 [ 1282.307154][T21463] tomoyo_realpath_from_path+0xb6/0x690 [ 1282.307187][T21463] tomoyo_path_number_perm+0x23c/0x580 [ 1282.307211][T21463] ? tomoyo_path_number_perm+0x22e/0x580 [ 1282.307236][T21463] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1282.307281][T21463] ? find_held_lock+0x2b/0x80 [ 1282.307300][T21463] ? __fget_files+0x215/0x3d0 [ 1282.307317][T21463] ? hook_file_ioctl_common+0x146/0x410 [ 1282.307346][T21463] ? __fget_files+0x21f/0x3d0 [ 1282.307369][T21463] security_file_ioctl+0xd3/0x230 [ 1282.307394][T21463] __x64_sys_ioctl+0xb7/0x210 [ 1282.307424][T21463] do_syscall_64+0x106/0xf80 [ 1282.307443][T21463] ? clear_bhb_loop+0x40/0x90 [ 1282.307467][T21463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.307487][T21463] RIP: 0033:0x7f9e5559c819 [ 1282.307504][T21463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.307523][T21463] RSP: 002b:00007f9e563bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.307541][T21463] RAX: ffffffffffffffda RBX: 00007f9e55815fa0 RCX: 00007f9e5559c819 [ 1282.307553][T21463] RDX: 0000200000000040 RSI: 00000000c0386105 RDI: 0000000000000003 [ 1282.307565][T21463] RBP: 00007f9e563bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.307576][T21463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.307587][T21463] R13: 00007f9e55816038 R14: 00007f9e55815fa0 R15: 00007ffeec977ca8 [ 1282.307609][T21463] [ 1282.307618][T21463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1282.574824][T21426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.616601][T21426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.083545][T21426] team0: Port device team_slave_0 added [ 1283.091836][T21426] team0: Port device team_slave_1 added [ 1283.204879][T21426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.242540][T21426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.354621][T21426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.422714][T21426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.447903][T21426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.678982][T21426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.854212][T20735] Bluetooth: hci9: command tx timeout [ 1284.085915][T21426] hsr_slave_0: entered promiscuous mode [ 1284.121161][T21426] hsr_slave_1: entered promiscuous mode [ 1284.168826][T21426] debugfs: 'hsr0' already exists in 'hsr' [ 1284.199272][T21426] Cannot create hsr debugfs directory [ 1285.935342][T20735] Bluetooth: hci9: command tx timeout [ 1288.017295][T20735] Bluetooth: hci9: command tx timeout [ 1288.536597][T21426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1288.678278][T21426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1288.729294][T21426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1288.929899][T21426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1289.532386][T21426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.652771][T21426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.738617][T15178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.746001][T15178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.844434][T15178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.851807][T15178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.110664][T21426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.371493][T21426] veth0_vlan: entered promiscuous mode [ 1291.465639][T21426] veth1_vlan: entered promiscuous mode [ 1291.650794][T21426] veth0_macvtap: entered promiscuous mode [ 1291.729996][T21426] veth1_macvtap: entered promiscuous mode [ 1291.854865][T21426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.934730][T21426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.083007][T17925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.158451][T17925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.311109][T21562] FAULT_INJECTION: forcing a failure. [ 1294.311109][T21562] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.445411][T21562] CPU: 0 UID: 0 PID: 21562 Comm: syz.7.3143 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1294.445454][T21562] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1294.445464][T21562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1294.445475][T21562] Call Trace: [ 1294.445482][T21562] [ 1294.445490][T21562] dump_stack_lvl+0x100/0x190 [ 1294.445524][T21562] should_fail_ex.cold+0x5/0xa [ 1294.445547][T21562] ? tomoyo_encode2+0xfb/0x3c0 [ 1294.445573][T21562] should_failslab+0xc2/0x120 [ 1294.445595][T21562] __kmalloc_noprof+0xe0/0x850 [ 1294.445624][T21562] ? d_absolute_path+0x136/0x1b0 [ 1294.445655][T21562] tomoyo_encode2+0xfb/0x3c0 [ 1294.445685][T21562] tomoyo_encode+0x29/0x50 [ 1294.445711][T21562] tomoyo_realpath_from_path+0x18c/0x690 [ 1294.445744][T21562] tomoyo_path_number_perm+0x23c/0x580 [ 1294.445767][T21562] ? tomoyo_path_number_perm+0x22e/0x580 [ 1294.445792][T21562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1294.445842][T21562] ? find_held_lock+0x2b/0x80 [ 1294.445861][T21562] ? __fget_files+0x215/0x3d0 [ 1294.445878][T21562] ? hook_file_ioctl_common+0x146/0x410 [ 1294.445907][T21562] ? __fget_files+0x21f/0x3d0 [ 1294.445929][T21562] security_file_ioctl+0xd3/0x230 [ 1294.445954][T21562] __x64_sys_ioctl+0xb7/0x210 [ 1294.445984][T21562] do_syscall_64+0x106/0xf80 [ 1294.446003][T21562] ? clear_bhb_loop+0x40/0x90 [ 1294.446027][T21562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.446047][T21562] RIP: 0033:0x7f9e5559c819 [ 1294.446063][T21562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.446081][T21562] RSP: 002b:00007f9e563bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.446100][T21562] RAX: ffffffffffffffda RBX: 00007f9e55815fa0 RCX: 00007f9e5559c819 [ 1294.446113][T21562] RDX: 0000200000000040 RSI: 00000000c0386105 RDI: 0000000000000003 [ 1294.446124][T21562] RBP: 00007f9e563bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.446136][T21562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.446147][T21562] R13: 00007f9e55816038 R14: 00007f9e55815fa0 R15: 00007ffeec977ca8 [ 1294.446170][T21562] [ 1294.446187][T21562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1294.939486][T17925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.981182][T17925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.731434][T16100] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1296.755657][T16100] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1296.764560][T16100] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1296.773363][T16100] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1296.781567][T16100] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1297.801351][T17927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.809421][T17927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.204173][T15174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.235602][T15174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.458075][T21590] netlink: 'syz.8.3148': attribute type 11 has an invalid length. [ 1298.526041][T21564] chnl_net:caif_netlink_parms(): no params data found [ 1298.533917][T21590] netlink: 'syz.8.3148': attribute type 11 has an invalid length. [ 1298.593270][T21590] netlink: 'syz.8.3148': attribute type 11 has an invalid length. [ 1298.662648][T21590] netlink: 'syz.8.3148': attribute type 11 has an invalid length. [ 1298.835404][T16100] Bluetooth: hci10: command tx timeout [ 1299.010522][T21598] netlink: 'syz.2.3125': attribute type 1 has an invalid length. [ 1299.056852][T21598] netlink: 198 bytes leftover after parsing attributes in process `syz.2.3125'. [ 1299.181747][T21564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.233565][T21564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.294056][T21564] bridge_slave_0: entered allmulticast mode [ 1299.347100][T21564] bridge_slave_0: entered promiscuous mode [ 1299.415226][T21564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.474282][T21564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.521595][T21564] bridge_slave_1: entered allmulticast mode [ 1299.583771][T21564] bridge_slave_1: entered promiscuous mode [ 1299.940831][T21564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.014924][T21564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.290139][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.299157][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.548204][T21564] team0: Port device team_slave_0 added [ 1300.617907][T21564] team0: Port device team_slave_1 added [ 1300.883216][T21564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.904855][T16100] Bluetooth: hci10: command tx timeout [ 1300.937165][T21564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.115207][T21564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.389314][T21564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.437886][T21564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.607020][T21564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.910945][T21564] hsr_slave_0: entered promiscuous mode [ 1301.977598][T21564] hsr_slave_1: entered promiscuous mode [ 1302.042654][T21564] debugfs: 'hsr0' already exists in 'hsr' [ 1302.088432][T21564] Cannot create hsr debugfs directory [ 1302.282713][T21652] FAULT_INJECTION: forcing a failure. [ 1302.282713][T21652] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.408050][T21652] CPU: 0 UID: 0 PID: 21652 Comm: syz.2.3155 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1302.408095][T21652] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1302.408106][T21652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1302.408119][T21652] Call Trace: [ 1302.408128][T21652] [ 1302.408135][T21652] dump_stack_lvl+0x100/0x190 [ 1302.408170][T21652] should_fail_ex.cold+0x5/0xa [ 1302.408192][T21652] ? __register_sysctl_table+0xbe4/0x1650 [ 1302.408213][T21652] should_failslab+0xc2/0x120 [ 1302.408234][T21652] __kmalloc_noprof+0xe0/0x850 [ 1302.408268][T21652] __register_sysctl_table+0xbe4/0x1650 [ 1302.408292][T21652] ? __pfx___register_sysctl_table+0x10/0x10 [ 1302.408314][T21652] ? is_module_address+0x69/0xf0 [ 1302.408343][T21652] ? register_net_sysctl_sz+0x222/0x430 [ 1302.408367][T21652] ? __asan_memcpy+0x3c/0x60 [ 1302.408396][T21652] sysctl_route_net_init+0x15e/0x2c0 [ 1302.408422][T21652] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 1302.408443][T21652] ops_init+0x1e2/0x5f0 [ 1302.408464][T21652] setup_net+0x118/0x3a0 [ 1302.408486][T21652] ? __pfx_setup_net+0x10/0x10 [ 1302.408506][T21652] ? lockdep_init_map_type+0x5c/0x250 [ 1302.408534][T21652] ? mutex_init_lockep+0x110/0x150 [ 1302.408567][T21652] copy_net_ns+0x46f/0x7c0 [ 1302.408589][T21652] create_new_namespaces+0x3ea/0xac0 [ 1302.408619][T21652] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1302.408650][T21652] ksys_unshare+0x473/0xad0 [ 1302.408676][T21652] ? __pfx_ksys_unshare+0x10/0x10 [ 1302.408710][T21652] __x64_sys_unshare+0x31/0x40 [ 1302.408736][T21652] do_syscall_64+0x106/0xf80 [ 1302.408756][T21652] ? clear_bhb_loop+0x40/0x90 [ 1302.408782][T21652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.408801][T21652] RIP: 0033:0x7f36efb9c819 [ 1302.408817][T21652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.408835][T21652] RSP: 002b:00007f36f0976028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1302.408872][T21652] RAX: ffffffffffffffda RBX: 00007f36efe15fa0 RCX: 00007f36efb9c819 [ 1302.408888][T21652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1302.408902][T21652] RBP: 00007f36efc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1302.408913][T21652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.408926][T21652] R13: 00007f36efe16038 R14: 00007f36efe15fa0 R15: 00007ffed32f93e8 [ 1302.408953][T21652] [ 1302.408962][T21652] sysctl could not get directory: /net/ipv4/route -12 [ 1303.064195][T16100] Bluetooth: hci10: command tx timeout [ 1303.812340][T21564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.531892][T21564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.029780][T21564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.146336][T16100] Bluetooth: hci10: command tx timeout [ 1305.862069][T21564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.287913][T21564] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1307.364045][T21564] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1307.510604][T21564] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1307.597497][T21564] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1308.157270][T21564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.288134][T21564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.385478][T17927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.392934][T17927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.559132][T17927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.566624][T17927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.720619][T21564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.990916][T21564] veth0_vlan: entered promiscuous mode [ 1310.080871][T21564] veth1_vlan: entered promiscuous mode [ 1310.284125][T21564] veth0_macvtap: entered promiscuous mode [ 1310.361982][T21564] veth1_macvtap: entered promiscuous mode [ 1310.500881][T21564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.670344][T21564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.901527][T17927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.973911][T17927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.148944][ T31] INFO: task syz-executor:17690 blocked for more than 143 seconds. [ 1311.157574][ T31] Tainted: G U W L XTNJ syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1311.212012][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1311.296078][ T31] task:syz-executor state:D stack:24200 pid:17690 tgid:17690 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1311.394049][ T31] Call Trace: [ 1311.433660][ T31] [ 1311.436659][ T31] __schedule+0xfee/0x6120 [ 1311.492216][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1311.523152][ T31] ? __pfx___schedule+0x10/0x10 [ 1311.581354][ T31] ? find_held_lock+0x2b/0x80 [ 1311.624634][ T31] ? schedule+0x2bf/0x390 [ 1311.656624][ T31] schedule+0xdd/0x390 [ 1311.697904][ T31] schedule_preempt_disabled+0x13/0x30 [ 1311.723636][ T31] __mutex_lock+0xc9a/0x1b90 [ 1311.760232][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1311.810188][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1311.831418][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1311.881304][ T31] ? net_generic+0xea/0x2a0 [ 1311.934641][ T31] ? net_generic+0xea/0x2a0 [ 1311.992808][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1312.048935][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1312.113496][ T31] nfsd_umount+0x3b/0x60 [ 1312.147175][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1312.177346][ T31] deactivate_super+0xe7/0x110 [ 1312.219140][ T31] cleanup_mnt+0x21f/0x450 [ 1312.223816][ T31] task_work_run+0x150/0x240 [ 1312.278441][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1312.294542][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 1312.329134][ T31] do_syscall_64+0x668/0xf80 [ 1312.333960][ T31] ? clear_bhb_loop+0x40/0x90 [ 1312.378198][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.420184][ T31] RIP: 0033:0x7f148099da57 [ 1312.431013][ T31] RSP: 002b:00007ffe7ceebe28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1312.469150][ T31] RAX: 0000000000000000 RBX: 00007f1480a32048 RCX: 00007f148099da57 [ 1312.510954][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7ceebee0 [ 1312.569371][ T31] RBP: 00007ffe7ceebee0 R08: 00007ffe7ceecee0 R09: 00000000ffffffff [ 1312.594905][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7ceecf70 [ 1312.643694][ T31] R13: 00007f1480a32048 R14: 0000000000118b59 R15: 00007ffe7ceecfb0 [ 1312.679294][ T31] [ 1312.695046][T17927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.817880][ T31] [ 1312.817880][ T31] Showing all locks held in the system: [ 1312.886344][T17927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.902912][ T31] 1 lock held by pool_workqueue_/3: [ 1312.908191][ T31] #0: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1313.048559][ T31] 1 lock held by khungtaskd/31: [ 1313.053509][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1313.163889][ T31] 2 locks held by getty/5588: [ 1313.193313][ T31] #0: ffff888037e2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1313.264592][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1313.311295][ T31] 1 lock held by syz.3.943/10405: [ 1313.345013][ T31] 2 locks held by syz-executor/17173: [ 1313.359109][ T31] #0: ffff8880793680e0 (&type->s_umount_key#58){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1313.419058][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1313.486013][ T31] 2 locks held by syz-executor/17690: [ 1313.510271][ T31] #0: ffff88807bdf20e0 (&type->s_umount_key#58){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1313.557288][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1313.611631][ T31] 2 locks held by kworker/0:4/18360: [ 1313.617637][ T31] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1313.691237][ T31] #1: ffffc9000514fd08 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1313.754785][ T31] 2 locks held by syz.4.2806/19867: [ 1313.775069][ T31] #0: ffffffff906c2b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1313.817024][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1313.864660][ T31] 2 locks held by syz-executor/20020: [ 1313.911262][ T31] #0: ffff888076e740e0 (&type->s_umount_key#58){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1313.959443][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1314.013294][ T31] 1 lock held by syz-executor/20115: [ 1314.018747][ T31] #0: ffffffff90616828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1314.081951][ T31] 2 locks held by syz-executor/20767: [ 1314.111017][ T31] #0: ffff888028e180e0 (&type->s_umount_key#58){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1314.153168][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1314.217984][ T31] 2 locks held by syz.5.3130/21446: [ 1314.226414][ T31] #0: ffffffff906c2b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1314.267514][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1314.336650][ T31] 2 locks held by syz.8.3170/21781: [ 1314.369403][ T31] #0: ffffffff905fdfd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1314.418280][ T31] #1: ffffffff90616828 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 1314.469538][ T31] 1 lock held by syz.7.3173/21790: [ 1314.486715][ T31] #0: ffffffff8e7f3180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1314.537544][ T31] 1 lock held by syz.2.3174/21803: [ 1314.569611][ T31] #0: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1314.627557][ T31] 1 lock held by dhcpcd-run-hook/21831: [ 1314.639287][ T31] #0: ffff8880b843b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 1314.689387][ T31] 1 lock held by sed/21832: [ 1314.829731][ T31] [ 1314.850845][ T31] ============================================= [ 1314.850845][ T31] [ 1314.925546][ T31] NMI backtrace for cpu 0 [ 1314.925568][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1314.925604][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1314.925615][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1314.925626][ T31] Call Trace: [ 1314.925633][ T31] [ 1314.925640][ T31] dump_stack_lvl+0x100/0x190 [ 1314.925686][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1314.925718][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1314.925748][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1314.925777][ T31] sys_info+0x141/0x190 [ 1314.925799][ T31] watchdog+0xd25/0x1050 [ 1314.925830][ T31] ? __pfx_watchdog+0x10/0x10 [ 1314.925850][ T31] ? __kthread_parkme+0x18c/0x230 [ 1314.925874][ T31] ? kthread+0x13a/0x450 [ 1314.925898][ T31] ? __pfx_watchdog+0x10/0x10 [ 1314.925915][ T31] kthread+0x370/0x450 [ 1314.925940][ T31] ? __pfx_kthread+0x10/0x10 [ 1314.925966][ T31] ret_from_fork+0x754/0xd80 [ 1314.925996][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1314.926026][ T31] ? __switch_to+0x7b4/0x1120 [ 1314.926047][ T31] ? __pfx_kthread+0x10/0x10 [ 1314.926074][ T31] ret_from_fork_asm+0x1a/0x30 [ 1314.926104][ T31] [ 1315.913567][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1315.920646][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1315.931429][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1315.941979][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1315.952156][ T31] Call Trace: [ 1315.955669][ T31] [ 1315.958934][ T31] dump_stack_lvl+0x100/0x190 [ 1315.963674][ T31] vpanic+0x552/0x970 [ 1315.967689][ T31] ? __pfx_vpanic+0x10/0x10 [ 1315.972385][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1315.978568][ T31] panic+0xd1/0xe0 [ 1315.982380][ T31] ? __pfx_panic+0x10/0x10 [ 1315.986988][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1315.993156][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1315.999319][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1316.005843][ T31] ? watchdog.cold+0x198/0x1ca [ 1316.010636][ T31] ? watchdog+0xd35/0x1050 [ 1316.015118][ T31] watchdog.cold+0x1a9/0x1ca [ 1316.019824][ T31] ? __pfx_watchdog+0x10/0x10 [ 1316.024525][ T31] ? __kthread_parkme+0x18c/0x230 [ 1316.029679][ T31] ? kthread+0x13a/0x450 [ 1316.033940][ T31] ? __pfx_watchdog+0x10/0x10 [ 1316.038628][ T31] kthread+0x370/0x450 [ 1316.042748][ T31] ? __pfx_kthread+0x10/0x10 [ 1316.047349][ T31] ret_from_fork+0x754/0xd80 [ 1316.051981][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.057154][ T31] ? __switch_to+0x7b4/0x1120 [ 1316.062320][ T31] ? __pfx_kthread+0x10/0x10 [ 1316.067195][ T31] ret_from_fork_asm+0x1a/0x30 [ 1316.072111][ T31] [ 1316.075208][ T31] Kernel Offset: disabled [ 1316.079544][ T31] Rebooting in 86400 seconds..