last executing test programs: 19m22.87876644s ago: executing program 1 (id=207): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc8600, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0) write$auto(0x3, 0x0, 0x1000) 19m21.509488789s ago: executing program 1 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), 0xffffffffffffffff) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f00000002c0)=0x3ff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo$auto(r4, r5, 0x21, 0x0) r6 = clone3$auto(&(0x7f0000000180)={0xfffffffffffffffe, 0x7, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x5, 0x10003, 0x1ff, 0x5185}, 0x3ff) prctl$auto(0x3e, 0x1, r6, 0x1, 0x0) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x2de4, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@nested={0x18, 0x6f, 0x0, 0x1, [@typed={0x4, 0xff}, @nested={0x4, 0x59}, @nested={0x4, 0x15b}, @typed={0x8, 0x13e, 0x0, 0x0, @pid=r3}]}]}, @IPVS_CMD_ATTR_DAEMON={0x1402, 0x3, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @ipv4=@remote}, @nested={0x1020, 0xf4, 0x0, 0x1, [@nested={0x4, 0xbe}, @typed={0xc, 0x109, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x1}, @generic="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", @nested={0x4, 0x89}]}, @generic="440a7417b35deffc0403b1e3c502e173305d620aaadf7040abfbbb0bb6439b65cd972ee4caaba520d581d0e6b8abbd85fbe6e8a6305ec7a0acaa13c6daaa84743253c8634db1d0a361e71388a2b23ae8a4a48a34781f52035e3f06740b9d3cb8f63e5fb8ca93b724e4347b5523b537108052ed13d61a5f596d76bb9e0fb2b5c41c8aaaf6f8e2e2b3e51fbeba25a385a5cbcfec040b2a03ad5f8200e5406cb11bf6c3c567b35c0bd660e8eb70940302533153a355d171925782b3aeb46dd1ac30ef5fea1f69e8789280a848db4fc347b566db1786b098cd0ca2c914092d97802bfefa90c78fd4a17c2365a39fefba99e504a72c83ac", @typed={0x8, 0x40, 0x0, 0x0, @pid=r5}, @generic="45670f9897181bb388fb86b3fb4be88182faebbd61a0b47ce8b8", @typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@multicast1}, @generic="f0302e74bd8dc9212eafa53fae46b8e41c8d20607c99a6b532c270d71e4a72be0ea40254424ef9db42eb15e281f149418f561f60a69d2ae4ccc9e6011516b8ac6132575a06517ebd52bea823d89986883b1ab779b3534f4ea973ecd89bb8dd82bb95a7a8894d7964e214aa8f498ce918472196d163f55c13c2faa1d880b95fc89b4aede8d346fc60fe69e788fb1961c1e135e1b64b", @generic="e1ba96ec8723f6475ef739232ebc1b941713654a034d9e50664a10a791aaeb0d1b7df37c05c1c75ab05fc705815ed65b2d272d1aecec150d8b9e3248f484b846dfca376755f14f304bb8ad59387055ccab3b7b5806cb472ac2a747c19e1f42d3b8fc1cb9a1f717d4ff2423a9b43fcbf561a5e1416d4a", @nested={0x1ac, 0xa0, 0x0, 0x1, [@typed={0x4, 0xba}, @nested={0x4, 0xdd}, @typed={0xc, 0x55, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0xd7}, @generic="d318e2f32b25833c04aec56f343d61c7c1f7567a83df94483c85677d986696ea6d5375cd221be588b2a6420210a287583118988d30c8ee65e934397673e9194ad071de04c91678ccf600ac09a8d0b638dc76f2c40d9b7a22bf1aa07358a73bbc1311", @generic="da456012fad25bca29a017e7871751f96acabedd9489a98cf63958f9249470534accedb776cd04502b095fdfff91eada20c658330ce0429c3147b0a15f306e8a39ba607160127da26bd8a9d79688499dc8bf04f4970791bdeea897a963d57ba01ab4", @nested={0x4, 0x36}, @generic="175e666af5fe653ccf49388c8c1799ce1314cd2c8526de3c77a43ce86d3bc4888d1bdde7b7e557813530a46e19ff2009638f884952086123530e9e4502680813219fe3100526dd751474eba880a614e49be45c2eeef2b82aee7084e05c2c611ad0775d33828ee82d18f22478a173a8eead906e8c90ce01025c74ff2f027dd3105b231dca4bb3536bb1cca84fbf64b10d7b864ece720ec413603142f39a96cd10400a6492da77dce60559722d01ffcf38e8cbcdbf1af057844a6576f3b8c2bfde5d3c1e12e9187536"]}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@typed={0xc, 0x137, 0x0, 0x0, @u64=0x80000000}, @typed={0x73, 0x2b, 0x0, 0x0, @binary="254828fcd25a445a69ef02b3848539f46a5f03143442a59b12d632352531ddcd28b80c632efb5f53ea233cdd3074379e2adbbd63517c6c4d3d8252d119b8cfaa073097fe6bcf4fb9fc298b9d539deed29c85eefe442c0d44c71547690604957ce9d5d4f9dd360139e48a491c4ed68d"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@nested={0x8, 0x97, 0x0, 0x1, [@generic, @nested={0x4, 0xf9}]}, @typed={0xb, 0x64, 0x0, 0x0, @str='batadv\x00'}, @nested={0x14, 0xc5, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xfd, 0x0, 0x0, @pid=r6}]}, @typed={0x4, 0x107}, @generic="300c5227527db4e5be8aa7cb9dbfe3a1cbc80716afa3a472efe0f3c6419ae427dc35e887533dc7ffd98cf51a"]}, @IPVS_CMD_ATTR_SERVICE={0x39, 0x1, 0x0, 0x1, [@generic="ddd3df97f211e91062ebbacbe55ebf56e4b825a83a4a04074d4fe849d582916301516fb50ff78e59260100f05d8e0c0662541cd08a"]}, @IPVS_CMD_ATTR_DAEMON={0x11a, 0x3, 0x0, 0x1, [@generic="50639f10e53151be9dab49ee9c03de71e6e04a8f767d3aaf8bc28758091beca1b5413094f18f0ba3dd647c37a8b072c63936a3a5e3ffa94edf689943b7dad5d669dd91faa132a874db20615d30b2be8dc1bb2277c40adbd35ad18030d0eb2e64bcd5f5fc7861fda1428010c60909141c0a23465cbabdeebb576f60ae2b17670a10c72e1203fc710b0eddf202d5524d97c74dbc9992aad056702ac47d8dcbc6bac2c91630f4534ea84bb755d339226b34c685805c138f8a5719728bfd20e7505d5ea8b79428bd5edfd245821e2d613df1fc3957aaf853d3e477ca43ed825665b8afbaa7e934d8e17fff85b3128933a9", @generic="082ab1df8eff0bedcde17d80ec763aff1657c8", @nested={0x14, 0xfb, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0xb}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x175d, 0x1, 0x0, 0x1, [@nested={0x298, 0x116, 0x0, 0x1, [@generic="09cd11342bac85c663f25e79992771096fe48d9f78f60b47c7f4caeb8eeb139c6869059243cc632273bb40f056d094233821fb6ae1e35438de85ded5d7db912a6601101c07383237a4456a053e98221271957c1d986ff1efdf597f25e73347c4a9e8e1eb73dd82bcad432f4b3f2e51fcef07ab674e7d97ef88213ebd04513f966cc75a7f755edaae7cc194b8701aa1f938312c41f7be5de8f181b3a796f28624f43ba300ae87720ad60d249e1a976b26cb2273f52afe71b583c3abce23ce6ef2d22f68c6a55d225ec253531fc81caf8ef5056b5476216ed54412d283985842ff505a33a43e2fe48dd4cf724a808f02eed9d79b", @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x11b}, @nested={0x4, 0x132}, @generic="c51d535d81917eeadcec91566a47253d77d623c172217fe582a45208add0fcf9adf8a070caacdca81c8adc8468de7f25bbfac4a9b9eaf1dea110c89ee79dadb2734273cec62edc2530ac11561e8a01bb8e1844d9b8cc1a", @generic="b2aabb9149e070d10db511b47b6a88bb35e4dbfcacbfa8aff61af271e77f6fa1dc8fc4912a7c297eec3b077e8f8f86aba58b135d77ed63b1e871c86fc768493c21070177ecc2e3227c9e5c95615ec4f735e0d63a597be8", @generic="4f4f1602bbca15567b107ea7eff5111433cc92681da82cef0a26567dcf0c433edc8a09f6de9e35be044b2cff8f87a1eb60ce469946ef2e7d2af4657e4a25f50d7a00b8b693b6eda6215c402785eec96633ee466a2931e809753ec0e197bd653cd1cb164c68c7a6b62dc0ff0f0f0022d864757a14d5f968b9d1dc0f95cb84776bc0c4d4a6f01250dd4288886719c4c8d6dde59777a50502271780c51fbbe227006e3e25e86cf7a0dc42ac761457f7814a6cfb997dfa0e13f29a1262dd04a9f3091ff398d0a3674013bab3d83dea0eb1", @typed={0x8, 0x9, 0x0, 0x0, @u32=0x7}]}, @typed={0x9, 0x7, 0x0, 0x0, @str='\\@@{\x00'}, @generic="2a2705aa12f84d4d18749edb8c981154a9d84fc4adf1b0388caa0fec2b1fa127273d562a8bef500f29df96a019dda1c447e63f8b117c01b5ac5a5d1ee397265aaa15e18acdb84ec9b2d94c4ec2d3711c545dd4205dda15550940c6ea79f0b67af335bba90fb43f6e43bb8d0d9602e1e71899e00ffbfad93d971901ad4f02fee9d8bd75504d553a28727d90501b47bdf781f636001d8c7e3f6b6bfad03235ab3895df8a10ff93600b79dab7e2d78a3c0e40a991ec2801d4fe4e0b2368eaedea7bb9f46bece01b224c16c0c2970c0fd6a51abe", @generic="b45b7feba9f139d89337afb86bf128d84c297fb2cfe442b49c8f0169da9835c41e2c90bc23afb2b620d7f6e751977713e7a1d7a13be29b221710cc883cdc81159bb48231f4704a9a3447086f9b4936441d938dc7503b3968549e8e622ebbe5b9129af59a3d3d0e8e7c8f8a36105606f35ab822bcadd24ae0c6baa2f806aa42e992af84aa8914a6c9abb5efeca4adea2319a52bab8550449168e6c7", @nested={0x190, 0x10, 0x0, 0x1, [@generic="660f2426f523ea06d9990efb9b652daddf8aa0d5388bbcea934468a69d71f5cf666cb205fcf7efb7b0426be68dc83bf8b823759fc8ced07a29c54815ee1877c36e48a14b1175a83991c87bb47ccb2378f9ee0d541e6ae500b5158a06e89dd22cd7934d11db838aa38cc7ac5c2d3279a0f15700859550889f7d512ca6ca4fa961707fb702d719bd1e3116", @generic="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", @nested={0x4, 0x10c}]}, @nested={0x1030, 0x109, 0x0, 0x1, [@typed={0xb, 0xd1, 0x0, 0x0, @str='batadv\x00'}, @nested={0x4, 0x14c}, @generic="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", @typed={0x14, 0x157, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x81}, @generic, @nested={0x4, 0xe4}]}, @generic="58caad967d78c262b0020a42269350e3a1352531d256ccf161623b028ced557c64b71dde9623", @generic="2455f2d1f28fce3927f1f7b38ce9b4b4f943cceff3b9f5e63f3c59e0a3a17e96d671c062999dec124e121bc298cbd0f04d95c53a719e8682146c5f2aca7283437413fe8be8df7479c849fb4dae5588909a7faab1bfc8a25becc2e5515e1be40b0bf50d0029c14749f80a33bf05664f29d3988aac6543c335abce8542af914aee53d05ff66548942106b3b8337bdc0da596bf50ed495b9ce5185bc061c33b624be67d6f3a33831e0efbc3", @generic="247b845fa8dc461033538f35f0140527912571b2ca57dd3a33cd276d1cae805315e9acfd01f68f2fad04b01314dc2beab8a160882625731ca044ab8aabf580542b377e476106f04dd4cf0047dc7f0a37a1e6212379de2a9884c9028ac6921b3f4a8ff6694dba81e4176a1025bf921f9f6409fb6cfab4ba164d49272e99ec502837260ac7f9fc9af3f95699f73346d61bebc0d083c63e0df9e39f92354ee3ccf3316457efbb4308cee16d865c3400f9699e95792ecc0df873"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2de4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x6}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x1000cb6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x44841) 19m20.072922876s ago: executing program 1 (id=220): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x40000004) preadv$auto(r0, &(0x7f0000001bc0)={0x0, 0x23}, 0x20, 0x3, 0x4) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x80f0b9791d6e8bf2, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000004c0)={r0, &(0x7f0000000100)="76799e8102a8fed430500cefd98a9bd77dced87199d5cbd527", 0x9, &(0x7f0000000140)="3e8737972764f4ac316cc44148d02b5ebe3cc0ce866d69a92ee58b2acc64f8ea819c", 0x0, &(0x7f0000000380)="e2d0b89707486c577209786bc0f8cd5ba4d101241fd360f1a5d9534ffab93ec98af6c10d212e478152ce4adefbb29cac1c06efe26de1e81260f0de265478926e3660c0b3dafcaf2f4d9ac4f49184ceaa048b45f3b28ff5928238d9313790419140755bd80c7828351ccfdd47bd6f49256e8b5ce8440944b6443891199f248fee7827f6c150d228d7e6eb6f8b123dba6bc5423e4e2f79f6be41b4bd3fd564e47a8245894c454fab4a52d49aba804a18aed7204c031f7f839bdb6e50364b22b9a7d549182813cd91cd5b984c6deda63005c13064c8b87df34c223101d466689c4ab130db5561ec1b", &(0x7f0000000180)=0x8000}) 19m19.741342668s ago: executing program 1 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x301, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/virt_wifi0/base_reachable_time_ms\x00', 0x104000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r3, [0x0, 0x1, 0xa], {0x4, 0x6f4, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}}) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=@raw_tracepoint={0x7, r2, 0x0, 0x9}, 0x5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 19m19.227094304s ago: executing program 1 (id=232): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc8600, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0) write$auto(0x3, 0x0, 0x1000) 19m18.652892459s ago: executing program 1 (id=229): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2000000000000401, 0xfffffffffffffffe, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) (async, rerun: 64) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) setresuid$auto(0x0, 0x7, 0x0) setfsuid$auto(0x0) (async) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) ioctl$auto(r0, 0x92106410, 0xffffffffffffffff) (async) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80a040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x22, 0x80000, 0x40) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f00000002c0)="e4ddf88f018c12d2e6eb24951ccf44e0126d85602bf26546c8e60a0d5900042b8d3cf6ef0ee0c3979177c99e2cec71a6666932f93d07647e1163c80914c400a05a4a3e38c3ef6d690e7936623731751985137f28e2505f8035ba0dbf720ac46b011397ab4c6134078c89f9565aa8cbe533ffcb47a6728cdce941cb465654d500"/140, 0x12, 0x0, 0xa, 0x0, 0x20, 0xb}, 0x800009}, 0x0, 0x20000000) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80009, 0x0, 0x1, 0x0, 0x4, 0x9}, 0x3}, 0x3, 0x9) (async) shutdown$auto(0x200000003, 0x2) recvfrom$auto(r1, 0x0, 0x800000000c, 0x1003, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd5100fbcbdf250100000004000180072e0180102843f771520cf7e308f524df2eb506c947399728c1f6fa7bb3bdb9c624460dd88e38355f328115680b2ecd2736606ed2"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) 19m3.492356098s ago: executing program 32 (id=229): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2000000000000401, 0xfffffffffffffffe, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) (async, rerun: 64) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) setresuid$auto(0x0, 0x7, 0x0) setfsuid$auto(0x0) (async) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) ioctl$auto(r0, 0x92106410, 0xffffffffffffffff) (async) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80a040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x22, 0x80000, 0x40) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f00000002c0)="e4ddf88f018c12d2e6eb24951ccf44e0126d85602bf26546c8e60a0d5900042b8d3cf6ef0ee0c3979177c99e2cec71a6666932f93d07647e1163c80914c400a05a4a3e38c3ef6d690e7936623731751985137f28e2505f8035ba0dbf720ac46b011397ab4c6134078c89f9565aa8cbe533ffcb47a6728cdce941cb465654d500"/140, 0x12, 0x0, 0xa, 0x0, 0x20, 0xb}, 0x800009}, 0x0, 0x20000000) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80009, 0x0, 0x1, 0x0, 0x4, 0x9}, 0x3}, 0x3, 0x9) (async) shutdown$auto(0x200000003, 0x2) recvfrom$auto(r1, 0x0, 0x800000000c, 0x1003, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd5100fbcbdf250100000004000180072e0180102843f771520cf7e308f524df2eb506c947399728c1f6fa7bb3bdb9c624460dd88e38355f328115680b2ecd2736606ed2"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) 13m13.554111518s ago: executing program 4 (id=1316): openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x40002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xff, 0x9, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/pages_volatile\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/16, 0x10) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)=r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000002c0), r1) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x404, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/039/001\x00', 0x101902, 0x0) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r4 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r4, &(0x7f0000000040)=""/159, 0x9f) timer_delete$auto(0x9) 13m12.125457588s ago: executing program 4 (id=1321): r0 = pipe$auto(&(0x7f0000000000)) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x800, 0x6, 0x2, 0x9000009, 0x5f, 0x0, 0x3}, 0x6f3) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r1) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x80000000}]}]}, 0x20}}, 0x60000040) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x21, 0x2, 0x98) setsockopt$auto(r3, 0x29, 0x38, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x12ffc1, 0x155) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x5408, 0x0) socket(0x23, 0x80805, 0x2) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r5, 0x5646, r5) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r5, 0x2400000, 0xffffffffffffffff) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) unshare$auto(0x7f) unshare$auto(0x3) bpf$auto(0x0, 0x0, 0x92) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) 13m11.124867779s ago: executing program 4 (id=1323): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) read$auto(r3, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x24040010}, 0x18800) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0xfffffffffffffffa, 0x9beb, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x6, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) syz_clone(0x200000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000003c0)) msgctl$auto_IPC_STAT(0x1ff, 0x2, &(0x7f0000000340)={{0xd, 0xee01, 0xffffffffffffffff, 0xf, 0x1ff, 0x3, 0x2}, 0x0, 0x0, 0x4, 0x5, 0x7, 0x5, 0x91d, 0x3, 0x1000, 0x39a, @raw=0xfff, @raw=0x2}) 13m7.832009692s ago: executing program 4 (id=1336): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x21c142, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) io_uring_setup$auto(0x9, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x0, 0x0) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x40001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.3/driver_override\x00', 0xe2685, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x6, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xe3, 0x400000000a, 0x200000003}, 0x6f1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r1, 0x0, 0xd, 0x6e9) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84L\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xff\a\x00\x00\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 13m5.900805932s ago: executing program 4 (id=1343): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0c/sub6/status\x00', 0x101000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffd, 0x20009, 0x7fffffff, 0x200000eb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r1, 0x40085618, r0) statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x1, 0x9, 0xc98c20c, 0x3b, 0x93f, 0x1fee5, 0x3, 0x200006, 0x2, 0x202, 0x5, 0x8008, 0x4, 0xb0, 0x9, 0x1, 0x3, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x1, 0x7fffff7f, 0x3ff, 0xfffffffffffffffe, 0x9, 0x0, 0x2d26, 0x9, 0x0, 0x0, 0x9, 0x4, 0x8f0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff, 0x10, 0x4, 0x2000000000000000, 0xd, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff9]}, 0x1fe, 0x82) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={"3767d960c2ffe59a8907676695102661eced7832e713b94c2b182e464daf47de", 0x9, 0x1, 0x6, 0x37, 0xcf, 0xffffffffffffffff}) prctl$auto_PR_SYS_DISPATCH_OFF(0x2, 0x0, r2, 0x34bb, 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x28, 0x1, 0x0) connect$auto(0x3, 0x0, 0x10) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r3, 0x127a, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) sendmsg$auto_NL80211_CMD_GET_MPATH(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41811}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES16=r6, @ANYRESHEX=r5], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x20000000) write$auto(r5, &(0x7f0000000280)='\xab\x1d\xd9\x98EXP', 0x18000000) 13m4.344951782s ago: executing program 4 (id=1348): r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) r2 = getpid() r3 = pidfd_open$auto(r2, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r4, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) ioctl$auto(r1, 0x8, r4) r5 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x527340, 0x0) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) bpf$auto_BPF_PROG_BIND_MAP(0x23, 0x0, 0x7) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) fcntl$auto_F_SET_RW_HINT(r3, 0x40c, 0x4) write$auto_split_huge_pages_fops_huge_memory(r6, &(0x7f0000000100)='1', 0x1) ioctl$auto(r5, 0x8, r0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty55\x00', 0x8240, 0x0) setns(r3, 0x60020000) 12m48.395706259s ago: executing program 33 (id=1348): r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) r2 = getpid() r3 = pidfd_open$auto(r2, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r4, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) ioctl$auto(r1, 0x8, r4) r5 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x527340, 0x0) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) bpf$auto_BPF_PROG_BIND_MAP(0x23, 0x0, 0x7) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) fcntl$auto_F_SET_RW_HINT(r3, 0x40c, 0x4) write$auto_split_huge_pages_fops_huge_memory(r6, &(0x7f0000000100)='1', 0x1) ioctl$auto(r5, 0x8, r0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty55\x00', 0x8240, 0x0) setns(r3, 0x60020000) 12m15.586283842s ago: executing program 5 (id=1437): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fstat$auto(r1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r2 = socket(0xa, 0x5, 0x0) getpid() ioctl$auto(r2, 0x8941, 0x8) 12m15.076180155s ago: executing program 5 (id=1439): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x8, 0xeb3, r0, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000480)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2f, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x3}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x2) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyeb\x00', 0x102, 0x0) epoll_create$auto(0x3e) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) 12m7.610245424s ago: executing program 5 (id=1452): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xa9, 0x0) timer_create$auto(0x2, 0x0, 0x0) r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) writev$auto(r0, &(0x7f0000001c80)={0x0, 0x101}, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100003, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyud\x00', 0x400281, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0502, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x800000000008, 0x80000004, 0x288, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0x3, 0xfffffffffffffffc, 0x4000000000001002]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001500), 0x400000, 0x0) 12m6.877379753s ago: executing program 5 (id=1454): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x8, 0xeb3, r0, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000480)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyeb\x00', 0x102, 0xffff) epoll_create$auto(0x3e) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) 12m6.211179288s ago: executing program 5 (id=1456): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x103002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r0) readv$auto(r2, 0x0, 0x5) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0xc01070ce, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) 12m5.591571782s ago: executing program 5 (id=1458): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bluetooth/hci2/force_suspend\x00', 0x201, 0x0) write$auto_force_suspend_fops_hci_vhci(r1, &(0x7f0000000280)='Y', 0x1) r2 = socket(0x25, 0x1, 0x4) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x0, 0xee00, 0x3, 0x401) madvise$auto(0x0, 0x240007, 0x19) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x80000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000040)={0x0, 0x48d05}, 0x1000000000006, 0xe27a, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x8005) socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, 0x0, 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone(0x34203100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) 11m49.772944027s ago: executing program 34 (id=1458): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bluetooth/hci2/force_suspend\x00', 0x201, 0x0) write$auto_force_suspend_fops_hci_vhci(r1, &(0x7f0000000280)='Y', 0x1) r2 = socket(0x25, 0x1, 0x4) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x0, 0xee00, 0x3, 0x401) madvise$auto(0x0, 0x240007, 0x19) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x80000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000040)={0x0, 0x48d05}, 0x1000000000006, 0xe27a, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x8005) socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, 0x0, 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone(0x34203100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) 2m14.405727641s ago: executing program 0 (id=3068): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x800, 0x800000d) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000072, 0x400, 0x718c1257}]}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x450481, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x5b020f7d7a84fe6e) unshare$auto(0x40000080) socket(0x2b, 0x3, 0x4000104) r4 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7, 0x4) write$auto_proc_mem_operations_base(r4, &(0x7f0000000800)="ecec9b0ef871e6b598d3a0b0c7ba944493891167450220082063654540f4f219d8e1dd069465528c6adaaccf62eb0f051a372574b1a0b42b3eb4ac2347e38c4a639ca4a4f661e0509abbf7ba80159d54ed4e7dc23b282f8b2ce98b4ea996ab7021fcb6d4c70de157dc748d1f65d0a575b96126f6456088850b1746f5a3b4c4f29ed841eadfe31a1b25b2faf1", 0x8c) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/35, 0x23) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74bec700", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf2554000000050060000000000005001d00dd00000043032a00266588d8804fd89fe7ad92e487f3faa62c3b57331a027d1dfe7b53c02b0ccaeb2ebefde8b1cbc734e5ac5dd332a51da438234e7d570d2bd6ece31410a98c9515fa4ec838636e5f856bb42188e12283079c2799890c0492d7e95e19075904042cbb86ecf69e27efb03ee2e1310ced4e34f6803332bdef77c1c17ba4c5a62f116584ee2e2c1083bf380c23e592b553feee95e9b0e62bb86034b8bbda7662ffba2c30a8434235b37166c06725819d63578bfe042da2e673b32efae8f303f495986c17a9d195da728f784a54607b3bd483c2cee60c2f88238aa1bc3bd9a0db24f3ad1c4df92262b4832474466b401a98eeef3badb53a6f446eb48ce32afe1fe8f9579a37ed9403aa5f9e3e111fd342d23a12c1e0a97ed7c0cdbf7dd8fa8a66053202f3a9d75afbb8e9c6300aea72b209c0e6b13b3b5865f5299c65d060ea3f294f5b9d793f944d4842aa7ad4ac3802eba33f08ce17cd840991f76c2d4f94437245f967e137075649e9c14b17990601c29ac91218251b46cf88c1b4a6394bf31a323256ab9504240f4378682244ad977af34f21c833ae032684d4bc5d0e3f46803862e9daa9972e13db5f3ab727540d34a4791583f203b5c2393095cb01e03e78560cdc34d17aa13a122fb82cec8d033ac3966c17d43f84b4b586d3baa456f4c97e577da851537725de8b2d142d9dcd653fbc7fbfbb5bdd347e2ae5070069f7c49fff8905b36f36415e4eefb4fe5a3c7beea0df89d859088818d9012638d2e9cc6f45d594f9c62fc6c1e8cc48a08ba551772bf11a28c1254426ee77f96efa92d189e412419d2dd63b993dac239638f43dc41c04aa5ffaff1b56fc1a4f75dcafb3a7c9a490a7981d5da978a5ff12d6883e187234bf14510ad366e83d9fd8c413ccadc9881000d7e60e046e6e11796bf110be6a55a429ed124fe52f5c7c33ed3a2d8fed9eea00961c63abf089dde5ef61c987d48a8364b69cc1ebc5be53bf805811605fff027a912aa573781377fc0ecd8cad4c8c0f668e6a18fbd3ab5cf193bd14a047859a44e4c243edc1a9b94c59aaf2b813402e8f7c0cd7599646078a909c88927064c202f00f4f9b3f920b899ecc4f509e03b6a799e3ea6f5937e3b7f2efd4e8064ab11fb2cc9701632e61a274a76d8e3d2ce1c381e9ba677e24a5e87bb098fe0004000b000500c200d2000000"], 0x374}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000e5", @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf250b00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x240088d4}, 0x2000c880) mmap$auto(0x0, 0x40006, 0x1000000000000e2, 0x9372, 0xffffffffffffffff, 0x10000027ffc) 2m11.39923081s ago: executing program 0 (id=3071): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) (rerun: 64) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) (async, rerun: 64) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) (async, rerun: 64) fsopen$auto(0x0, 0x1) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) (async) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfc4f}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) (async) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) (async) r3 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto_userio_fops_userio(r3, 0x0, 0x0) (async) socket(0x1d, 0x3, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 2m9.148189155s ago: executing program 0 (id=3078): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x101) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xffd}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x7ff) write$auto(r4, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) close_range$auto(0x2, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000000c0), r0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NET_SHAPER_A_METRIC={0x8, 0x2, 0x4}, @NET_SHAPER_A_PARENT={0x4}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0xfff}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048}, 0x4044004) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) r7 = socketcall$auto(0xa, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f0000000300)={0x2}) 2m8.688757108s ago: executing program 0 (id=3081): mmap$auto(0x1000000000000000, 0x2020009, 0x1, 0x14, 0xfffffffffffffffa, 0xffffffff) (async) r0 = socket(0x11, 0xa, 0x9) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x19, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x24000000) close_range$auto(0x0, r1, 0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) socket(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0xfc, r2, @relative_fd, 0xe600}, 0xf) (async) r6 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x40000000000005, 0xffffffffffffffff, 0x0, 0x1}, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) fcntl$auto_F_DUPFD_CLOEXEC(r6, 0x406, r3) 2m8.324151843s ago: executing program 0 (id=3084): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x42142, 0x0) lseek$auto(r1, 0x1, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="1b0026bd7000fddbc10e476b7c0d92107cdf25030000002c00038028000180240006801d0074804cfe4d800500000000000000040003002a9d272f66040033800000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0xc800) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x301, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x6, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x4, 0x948b, 0x200000000000003, 0x15f4da0a, 0x3, 0x80000000, 0x5a, 0x80000001, 0x7, 0x2, 0x90, 0x401000001, 0x35]}, 0x0) (async) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x20480, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x1, 0x7ff) (async) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x62, 0x27dd) (async) ptrace$auto_PTRACE_GET_RSEQ_CONFIGURATION(0x420f, r2, 0x1000, 0xfff) (async) r3 = socket(0x9, 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$auto_SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20008804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000280)=0x0) sendto$auto(r4, &(0x7f0000000180)="b03188399fe6c630a0e6e9b47e7cdf95ed6db3740c77c6e4de1bba028e746f6e53b45fe99e1671935cd1bf714c986cf5e0b12652266aaeb0a487c221e7a3986a1335b52576ce78ed4aac413528c30f05de3e549aa4743b3599b036e373822e6f7d1bd0e621f1d1", 0x8000000000000000, 0x7, &(0x7f0000000300)=@nfc={0x27, r5, 0x0, 0x1}, 0x5) (async) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x121802, 0x0) read$auto(r6, &(0x7f0000000480)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) (async) write$auto(r6, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) (async) r7 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/nbd13/hctx0/cpu1/default_rq_list\x00', 0x169100, 0x0) pread64$auto(r7, 0x0, 0x1000f42d, 0x100) (async) getsockopt$auto_SO_TIMESTAMPING_NEW(r7, 0x9, 0x41, &(0x7f0000000140)='SEG6\x00', &(0x7f0000000380)=0xdc) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25020001000800030080004000080002"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) 2m7.540974724s ago: executing program 0 (id=3088): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000380)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x1, 0x400008, 0x3, 0x9b72, r0, 0x8) (async) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_events\x00', 0x680, 0x0) read$auto_ftrace_avail_fops_trace_events(r1, &(0x7f00000000c0)=""/197, 0xc5) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0xf, @none, 0x1, 0x2}, 0x80006a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) io_uring_setup$auto(0x6, 0x0) (async) r2 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250300000008000400010000000a000200a060292f83d900000c000800000000000000000008000600ccffffff04000700"], 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000fddbdf250500000008000500fdffffff080004000200000008000a000a0000001600150017dc2e8d81e7297ae08b46f4b2872541a816834edc2adab76b4211000004001900eb1ea2a547edfc5be17c7d32dbf5f37c28b6f4"], 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010) (async) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) (async) r6 = semctl$auto_GETPID(0x10001, 0x6, 0xb, 0x100000001) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000001480)={{@raw=0x9, 0x2, 0x5, 0x0, "e462f5a29a0b2f987b9ea452a1bc9eaafd83a8eb9eea79a10397a3126cb6c4380ae1dc84e847c5ccf57f14eb", @inferred=r6}, 0x1, @integer64=@value=[0xf, 0x80, 0x0, 0x3, 0x3, 0x1000, 0xd1f6, 0x5, 0x10, 0x8, 0x4, 0xbe1, 0x1, 0x0, 0x0, 0xffffffffffffff80, 0x40, 0x5, 0x4, 0x3, 0xfffffffffffff000, 0x5, 0x2, 0x2, 0x7, 0x8, 0x2, 0x1, 0x2, 0x5cb56b90, 0x0, 0x81, 0xfffffffffffffffb, 0x9, 0x0, 0x10, 0x2, 0x6, 0x0, 0x6, 0x5, 0x5, 0x8, 0x6, 0xe7d8, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x0, 0x8000000000000001, 0x6, 0xc500000000000000, 0x2, 0x9, 0x0, 0x40, 0x4, 0x5, 0x4, 0xe, 0xb, 0x800, 0x10000], "2ffa3e20e80e755123e1f42e350d190e3032fa30c3621af4571878aad95f51aea60df3a075b1c15529b67947b4b67f290e12883f526b4e566ef511611abf96d1d9b723613b1fce6def179ed465852003f47d532de2721cc6b407490cd09e96be8bf6d01dca81d1d22f2554f48d1796ac750c48d1a4c1d889a0e6b6528742320c"}) (async) unshare$auto(0x40000080) (async) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x28102, 0x0) lseek$auto(r7, 0x7, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x141100, 0x0) 1m52.701814661s ago: executing program 35 (id=3088): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000380)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x1, 0x400008, 0x3, 0x9b72, r0, 0x8) (async) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_events\x00', 0x680, 0x0) read$auto_ftrace_avail_fops_trace_events(r1, &(0x7f00000000c0)=""/197, 0xc5) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0xf, @none, 0x1, 0x2}, 0x80006a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) io_uring_setup$auto(0x6, 0x0) (async) r2 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250300000008000400010000000a000200a060292f83d900000c000800000000000000000008000600ccffffff04000700"], 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000fddbdf250500000008000500fdffffff080004000200000008000a000a0000001600150017dc2e8d81e7297ae08b46f4b2872541a816834edc2adab76b4211000004001900eb1ea2a547edfc5be17c7d32dbf5f37c28b6f4"], 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010) (async) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) (async) r6 = semctl$auto_GETPID(0x10001, 0x6, 0xb, 0x100000001) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000001480)={{@raw=0x9, 0x2, 0x5, 0x0, "e462f5a29a0b2f987b9ea452a1bc9eaafd83a8eb9eea79a10397a3126cb6c4380ae1dc84e847c5ccf57f14eb", @inferred=r6}, 0x1, @integer64=@value=[0xf, 0x80, 0x0, 0x3, 0x3, 0x1000, 0xd1f6, 0x5, 0x10, 0x8, 0x4, 0xbe1, 0x1, 0x0, 0x0, 0xffffffffffffff80, 0x40, 0x5, 0x4, 0x3, 0xfffffffffffff000, 0x5, 0x2, 0x2, 0x7, 0x8, 0x2, 0x1, 0x2, 0x5cb56b90, 0x0, 0x81, 0xfffffffffffffffb, 0x9, 0x0, 0x10, 0x2, 0x6, 0x0, 0x6, 0x5, 0x5, 0x8, 0x6, 0xe7d8, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x0, 0x8000000000000001, 0x6, 0xc500000000000000, 0x2, 0x9, 0x0, 0x40, 0x4, 0x5, 0x4, 0xe, 0xb, 0x800, 0x10000], "2ffa3e20e80e755123e1f42e350d190e3032fa30c3621af4571878aad95f51aea60df3a075b1c15529b67947b4b67f290e12883f526b4e566ef511611abf96d1d9b723613b1fce6def179ed465852003f47d532de2721cc6b407490cd09e96be8bf6d01dca81d1d22f2554f48d1796ac750c48d1a4c1d889a0e6b6528742320c"}) (async) unshare$auto(0x40000080) (async) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x28102, 0x0) lseek$auto(r7, 0x7, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x141100, 0x0) 15.615154456s ago: executing program 7 (id=3378): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xfffffffd, 0x9, 0x3, 0x16, 0x4, 0x5, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x3, 0xb414, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff]}, 0x202, 0x81) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x4040, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000140)={0x81, 0xb, 0x6, 0x0, 0x3, 0xa, 0xff, 0x106, 0x7, 0x3, 0x7d, 0x4, 0x200, 0x3, 0x7, 0x2, 0x6, 0x7f, "eca013bd03fe716c6eaa82e7520900000000000001d83c9ee02f000051370400"}) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000000)=@generic={0xa, "e2e13d0ee94e00"}, 0x1b) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket(0x18, 0x1, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) 11.688537139s ago: executing program 7 (id=3386): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d6) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0xac) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r1 = open(0x0, 0x20000, 0x1f8) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x80008000) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sched_rr_get_interval$auto(0x0, 0x0) rseq$auto(&(0x7f0000000040)={0xe, 0x401, 0x5, 0x6, 0xffffffff, 0xfffffff8, "e9c319b0e46ba24c919df8cfc5057879da75fe88f56ea8ac762dfc9e255de2875a2e8fd5851384bef0d029a9f723cf3ba03c120339c0646acb55793558cef1f60ec80e264b49d3f8f7e9588b6e98cd036729d188f4ed"}, 0x8000, 0x0, 0x6) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) close_range$auto(0x2, r2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) 9.513518626s ago: executing program 7 (id=3389): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20009, 0x8, 0x40000000000eb3, r1, 0x9ac1) close_range$auto(0x0, 0x5, 0x0) keyctl$auto(0x17, 0x4, 0x7fffffffefff, 0x400, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="205c7820027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x2, 0x13) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000140)=ANY=[@ANYBLOB="23fa7b44", @ANYRES16=r3, @ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x8d4}, 0x41) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x4, 0x0, 0x0, 0x1009}, 0x7}, 0x3, 0x0) recvmmsg$auto(r4, 0x0, 0x7, 0x6, 0x0) mremap$auto(0x110c231000, 0x8000000000000001, 0x4, 0x7, 0x100000000) 8.573958874s ago: executing program 7 (id=3392): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/hibernate/parameters/compressor\x00', 0x1a1942, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r3, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r5, 0x4b72, r6) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) mmap$auto(0x0, 0x8010000, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r1, &(0x7f0000005900)='\\\x00', 0x40db) 8.423350144s ago: executing program 6 (id=3393): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0)={@_si_pad}, 0x8, &(0x7f0000000240)={{0x8, 0x1722}, {0x6, 0x3}, 0xffffffff, 0x6ebb, 0xf, 0x5, 0x1, 0x9, 0x2c800000, 0x58100fb1, 0x7fffffffffffffff, 0x2, 0x2, 0x400, 0x0, 0x5}) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r0, 0x0, 0x1000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) (async) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy3/hwsim/group\x00', 0x208000, 0x0) (async) r5 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy3/hwsim/group\x00', 0x208000, 0x0) read$auto_hwsim_fops_group_(r5, &(0x7f00000000c0)=""/136, 0x88) (async) read$auto_hwsim_fops_group_(r5, &(0x7f00000000c0)=""/136, 0x88) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) (async) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r6, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket(0x2, 0x1, 0x0) getsockopt$auto(r7, 0x1, 0x8, 0xfffffffffffffffc, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0) (async) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0) prctl$auto_PR_SET_MM_START_BRK(0x200, 0x6, 0x0, 0x1ff, 0x3c0) (async) prctl$auto_PR_SET_MM_START_BRK(0x200, 0x6, 0x0, 0x1ff, 0x3c0) 6.636284809s ago: executing program 6 (id=3396): socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) 6.533556566s ago: executing program 2 (id=3397): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0xab42, 0x0) r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x1c0, 0x0) readv$auto(r0, &(0x7f0000000580)={&(0x7f00000004c0)="8cff9dc8f98ee8d0a520e584656d080d94205d3c56edf9a091cacd828ad001dfa67b6c1268eca3bc87d8f01a88ba557249754a499b1a1e4418f952a2a3382aee3bd1f5038a60580eeceba75e2ad2794191e90e2312372cc734cfd1e95381ed93fbf7a896bd1a54ffa9227211014094446798df95271c44dc45f35b772a87a5f5286f12253b034969b42f55ceba", 0x9}, 0x5) sendfile$auto(r1, r0, 0x0, 0xf7d1) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000005c0)={0xf599, 0x7b, 0x1, 0x8000000000000000, 0x40000, 0xffffffffffffffff}) prctl$auto_PR_SYS_DISPATCH_OFF(0x26d4, 0x0, r2, 0x2, 0x3) open(&(0x7f0000000600)='\x00', 0x630000, 0x185) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)=@query={@target_fd=r0, 0x2, 0xc, 0x6, 0x1, @prog_cnt=0x2, 0x0, 0x91, 0x359c, 0x2, 0x7}, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x5) recvmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000140)="0cffeac5a8b8dea4c1c7383a84956e7f996a065b715d6f8d040a9192e3bac0186abe3abddca29a8716d8fb512f50a3a42ac746ba5d27e9cccf9eb4f1b293be2907f36002d6664b5ec7e35e6d1e4143a55784901f021e54dae59b29c66a7dacb45f8354151d58063d70c792116d86aa40b7e7f2d650a00d1b93d861adff4d170599dccc3ed287d2d02ab3ef60b9e7de77fcac5f12bbebe9b8596f03a12ea139e18c47698a98d67d66ce881a4b6a70d7ff7ec7719f29ae0fd43e798ac96f7046", 0x5, &(0x7f0000000000)={&(0x7f0000000200)="1e5d7ef2c985b942e37e969c39efca1bcac324919d7e69d385fbca8437519db9e323ad0a73c548a7015117d5f8d69de83f76c70bfc564040c33d7f00bd1c088c28c2ff5b9a8bd6a03027e65dffad4048eb18ed4741f57b1d45406ad81dba41ea01ffab23998299be8f1f70186f5b0b5a2f83742a3d05c84400848ef21b41bdc8248b364502fb3551805b80737561c9f6e6ae3e1272874344269119a28648cd380cd9358d737bf14971929cc48a1490f3a8ca798a8c493fd78b660138df70c8223a4dc4d0a93a", 0x7fffffff}, 0xfffffffffffffff7, &(0x7f0000000300)="bf25f3cf1a52eb700d067e1fd89e4991bfc465daf24ae4603fad7fe8bf8bebfa6b02850a313862451439e78eaaccc0ab444f726b999bf516653462dc7242782cba95c7054c58f66594e0591ce28aebd0fc8f1702a1671a880e06fe9f80f249b6ed65576f312ef2a11e72b6928755dd0cfccc5b10818758c8f0536a5dd67f7fef9007b79c87a8df098886d974065c9d538b3004648e89b49a09a446aecc371d24c67c10e514f23bf83401140a2688fea16756fadcd4feeb066985d87e94e9cc0c09f5f7f45d7f46461b2e3f6eb8aee7799708f5c3de91977413e3b85a3c166bc8702d3c09b32fcc5a", 0x6, 0x8}, 0x2}, 0xf19, 0x6, &(0x7f0000000440)={0x6, 0xd}) 6.127069037s ago: executing program 2 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) (async, rerun: 32) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r2, @ANYBLOB="0c002e010010000000008000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x12c, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7fffffff}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x200}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xf1, 0x136, "5eac2e2684d3903ae2f3ef8e2378fe08dc67d369cd83c2631d8c86e960a711e9b500bf7347accbd1c7f5397b309eb524e9e798714d75e9034f14bb98c6b0581eedfa4ccb95c361d9a9eefe4cd2ddd05237e0ba1bae4aaa34345481908423289256c54aa18bf9dae3e5143ce89c0bcf7db715391b34e093c5536d3516550da418d3acf431bdee8340edbdc0b19b3ddc6fefa26abcc5563befff810b1115e8e0fa5fbe8ee090bae23874790e68efc4664503f08823f42a3753655648426a66a51c82beb929188f9f312120d1f7888af3f8d7c4f8c45cdf0c0650fc758ce936ab066847953d0467a32a7dd20cf62b"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x7}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20048840}, 0x40000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0xa, 0x801, 0x84) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) (rerun: 32) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32) madvise$auto(0x0, 0xe6, 0xb) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) (async) r3 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x8040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x7fff, 0x7, 0x4, 0x61, 0x103}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async, rerun: 64) ioctl$auto(r4, 0x80004507, 0x10000000000402) (async, rerun: 64) madvise$auto(0x8000, 0x87fff, 0xc) (async) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x6) clone$auto(0x9001, 0xcfe7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x10005) 5.252209944s ago: executing program 2 (id=3400): r0 = openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x8400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x7fff) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) fcntl$auto_F_SETSIG(r1, 0xa, 0x44) read$auto(r1, 0x0, 0x1f40) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = bpf$auto(0x12, &(0x7f0000000040)=@enable_stats={0x1}, 0x26) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto_EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000100)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/mb_group_prealloc\x00', 0x8001, 0x0) r4 = ioctl$auto_TUNSETLINK(r3, 0x400454cd, &(0x7f00000001c0)=0x7944) write$auto(r4, &(0x7f0000000180)='\x00\x00\xcc\xeal\xa8%\x1f\x1fH \xc1\xa0\xed\xa8\xd1\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xac\xcclWG\xdbC\x80\xcc3h?\x1c\xc1\xcc]\xac\xeb\x1923Y7\x05d#\xc9\xc1\xac\x80df\x89\xca', 0x100000000081) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000340)=@link_update={r2, @new_prog_fd=r3, 0x4, @old_map_fd}, 0x1ff) ioctl$auto_FS_IOC_FIEMAP(r3, 0xc020660b, 0x8) openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x8400, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x7fff) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) (async) fcntl$auto_F_SETSIG(r1, 0xa, 0x44) (async) read$auto(r1, 0x0, 0x1f40) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) bpf$auto(0x12, &(0x7f0000000040)=@enable_stats={0x1}, 0x26) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) ioctl$auto_EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000100)) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/mb_group_prealloc\x00', 0x8001, 0x0) (async) ioctl$auto_TUNSETLINK(r3, 0x400454cd, &(0x7f00000001c0)=0x7944) (async) write$auto(r4, &(0x7f0000000180)='\x00\x00\xcc\xeal\xa8%\x1f\x1fH \xc1\xa0\xed\xa8\xd1\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xac\xcclWG\xdbC\x80\xcc3h?\x1c\xc1\xcc]\xac\xeb\x1923Y7\x05d#\xc9\xc1\xac\x80df\x89\xca', 0x100000000081) (async) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000340)=@link_update={r2, @new_prog_fd=r3, 0x4, @old_map_fd}, 0x1ff) (async) ioctl$auto_FS_IOC_FIEMAP(r3, 0xc020660b, 0x8) (async) 4.720138551s ago: executing program 6 (id=3401): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0xef) setreuid$auto(0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa801, 0x0) write$auto(0x3, 0x0, 0x7fffffff) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=@bpf_attr_1={0xffffffffffffffff, 0x2e, @value=0x1, 0x3}, 0x61) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = bpf$auto(0x0, 0x0, 0x92) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r3) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x90, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) pread64$auto(r1, 0x0, 0x200000000006, 0x8) 4.580983903s ago: executing program 2 (id=3402): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x2a, 0x3, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x103, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="20edff00", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) r3 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r3, 0x11) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/power/autosuspend_delay_ms\x00', 0x28000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) 4.454339785s ago: executing program 3 (id=3403): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) ioctl$auto(r0, 0x9210640b, 0xffffffffffffffff) mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000080)=0x1) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x20000, 0x0) 4.029534308s ago: executing program 3 (id=3404): r0 = socket(0x15, 0x5, 0x0) (async, rerun: 64) mmap$auto(0x3, 0x4020009, 0xe0, 0xeb1, 0xffffffffffffffff, 0xc) (async, rerun: 64) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) (async) r2 = io_uring_setup$auto(0xff, 0x0) ioctl$auto(r1, 0xc0585604, r2) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) setsockopt$auto(r0, 0x7fffffff, 0x8, 0x0, 0x9) (async) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xf, 0x11) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r0) 3.456155644s ago: executing program 3 (id=3405): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) shmget$auto(0x0, 0x200000005, 0x7d) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x6, 0x300) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) io_uring_setup$auto(0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r5 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x401, r5, @relative_id=0x11, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(r8, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="ffff2bbd7000fedbdf250300040005"], 0x18}, 0x1, 0x0, 0x0, 0x40081}, 0x20000c50) write$auto(r1, &(0x7f0000000000)='*\x00', 0xfd) 3.149226946s ago: executing program 6 (id=3406): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0xab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x4, r0, 0xedcc, 0x8001, 0xc1, 0x8}) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x1}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe0}, 0x80) 2.438219871s ago: executing program 3 (id=3407): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) write$auto(r0, 0x0, 0x6) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x2, 0x32, 0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) r1 = epoll_create$auto(0x3e) r2 = socket(0x1, 0x3, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x24) epoll_ctl$auto(r1, 0x1, r2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, 0x0, 0x4008004) socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x86) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0) ioctl$auto(r5, 0xc0585611, r5) 1.964159927s ago: executing program 6 (id=3408): r0 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r0, 0x10f, 0x0, 0x0, 0x0) 1.605419735s ago: executing program 3 (id=3409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000000), 0xffffffffffffffff) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80040}, 0x44800) write$auto(r0, &(0x7f0000000040)='\x00', 0x0) 1.372041329s ago: executing program 2 (id=3410): socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0x8, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) 986.836212ms ago: executing program 6 (id=3411): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x3, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x26, 0x5, 0x8c68) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) futex_waitv$auto(0x0, 0x7ff, 0x8, &(0x7f00000000c0)={0x1000000004, 0x10}, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r4, 0x6, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) unshare$auto(0x40000080) setsockopt$auto(r1, 0xd0, 0x800000e4, 0x0, 0x569) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0xffffffffffffffff, 0x8000) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="cb5b"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) 962.783952ms ago: executing program 7 (id=3412): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x404000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002c40)=""/25, 0x19) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f0000000100)="071fb8f2626272b2729d884ef47fb2b0763f9b09c32d6f0a3a898f887ab20c82167bfaa0290944448810b6a5944f416bd9724910219e14a571db765b661bdce535e1bbd8f8b1e3a1eec7ace25e68c7ed0742a266d59b65d75e888f15345856381280190e7941bf85f48527fa815fb5682846bac2e2a70176de58a2201753418f2d0acc5c0f763fe14a4bb490a87a98d559a9f88d79ee57917fe622cc246ab0d8136a77ce680b3976f2fcc3a058924581e286f96b0f42e4f519fc27eac03a71e5999b801ac832d75d38ae6ec4367ce14c7dd9191b99514bdccf3594d9d548cc138268341b4ee48ca682f289f88cc10c46d37e", 0xcd0, &(0x7f0000000300)={&(0x7f0000000200)="8e4e787db39902cda6ce2a78c9d68b5e7208d48be6791d5c39b04cb01e42a3a5d5a1683d2556331bcd4ca3bbc8d168ed6adeb54ee89170fa49d133dca1fa244dd7568be0f414d0c5434dd610ac29bb95f78ee5590453b31073097b64fd6aea6e9769ad15546cd56482acc1fcf495caa2a07c589d08feffc89675c6c51671fb61c554b5b71edd31ac40a1345303b60126230894e12c1e28fd748fa487969ac6cae60de6b413a5dc32c515ed83d1a1df1e125cdaeae0f5e5761e4bcdfa72b05afb8a52fec55e7e60638d2dbcde17f5d3fe045e55bc3ff30df9cfa0", 0x9}, 0xc, &(0x7f0000000340)="ed0cf61ed9ed57fad7debc232afe0036f1a287838dcc3079653c44db45a1", 0x762, 0xaa}, 0x3}, 0x8, 0x2) mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0189436, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0x6, 0x10000}) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000080)=0x2) pwrite64$auto(0xc8, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfc\xff\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x20000, 0x0) select$auto(0x2, &(0x7f00000003c0)={[0x48fb, 0xffffffffffff8001, 0x4, 0x80000000, 0x8, 0x97, 0x8, 0x2, 0x8, 0x5, 0x3, 0x1ff, 0x9, 0xd9, 0x8, 0x6]}, &(0x7f0000000440)={[0x39, 0x38, 0x3, 0xe340, 0x5, 0x3e2a, 0xf, 0x400, 0x6, 0xffffffffffffffff, 0x7ff, 0x1, 0x8, 0xfffffffffffff7b2, 0x4, 0x6]}, &(0x7f00000004c0)={[0x1, 0x70f, 0x9, 0x2, 0xfff, 0x5, 0x3, 0x6936a3f3, 0x1af, 0x5, 0xd243, 0x9, 0x8, 0x7, 0x800000002, 0x2]}, &(0x7f00000000c0)={0xe, 0x2}) 917.029352ms ago: executing program 3 (id=3413): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x2, 0x100000, 0x100000, 0x100000000000002, 0x0, 0x0, 0x8, 0x87, 0x2c, 0x4, 0x3}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@llc={0x1a, 0x337, 0x7, 0x1, 0x6, 0x18, @local}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) (async) r2 = io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$auto(0x1c, &(0x7f00000000c0)=@bpf_attr_7={@link_id=0x4, 0x4, 0x3, r2}, 0x7) capset$auto(0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x14, 0x0, 0x4) capset$auto(0x0, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) mmap$auto(0x0, 0x4, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r5 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r5, 0x4010ae68, r6) (async) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r7, 0x0, 0xf42c, 0x1000000000400) (async) prctl$auto(0x13b, 0x1, 0x4, 0x5, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 246.00156ms ago: executing program 2 (id=3414): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000000)='7\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) unshare$auto(0x40000080) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/urbs\x00', 0x40200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x7}, 0x5, 0x7fffffff, 0x1000) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010031bf7000fddbdf250c00000018000380140003801000b0800c000200657468706f6f6c001800018014000200776c616e3000"/62], 0x44}}, 0x24048084) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.pressure\x00', 0x42802, 0x0) write$auto(r4, &(0x7f00000003c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) r6 = socket(0x1d, 0x2, 0x7) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth1_to_bridge\x00'}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x9}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x7}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x8}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x2}, @THERMAL_GENL_ATTR_TZ_ID={0x8}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8}, @THERMAL_GENL_ATTR_TZ_TRIP={0x70, 0x4, 0x0, 0x1, [@nested={0x6a, 0x71, 0x0, 0x1, [@typed={0x36, 0x99, 0x0, 0x0, @str='7\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"='}, @typed={0xa, 0xdd, 0x0, 0x0, @str='vcan0\x00'}, @nested={0x4, 0x80}, @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x40}, @generic="fab8b812634c8f6a55068be4bb482b32bccc", @nested={0x4, 0xc9}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x80048c0) r7 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r6, &(0x7f0000000280)=@can={0x1d, r8}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x9a8, 0x70bd29, 0x24dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x83e}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x911}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 7 (id=3415): r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) getsockopt$auto_SO_BUF_LOCK(r0, 0x4, 0x48, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000080)=0x2) unshare$auto(0xf) socket(0xf, 0x5, 0x3a) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3a) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, 0x0, 0x24008000) kcmp$auto(0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x1) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22040000}, 0x4004041) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x10}, 0x2, &(0x7f0000000140), 0x8, 0x1}, 0x5}, 0x2, 0x101) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) futex$auto(&(0x7f00000000c0)=0x2a08, 0xc, 0x1, 0x0, &(0x7f0000000180)=0x5, 0x2a08) sendmsg$auto_NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf251300000005000f0009001d002b3ef8b0fdf9195984a638bfa774d959c9ed70dd906c8cd36d40f2e76fe6727fd929586d15a5b5a7e3b980592ecff2d4116bbe7a8e4b5138526f8ba8"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket(0x2b, 0x1, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r3, 0x454f, 0x5f, 0x0, 0x0, r3, 0x80000001}, 0x6d4) listen$auto(0x3, 0x81) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x43, 0x9, 0x5) kernel console output (not intermixed with test programs): .220889][T18468] do_futex+0x1ef/0x350 [ 1050.220921][T18468] ? __pfx_do_futex+0x10/0x10 [ 1050.220951][T18468] ? ktime_get+0x200/0x300 [ 1050.220975][T18468] ? lockdep_hardirqs_on+0x78/0x100 [ 1050.221005][T18468] ? read_tsc+0x9/0x20 [ 1050.221035][T18468] __x64_sys_futex+0x34f/0x4d0 [ 1050.221071][T18468] ? __pfx___x64_sys_futex+0x10/0x10 [ 1050.221114][T18468] do_syscall_64+0x106/0xf80 [ 1050.221142][T18468] ? clear_bhb_loop+0x40/0x90 [ 1050.221172][T18468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.221198][T18468] RIP: 0033:0x7f25b5b9c799 [ 1050.221221][T18468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.221245][T18468] RSP: 002b:00007ffc72d51a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1050.221268][T18468] RAX: ffffffffffffffda RBX: 0000000000100663 RCX: 00007f25b5b9c799 [ 1050.221284][T18468] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f25b5e15fac [ 1050.221300][T18468] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 1050.221314][T18468] R10: 00007ffc72d51b20 R11: 0000000000000246 R12: 00007ffc72d51b40 [ 1050.221330][T18468] R13: 00007f25b5e15fac R14: 0000000000100695 R15: 00007ffc72d51b20 [ 1050.221361][T18468] [ 1050.720553][T18338] veth1_vlan: entered promiscuous mode [ 1050.835380][T18338] veth0_macvtap: entered promiscuous mode [ 1051.042861][T18338] veth1_macvtap: entered promiscuous mode [ 1051.214843][T18338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.259169][T18338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.444548][T10032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.556899][T10032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.591297][T10032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.600062][T10032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.116968][T12596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.170520][T12596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.312135][T12596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.362028][T12596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.866404][T18513] nbd: must specify at least one socket [ 1054.448402][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.459282][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.982608][T18525] FAULT_INJECTION: forcing a failure. [ 1054.982608][T18525] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.075565][T18525] CPU: 0 UID: 0 PID: 18525 Comm: syz.0.2621 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.075606][T18525] Tainted: [L]=SOFTLOCKUP [ 1055.075615][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.075632][T18525] Call Trace: [ 1055.075640][T18525] [ 1055.075650][T18525] dump_stack_lvl+0x100/0x190 [ 1055.075694][T18525] should_fail_ex.cold+0x5/0xa [ 1055.075723][T18525] should_failslab+0xc2/0x120 [ 1055.075750][T18525] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1055.075788][T18525] ? __mpol_dup+0x74/0x370 [ 1055.075822][T18525] __mpol_dup+0x74/0x370 [ 1055.075851][T18525] ? __pfx___mpol_dup+0x10/0x10 [ 1055.075879][T18525] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1055.075916][T18525] ? sp_alloc+0x27/0x160 [ 1055.075950][T18525] sp_alloc+0x4d/0x160 [ 1055.075980][T18525] mpol_set_shared_policy+0xa5/0x8a0 [ 1055.076017][T18525] ? __pfx_shmem_set_policy+0x10/0x10 [ 1055.076045][T18525] mbind_range+0x339/0x550 [ 1055.076079][T18525] do_mbind+0x7de/0xfd0 [ 1055.076115][T18525] ? __might_fault+0xc5/0x140 [ 1055.076151][T18525] ? __pfx_do_mbind+0x10/0x10 [ 1055.076189][T18525] ? _copy_from_user+0x59/0xd0 [ 1055.076238][T18525] ? __pfx_get_nodes+0x10/0x10 [ 1055.076286][T18525] kernel_mbind+0x1b7/0x200 [ 1055.076319][T18525] ? __pfx_kernel_mbind+0x10/0x10 [ 1055.076359][T18525] do_syscall_64+0x106/0xf80 [ 1055.076390][T18525] ? clear_bhb_loop+0x40/0x90 [ 1055.076421][T18525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.076457][T18525] RIP: 0033:0x7f1d1cb9c799 [ 1055.076477][T18525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.076504][T18525] RSP: 002b:00007f1d1da97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1055.076529][T18525] RAX: ffffffffffffffda RBX: 00007f1d1ce16090 RCX: 00007f1d1cb9c799 [ 1055.076547][T18525] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 1055.076564][T18525] RBP: 00007f1d1cc32bd9 R08: 0000000000000003 R09: 0000000000000003 [ 1055.076580][T18525] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1055.076596][T18525] R13: 00007f1d1ce16128 R14: 00007f1d1ce16090 R15: 00007fff86510ee8 [ 1055.076629][T18525] [ 1055.718001][T18531] bridge0: port 3(gretap0) entered blocking state [ 1055.780791][T18531] bridge0: port 3(gretap0) entered disabled state [ 1055.817633][T18531] gretap0: entered allmulticast mode [ 1055.833803][T18531] gretap0: entered promiscuous mode [ 1055.839576][T18531] bridge0: port 3(gretap0) entered blocking state [ 1055.846280][T18531] bridge0: port 3(gretap0) entered forwarding state [ 1057.186531][T18547] netlink: 'syz.3.2626': attribute type 4 has an invalid length. [ 1057.257392][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'. [ 1057.587338][T18557] nbd: must specify at least one socket [ 1058.931021][T18572] Invalid ELF header magic: != ELF [ 1060.609581][T18597] binder: 18596:18597 ioctl c018620c 0 returned -1 [ 1060.895489][T18607] nbd: must specify at least one socket [ 1062.951876][T18626] zswap: compressor d_ not available [ 1063.622643][T18644] nbd: must specify at least one socket [ 1067.188457][T18688] nbd: must specify at least one socket [ 1069.372269][ T29] audit: type=1804 audit(2147503440.102:32): pid=18708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2666" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1063 res=1 errno=0 [ 1069.397143][T18707] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1070.826471][T18717] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1071.051547][T18722] Invalid ELF header magic: != ELF [ 1071.775523][T18731] nbd: must specify at least one socket [ 1072.196651][T18733] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1073.150713][T18748] netlink: 'syz.3.2673': attribute type 2 has an invalid length. [ 1073.250766][ T29] audit: type=1326 audit(2147521787.982:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18742 comm="syz.3.2673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b5b9c799 code=0x0 [ 1074.686548][T18770] nbd: must specify at least one socket [ 1076.919938][T18785] FAULT_INJECTION: forcing a failure. [ 1076.919938][T18785] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.210871][T18785] CPU: 0 UID: 0 PID: 18785 Comm: syz.0.2683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.210913][T18785] Tainted: [L]=SOFTLOCKUP [ 1077.210922][T18785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1077.210939][T18785] Call Trace: [ 1077.210948][T18785] [ 1077.210958][T18785] dump_stack_lvl+0x100/0x190 [ 1077.211003][T18785] should_fail_ex.cold+0x5/0xa [ 1077.211032][T18785] ? memcg_list_lru_alloc+0x4ec/0x740 [ 1077.211071][T18785] should_failslab+0xc2/0x120 [ 1077.211097][T18785] __kmalloc_noprof+0xe0/0x850 [ 1077.211135][T18785] ? ipcget+0xee/0xf50 [ 1077.211183][T18785] memcg_list_lru_alloc+0x4ec/0x740 [ 1077.211233][T18785] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1077.211271][T18785] ? rcu_read_unlock+0x17/0x60 [ 1077.211306][T18785] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1077.211348][T18785] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 1077.211383][T18785] ? kasan_save_track+0x14/0x30 [ 1077.211425][T18785] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 1077.211464][T18785] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1077.211521][T18785] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1077.211563][T18785] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1077.211607][T18785] alloc_inode+0x68/0x250 [ 1077.211651][T18785] new_inode+0x22/0x1c0 [ 1077.211687][T18785] hugetlbfs_get_inode+0x313/0x750 [ 1077.211717][T18785] hugetlb_file_setup+0x3cc/0x5b0 [ 1077.211747][T18785] newseg+0xabb/0xed0 [ 1077.211778][T18785] ? __pfx_newseg+0x10/0x10 [ 1077.211803][T18785] ? down_write+0x146/0x1f0 [ 1077.211838][T18785] ? ksys_write+0x190/0x250 [ 1077.211878][T18785] ? ksys_write+0x190/0x250 [ 1077.211923][T18785] ipcget+0xee/0xf50 [ 1077.211948][T18785] ? do_futex+0x192/0x350 [ 1077.211983][T18785] ? __pfx_do_futex+0x10/0x10 [ 1077.212020][T18785] ? __pfx_ipcget+0x10/0x10 [ 1077.212048][T18785] ? __x64_sys_futex+0x34f/0x4d0 [ 1077.212080][T18785] ? __x64_sys_futex+0x358/0x4d0 [ 1077.212118][T18785] __x64_sys_shmget+0x13b/0x1b0 [ 1077.212146][T18785] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1077.212182][T18785] do_syscall_64+0x106/0xf80 [ 1077.212212][T18785] ? clear_bhb_loop+0x40/0x90 [ 1077.212243][T18785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.212270][T18785] RIP: 0033:0x7f1d1cb9c799 [ 1077.212291][T18785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.212317][T18785] RSP: 002b:00007f1d1da13028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1077.212342][T18785] RAX: ffffffffffffffda RBX: 00007f1d1ce16450 RCX: 00007f1d1cb9c799 [ 1077.212360][T18785] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1077.212377][T18785] RBP: 00007f1d1cc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1077.212393][T18785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.212408][T18785] R13: 00007f1d1ce164e8 R14: 00007f1d1ce16450 R15: 00007fff86510ee8 [ 1077.212440][T18785] [ 1079.161810][T18805] nbd: must specify at least one socket [ 1083.403386][T18843] nbd: must specify at least one socket [ 1084.550713][T18854] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2703'. [ 1085.588932][T18875] nbd: must specify at least one socket [ 1087.063245][T18889] nbd: must specify at least one socket [ 1087.749144][T18902] nbd: must specify at least one socket [ 1088.579435][T18917] FAULT_INJECTION: forcing a failure. [ 1088.579435][T18917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1088.662356][T18917] CPU: 0 UID: 0 PID: 18917 Comm: syz.0.2730 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.662394][T18917] Tainted: [L]=SOFTLOCKUP [ 1088.662403][T18917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1088.662418][T18917] Call Trace: [ 1088.662427][T18917] [ 1088.662436][T18917] dump_stack_lvl+0x100/0x190 [ 1088.662478][T18917] should_fail_ex.cold+0x5/0xa [ 1088.662502][T18917] ? prepare_alloc_pages+0x16d/0x5f0 [ 1088.662538][T18917] should_fail_alloc_page+0xeb/0x140 [ 1088.662564][T18917] prepare_alloc_pages+0x1f0/0x5f0 [ 1088.662596][T18917] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1088.662635][T18917] ? __pfx___might_resched+0x10/0x10 [ 1088.662671][T18917] ? find_held_lock+0x2b/0x80 [ 1088.662700][T18917] ? process_measurement+0x4c8/0x2350 [ 1088.662735][T18917] ? process_measurement+0x4c8/0x2350 [ 1088.662772][T18917] ? up_write+0x290/0x4f0 [ 1088.662806][T18917] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1088.662851][T18917] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1088.662899][T18917] ? __lock_acquire+0x4a5/0x2630 [ 1088.662931][T18917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1088.662975][T18917] ? policy_nodemask+0xed/0x4f0 [ 1088.663002][T18917] alloc_pages_mpol+0x1fb/0x550 [ 1088.663028][T18917] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1088.663061][T18917] alloc_pages_noprof+0x131/0x390 [ 1088.663094][T18917] __pmd_alloc+0x3b/0x9c0 [ 1088.663125][T18917] __handle_mm_fault+0xa99/0x2b60 [ 1088.663162][T18917] ? mt_find+0x45e/0x8e0 [ 1088.663197][T18917] ? __pfx___handle_mm_fault+0x10/0x10 [ 1088.663228][T18917] ? __pfx_mt_find+0x10/0x10 [ 1088.663275][T18917] ? find_vma+0xbf/0x140 [ 1088.663297][T18917] ? __pfx_find_vma+0x10/0x10 [ 1088.663322][T18917] handle_mm_fault+0x36d/0xa20 [ 1088.663360][T18917] do_user_addr_fault+0x74c/0x12f0 [ 1088.663412][T18917] exc_page_fault+0x6f/0xd0 [ 1088.663440][T18917] asm_exc_page_fault+0x26/0x30 [ 1088.663464][T18917] RIP: 0010:__get_user_1+0x14/0x30 [ 1088.663502][T18917] Code: cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1088.663532][T18917] RSP: 0018:ffffc90004e1fca8 EFLAGS: 00050287 [ 1088.663551][T18917] RAX: 0000000000000000 RBX: ffff888059a61000 RCX: ffffc90004e1fc4c [ 1088.663568][T18917] RDX: 00007ffffffff000 RSI: ffffffff8255d9d1 RDI: ffffffff8c1af420 [ 1088.663584][T18917] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001ca [ 1088.663598][T18917] R10: 0000000000000200 R11: 0000000000000000 R12: dffffc0000000000 [ 1088.663614][T18917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000070 [ 1088.663637][T18917] ? __might_fault+0x111/0x140 [ 1088.663675][T18917] mousedev_write+0x26f/0x870 [ 1088.663731][T18917] vfs_write+0x2aa/0x1070 [ 1088.663770][T18917] ? __pfx_mousedev_write+0x10/0x10 [ 1088.663798][T18917] ? __pfx_vfs_write+0x10/0x10 [ 1088.663834][T18917] ? find_held_lock+0x2b/0x80 [ 1088.663854][T18917] ? __fget_files+0x215/0x3d0 [ 1088.663876][T18917] ? __fget_files+0x215/0x3d0 [ 1088.663902][T18917] ? __fget_files+0x21f/0x3d0 [ 1088.663932][T18917] ksys_write+0x1f8/0x250 [ 1088.663970][T18917] ? __pfx_ksys_write+0x10/0x10 [ 1088.664017][T18917] do_syscall_64+0x106/0xf80 [ 1088.664044][T18917] ? clear_bhb_loop+0x40/0x90 [ 1088.664074][T18917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.664099][T18917] RIP: 0033:0x7f1d1cb9c799 [ 1088.664118][T18917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.664141][T18917] RSP: 002b:00007f1d1da97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1088.664163][T18917] RAX: ffffffffffffffda RBX: 00007f1d1ce16090 RCX: 00007f1d1cb9c799 [ 1088.664179][T18917] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000003 [ 1088.664193][T18917] RBP: 00007f1d1da97090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.664207][T18917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.664222][T18917] R13: 00007f1d1ce16128 R14: 00007f1d1ce16090 R15: 00007fff86510ee8 [ 1088.664252][T18917] [ 1089.504870][T18928] ptrace attach of "./syz-executor exec"[13009] was attempted by ""[18928] [ 1089.868151][T18936] nbd: must specify at least one socket [ 1091.026049][T18946] FAULT_INJECTION: forcing a failure. [ 1091.026049][T18946] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.093618][T18946] CPU: 0 UID: 0 PID: 18946 Comm: syz.6.2731 Tainted: G L syzkaller #0 PREEMPT(full) [ 1091.093666][T18946] Tainted: [L]=SOFTLOCKUP [ 1091.093675][T18946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1091.093691][T18946] Call Trace: [ 1091.093700][T18946] [ 1091.093710][T18946] dump_stack_lvl+0x100/0x190 [ 1091.093754][T18946] should_fail_ex.cold+0x5/0xa [ 1091.093784][T18946] should_failslab+0xc2/0x120 [ 1091.093810][T18946] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1091.093849][T18946] ? shmem_alloc_inode+0x25/0x50 [ 1091.093880][T18946] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1091.093910][T18946] shmem_alloc_inode+0x25/0x50 [ 1091.093940][T18946] alloc_inode+0x68/0x250 [ 1091.093974][T18946] new_inode+0x22/0x1c0 [ 1091.094004][T18946] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1091.094034][T18946] shmem_get_inode+0x212/0x1040 [ 1091.094072][T18946] ? __pfx_shmem_get_inode+0x10/0x10 [ 1091.094104][T18946] ? rcu_is_watching+0x12/0xc0 [ 1091.094141][T18946] ? percpu_counter_add_batch+0xb9/0x230 [ 1091.094265][T18946] __shmem_file_setup+0x3ac/0x490 [ 1091.094301][T18946] ? __pfx___shmem_file_setup+0x10/0x10 [ 1091.094341][T18946] ? vm_area_alloc+0x1f/0x160 [ 1091.094378][T18946] shmem_zero_setup+0x96/0x1b0 [ 1091.094430][T18946] __mmap_region+0x2198/0x29e0 [ 1091.094473][T18946] ? __pfx___mmap_region+0x10/0x10 [ 1091.094516][T18946] ? set_next_entity+0x11b/0x9c0 [ 1091.094559][T18946] ? __lock_acquire+0x4a5/0x2630 [ 1091.094591][T18946] ? update_cfs_rq_load_avg+0x51/0x550 [ 1091.094631][T18946] ? find_held_lock+0x2b/0x80 [ 1091.094653][T18946] ? finish_task_switch.isra.0+0x200/0xb80 [ 1091.094681][T18946] ? finish_task_switch.isra.0+0x200/0xb80 [ 1091.094719][T18946] ? trace_sched_exit_tp+0x13a/0x180 [ 1091.094754][T18946] ? __schedule+0x1000/0x60e0 [ 1091.094819][T18946] ? rcu_is_watching+0x12/0xc0 [ 1091.094857][T18946] ? cap_capable+0x107/0x460 [ 1091.094897][T18946] mmap_region+0x180/0x3e0 [ 1091.094940][T18946] do_mmap+0xc63/0x12f0 [ 1091.094973][T18946] ? __pfx_do_mmap+0x10/0x10 [ 1091.095001][T18946] ? __pfx_down_write_killable+0x10/0x10 [ 1091.095042][T18946] vm_mmap_pgoff+0x29e/0x470 [ 1091.095075][T18946] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1091.095105][T18946] ? do_futex+0x192/0x350 [ 1091.095138][T18946] ? __pfx_do_futex+0x10/0x10 [ 1091.095176][T18946] ksys_mmap_pgoff+0xe1/0x650 [ 1091.095202][T18946] ? __x64_sys_futex+0x34f/0x4d0 [ 1091.095234][T18946] ? __x64_sys_futex+0x358/0x4d0 [ 1091.095268][T18946] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1091.095294][T18946] ? xfd_validate_state+0x129/0x190 [ 1091.095336][T18946] __x64_sys_mmap+0x125/0x190 [ 1091.095377][T18946] do_syscall_64+0x106/0xf80 [ 1091.095480][T18946] ? clear_bhb_loop+0x40/0x90 [ 1091.095517][T18946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.095545][T18946] RIP: 0033:0x7fc0fcf9c799 [ 1091.095567][T18946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.095593][T18946] RSP: 002b:00007fc0fde8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1091.095617][T18946] RAX: ffffffffffffffda RBX: 00007fc0fd215fa0 RCX: 00007fc0fcf9c799 [ 1091.095634][T18946] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1091.095650][T18946] RBP: 00007fc0fd032bd9 R08: fffffffffffffffa R09: 0000000000008000 [ 1091.095667][T18946] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1091.095684][T18946] R13: 00007fc0fd216038 R14: 00007fc0fd215fa0 R15: 00007ffc69051798 [ 1091.095718][T18946] [ 1091.912072][T18950] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1091.934232][T18950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1091.940335][T18950] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1091.992339][T18950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1091.998363][T18950] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1092.055365][T18950] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1092.097555][T18950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1092.108254][T18962] FAULT_INJECTION: forcing a failure. [ 1092.108254][T18962] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.157964][T18950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1092.166730][T18962] CPU: 0 UID: 0 PID: 18962 Comm: syz.2.2735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.166767][T18962] Tainted: [L]=SOFTLOCKUP [ 1092.166776][T18962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1092.166791][T18962] Call Trace: [ 1092.166799][T18962] [ 1092.166808][T18962] dump_stack_lvl+0x100/0x190 [ 1092.166849][T18962] should_fail_ex.cold+0x5/0xa [ 1092.166878][T18962] should_failslab+0xc2/0x120 [ 1092.166903][T18962] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1092.166945][T18962] ? __pmd_alloc+0xbf/0x9c0 [ 1092.166978][T18962] __pmd_alloc+0xbf/0x9c0 [ 1092.167008][T18962] __handle_mm_fault+0xa99/0x2b60 [ 1092.167045][T18962] ? mt_find+0x45e/0x8e0 [ 1092.167078][T18962] ? __pfx___handle_mm_fault+0x10/0x10 [ 1092.167109][T18962] ? __pfx_mt_find+0x10/0x10 [ 1092.167155][T18962] ? find_vma+0xbf/0x140 [ 1092.167177][T18962] ? __pfx_find_vma+0x10/0x10 [ 1092.167203][T18962] handle_mm_fault+0x36d/0xa20 [ 1092.167241][T18962] do_user_addr_fault+0x74c/0x12f0 [ 1092.167289][T18962] exc_page_fault+0x6f/0xd0 [ 1092.167319][T18962] asm_exc_page_fault+0x26/0x30 [ 1092.167343][T18962] RIP: 0010:__get_user_1+0x14/0x30 [ 1092.167382][T18962] Code: cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1092.167412][T18962] RSP: 0018:ffffc900050dfca8 EFLAGS: 00050287 [ 1092.167431][T18962] RAX: 0000000000000000 RBX: ffff88805d246800 RCX: ffffc900050dfc4c [ 1092.167448][T18962] RDX: 00007ffffffff000 RSI: ffffffff8255d9d1 RDI: ffffffff8c1af420 [ 1092.167464][T18962] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001ca [ 1092.167479][T18962] R10: 0000000000000200 R11: 0000000000000000 R12: dffffc0000000000 [ 1092.167493][T18962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000070 [ 1092.167517][T18962] ? __might_fault+0x111/0x140 [ 1092.167555][T18962] mousedev_write+0x26f/0x870 [ 1092.167589][T18962] vfs_write+0x2aa/0x1070 [ 1092.167629][T18962] ? __pfx_mousedev_write+0x10/0x10 [ 1092.167658][T18962] ? __pfx_vfs_write+0x10/0x10 [ 1092.167694][T18962] ? find_held_lock+0x2b/0x80 [ 1092.167716][T18962] ? __fget_files+0x215/0x3d0 [ 1092.167737][T18962] ? __fget_files+0x215/0x3d0 [ 1092.167767][T18962] ? __fget_files+0x21f/0x3d0 [ 1092.167796][T18962] ksys_write+0x1f8/0x250 [ 1092.167833][T18962] ? __pfx_ksys_write+0x10/0x10 [ 1092.167879][T18962] do_syscall_64+0x106/0xf80 [ 1092.167911][T18962] ? clear_bhb_loop+0x40/0x90 [ 1092.167941][T18962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.167966][T18962] RIP: 0033:0x7fb6bdd9c799 [ 1092.167985][T18962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.168007][T18962] RSP: 002b:00007fb6bec74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1092.168028][T18962] RAX: ffffffffffffffda RBX: 00007fb6be016090 RCX: 00007fb6bdd9c799 [ 1092.168044][T18962] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000003 [ 1092.168059][T18962] RBP: 00007fb6bec74090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.168074][T18962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.168088][T18962] R13: 00007fb6be016128 R14: 00007fb6be016090 R15: 00007ffebc8c8358 [ 1092.168119][T18962] [ 1093.214203][T18950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1093.633074][T18977] netlink: 'syz.0.2738': attribute type 2 has an invalid length. [ 1093.801398][T14588] Bluetooth: hci0: command 0x0406 tx timeout [ 1093.989998][T18980] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1094.037604][T18981] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1094.048361][T14588] Bluetooth: hci2: command 0x0c1a tx timeout [ 1094.055954][T14588] Bluetooth: hci5: command 0x0c1a tx timeout [ 1094.062077][T14588] Bluetooth: hci4: command 0x0c1a tx timeout [ 1094.201302][T18982] Bluetooth: hci3: command 0x0c1a tx timeout [ 1095.050373][T19004] FAULT_INJECTION: forcing a failure. [ 1095.050373][T19004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1095.107694][T19004] CPU: 0 UID: 0 PID: 19004 Comm: syz.0.2747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1095.107731][T19004] Tainted: [L]=SOFTLOCKUP [ 1095.107740][T19004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1095.107755][T19004] Call Trace: [ 1095.107763][T19004] [ 1095.107773][T19004] dump_stack_lvl+0x100/0x190 [ 1095.107813][T19004] should_fail_ex.cold+0x5/0xa [ 1095.107836][T19004] ? prepare_alloc_pages+0x16d/0x5f0 [ 1095.107867][T19004] should_fail_alloc_page+0xeb/0x140 [ 1095.107893][T19004] prepare_alloc_pages+0x1f0/0x5f0 [ 1095.107925][T19004] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1095.107965][T19004] ? stack_trace_save+0x8e/0xc0 [ 1095.107995][T19004] ? __pfx_stack_trace_save+0x10/0x10 [ 1095.108019][T19004] ? stack_depot_save_flags+0x27/0x9d0 [ 1095.108044][T19004] ? __pfx___might_resched+0x10/0x10 [ 1095.108086][T19004] ? kasan_save_stack+0x3f/0x50 [ 1095.108122][T19004] ? kasan_save_stack+0x30/0x50 [ 1095.108159][T19004] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1095.108195][T19004] ? __pmd_alloc+0xbf/0x9c0 [ 1095.108220][T19004] ? __handle_mm_fault+0xa99/0x2b60 [ 1095.108251][T19004] ? handle_mm_fault+0x36d/0xa20 [ 1095.108281][T19004] ? exc_page_fault+0x6f/0xd0 [ 1095.108315][T19004] ? __get_user_1+0x14/0x30 [ 1095.108350][T19004] ? mousedev_write+0x26f/0x870 [ 1095.108376][T19004] ? vfs_write+0x2aa/0x1070 [ 1095.108412][T19004] ? ksys_write+0x1f8/0x250 [ 1095.108447][T19004] ? do_syscall_64+0x106/0xf80 [ 1095.108479][T19004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.108518][T19004] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1095.108561][T19004] ? policy_nodemask+0xed/0x4f0 [ 1095.108591][T19004] alloc_pages_mpol+0x1fb/0x550 [ 1095.108617][T19004] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1095.108649][T19004] alloc_pages_noprof+0x131/0x390 [ 1095.108676][T19004] pte_alloc_one+0x1e/0x3e0 [ 1095.108704][T19004] do_fault+0x8cc/0x1950 [ 1095.108730][T19004] ? __pmd_alloc+0x6aa/0x9c0 [ 1095.108760][T19004] __handle_mm_fault+0x180f/0x2b60 [ 1095.108797][T19004] ? mt_find+0x45e/0x8e0 [ 1095.108830][T19004] ? __pfx___handle_mm_fault+0x10/0x10 [ 1095.108861][T19004] ? __pfx_mt_find+0x10/0x10 [ 1095.108908][T19004] ? find_vma+0xbf/0x140 [ 1095.108930][T19004] ? __pfx_find_vma+0x10/0x10 [ 1095.108955][T19004] handle_mm_fault+0x36d/0xa20 [ 1095.108998][T19004] do_user_addr_fault+0x74c/0x12f0 [ 1095.109047][T19004] exc_page_fault+0x6f/0xd0 [ 1095.109075][T19004] asm_exc_page_fault+0x26/0x30 [ 1095.109099][T19004] RIP: 0010:__get_user_1+0x14/0x30 [ 1095.109136][T19004] Code: cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1095.109161][T19004] RSP: 0018:ffffc900053b7ca8 EFLAGS: 00050287 [ 1095.109181][T19004] RAX: 0000000000000000 RBX: ffff88805cba2000 RCX: ffffc900053b7c4c [ 1095.109197][T19004] RDX: 00007ffffffff000 RSI: ffffffff8255d9d1 RDI: ffffffff8c1af420 [ 1095.109214][T19004] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001ca [ 1095.109228][T19004] R10: 0000000000000200 R11: 0000000000000000 R12: dffffc0000000000 [ 1095.109244][T19004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000070 [ 1095.109267][T19004] ? __might_fault+0x111/0x140 [ 1095.109305][T19004] mousedev_write+0x26f/0x870 [ 1095.109337][T19004] vfs_write+0x2aa/0x1070 [ 1095.109375][T19004] ? __pfx_mousedev_write+0x10/0x10 [ 1095.109404][T19004] ? __pfx_vfs_write+0x10/0x10 [ 1095.109439][T19004] ? find_held_lock+0x2b/0x80 [ 1095.109461][T19004] ? __fget_files+0x215/0x3d0 [ 1095.109482][T19004] ? __fget_files+0x215/0x3d0 [ 1095.109509][T19004] ? __fget_files+0x21f/0x3d0 [ 1095.109538][T19004] ksys_write+0x1f8/0x250 [ 1095.109575][T19004] ? __pfx_ksys_write+0x10/0x10 [ 1095.109622][T19004] do_syscall_64+0x106/0xf80 [ 1095.109649][T19004] ? clear_bhb_loop+0x40/0x90 [ 1095.109678][T19004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.109702][T19004] RIP: 0033:0x7f1d1cb9c799 [ 1095.109721][T19004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.109744][T19004] RSP: 002b:00007f1d1da97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1095.109765][T19004] RAX: ffffffffffffffda RBX: 00007f1d1ce16090 RCX: 00007f1d1cb9c799 [ 1095.109781][T19004] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000003 [ 1095.109795][T19004] RBP: 00007f1d1da97090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.109810][T19004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.109824][T19004] R13: 00007f1d1ce16128 R14: 00007f1d1ce16090 R15: 00007fff86510ee8 [ 1095.109855][T19004] [ 1096.177611][T18982] Bluetooth: hci2: command 0x0c1a tx timeout [ 1096.331294][ T9249] Bluetooth: hci3: command 0x0c1a tx timeout [ 1097.237230][T19015] FAULT_INJECTION: forcing a failure. [ 1097.237230][T19015] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.347854][T19015] CPU: 0 UID: 0 PID: 19015 Comm: syz.0.2752 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.347892][T19015] Tainted: [L]=SOFTLOCKUP [ 1097.347901][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1097.347915][T19015] Call Trace: [ 1097.347924][T19015] [ 1097.347933][T19015] dump_stack_lvl+0x100/0x190 [ 1097.347983][T19015] should_fail_ex.cold+0x5/0xa [ 1097.348011][T19015] should_failslab+0xc2/0x120 [ 1097.348036][T19015] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1097.348072][T19015] ? key_alloc+0x3c5/0x1310 [ 1097.348094][T19015] ? rcu_is_watching+0x12/0xc0 [ 1097.348137][T19015] key_alloc+0x3c5/0x1310 [ 1097.348168][T19015] ? trace_kmalloc+0x101/0x130 [ 1097.348192][T19015] ? __pfx_key_alloc+0x10/0x10 [ 1097.348223][T19015] keyring_alloc+0x44/0xc0 [ 1097.348253][T19015] install_session_keyring_to_cred+0x190/0x230 [ 1097.348295][T19015] join_session_keyring+0x1bc/0x350 [ 1097.348334][T19015] lookup_user_key+0xbf9/0x1300 [ 1097.348375][T19015] ? __pfx_lookup_user_key+0x10/0x10 [ 1097.348415][T19015] ? __pfx_futex_wait+0x10/0x10 [ 1097.348456][T19015] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1097.348498][T19015] ? __pfx_msgctl_down+0x10/0x10 [ 1097.348534][T19015] keyctl_get_persistent+0x197/0x8b0 [ 1097.348565][T19015] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1097.348596][T19015] ? __x64_sys_futex+0x34f/0x4d0 [ 1097.348626][T19015] ? __x64_sys_futex+0x358/0x4d0 [ 1097.348661][T19015] ? xfd_validate_state+0x129/0x190 [ 1097.348702][T19015] __do_sys_keyctl+0x3b2/0x5a0 [ 1097.348739][T19015] do_syscall_64+0x106/0xf80 [ 1097.348767][T19015] ? clear_bhb_loop+0x40/0x90 [ 1097.348797][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.348822][T19015] RIP: 0033:0x7f1d1cb9c799 [ 1097.348842][T19015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.348865][T19015] RSP: 002b:00007f1d1dab8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1097.348889][T19015] RAX: ffffffffffffffda RBX: 00007f1d1ce15fa0 RCX: 00007f1d1cb9c799 [ 1097.348905][T19015] RDX: 7ffffffffffffffd RSI: 0000000000000000 RDI: 0000000000000016 [ 1097.348920][T19015] RBP: 00007f1d1cc32bd9 R08: 0004000000000000 R09: 0000000000000000 [ 1097.348941][T19015] R10: 00000000000099a5 R11: 0000000000000246 R12: 0000000000000000 [ 1097.348956][T19015] R13: 00007f1d1ce16038 R14: 00007f1d1ce15fa0 R15: 00007fff86510ee8 [ 1097.348987][T19015] [ 1097.660847][T19026] nvme_fcloop: unknown parameter or missing value '7' [ 1097.993404][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2758'. [ 1098.201354][ T9249] Bluetooth: hci2: command 0x0c1a tx timeout [ 1098.361684][ T9249] Bluetooth: hci3: command 0x0c1a tx timeout [ 1099.581132][T19050] zswap: compressor 000 not available [ 1099.731454][T19055] can: request_module (can-proto-0) failed. [ 1100.743940][T19069] NFSD: Failed to start, no listeners configured. [ 1101.270568][T19085] FAULT_INJECTION: forcing a failure. [ 1101.270568][T19085] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.270675][T19085] CPU: 0 UID: 0 PID: 19085 Comm: syz.0.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.270712][T19085] Tainted: [L]=SOFTLOCKUP [ 1101.270721][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1101.270737][T19085] Call Trace: [ 1101.270745][T19085] [ 1101.270755][T19085] dump_stack_lvl+0x100/0x190 [ 1101.270798][T19085] should_fail_ex.cold+0x5/0xa [ 1101.270828][T19085] should_failslab+0xc2/0x120 [ 1101.270855][T19085] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1101.270888][T19085] ? device_create_groups_vargs+0x8a/0x270 [ 1101.270941][T19085] device_create_groups_vargs+0x8a/0x270 [ 1101.270971][T19085] device_create+0xed/0x130 [ 1101.270996][T19085] ? __pfx_device_create+0x10/0x10 [ 1101.271020][T19085] ? con_is_visible+0x65/0x150 [ 1101.271119][T19085] ? csi_J+0x57e/0xad0 [ 1101.271154][T19085] vc_allocate+0x539/0x880 [ 1101.271205][T19085] ? __pfx_vc_allocate+0x10/0x10 [ 1101.271243][T19085] con_install+0xa1/0x620 [ 1101.271276][T19085] ? __pfx_con_install+0x10/0x10 [ 1101.271312][T19085] ? __pfx_con_install+0x10/0x10 [ 1101.271343][T19085] tty_init_dev.part.0+0x9e/0x470 [ 1101.271387][T19085] tty_open+0xa63/0xfa0 [ 1101.271426][T19085] ? __pfx_tty_open+0x10/0x10 [ 1101.271457][T19085] ? chrdev_open+0x10b/0x6a0 [ 1101.271481][T19085] ? chrdev_open+0x10b/0x6a0 [ 1101.271510][T19085] ? __pfx_tty_open+0x10/0x10 [ 1101.271543][T19085] chrdev_open+0x234/0x6a0 [ 1101.271567][T19085] ? __pfx_apparmor_file_open+0x10/0x10 [ 1101.271612][T19085] ? __pfx_chrdev_open+0x10/0x10 [ 1101.271640][T19085] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1101.271673][T19085] do_dentry_open+0x6d8/0x1660 [ 1101.271697][T19085] ? __pfx_chrdev_open+0x10/0x10 [ 1101.271729][T19085] vfs_open+0x82/0x3f0 [ 1101.271764][T19085] path_openat+0x208c/0x31a0 [ 1101.271800][T19085] ? __pfx_path_openat+0x10/0x10 [ 1101.271837][T19085] do_file_open+0x20e/0x430 [ 1101.271864][T19085] ? __pfx_do_file_open+0x10/0x10 [ 1101.271912][T19085] ? alloc_fd+0x476/0x790 [ 1101.271938][T19085] ? do_getname+0x191/0x390 [ 1101.271972][T19085] do_sys_openat2+0x10d/0x1e0 [ 1101.272005][T19085] ? __pfx_do_sys_openat2+0x10/0x10 [ 1101.272040][T19085] ? __fget_files+0x21f/0x3d0 [ 1101.272069][T19085] __x64_sys_openat+0x12d/0x210 [ 1101.272104][T19085] ? __pfx___x64_sys_openat+0x10/0x10 [ 1101.272155][T19085] do_syscall_64+0x106/0xf80 [ 1101.272186][T19085] ? clear_bhb_loop+0x40/0x90 [ 1101.272219][T19085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.272245][T19085] RIP: 0033:0x7f1d1cb9c799 [ 1101.272265][T19085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.272290][T19085] RSP: 002b:00007f1d1da97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1101.272315][T19085] RAX: ffffffffffffffda RBX: 00007f1d1ce16090 RCX: 00007f1d1cb9c799 [ 1101.272333][T19085] RDX: 0000000000040001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1101.272349][T19085] RBP: 00007f1d1cc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1101.272365][T19085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.272380][T19085] R13: 00007f1d1ce16128 R14: 00007f1d1ce16090 R15: 00007fff86510ee8 [ 1101.272413][T19085] [ 1101.850751][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 1105.142763][ T9249] Bluetooth: hci4: unexpected event 0x10 length: 440 > 1 [ 1105.144689][T18982] Bluetooth: hci4: hardware error 0x00 [ 1106.936257][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2782'. [ 1107.242079][T18982] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1107.321755][T19172] bridge0: entered promiscuous mode [ 1107.371390][T19172] bridge0: entered allmulticast mode [ 1107.931020][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2784'. [ 1109.147859][T18982] Bluetooth: hci5: unexpected event 0x10 length: 440 > 1 [ 1109.149645][T18982] Bluetooth: hci5: hardware error 0x00 [ 1110.646378][T19216] can: request_module (can-proto-0) failed. [ 1111.253831][T18982] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1112.322567][T18982] Bluetooth: hci2: unexpected event 0x10 length: 440 > 1 [ 1112.324332][T18982] Bluetooth: hci2: hardware error 0x00 [ 1113.193027][T19251] serio: Serial port pty6 [ 1114.361358][T18982] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1115.821143][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 1115.893409][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.899763][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.205532][T19275] Invalid ELF header magic: != ELF [ 1116.302908][T19273] nvme_fcloop: unknown parameter or missing value '0' [ 1121.071771][T19336] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1121.417519][T19342] ubi0: attaching mtd0 [ 1121.473501][T19342] ubi0: scanning is finished [ 1121.601654][T19342] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1122.065517][T19342] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1122.279440][T18982] Bluetooth: hci3: unexpected event 0x10 length: 440 > 1 [ 1122.284589][ T9249] Bluetooth: hci3: hardware error 0x00 [ 1123.329189][T19371] serio: Serial port pty6 [ 1124.375290][ T9249] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1127.476598][T19453] Invalid ELF header magic: != ELF [ 1127.833515][T19450] nvme_fcloop: unknown parameter or missing value '0' [ 1134.201934][T19550] FAULT_INJECTION: forcing a failure. [ 1134.201934][T19550] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.295646][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.2.2857 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.295688][T19550] Tainted: [L]=SOFTLOCKUP [ 1134.295697][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1134.295714][T19550] Call Trace: [ 1134.295722][T19550] [ 1134.295733][T19550] dump_stack_lvl+0x100/0x190 [ 1134.295777][T19550] should_fail_ex.cold+0x5/0xa [ 1134.295807][T19550] should_failslab+0xc2/0x120 [ 1134.295833][T19550] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1134.295872][T19550] ? shmem_alloc_inode+0x25/0x50 [ 1134.295914][T19550] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1134.295945][T19550] shmem_alloc_inode+0x25/0x50 [ 1134.295972][T19550] alloc_inode+0x68/0x250 [ 1134.296006][T19550] new_inode+0x22/0x1c0 [ 1134.296044][T19550] shmem_get_inode+0x212/0x1040 [ 1134.296082][T19550] ? __pfx_shmem_get_inode+0x10/0x10 [ 1134.296114][T19550] ? rcu_is_watching+0x12/0xc0 [ 1134.296163][T19550] shmem_tmpfile+0xbf/0x210 [ 1134.296194][T19550] ? d_alloc+0x176/0x1e0 [ 1134.296221][T19550] ? __pfx_shmem_tmpfile+0x10/0x10 [ 1134.296253][T19550] ? do_raw_spin_unlock+0x145/0x1e0 [ 1134.296293][T19550] ? _raw_spin_unlock+0x28/0x50 [ 1134.296324][T19550] vfs_tmpfile+0x2be/0x9a0 [ 1134.296356][T19550] path_openat+0x164e/0x31a0 [ 1134.296380][T19550] ? kasan_save_stack+0x3f/0x50 [ 1134.296420][T19550] ? kasan_save_stack+0x30/0x50 [ 1134.296458][T19550] ? __kasan_slab_alloc+0x89/0x90 [ 1134.296483][T19550] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1134.296520][T19550] ? do_getname+0x35/0x390 [ 1134.296551][T19550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.296582][T19550] ? __pfx_path_openat+0x10/0x10 [ 1134.296618][T19550] do_file_open+0x20e/0x430 [ 1134.296646][T19550] ? __pfx_do_file_open+0x10/0x10 [ 1134.296692][T19550] ? _raw_spin_unlock+0x28/0x50 [ 1134.296717][T19550] ? alloc_fd+0x476/0x790 [ 1134.296749][T19550] do_sys_openat2+0x10d/0x1e0 [ 1134.296782][T19550] ? __pfx_do_sys_openat2+0x10/0x10 [ 1134.296827][T19550] __x64_sys_open+0xfe/0x1d0 [ 1134.296860][T19550] ? __pfx___x64_sys_open+0x10/0x10 [ 1134.296910][T19550] do_syscall_64+0x106/0xf80 [ 1134.296939][T19550] ? clear_bhb_loop+0x40/0x90 [ 1134.296971][T19550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.296997][T19550] RIP: 0033:0x7fb6bdd9c799 [ 1134.297024][T19550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.297050][T19550] RSP: 002b:00007fb6bec74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1134.297075][T19550] RAX: ffffffffffffffda RBX: 00007fb6be016090 RCX: 00007fb6bdd9c799 [ 1134.297092][T19550] RDX: 0000000000000000 RSI: 0000000000595082 RDI: 0000200000000100 [ 1134.297109][T19550] RBP: 00007fb6bde32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1134.297125][T19550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.297141][T19550] R13: 00007fb6be016128 R14: 00007fb6be016090 R15: 00007ffebc8c8358 [ 1134.297173][T19550] [ 1135.363478][T19558] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2859'. [ 1135.627249][T19561] Invalid ELF header magic: != ELF [ 1135.945830][T19556] nvme_fcloop: unknown parameter or missing value '0' [ 1136.525523][T19578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2861'. [ 1136.545104][T19579] ptrace attach of "./syz-executor exec"[18131] was attempted by ""[19579] [ 1137.013130][T19578] ipvlan0: entered promiscuous mode [ 1137.075226][T19578] ipvlan0: entered allmulticast mode [ 1137.107238][T19578] veth0_vlan: entered allmulticast mode [ 1137.686707][T19585] Invalid ELF header magic: != ELF [ 1139.253557][T19595] FAULT_INJECTION: forcing a failure. [ 1139.253557][T19595] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.349213][T19595] CPU: 0 UID: 0 PID: 19595 Comm: syz.2.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.349252][T19595] Tainted: [L]=SOFTLOCKUP [ 1139.349260][T19595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.349275][T19595] Call Trace: [ 1139.349294][T19595] [ 1139.349304][T19595] dump_stack_lvl+0x100/0x190 [ 1139.349346][T19595] should_fail_ex.cold+0x5/0xa [ 1139.349373][T19595] ? alloc_pipe_info+0x1ec/0x590 [ 1139.349397][T19595] should_failslab+0xc2/0x120 [ 1139.349422][T19595] __kmalloc_noprof+0xe0/0x850 [ 1139.349467][T19595] alloc_pipe_info+0x1ec/0x590 [ 1139.349494][T19595] create_pipe_files+0x8c/0x970 [ 1139.349522][T19595] do_pipe2+0xbd/0x1e0 [ 1139.349551][T19595] ? __pfx_do_pipe2+0x10/0x10 [ 1139.349585][T19595] __x64_sys_pipe+0x33/0x50 [ 1139.349609][T19595] do_syscall_64+0x106/0xf80 [ 1139.349638][T19595] ? clear_bhb_loop+0x40/0x90 [ 1139.349668][T19595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.349693][T19595] RIP: 0033:0x7fb6bdd9c799 [ 1139.349713][T19595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.349735][T19595] RSP: 002b:00007fb6bec95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1139.349758][T19595] RAX: ffffffffffffffda RBX: 00007fb6be015fa0 RCX: 00007fb6bdd9c799 [ 1139.349774][T19595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.349788][T19595] RBP: 00007fb6bde32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1139.349803][T19595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.349844][T19595] R13: 00007fb6be016038 R14: 00007fb6be015fa0 R15: 00007ffebc8c8358 [ 1139.349875][T19595] [ 1139.525406][T19595] netlink: 'syz.2.2867': attribute type 1 has an invalid length. [ 1139.862143][T19606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1141.418538][T19632] FAULT_INJECTION: forcing a failure. [ 1141.418538][T19632] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.517933][T19632] CPU: 0 UID: 0 PID: 19632 Comm: syz.6.2873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1141.517974][T19632] Tainted: [L]=SOFTLOCKUP [ 1141.517984][T19632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1141.517999][T19632] Call Trace: [ 1141.518009][T19632] [ 1141.518018][T19632] dump_stack_lvl+0x100/0x190 [ 1141.518062][T19632] should_fail_ex.cold+0x5/0xa [ 1141.518092][T19632] should_failslab+0xc2/0x120 [ 1141.518118][T19632] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1141.518158][T19632] ? __d_alloc+0x34/0xa80 [ 1141.518186][T19632] ? make_vfsgid+0xf1/0x140 [ 1141.518225][T19632] __d_alloc+0x34/0xa80 [ 1141.518251][T19632] ? bpf_lsm_inode_permission+0x9/0x10 [ 1141.518293][T19632] d_alloc+0x4a/0x1e0 [ 1141.518322][T19632] vfs_tmpfile+0x148/0x9a0 [ 1141.518363][T19632] path_openat+0x164e/0x31a0 [ 1141.518387][T19632] ? kasan_save_stack+0x3f/0x50 [ 1141.518426][T19632] ? kasan_save_stack+0x30/0x50 [ 1141.518465][T19632] ? __kasan_slab_alloc+0x89/0x90 [ 1141.518487][T19632] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1141.518525][T19632] ? do_getname+0x35/0x390 [ 1141.518557][T19632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.518587][T19632] ? __pfx_path_openat+0x10/0x10 [ 1141.518624][T19632] do_file_open+0x20e/0x430 [ 1141.518652][T19632] ? __pfx_do_file_open+0x10/0x10 [ 1141.518698][T19632] ? _raw_spin_unlock+0x28/0x50 [ 1141.518725][T19632] ? alloc_fd+0x476/0x790 [ 1141.518757][T19632] do_sys_openat2+0x10d/0x1e0 [ 1141.518791][T19632] ? __pfx_do_sys_openat2+0x10/0x10 [ 1141.518835][T19632] __x64_sys_open+0xfe/0x1d0 [ 1141.518868][T19632] ? __pfx___x64_sys_open+0x10/0x10 [ 1141.518913][T19632] do_syscall_64+0x106/0xf80 [ 1141.518943][T19632] ? clear_bhb_loop+0x40/0x90 [ 1141.518974][T19632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.519001][T19632] RIP: 0033:0x7fc0fcf9c799 [ 1141.519023][T19632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.519048][T19632] RSP: 002b:00007fc0fde6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1141.519073][T19632] RAX: ffffffffffffffda RBX: 00007fc0fd216090 RCX: 00007fc0fcf9c799 [ 1141.519091][T19632] RDX: 0000000000000000 RSI: 0000000000595082 RDI: 0000200000000100 [ 1141.519107][T19632] RBP: 00007fc0fd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1141.519123][T19632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.519139][T19632] R13: 00007fc0fd216128 R14: 00007fc0fd216090 R15: 00007ffc69051798 [ 1141.519171][T19632] [ 1142.920419][T19652] FAULT_INJECTION: forcing a failure. [ 1142.920419][T19652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1143.009071][T19652] CPU: 0 UID: 0 PID: 19652 Comm: syz.3.2880 Tainted: G L syzkaller #0 PREEMPT(full) [ 1143.009113][T19652] Tainted: [L]=SOFTLOCKUP [ 1143.009123][T19652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1143.009138][T19652] Call Trace: [ 1143.009146][T19652] [ 1143.009157][T19652] dump_stack_lvl+0x100/0x190 [ 1143.009207][T19652] should_fail_ex.cold+0x5/0xa [ 1143.009231][T19652] ? prepare_alloc_pages+0x16d/0x5f0 [ 1143.009262][T19652] should_fail_alloc_page+0xeb/0x140 [ 1143.009291][T19652] prepare_alloc_pages+0x1f0/0x5f0 [ 1143.009324][T19652] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1143.009377][T19652] ? stack_trace_save+0x8e/0xc0 [ 1143.009423][T19652] ? __pfx_stack_trace_save+0x10/0x10 [ 1143.009448][T19652] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1143.009487][T19652] ? stack_depot_save_flags+0x27/0x9d0 [ 1143.009530][T19652] ? kasan_save_stack+0x3f/0x50 [ 1143.009569][T19652] ? kasan_save_stack+0x30/0x50 [ 1143.009608][T19652] ? kasan_save_track+0x14/0x30 [ 1143.009645][T19652] ? __kasan_kmalloc+0xaa/0xb0 [ 1143.009686][T19652] ? do_file_open+0x20e/0x430 [ 1143.009709][T19652] ? do_sys_openat2+0x10d/0x1e0 [ 1143.009740][T19652] ? __x64_sys_openat+0x12d/0x210 [ 1143.009772][T19652] ? do_syscall_64+0x106/0xf80 [ 1143.009801][T19652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.009832][T19652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1143.009877][T19652] ? policy_nodemask+0xed/0x4f0 [ 1143.009905][T19652] alloc_pages_mpol+0x1fb/0x550 [ 1143.009932][T19652] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1143.009966][T19652] alloc_pages_noprof+0x131/0x390 [ 1143.009994][T19652] get_zeroed_page_noprof+0x18/0xb0 [ 1143.010021][T19652] mon_alloc_buff+0xce/0x1b0 [ 1143.010079][T19652] ? kasan_save_track+0x14/0x30 [ 1143.010121][T19652] mon_bin_open+0x207/0x470 [ 1143.010162][T19652] ? __pfx_mon_bin_open+0x10/0x10 [ 1143.010205][T19652] chrdev_open+0x234/0x6a0 [ 1143.010229][T19652] ? __pfx_apparmor_file_open+0x10/0x10 [ 1143.010270][T19652] ? __pfx_chrdev_open+0x10/0x10 [ 1143.010297][T19652] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1143.010329][T19652] do_dentry_open+0x6d8/0x1660 [ 1143.010353][T19652] ? __pfx_chrdev_open+0x10/0x10 [ 1143.010385][T19652] vfs_open+0x82/0x3f0 [ 1143.010420][T19652] path_openat+0x208c/0x31a0 [ 1143.010455][T19652] ? __pfx_path_openat+0x10/0x10 [ 1143.010491][T19652] do_file_open+0x20e/0x430 [ 1143.010518][T19652] ? __pfx_do_file_open+0x10/0x10 [ 1143.010565][T19652] ? alloc_fd+0x476/0x790 [ 1143.010591][T19652] ? do_getname+0x191/0x390 [ 1143.010625][T19652] do_sys_openat2+0x10d/0x1e0 [ 1143.010658][T19652] ? __pfx_do_sys_openat2+0x10/0x10 [ 1143.010694][T19652] ? __fget_files+0x21f/0x3d0 [ 1143.010722][T19652] __x64_sys_openat+0x12d/0x210 [ 1143.010756][T19652] ? __pfx___x64_sys_openat+0x10/0x10 [ 1143.010801][T19652] do_syscall_64+0x106/0xf80 [ 1143.010830][T19652] ? clear_bhb_loop+0x40/0x90 [ 1143.010861][T19652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.010887][T19652] RIP: 0033:0x7f25b5b9c799 [ 1143.010909][T19652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.010934][T19652] RSP: 002b:00007f25b6a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1143.010958][T19652] RAX: ffffffffffffffda RBX: 00007f25b5e15fa0 RCX: 00007f25b5b9c799 [ 1143.010975][T19652] RDX: 0000000000000400 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1143.010992][T19652] RBP: 00007f25b5c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1143.011008][T19652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.011024][T19652] R13: 00007f25b5e16038 R14: 00007f25b5e15fa0 R15: 00007ffc72d518b8 [ 1143.011056][T19652] [ 1146.558321][T19673] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1148.201579][ T5914] Process accounting resumed [ 1151.553909][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1151.662149][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1151.743346][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1151.805934][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1151.876142][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1151.921940][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1151.979617][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1152.033681][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1152.078497][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1152.131628][T19744] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1156.638377][T19841] __nla_validate_parse: 56 callbacks suppressed [ 1156.638400][T19841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1156.698205][T19833] Invalid ELF header magic: != ELF [ 1158.122059][ T29] audit: type=1326 audit(4294967330.180:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.3.2921" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b5b9c799 code=0x0 [ 1158.543277][T19877] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1161.117969][T19914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1161.404599][T19922] vivid-007: ================= START STATUS ================= [ 1161.443307][T19922] vivid-007: Generate PTS: true [ 1161.505322][T19922] vivid-007: Generate SCR: true [ 1161.510417][T19922] tpg source WxH: 320x240 (Y'CbCr) [ 1161.612352][T19922] tpg field: 1 [ 1161.615775][T19922] tpg crop: (0,0)/320x240 [ 1161.620126][T19922] tpg compose: (0,0)/320x240 [ 1161.680513][T19922] tpg colorspace: 8 [ 1161.721448][T19922] tpg transfer function: 0/0 [ 1161.726114][T19922] tpg Y'CbCr encoding: 0/0 [ 1161.730561][T19922] tpg quantization: 0/0 [ 1161.746717][T19929] FAULT_INJECTION: forcing a failure. [ 1161.746717][T19929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1161.796496][T19922] tpg RGB range: 0/2 [ 1161.812671][T19929] CPU: 0 UID: 0 PID: 19929 Comm: syz.0.2933 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.812719][T19929] Tainted: [L]=SOFTLOCKUP [ 1161.812729][T19929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1161.812745][T19929] Call Trace: [ 1161.812754][T19929] [ 1161.812764][T19929] dump_stack_lvl+0x100/0x190 [ 1161.812809][T19929] should_fail_ex.cold+0x5/0xa [ 1161.812835][T19929] ? prepare_alloc_pages+0x16d/0x5f0 [ 1161.812868][T19929] should_fail_alloc_page+0xeb/0x140 [ 1161.812897][T19929] prepare_alloc_pages+0x1f0/0x5f0 [ 1161.812931][T19929] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1161.812970][T19929] ? __print_lock_name+0x61/0x80 [ 1161.812995][T19929] ? is_bpf_text_address+0x8a/0x1a0 [ 1161.813035][T19929] ? is_bpf_text_address+0x8a/0x1a0 [ 1161.813074][T19929] ? bpf_ksym_find+0x124/0x1c0 [ 1161.813104][T19929] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1161.813132][T19929] ? is_bpf_text_address+0x94/0x1a0 [ 1161.813172][T19929] ? kernel_text_address+0x8d/0x100 [ 1161.813211][T19929] ? __kernel_text_address+0xd/0x30 [ 1161.813248][T19929] ? unwind_get_return_address+0x59/0xa0 [ 1161.813276][T19929] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1161.813329][T19929] ? __pfx_stack_trace_save+0x10/0x10 [ 1161.813354][T19929] ? stack_depot_save_flags+0x27/0x9d0 [ 1161.813382][T19929] ? find_held_lock+0x2b/0x80 [ 1161.813405][T19929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.813449][T19929] ? policy_nodemask+0xed/0x4f0 [ 1161.813478][T19929] alloc_pages_mpol+0x1fb/0x550 [ 1161.813505][T19929] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1161.813539][T19929] alloc_pages_noprof+0x131/0x390 [ 1161.813567][T19929] kimage_alloc_pages+0x72/0x380 [ 1161.813613][T19929] kimage_alloc_control_pages+0x157/0xa20 [ 1161.813647][T19929] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1161.813687][T19929] do_kexec_load+0x275/0x810 [ 1161.813718][T19929] ? __pfx_do_kexec_load+0x10/0x10 [ 1161.813749][T19929] ? _copy_from_user+0x59/0xd0 [ 1161.813794][T19929] __x64_sys_kexec_load+0x1bf/0x230 [ 1161.813826][T19929] do_syscall_64+0x106/0xf80 [ 1161.813859][T19929] ? clear_bhb_loop+0x40/0x90 [ 1161.813891][T19929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.813918][T19929] RIP: 0033:0x7f1d1cb9c799 [ 1161.813939][T19929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.813964][T19929] RSP: 002b:00007f1d1dab8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1161.813988][T19929] RAX: ffffffffffffffda RBX: 00007f1d1ce15fa0 RCX: 00007f1d1cb9c799 [ 1161.814005][T19929] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 1161.814022][T19929] RBP: 00007f1d1cc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1161.814038][T19929] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1161.814053][T19929] R13: 00007f1d1ce16038 R14: 00007f1d1ce15fa0 R15: 00007fff86510ee8 [ 1161.814085][T19929] [ 1161.814111][T19929] kexec: Could not allocate control_code_buffer [ 1162.126283][T19922] vivid-007: ================== END STATUS ================== [ 1162.619821][ T9249] Bluetooth: hci0: command 0x0406 tx timeout [ 1168.194554][T20014] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1168.922910][T20017] No such timeout policy "" [ 1168.928346][T20017] netlink: Failed to associated timeout policy '' [ 1169.863362][T20055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2957'. [ 1171.058281][T20076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1171.167552][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1171.217661][T20077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1173.944995][T20122] binder: 20119:20122 ioctl 196 ffffffffffffffff returned -22 [ 1177.335693][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.342147][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.123418][T20281] FAULT_INJECTION: forcing a failure. [ 1183.123418][T20281] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.179354][T20269] zswap: compressor û not available [ 1183.245055][T20281] CPU: 0 UID: 0 PID: 20281 Comm: syz.3.3003 Tainted: G L syzkaller #0 PREEMPT(full) [ 1183.245097][T20281] Tainted: [L]=SOFTLOCKUP [ 1183.245107][T20281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1183.245123][T20281] Call Trace: [ 1183.245131][T20281] [ 1183.245141][T20281] dump_stack_lvl+0x100/0x190 [ 1183.245186][T20281] should_fail_ex.cold+0x5/0xa [ 1183.245215][T20281] should_failslab+0xc2/0x120 [ 1183.245241][T20281] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1183.245274][T20281] ? sctp_endpoint_new+0xfc/0xb20 [ 1183.245332][T20281] sctp_endpoint_new+0xfc/0xb20 [ 1183.245367][T20281] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1183.245398][T20281] ? lockdep_init_map_type+0x5c/0x250 [ 1183.245433][T20281] ? lockdep_init_map_type+0x5c/0x250 [ 1183.245466][T20281] ? lockdep_init_map_type+0x5c/0x250 [ 1183.245500][T20281] ? lockdep_init_map_type+0x5c/0x250 [ 1183.245538][T20281] sctp_init_sock+0xe2b/0x1300 [ 1183.245572][T20281] ? __pfx_sctp_init_sock+0x10/0x10 [ 1183.245603][T20281] inet_create+0x94c/0x1060 [ 1183.245649][T20281] ? inet_create+0x94/0x1060 [ 1183.245693][T20281] __sock_create+0x339/0x860 [ 1183.245738][T20281] __sys_socket+0x14d/0x260 [ 1183.245779][T20281] ? __pfx___sys_socket+0x10/0x10 [ 1183.245829][T20281] __x64_sys_socket+0x72/0xb0 [ 1183.245868][T20281] ? lockdep_hardirqs_on+0x78/0x100 [ 1183.245899][T20281] do_syscall_64+0x106/0xf80 [ 1183.245928][T20281] ? clear_bhb_loop+0x40/0x90 [ 1183.245959][T20281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.245985][T20281] RIP: 0033:0x7f25b5b9c799 [ 1183.246051][T20281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.246078][T20281] RSP: 002b:00007f25b6a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1183.246103][T20281] RAX: ffffffffffffffda RBX: 00007f25b5e15fa0 RCX: 00007f25b5b9c799 [ 1183.246120][T20281] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 1183.246136][T20281] RBP: 00007f25b5c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1183.246151][T20281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.246167][T20281] R13: 00007f25b5e16038 R14: 00007f25b5e15fa0 R15: 00007ffc72d518b8 [ 1183.246199][T20281] [ 1183.504232][T20284] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1186.026452][T20331] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 1187.263684][T20342] zswap: compressor û not available [ 1187.865464][T20343] zswap: compressor not available [ 1187.940629][T20355] Invalid ELF header magic: != ELF [ 1190.300447][T20387] FAULT_INJECTION: forcing a failure. [ 1190.300447][T20387] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1190.679352][T20387] CPU: 0 UID: 0 PID: 20387 Comm: syz.0.3022 Tainted: G L syzkaller #0 PREEMPT(full) [ 1190.679390][T20387] Tainted: [L]=SOFTLOCKUP [ 1190.679399][T20387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1190.679414][T20387] Call Trace: [ 1190.679421][T20387] [ 1190.679430][T20387] dump_stack_lvl+0x100/0x190 [ 1190.679472][T20387] should_fail_ex.cold+0x5/0xa [ 1190.679500][T20387] get_futex_key+0x106f/0x1620 [ 1190.679533][T20387] ? __pfx_get_futex_key+0x10/0x10 [ 1190.679560][T20387] ? lock_acquire+0x1cf/0x380 [ 1190.679601][T20387] futex_wake+0xea/0x530 [ 1190.679639][T20387] ? __pfx_futex_wake+0x10/0x10 [ 1190.679676][T20387] ? exit_mm_release+0x19/0x30 [ 1190.679714][T20387] do_futex+0x32b/0x350 [ 1190.679746][T20387] ? __pfx_do_futex+0x10/0x10 [ 1190.679775][T20387] ? __might_fault+0xc5/0x140 [ 1190.679817][T20387] mm_release+0x24a/0x2f0 [ 1190.679842][T20387] do_exit+0x675/0x2aa0 [ 1190.679878][T20387] ? __pfx_do_exit+0x10/0x10 [ 1190.679910][T20387] ? do_raw_spin_lock+0x128/0x260 [ 1190.679945][T20387] ? find_held_lock+0x2b/0x80 [ 1190.679966][T20387] ? get_signal+0x7e0/0x21e0 [ 1190.679994][T20387] do_group_exit+0xd5/0x2a0 [ 1190.680028][T20387] get_signal+0x1ec7/0x21e0 [ 1190.680064][T20387] ? __pfx_get_signal+0x10/0x10 [ 1190.680091][T20387] ? do_futex+0x192/0x350 [ 1190.680125][T20387] arch_do_signal_or_restart+0x91/0x770 [ 1190.680158][T20387] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1190.680196][T20387] ? __pfx___x64_sys_futex+0x10/0x10 [ 1190.680234][T20387] exit_to_user_mode_loop+0x86/0x4a0 [ 1190.680270][T20387] do_syscall_64+0x668/0xf80 [ 1190.680300][T20387] ? clear_bhb_loop+0x40/0x90 [ 1190.680329][T20387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.680360][T20387] RIP: 0033:0x7f1d1cb9c799 [ 1190.680380][T20387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.680404][T20387] RSP: 002b:00007f1d1da550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1190.680428][T20387] RAX: fffffffffffffe00 RBX: 00007f1d1ce16278 RCX: 00007f1d1cb9c799 [ 1190.680444][T20387] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1d1ce16278 [ 1190.680459][T20387] RBP: 00007f1d1ce16270 R08: 0000000000000000 R09: 0000000000000000 [ 1190.680474][T20387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.680488][T20387] R13: 00007f1d1ce16308 R14: 00007fff86510e00 R15: 00007fff86510ee8 [ 1190.680518][T20387] [ 1190.928380][T20400] zswap: compressor not available [ 1191.331913][T20407] netlink: 'syz.3.3024': attribute type 11 has an invalid length. [ 1191.522852][T20407] netlink: 'syz.3.3024': attribute type 11 has an invalid length. [ 1191.582663][T20407] netlink: 'syz.3.3024': attribute type 11 has an invalid length. [ 1192.971314][T20422] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1195.042482][T20462] ERROR: Out of memory at tomoyo_memory_ok. [ 1195.862123][T20475] &#$@\]\-: entered promiscuous mode [ 1196.605133][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3042'. [ 1196.664611][T20495] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3042'. [ 1198.551995][T20533] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1199.961380][T20559] Invalid ELF header magic: != ELF [ 1200.089495][T20573] binder: 20568:20573 ioctl c0306201 0 returned -14 [ 1200.124453][T20572] vivid-007: ================= START STATUS ================= [ 1200.217416][T20572] vivid-007: Generate PTS: true [ 1200.300482][T20572] vivid-007: Generate SCR: true [ 1200.362829][T20572] tpg source WxH: 320x240 (Y'CbCr) [ 1200.458167][T20572] tpg field: 1 [ 1200.503996][T20572] tpg crop: (0,0)/320x240 [ 1200.610605][T20572] tpg compose: (0,0)/320x240 [ 1200.739987][T20572] tpg colorspace: 8 [ 1200.761207][T20572] tpg transfer function: 0/0 [ 1200.787928][T20572] tpg Y'CbCr encoding: 0/0 [ 1200.809891][T20572] tpg quantization: 0/0 [ 1200.846541][T20572] tpg RGB range: 0/2 [ 1200.850509][T20572] vivid-007: ================== END STATUS ================== [ 1201.341939][T20588] FAULT_INJECTION: forcing a failure. [ 1201.341939][T20588] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.466460][T20588] CPU: 0 UID: 0 PID: 20588 Comm: syz.6.3065 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.466508][T20588] Tainted: [L]=SOFTLOCKUP [ 1201.466518][T20588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1201.466533][T20588] Call Trace: [ 1201.466541][T20588] [ 1201.466551][T20588] dump_stack_lvl+0x100/0x190 [ 1201.466592][T20588] should_fail_ex.cold+0x5/0xa [ 1201.466621][T20588] should_failslab+0xc2/0x120 [ 1201.466646][T20588] __kmalloc_node_noprof+0xe6/0x850 [ 1201.466682][T20588] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1201.466720][T20588] __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1201.466758][T20588] ? kernel_clone+0xfc/0x9a0 [ 1201.466787][T20588] ? find_held_lock+0x2b/0x80 [ 1201.466810][T20588] ? rcu_read_unlock+0x17/0x60 [ 1201.466837][T20588] ? obj_cgroup_charge_account+0x46d/0x640 [ 1201.466864][T20588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1201.466897][T20588] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 1201.466929][T20588] ? rcu_is_watching+0x12/0xc0 [ 1201.466966][T20588] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1201.466993][T20588] ? kernel_clone+0xfc/0x9a0 [ 1201.467019][T20588] __vmalloc_node_noprof+0xad/0xf0 [ 1201.467048][T20588] ? kernel_clone+0xfc/0x9a0 [ 1201.467079][T20588] copy_process+0x5ec/0x7a10 [ 1201.467121][T20588] ? __pfx_copy_process+0x10/0x10 [ 1201.467156][T20588] ? _copy_from_user+0x59/0xd0 [ 1201.467200][T20588] kernel_clone+0xfc/0x9a0 [ 1201.467229][T20588] ? __pfx_kernel_clone+0x10/0x10 [ 1201.467275][T20588] ? __lock_acquire+0x4a5/0x2630 [ 1201.467307][T20588] __do_sys_clone3+0x214/0x290 [ 1201.467335][T20588] ? __pfx___do_sys_clone3+0x10/0x10 [ 1201.467377][T20588] ? _copy_to_user+0xaf/0xd0 [ 1201.467434][T20588] do_syscall_64+0x106/0xf80 [ 1201.467464][T20588] ? clear_bhb_loop+0x40/0x90 [ 1201.467499][T20588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.467523][T20588] RIP: 0033:0x7fc0fcf9d589 [ 1201.467543][T20588] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 1201.467566][T20588] RSP: 002b:00007ffc69051658 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1201.467590][T20588] RAX: ffffffffffffffda RBX: 00007fc0fcf58b20 RCX: 00007fc0fcf9d589 [ 1201.467606][T20588] RDX: 00007fc0fcf58b20 RSI: 0000000000000058 RDI: 00007ffc690516b0 [ 1201.467622][T20588] RBP: 00007fc0fde2a6c0 R08: 00007fc0fde2a6c0 R09: 00007ffc69051797 [ 1201.467637][T20588] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1201.467652][T20588] R13: 000000000000000b R14: 00007ffc690516b0 R15: 00007ffc69051798 [ 1201.467683][T20588] [ 1201.467694][T20588] warn_alloc: 1 callbacks suppressed [ 1201.467706][T20588] syz.6.3065: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1202.928078][T20588] CPU: 0 UID: 0 PID: 20588 Comm: syz.6.3065 Tainted: G L syzkaller #0 PREEMPT(full) [ 1202.928117][T20588] Tainted: [L]=SOFTLOCKUP [ 1202.928126][T20588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1202.928141][T20588] Call Trace: [ 1202.928149][T20588] [ 1202.928159][T20588] dump_stack_lvl+0x100/0x190 [ 1202.928201][T20588] warn_alloc.cold+0x95/0x1c1 [ 1202.928244][T20588] ? __pfx_warn_alloc+0x10/0x10 [ 1202.928279][T20588] ? lockdep_hardirqs_on+0x78/0x100 [ 1202.928309][T20588] ? dump_stack_lvl+0x17c/0x190 [ 1202.928356][T20588] ? trace_kmalloc+0x101/0x130 [ 1202.928380][T20588] ? __kasan_kmalloc+0x8a/0xb0 [ 1202.928419][T20588] ? __kmalloc_node_noprof+0x324/0x850 [ 1202.928454][T20588] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1202.928491][T20588] __vmalloc_node_range_noprof+0x1275/0x1530 [ 1202.928530][T20588] ? kernel_clone+0xfc/0x9a0 [ 1202.928562][T20588] ? rcu_read_unlock+0x17/0x60 [ 1202.928588][T20588] ? obj_cgroup_charge_account+0x46d/0x640 [ 1202.928616][T20588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1202.928649][T20588] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 1202.928681][T20588] ? rcu_is_watching+0x12/0xc0 [ 1202.928718][T20588] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1202.928745][T20588] ? kernel_clone+0xfc/0x9a0 [ 1202.928772][T20588] __vmalloc_node_noprof+0xad/0xf0 [ 1202.928801][T20588] ? kernel_clone+0xfc/0x9a0 [ 1202.928831][T20588] copy_process+0x5ec/0x7a10 [ 1202.928873][T20588] ? __pfx_copy_process+0x10/0x10 [ 1202.928908][T20588] ? _copy_from_user+0x59/0xd0 [ 1202.928958][T20588] kernel_clone+0xfc/0x9a0 [ 1202.929011][T20588] ? __pfx_kernel_clone+0x10/0x10 [ 1202.929049][T20588] ? __lock_acquire+0x4a5/0x2630 [ 1202.929082][T20588] __do_sys_clone3+0x214/0x290 [ 1202.929110][T20588] ? __pfx___do_sys_clone3+0x10/0x10 [ 1202.929156][T20588] ? _copy_to_user+0xaf/0xd0 [ 1202.929215][T20588] do_syscall_64+0x106/0xf80 [ 1202.929242][T20588] ? clear_bhb_loop+0x40/0x90 [ 1202.929273][T20588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.929297][T20588] RIP: 0033:0x7fc0fcf9d589 [ 1202.929317][T20588] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 1202.929348][T20588] RSP: 002b:00007ffc69051658 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1202.929371][T20588] RAX: ffffffffffffffda RBX: 00007fc0fcf58b20 RCX: 00007fc0fcf9d589 [ 1202.929387][T20588] RDX: 00007fc0fcf58b20 RSI: 0000000000000058 RDI: 00007ffc690516b0 [ 1202.929403][T20588] RBP: 00007fc0fde2a6c0 R08: 00007fc0fde2a6c0 R09: 00007ffc69051797 [ 1202.929418][T20588] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1202.929433][T20588] R13: 000000000000000b R14: 00007ffc690516b0 R15: 00007ffc69051798 [ 1202.929464][T20588] [ 1202.929473][T20588] Mem-Info: [ 1204.101274][T20588] active_anon:3551 inactive_anon:42994 isolated_anon:0 [ 1204.101274][T20588] active_file:23523 inactive_file:38759 isolated_file:0 [ 1204.101274][T20588] unevictable:768 dirty:590 writeback:0 [ 1204.101274][T20588] slab_reclaimable:13167 slab_unreclaimable:105851 [ 1204.101274][T20588] mapped:49369 shmem:27352 pagetables:1613 [ 1204.101274][T20588] sec_pagetables:0 bounce:0 [ 1204.101274][T20588] kernel_misc_reclaimable:0 [ 1204.101274][T20588] free:1252432 free_pcp:9748 free_cma:0 [ 1204.337254][T20588] Node 0 active_anon:14204kB inactive_anon:168492kB active_file:94092kB inactive_file:154904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:192536kB dirty:2360kB writeback:0kB shmem:104544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:55296kB kernel_stack:14016kB pagetables:6324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1204.525568][T20588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1204.662310][T20588] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.793993][T20588] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1204.810071][T20588] Node 0 DMA32 free:1055388kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16052kB inactive_anon:172632kB active_file:94092kB inactive_file:154904kB unevictable:1536kB writepending:2360kB zspages:0kB present:3129332kB managed:2537420kB mlocked:0kB bounce:0kB free_pcp:36148kB local_pcp:36148kB free_cma:0kB [ 1204.973240][T20588] lowmem_reserve[]: 0 0 1 1 1 [ 1204.998360][T20588] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1205.131769][T20588] lowmem_reserve[]: 0 0 0 0 0 [ 1205.155945][T20588] Node 1 Normal free:3939696kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1205.279676][T20588] lowmem_reserve[]: 0 0 0 0 0 [ 1205.315520][T20588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1205.359424][T20588] Node 0 DMA32: 4149*4kB (UM) 3772*8kB (U) 2500*16kB (UM) 1010*32kB (UME) 664*64kB (UME) 788*128kB (UME) 669*256kB (UME) 410*512kB (UM) 219*1024kB (UME) 21*2048kB (UE) 33*4096kB (M) = 1046068kB [ 1205.433887][T20588] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1205.492078][T20588] Node 1 Normal: 8*4kB (UME) 4*8kB (UME) 9*16kB (UME) 13*32kB (UME) 6*64kB (UME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 959*4096kB (UM) = 3939696kB [ 1205.561074][T20588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1205.589570][T20588] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1205.668010][T20588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1205.716123][T20588] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1205.757143][T20588] 93241 total pagecache pages [ 1205.833046][T20588] 2 pages in swap cache [ 1205.843490][T20588] Free swap = 124988kB [ 1205.882174][T20588] Total swap = 124996kB [ 1205.903970][T20588] 2097051 pages RAM [ 1205.926275][T20588] 0 pages HighMem/MovableOnly [ 1205.974048][T20588] 430816 pages reserved [ 1205.996543][T20588] 0 pages cma reserved [ 1206.808422][T20638] FAULT_INJECTION: forcing a failure. [ 1206.808422][T20638] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.901307][T20638] CPU: 0 UID: 0 PID: 20638 Comm: syz.3.3074 Tainted: G L syzkaller #0 PREEMPT(full) [ 1206.901348][T20638] Tainted: [L]=SOFTLOCKUP [ 1206.901358][T20638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1206.901379][T20638] Call Trace: [ 1206.901388][T20638] [ 1206.901398][T20638] dump_stack_lvl+0x100/0x190 [ 1206.901441][T20638] should_fail_ex.cold+0x5/0xa [ 1206.901470][T20638] ? lsm_blob_alloc+0x68/0x90 [ 1206.901511][T20638] should_failslab+0xc2/0x120 [ 1206.901538][T20638] __kmalloc_noprof+0xe0/0x850 [ 1206.901575][T20638] ? trace_kmalloc+0x101/0x130 [ 1206.901605][T20638] lsm_blob_alloc+0x68/0x90 [ 1206.901636][T20638] security_sk_alloc+0x2d/0x290 [ 1206.901674][T20638] sk_prot_alloc+0x12a/0x2a0 [ 1206.901713][T20638] sk_alloc+0x36/0xe80 [ 1206.901741][T20638] can_create+0x1e5/0x630 [ 1206.901784][T20638] __sock_create+0x339/0x860 [ 1206.901829][T20638] __sys_socket+0x14d/0x260 [ 1206.901871][T20638] ? __pfx___sys_socket+0x10/0x10 [ 1206.901920][T20638] __x64_sys_socket+0x72/0xb0 [ 1206.901960][T20638] ? lockdep_hardirqs_on+0x78/0x100 [ 1206.901990][T20638] do_syscall_64+0x106/0xf80 [ 1206.902019][T20638] ? clear_bhb_loop+0x40/0x90 [ 1206.902050][T20638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.902076][T20638] RIP: 0033:0x7f25b5b9c799 [ 1206.902097][T20638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.902121][T20638] RSP: 002b:00007f25b6a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1206.902145][T20638] RAX: ffffffffffffffda RBX: 00007f25b5e15fa0 RCX: 00007f25b5b9c799 [ 1206.902168][T20638] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1206.902184][T20638] RBP: 00007f25b5c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1206.902200][T20638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.902215][T20638] R13: 00007f25b5e16038 R14: 00007f25b5e15fa0 R15: 00007ffc72d518b8 [ 1206.902247][T20638] [ 1207.767803][T20645] Zero length message leads to an empty skb [ 1208.548210][T20653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1209.401336][T20679] FAULT_INJECTION: forcing a failure. [ 1209.401336][T20679] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.501509][T20679] CPU: 0 UID: 0 PID: 20679 Comm: syz.3.3085 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.501550][T20679] Tainted: [L]=SOFTLOCKUP [ 1209.501559][T20679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1209.501575][T20679] Call Trace: [ 1209.501584][T20679] [ 1209.501593][T20679] dump_stack_lvl+0x100/0x190 [ 1209.501638][T20679] should_fail_ex.cold+0x5/0xa [ 1209.501666][T20679] ? sk_prot_alloc+0x10b/0x2a0 [ 1209.501702][T20679] should_failslab+0xc2/0x120 [ 1209.501728][T20679] __kmalloc_noprof+0xe0/0x850 [ 1209.501766][T20679] ? security_inode_alloc+0xcf/0x2c0 [ 1209.501809][T20679] sk_prot_alloc+0x10b/0x2a0 [ 1209.501854][T20679] sk_alloc+0x36/0xe80 [ 1209.501883][T20679] __netlink_create+0x5e/0x2c0 [ 1209.501931][T20679] __netlink_kernel_create+0xed/0x750 [ 1209.501967][T20679] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1209.502011][T20679] rdma_nl_net_init+0xd9/0x1b0 [ 1209.502106][T20679] ? __pfx_rdma_nl_net_init+0x10/0x10 [ 1209.502132][T20679] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1209.502193][T20679] ? rdma_dev_init_net+0x144/0x590 [ 1209.502231][T20679] rdma_dev_init_net+0x184/0x590 [ 1209.502263][T20679] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1209.502297][T20679] ? __kmalloc_noprof+0x320/0x850 [ 1209.502339][T20679] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1209.502371][T20679] ops_init+0x1e2/0x5f0 [ 1209.502406][T20679] setup_net+0x118/0x3a0 [ 1209.502439][T20679] ? __pfx_setup_net+0x10/0x10 [ 1209.502469][T20679] ? lockdep_init_map_type+0x5c/0x250 [ 1209.502504][T20679] ? mutex_init_lockep+0x110/0x150 [ 1209.502543][T20679] copy_net_ns+0x46f/0x7c0 [ 1209.502609][T20679] create_new_namespaces+0x3ea/0xac0 [ 1209.502644][T20679] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1209.502674][T20679] ksys_unshare+0x473/0xad0 [ 1209.502708][T20679] ? __pfx_ksys_unshare+0x10/0x10 [ 1209.502751][T20679] __x64_sys_unshare+0x31/0x40 [ 1209.502782][T20679] do_syscall_64+0x106/0xf80 [ 1209.502813][T20679] ? clear_bhb_loop+0x40/0x90 [ 1209.502844][T20679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.502876][T20679] RIP: 0033:0x7f25b5b9c799 [ 1209.502898][T20679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.502923][T20679] RSP: 002b:00007f25b6a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1209.502948][T20679] RAX: ffffffffffffffda RBX: 00007f25b5e15fa0 RCX: 00007f25b5b9c799 [ 1209.502966][T20679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1209.502982][T20679] RBP: 00007f25b5c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1209.502998][T20679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.503013][T20679] R13: 00007f25b5e16038 R14: 00007f25b5e15fa0 R15: 00007ffc72d518b8 [ 1209.503046][T20679] [ 1212.322604][T20714] capability: warning: `syz.6.3093' uses 32-bit capabilities (legacy support in use) [ 1217.477947][T20791] FAULT_INJECTION: forcing a failure. [ 1217.477947][T20791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.741341][T20791] CPU: 0 UID: 0 PID: 20791 Comm: syz.6.3107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.741380][T20791] Tainted: [L]=SOFTLOCKUP [ 1217.741389][T20791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.741404][T20791] Call Trace: [ 1217.741412][T20791] [ 1217.741422][T20791] dump_stack_lvl+0x100/0x190 [ 1217.741462][T20791] should_fail_ex.cold+0x5/0xa [ 1217.741491][T20791] _copy_from_user+0x2e/0xd0 [ 1217.741532][T20791] ip6_mroute_setsockopt+0x233d/0x36d0 [ 1217.741638][T20791] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1217.741662][T20791] ? is_bpf_text_address+0x8a/0x1a0 [ 1217.741699][T20791] ? is_bpf_text_address+0x8a/0x1a0 [ 1217.741739][T20791] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1217.741765][T20791] ? is_bpf_text_address+0x94/0x1a0 [ 1217.741802][T20791] ? kernel_text_address+0x8d/0x100 [ 1217.741838][T20791] ? __kernel_text_address+0xd/0x30 [ 1217.741873][T20791] ? unwind_get_return_address+0x59/0xa0 [ 1217.741899][T20791] ? arch_stack_walk+0xa6/0xf0 [ 1217.741933][T20791] ? _parse_integer_limit+0x17f/0x1d0 [ 1217.741970][T20791] ? do_ipv6_setsockopt+0x551/0x4400 [ 1217.742011][T20791] do_ipv6_setsockopt+0x551/0x4400 [ 1217.742051][T20791] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1217.742083][T20791] ? aa_label_sk_perm+0x194/0x5f0 [ 1217.742134][T20791] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1217.742182][T20791] ? find_held_lock+0x2b/0x80 [ 1217.742204][T20791] ? get_pid_task+0xfc/0x250 [ 1217.742233][T20791] ? get_pid_task+0xfc/0x250 [ 1217.742272][T20791] ? __pfx___might_resched+0x10/0x10 [ 1217.742308][T20791] ? __lock_acquire+0x4a5/0x2630 [ 1217.742341][T20791] ? aa_sk_perm+0x309/0xaa0 [ 1217.742383][T20791] ? ipv6_setsockopt+0xcb/0x170 [ 1217.742414][T20791] ipv6_setsockopt+0xcb/0x170 [ 1217.742451][T20791] rawv6_setsockopt+0xee/0x5a0 [ 1217.742482][T20791] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1217.742512][T20791] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1217.742543][T20791] ? sock_common_setsockopt+0x2e/0xf0 [ 1217.742578][T20791] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1217.742615][T20791] do_sock_setsockopt+0xf3/0x1d0 [ 1217.742653][T20791] __sys_setsockopt+0x119/0x190 [ 1217.742686][T20791] __x64_sys_setsockopt+0xbd/0x160 [ 1217.742712][T20791] ? do_syscall_64+0x95/0xf80 [ 1217.742741][T20791] ? lockdep_hardirqs_on+0x78/0x100 [ 1217.742769][T20791] do_syscall_64+0x106/0xf80 [ 1217.742797][T20791] ? clear_bhb_loop+0x40/0x90 [ 1217.742827][T20791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.742852][T20791] RIP: 0033:0x7fc0fcf9c799 [ 1217.742872][T20791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.742896][T20791] RSP: 002b:00007fc0fde6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1217.742920][T20791] RAX: ffffffffffffffda RBX: 00007fc0fd216090 RCX: 00007fc0fcf9c799 [ 1217.742937][T20791] RDX: 00000000000000cb RSI: 0000000000000029 RDI: 0400000000000003 [ 1217.742952][T20791] RBP: 00007fc0fde6c090 R08: 0000000000000565 R09: 0000000000000000 [ 1217.742967][T20791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.742982][T20791] R13: 00007fc0fd216128 R14: 00007fc0fd216090 R15: 00007ffc69051798 [ 1217.743012][T20791] [ 1218.976761][T20804] FAULT_INJECTION: forcing a failure. [ 1218.976761][T20804] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.284020][T20804] CPU: 0 UID: 0 PID: 20804 Comm: syz.6.3110 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.284064][T20804] Tainted: [L]=SOFTLOCKUP [ 1219.284073][T20804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1219.284087][T20804] Call Trace: [ 1219.284095][T20804] [ 1219.284105][T20804] dump_stack_lvl+0x100/0x190 [ 1219.284145][T20804] should_fail_ex.cold+0x5/0xa [ 1219.284173][T20804] should_failslab+0xc2/0x120 [ 1219.284198][T20804] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1219.284235][T20804] ? alloc_empty_file+0x55/0x1c0 [ 1219.284265][T20804] ? __pfx_stack_trace_save+0x10/0x10 [ 1219.284299][T20804] alloc_empty_file+0x55/0x1c0 [ 1219.284328][T20804] path_openat+0xe8/0x31a0 [ 1219.284350][T20804] ? kasan_save_stack+0x3f/0x50 [ 1219.284386][T20804] ? kasan_save_stack+0x30/0x50 [ 1219.284420][T20804] ? kasan_save_track+0x14/0x30 [ 1219.284455][T20804] ? __kasan_slab_alloc+0x89/0x90 [ 1219.284475][T20804] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1219.284509][T20804] ? do_getname+0x35/0x390 [ 1219.284537][T20804] ? do_sys_openat2+0xc5/0x1e0 [ 1219.284566][T20804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.284595][T20804] ? __pfx_path_openat+0x10/0x10 [ 1219.284629][T20804] do_file_open+0x20e/0x430 [ 1219.284655][T20804] ? __pfx_do_file_open+0x10/0x10 [ 1219.284699][T20804] ? alloc_fd+0x476/0x790 [ 1219.284725][T20804] ? do_getname+0x191/0x390 [ 1219.284757][T20804] do_sys_openat2+0x10d/0x1e0 [ 1219.284793][T20804] ? __pfx_do_sys_openat2+0x10/0x10 [ 1219.284827][T20804] ? __pfx_do_set_mempolicy+0x10/0x10 [ 1219.284857][T20804] __x64_sys_openat+0x12d/0x210 [ 1219.284889][T20804] ? __pfx___x64_sys_openat+0x10/0x10 [ 1219.284954][T20804] do_syscall_64+0x106/0xf80 [ 1219.284982][T20804] ? clear_bhb_loop+0x40/0x90 [ 1219.285011][T20804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.285040][T20804] RIP: 0033:0x7fc0fcf9c799 [ 1219.285059][T20804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.285082][T20804] RSP: 002b:00007fc0fde6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1219.285104][T20804] RAX: ffffffffffffffda RBX: 00007fc0fd216090 RCX: 00007fc0fcf9c799 [ 1219.285120][T20804] RDX: 0000000000101000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1219.285136][T20804] RBP: 00007fc0fd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1219.285151][T20804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.285165][T20804] R13: 00007fc0fd216128 R14: 00007fc0fd216090 R15: 00007ffc69051798 [ 1219.285194][T20804] [ 1221.711369][T20818] FAULT_INJECTION: forcing a failure. [ 1221.711369][T20818] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.802648][T20818] CPU: 0 UID: 0 PID: 20818 Comm: syz.2.3112 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.802689][T20818] Tainted: [L]=SOFTLOCKUP [ 1221.802699][T20818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.802715][T20818] Call Trace: [ 1221.802724][T20818] [ 1221.802733][T20818] dump_stack_lvl+0x100/0x190 [ 1221.802777][T20818] should_fail_ex.cold+0x5/0xa [ 1221.802812][T20818] should_failslab+0xc2/0x120 [ 1221.802845][T20818] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1221.802880][T20818] ? kobject_uevent_env+0x263/0x18b0 [ 1221.802945][T20818] kobject_uevent_env+0x263/0x18b0 [ 1221.802996][T20818] net_rx_queue_update_kobjects+0x1dd/0x760 [ 1221.803109][T20818] ? kset_register+0x1bb/0x290 [ 1221.803148][T20818] netdev_register_kobject+0x290/0x3d0 [ 1221.803194][T20818] register_netdevice+0x12e0/0x2210 [ 1221.803238][T20818] ? __pfx_register_netdevice+0x10/0x10 [ 1221.803281][T20818] __ip_tunnel_create+0x52b/0x670 [ 1221.803352][T20818] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1221.803383][T20818] ? net_generic+0xea/0x2a0 [ 1221.803423][T20818] ip_tunnel_init_net+0x230/0x780 [ 1221.803464][T20818] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1221.803506][T20818] ? __kmalloc_noprof+0x320/0x850 [ 1221.803547][T20818] ? __pfx_ipip_init_net+0x10/0x10 [ 1221.803604][T20818] ops_init+0x1e2/0x5f0 [ 1221.803640][T20818] setup_net+0x118/0x3a0 [ 1221.803673][T20818] ? __pfx_setup_net+0x10/0x10 [ 1221.803708][T20818] ? lockdep_init_map_type+0x5c/0x250 [ 1221.803745][T20818] ? mutex_init_lockep+0x110/0x150 [ 1221.803784][T20818] copy_net_ns+0x46f/0x7c0 [ 1221.803823][T20818] create_new_namespaces+0x3ea/0xac0 [ 1221.803863][T20818] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1221.803893][T20818] ksys_unshare+0x473/0xad0 [ 1221.803928][T20818] ? __pfx_ksys_unshare+0x10/0x10 [ 1221.803971][T20818] __x64_sys_unshare+0x31/0x40 [ 1221.804003][T20818] do_syscall_64+0x106/0xf80 [ 1221.804032][T20818] ? clear_bhb_loop+0x40/0x90 [ 1221.804069][T20818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.804096][T20818] RIP: 0033:0x7fb6bdd9c799 [ 1221.804118][T20818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.804144][T20818] RSP: 002b:00007fb6bec95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1221.804168][T20818] RAX: ffffffffffffffda RBX: 00007fb6be015fa0 RCX: 00007fb6bdd9c799 [ 1221.804186][T20818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1221.804202][T20818] RBP: 00007fb6bde32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1221.804218][T20818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.804234][T20818] R13: 00007fb6be016038 R14: 00007fb6be015fa0 R15: 00007ffebc8c8358 [ 1221.804267][T20818] [ 1222.976635][T20826] zswap: compressor not available [ 1225.454253][T19364] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1225.464676][T19364] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1225.473141][T19364] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1225.480854][T19364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1225.497813][T19364] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1225.931429][T20863] FAULT_INJECTION: forcing a failure. [ 1225.931429][T20863] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.080774][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.6.3124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.080822][T20863] Tainted: [L]=SOFTLOCKUP [ 1226.080832][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1226.080852][T20863] Call Trace: [ 1226.080861][T20863] [ 1226.080871][T20863] dump_stack_lvl+0x100/0x190 [ 1226.080919][T20863] should_fail_ex.cold+0x5/0xa [ 1226.080948][T20863] should_failslab+0xc2/0x120 [ 1226.080975][T20863] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1226.081008][T20863] ? seg6_net_init+0x49/0x1c0 [ 1226.081104][T20863] ? __pfx_seg6_net_init+0x10/0x10 [ 1226.081137][T20863] seg6_net_init+0x49/0x1c0 [ 1226.081167][T20863] ops_init+0x1e2/0x5f0 [ 1226.081204][T20863] setup_net+0x118/0x3a0 [ 1226.081237][T20863] ? __pfx_setup_net+0x10/0x10 [ 1226.081268][T20863] ? lockdep_init_map_type+0x5c/0x250 [ 1226.081303][T20863] ? mutex_init_lockep+0x110/0x150 [ 1226.081342][T20863] copy_net_ns+0x46f/0x7c0 [ 1226.081381][T20863] create_new_namespaces+0x3ea/0xac0 [ 1226.081415][T20863] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1226.081445][T20863] ksys_unshare+0x473/0xad0 [ 1226.081479][T20863] ? __pfx_ksys_unshare+0x10/0x10 [ 1226.081523][T20863] __x64_sys_unshare+0x31/0x40 [ 1226.081554][T20863] do_syscall_64+0x106/0xf80 [ 1226.081584][T20863] ? clear_bhb_loop+0x40/0x90 [ 1226.081622][T20863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.081648][T20863] RIP: 0033:0x7fc0fcf9c799 [ 1226.081669][T20863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.081698][T20863] RSP: 002b:00007fc0fde8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1226.081722][T20863] RAX: ffffffffffffffda RBX: 00007fc0fd215fa0 RCX: 00007fc0fcf9c799 [ 1226.081739][T20863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1226.081755][T20863] RBP: 00007fc0fd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1226.081771][T20863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.081787][T20863] R13: 00007fc0fd216038 R14: 00007fc0fd215fa0 R15: 00007ffc69051798 [ 1226.081819][T20863] [ 1227.394976][T20858] chnl_net:caif_netlink_parms(): no params data found [ 1227.571234][T19364] Bluetooth: hci1: command tx timeout [ 1228.046035][T20858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.086892][T20858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.143172][T20858] bridge_slave_0: entered allmulticast mode [ 1228.197084][T20858] bridge_slave_0: entered promiscuous mode [ 1228.245987][T20858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.301293][T20858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.391429][T20858] bridge_slave_1: entered allmulticast mode [ 1228.445662][T20858] bridge_slave_1: entered promiscuous mode [ 1228.682828][T20858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.783424][T20858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.040587][T20858] team0: Port device team_slave_0 added [ 1229.064470][T20908] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1229.109641][T20858] team0: Port device team_slave_1 added [ 1229.490142][T20858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.527180][T20858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.645772][T19364] Bluetooth: hci1: command tx timeout [ 1229.724050][T20858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.797777][T20858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.861175][T20858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.060521][T20858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.433903][T20858] hsr_slave_0: entered promiscuous mode [ 1230.483150][T20858] hsr_slave_1: entered promiscuous mode [ 1230.513121][T20858] debugfs: 'hsr0' already exists in 'hsr' [ 1230.561092][T20858] Cannot create hsr debugfs directory [ 1231.726318][T19364] Bluetooth: hci1: command tx timeout [ 1232.353126][T20858] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1232.546142][T20858] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1232.778730][T20858] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1232.856128][T20858] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1233.547739][T20858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.725932][T20858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.801282][T19364] Bluetooth: hci1: command tx timeout [ 1233.830802][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.838031][T10003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.987938][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.995133][T10003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.036597][T20961] __vm_enough_memory: pid: 20961, comm: syz.2.3148, bytes: 4398046511104 not enough memory for the allocation [ 1236.065602][T20985] netlink: 74 bytes leftover after parsing attributes in process `syz.6.3151'. [ 1236.309477][T20858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.091780][T21002] zswap: compressor not available [ 1238.309039][T20858] veth0_vlan: entered promiscuous mode [ 1238.396715][T20858] veth1_vlan: entered promiscuous mode [ 1238.771926][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.778351][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.883679][T20858] veth0_macvtap: entered promiscuous mode [ 1238.974021][T20858] veth1_macvtap: entered promiscuous mode [ 1239.137817][T20858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.244821][T20858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.333407][T10290] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.935205][T10290] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.984486][T10290] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.223587][T10290] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.696014][T10003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.751190][T10003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.136639][T10003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.231195][T10003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.743938][T20858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1242.337029][T21041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1245.011449][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3171'. [ 1245.309006][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3171'. [ 1246.380786][T21105] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1249.035810][T19364] Bluetooth: hci1: unexpected event 0x0f length: 440 > 4 [ 1249.121796][T21129] random: crng reseeded on system resumption [ 1253.086307][T19364] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1253.100227][T19364] Bluetooth: hci1: Injecting HCI hardware error event [ 1253.109615][ T9249] Bluetooth: hci1: hardware error 0x00 [ 1253.922871][ T29] audit: type=1800 audit(4294967426.000:35): pid=21196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3196" name="members" dev="configfs" ino=90055 res=0 errno=0 [ 1254.094842][T21199] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1254.403968][T21207] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1255.881563][ T9249] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1256.238607][T10003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.050870][T10003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.297278][T10003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.434779][T10003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.204108][T10003] bridge_slave_1: left allmulticast mode [ 1260.239312][T10003] bridge_slave_1: left promiscuous mode [ 1260.307219][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.507467][T10003] bridge_slave_0: left allmulticast mode [ 1260.573506][T10003] bridge_slave_0: left promiscuous mode [ 1260.637122][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.260104][T21286] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3213'. [ 1262.765263][T10003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.832377][T10003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.945486][T10003] bond0 (unregistering): Released all slaves [ 1263.144970][T10003] &#$@\]\-: left promiscuous mode [ 1267.204446][T10003] hsr_slave_0: left promiscuous mode [ 1267.256631][T10003] hsr_slave_1: left promiscuous mode [ 1267.298414][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.298441][T10003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.335461][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.335486][T10003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.478576][T10003] veth1_macvtap: left promiscuous mode [ 1267.478644][T10003] veth0_macvtap: left promiscuous mode [ 1267.478719][T10003] veth1_vlan: left promiscuous mode [ 1267.478770][T10003] veth0_vlan: left promiscuous mode [ 1268.897279][T10003] team0 (unregistering): Port device team_slave_1 removed [ 1269.002740][T10003] team0 (unregistering): Port device team_slave_0 removed [ 1269.076996][T21381] futex_wake_op: syz.6.3225 tries to shift op by -1; fix this program [ 1270.956628][T21418] FAULT_INJECTION: forcing a failure. [ 1270.956628][T21418] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.091523][T21418] CPU: 0 UID: 0 PID: 21418 Comm: syz.3.3234 Tainted: G L syzkaller #0 PREEMPT(full) [ 1271.091565][T21418] Tainted: [L]=SOFTLOCKUP [ 1271.091574][T21418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1271.091590][T21418] Call Trace: [ 1271.091599][T21418] [ 1271.091609][T21418] dump_stack_lvl+0x100/0x190 [ 1271.091655][T21418] should_fail_ex.cold+0x5/0xa [ 1271.091686][T21418] should_failslab+0xc2/0x120 [ 1271.091713][T21418] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1271.091752][T21418] ? vm_area_alloc+0x1f/0x160 [ 1271.091784][T21418] ? vma_merge_new_range+0x38b/0xa30 [ 1271.091826][T21418] vm_area_alloc+0x1f/0x160 [ 1271.091858][T21418] __mmap_region+0x10cc/0x29e0 [ 1271.091925][T21418] ? __pfx___mmap_region+0x10/0x10 [ 1271.091969][T21418] ? set_next_entity+0x11b/0x9c0 [ 1271.092014][T21418] ? __lock_acquire+0x4a5/0x2630 [ 1271.092046][T21418] ? update_cfs_rq_load_avg+0x51/0x550 [ 1271.092086][T21418] ? find_held_lock+0x2b/0x80 [ 1271.092108][T21418] ? finish_task_switch.isra.0+0x200/0xb80 [ 1271.092136][T21418] ? finish_task_switch.isra.0+0x200/0xb80 [ 1271.092174][T21418] ? trace_sched_exit_tp+0x13a/0x180 [ 1271.092204][T21418] ? __schedule+0x1000/0x60e0 [ 1271.092279][T21418] ? rcu_is_watching+0x12/0xc0 [ 1271.092319][T21418] ? cap_capable+0x107/0x460 [ 1271.092381][T21418] mmap_region+0x180/0x3e0 [ 1271.092425][T21418] do_mmap+0xc63/0x12f0 [ 1271.092458][T21418] ? __pfx_do_mmap+0x10/0x10 [ 1271.092485][T21418] ? __pfx_down_write_killable+0x10/0x10 [ 1271.092528][T21418] vm_mmap_pgoff+0x29e/0x470 [ 1271.092562][T21418] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1271.092592][T21418] ? do_futex+0x192/0x350 [ 1271.092626][T21418] ? __pfx_do_futex+0x10/0x10 [ 1271.092657][T21418] ? iput+0x3a/0x40 [ 1271.092686][T21418] ? __sock_release+0x184/0x260 [ 1271.092724][T21418] ksys_mmap_pgoff+0xe1/0x650 [ 1271.092750][T21418] ? __x64_sys_futex+0x34f/0x4d0 [ 1271.092783][T21418] ? __x64_sys_futex+0x358/0x4d0 [ 1271.092817][T21418] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1271.092844][T21418] ? xfd_validate_state+0x129/0x190 [ 1271.092893][T21418] __x64_sys_mmap+0x125/0x190 [ 1271.092935][T21418] do_syscall_64+0x106/0xf80 [ 1271.092965][T21418] ? clear_bhb_loop+0x40/0x90 [ 1271.092997][T21418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.093024][T21418] RIP: 0033:0x7f25b5b9c799 [ 1271.093045][T21418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.093070][T21418] RSP: 002b:00007f25b6a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1271.093095][T21418] RAX: ffffffffffffffda RBX: 00007f25b5e15fa0 RCX: 00007f25b5b9c799 [ 1271.093113][T21418] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 1271.093129][T21418] RBP: 00007f25b5c32bd9 R08: 0000000000000002 R09: 0000000000008000 [ 1271.093145][T21418] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1271.093161][T21418] R13: 00007f25b5e16038 R14: 00007f25b5e15fa0 R15: 00007ffc72d518b8 [ 1271.093194][T21418] [ 1271.464216][T21429] futex_wake_op: syz.7.3235 tries to shift op by -2048; fix this program [ 1273.452476][T21496] Â: entered promiscuous mode [ 1273.461260][T21498] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3246'. [ 1273.998150][T21504] Invalid ELF header magic: != ELF [ 1274.855149][T21524] syz.3.3249 (21524): attempted to duplicate a private mapping with mremap. This is not supported. [ 1275.497195][T21515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1276.843211][ T9249] Bluetooth: hci0: command 0x0406 tx timeout [ 1277.237041][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3253'. [ 1284.272857][T21663] FAULT_INJECTION: forcing a failure. [ 1284.272857][T21663] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.395779][T21663] CPU: 0 UID: 0 PID: 21663 Comm: syz.6.3277 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.395821][T21663] Tainted: [L]=SOFTLOCKUP [ 1284.395831][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1284.395847][T21663] Call Trace: [ 1284.395856][T21663] [ 1284.395865][T21663] dump_stack_lvl+0x100/0x190 [ 1284.395909][T21663] should_fail_ex.cold+0x5/0xa [ 1284.395939][T21663] should_failslab+0xc2/0x120 [ 1284.395973][T21663] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1284.396014][T21663] ? __alloc_skb+0x140/0x710 [ 1284.396048][T21663] __alloc_skb+0x140/0x710 [ 1284.396074][T21663] ? __alloc_skb+0x5b7/0x710 [ 1284.396101][T21663] ? __pfx___alloc_skb+0x10/0x10 [ 1284.396127][T21663] ? lockdep_hardirqs_on+0x78/0x100 [ 1284.396166][T21663] mpls_netconf_notify_devconf+0x4a/0x100 [ 1284.396216][T21663] mpls_dev_notify+0x6ce/0x920 [ 1284.396256][T21663] notifier_call_chain+0x99/0x420 [ 1284.396295][T21663] call_netdevice_notifiers_info+0xbe/0x110 [ 1284.396341][T21663] unregister_netdevice_many_notify+0x1208/0x2580 [ 1284.396388][T21663] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1284.396425][T21663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1284.396483][T21663] unregister_netdevice_queue+0x30b/0x3c0 [ 1284.396519][T21663] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1284.396557][T21663] ? __pfx_locks_remove_file+0x10/0x10 [ 1284.396592][T21663] ppp_release+0x211/0x230 [ 1284.396633][T21663] ? __pfx_ppp_release+0x10/0x10 [ 1284.396658][T21663] __fput+0x3ff/0xb40 [ 1284.396700][T21663] task_work_run+0x150/0x240 [ 1284.396746][T21663] ? __pfx_task_work_run+0x10/0x10 [ 1284.396791][T21663] exit_to_user_mode_loop+0x100/0x4a0 [ 1284.396828][T21663] do_syscall_64+0x668/0xf80 [ 1284.396857][T21663] ? clear_bhb_loop+0x40/0x90 [ 1284.396889][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.396915][T21663] RIP: 0033:0x7fc0fcf9c799 [ 1284.396936][T21663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.396968][T21663] RSP: 002b:00007fc0fde6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1284.396994][T21663] RAX: 0000000000000000 RBX: 00007fc0fd216090 RCX: 00007fc0fcf9c799 [ 1284.397011][T21663] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1284.397027][T21663] RBP: 00007fc0fd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1284.397043][T21663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.397058][T21663] R13: 00007fc0fd216128 R14: 00007fc0fd216090 R15: 00007ffc69051798 [ 1284.397092][T21663] [ 1285.513438][T21684] synth uevent: /module/au0828: unknown uevent action string [ 1286.991059][T21705] Invalid ELF header magic: != ELF [ 1292.359407][T21797] Invalid ELF header magic: != ELF [ 1292.611443][T21794] netlink: Failed to add  helper -22 [ 1294.093423][T21826] MTRR 2 not used [ 1297.887521][T21878] GUP no longer grows the stack in syz.2.3307 (21878): 5000-401000 (4000) [ 1297.989707][T21878] CPU: 0 UID: 0 PID: 21878 Comm: syz.2.3307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.989746][T21878] Tainted: [L]=SOFTLOCKUP [ 1297.989755][T21878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1297.989770][T21878] Call Trace: [ 1297.989778][T21878] [ 1297.989788][T21878] dump_stack_lvl+0x100/0x190 [ 1297.989830][T21878] gup_vma_lookup.cold+0x83/0x96 [ 1297.989872][T21878] __get_user_pages+0x241/0x34d0 [ 1297.989907][T21878] ? down_read_killable+0x30e/0x4c0 [ 1297.989942][T21878] ? __lock_acquire+0x4a5/0x2630 [ 1297.989973][T21878] ? __pfx___get_user_pages+0x10/0x10 [ 1297.990008][T21878] __gup_longterm_locked+0x87d/0x16f0 [ 1297.990044][T21878] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1297.990075][T21878] ? try_get_folio+0x262/0x750 [ 1297.990097][T21878] ? find_held_lock+0x2b/0x80 [ 1297.990120][T21878] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 1297.990152][T21878] gup_fast_fallback+0x18c6/0x2460 [ 1297.990200][T21878] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1297.990229][T21878] ? __lock_acquire+0x4a5/0x2630 [ 1297.990258][T21878] ? bio_associate_blkg_from_css+0xe33/0x13f0 [ 1297.990288][T21878] ? bio_associate_blkg+0x10c/0x2a0 [ 1297.990315][T21878] ? pcpu_block_update+0x20b/0x690 [ 1297.990352][T21878] pin_user_pages_fast+0xa7/0xf0 [ 1297.990380][T21878] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1297.990408][T21878] ? find_held_lock+0x2b/0x80 [ 1297.990429][T21878] ? __debug_object_init+0x2de/0x3d0 [ 1297.990480][T21878] ? __debug_object_init+0x2de/0x3d0 [ 1297.990516][T21878] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1297.990565][T21878] ? __lock_acquire+0x4a5/0x2630 [ 1297.990594][T21878] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1297.990638][T21878] ? __lock_acquire+0x4a5/0x2630 [ 1297.990674][T21878] iov_iter_extract_bvecs+0x10e/0xf40 [ 1297.990719][T21878] ? find_held_lock+0x2b/0x80 [ 1297.990744][T21878] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 1297.990773][T21878] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 1297.990815][T21878] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 1297.990854][T21878] bio_iov_iter_get_pages+0x26a/0x970 [ 1297.990958][T21878] __blkdev_direct_IO_simple+0x3a7/0x890 [ 1297.990993][T21878] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 1297.991047][T21878] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 1297.991077][T21878] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 1297.991114][T21878] blkdev_direct_IO+0xc76/0x1fb0 [ 1297.991156][T21878] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1297.991184][T21878] ? rcu_is_watching+0x12/0xc0 [ 1297.991220][T21878] ? __mark_inode_dirty+0x55c/0x1790 [ 1297.991254][T21878] ? filemap_check_errors+0xa9/0x150 [ 1297.991289][T21878] blkdev_write_iter+0x703/0xd70 [ 1297.991325][T21878] vfs_write+0x6ac/0x1070 [ 1297.991366][T21878] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1297.991398][T21878] ? __pfx_vfs_write+0x10/0x10 [ 1297.991433][T21878] ? find_held_lock+0x2b/0x80 [ 1297.991473][T21878] ksys_write+0x12a/0x250 [ 1297.991510][T21878] ? __pfx_ksys_write+0x10/0x10 [ 1297.991555][T21878] do_syscall_64+0x106/0xf80 [ 1297.991582][T21878] ? clear_bhb_loop+0x40/0x90 [ 1297.991612][T21878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.991636][T21878] RIP: 0033:0x7fb6bdd9c799 [ 1297.991656][T21878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.991679][T21878] RSP: 002b:00007fb6bec74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1297.991701][T21878] RAX: ffffffffffffffda RBX: 00007fb6be016090 RCX: 00007fb6bdd9c799 [ 1297.991717][T21878] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000004 [ 1297.991731][T21878] RBP: 00007fb6bde32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1297.991746][T21878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.991760][T21878] R13: 00007fb6be016128 R14: 00007fb6be016090 R15: 00007ffebc8c8358 [ 1297.991790][T21878] [ 1298.384989][T21886] sg_read: process 1820 (syz.6.3312) changed security contexts after opening file descriptor, this is not allowed. [ 1300.208496][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.215065][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.783597][T21907] Invalid ELF header magic: != ELF [ 1307.361474][T21985] FAULT_INJECTION: forcing a failure. [ 1307.361474][T21985] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.501803][T21985] CPU: 0 UID: 0 PID: 21985 Comm: syz.6.3332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.501844][T21985] Tainted: [L]=SOFTLOCKUP [ 1307.501853][T21985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1307.501869][T21985] Call Trace: [ 1307.501878][T21985] [ 1307.501887][T21985] dump_stack_lvl+0x100/0x190 [ 1307.501931][T21985] should_fail_ex.cold+0x5/0xa [ 1307.501960][T21985] should_failslab+0xc2/0x120 [ 1307.501986][T21985] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1307.502030][T21985] ? __d_alloc+0x34/0xa80 [ 1307.502057][T21985] ? security_inode_alloc+0xcf/0x2c0 [ 1307.502101][T21985] __d_alloc+0x34/0xa80 [ 1307.502126][T21985] ? __ns_ref_active_get+0x9f/0x1b0 [ 1307.502161][T21985] path_from_stashed+0x427/0x750 [ 1307.502187][T21985] ? do_raw_spin_unlock+0x145/0x1e0 [ 1307.502231][T21985] ns_get_path+0x60/0x80 [ 1307.502256][T21985] proc_ns_get_link+0x121/0x230 [ 1307.502292][T21985] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1307.502331][T21985] ? atime_needs_update+0x8b/0x6b0 [ 1307.502369][T21985] pick_link+0xd17/0x13c0 [ 1307.502405][T21985] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1307.502444][T21985] step_into_slowpath+0x9ba/0xf90 [ 1307.502488][T21985] ? __pfx_step_into_slowpath+0x10/0x10 [ 1307.502526][T21985] ? find_held_lock+0x2b/0x80 [ 1307.502559][T21985] path_openat+0xf95/0x31a0 [ 1307.502593][T21985] ? __pfx_path_openat+0x10/0x10 [ 1307.502630][T21985] do_file_open+0x20e/0x430 [ 1307.502658][T21985] ? __pfx_do_file_open+0x10/0x10 [ 1307.502705][T21985] ? alloc_fd+0x476/0x790 [ 1307.502731][T21985] ? do_getname+0x191/0x390 [ 1307.502765][T21985] do_sys_openat2+0x10d/0x1e0 [ 1307.502799][T21985] ? __pfx_do_sys_openat2+0x10/0x10 [ 1307.502835][T21985] ? __fget_files+0x21f/0x3d0 [ 1307.502864][T21985] __x64_sys_openat+0x12d/0x210 [ 1307.502898][T21985] ? __pfx___x64_sys_openat+0x10/0x10 [ 1307.502943][T21985] do_syscall_64+0x106/0xf80 [ 1307.502974][T21985] ? clear_bhb_loop+0x40/0x90 [ 1307.503010][T21985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.503036][T21985] RIP: 0033:0x7fc0fcf5cfce [ 1307.503057][T21985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1307.503082][T21985] RSP: 002b:00007fc0fde8cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1307.503107][T21985] RAX: ffffffffffffffda RBX: 00007fc0fde8d6c0 RCX: 00007fc0fcf5cfce [ 1307.503125][T21985] RDX: 0000000000000002 RSI: 00007fc0fde8cf90 RDI: ffffffffffffff9c [ 1307.503141][T21985] RBP: 00007fc0fd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1307.503158][T21985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.503174][T21985] R13: 00007fc0fd216038 R14: 00007fc0fd215fa0 R15: 00007ffc69051798 [ 1307.503207][T21985] [ 1310.035086][T22021] FAULT_INJECTION: forcing a failure. [ 1310.035086][T22021] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.138063][T22021] CPU: 0 UID: 0 PID: 22021 Comm: syz.6.3338 Tainted: G L syzkaller #0 PREEMPT(full) [ 1310.138104][T22021] Tainted: [L]=SOFTLOCKUP [ 1310.138114][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1310.138130][T22021] Call Trace: [ 1310.138138][T22021] [ 1310.138148][T22021] dump_stack_lvl+0x100/0x190 [ 1310.138193][T22021] should_fail_ex.cold+0x5/0xa [ 1310.138229][T22021] ? security_inode_init_security+0x113/0x370 [ 1310.138263][T22021] should_failslab+0xc2/0x120 [ 1310.138289][T22021] __kmalloc_noprof+0xe0/0x850 [ 1310.138334][T22021] security_inode_init_security+0x113/0x370 [ 1310.138369][T22021] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1310.138398][T22021] ? __pfx_security_inode_init_security+0x10/0x10 [ 1310.138435][T22021] ? make_vfsgid+0xf1/0x140 [ 1310.138473][T22021] shmem_mknod+0x2bf/0x470 [ 1310.138509][T22021] ? __pfx_shmem_mknod+0x10/0x10 [ 1310.138550][T22021] vfs_create+0x301/0x6c0 [ 1310.138589][T22021] filename_mknodat+0x2de/0x7f0 [ 1310.138620][T22021] ? __pfx_filename_mknodat+0x10/0x10 [ 1310.138647][T22021] ? strncpy_from_user+0x19d/0x2d0 [ 1310.138692][T22021] ? do_getname+0x191/0x390 [ 1310.138733][T22021] __x64_sys_mknod+0x8f/0xc0 [ 1310.138761][T22021] do_syscall_64+0x106/0xf80 [ 1310.138792][T22021] ? clear_bhb_loop+0x40/0x90 [ 1310.138824][T22021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.138850][T22021] RIP: 0033:0x7fc0fcf9c799 [ 1310.138871][T22021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.138897][T22021] RSP: 002b:00007fc0fde6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1310.138922][T22021] RAX: ffffffffffffffda RBX: 00007fc0fd216090 RCX: 00007fc0fcf9c799 [ 1310.138939][T22021] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000 [ 1310.138955][T22021] RBP: 00007fc0fd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1310.138970][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1310.138986][T22021] R13: 00007fc0fd216128 R14: 00007fc0fd216090 R15: 00007ffc69051798 [ 1310.139018][T22021] [ 1311.319653][T22030] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a000 [ 1311.399756][T22030] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1311.441480][T22030] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1311.536741][T22030] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1311.596176][T22030] page dumped because: unmovable page [ 1311.706487][T22030] page_owner tracks the page as allocated [ 1311.776438][T22030] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5820, tgid 5820 (syz-executor), ts 94922059293, free_ts 91415330967 [ 1311.948107][T22030] post_alloc_hook+0x153/0x170 [ 1312.057899][T22030] get_page_from_freelist+0x111d/0x3140 [ 1312.097982][T22030] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1312.124116][T22030] alloc_pages_bulk_noprof+0x782/0x1490 [ 1312.149966][T22030] __kasan_populate_vmalloc+0xf0/0x210 [ 1312.201199][T22030] alloc_vmap_area+0x95d/0x2bd0 [ 1312.215949][T22030] __get_vm_area_node+0x1ca/0x330 [ 1312.244276][T22030] __vmalloc_node_range_noprof+0x213/0x1530 [ 1312.285727][T22030] vmalloc_user_noprof+0x9e/0xe0 [ 1312.329814][T22030] kcov_ioctl+0x4c/0x720 [ 1312.349035][T22030] __x64_sys_ioctl+0x18e/0x210 [ 1312.374593][T22030] do_syscall_64+0x106/0xf80 [ 1312.395859][T22030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.422271][T22030] page last free pid 5810 tgid 5810 stack trace: [ 1312.446130][T22030] __free_frozen_pages+0x7e1/0x10d0 [ 1312.463375][T22030] vfree.part.0+0x12b/0x9d0 [ 1312.479018][T22030] vfree+0x55/0x80 [ 1312.493281][T22030] kcov_close+0x34/0x60 [ 1312.506621][T22030] __fput+0x3ff/0xb40 [ 1312.527458][T22030] fput_close_sync+0x118/0x250 [ 1312.544650][T22030] __x64_sys_close+0x8b/0x120 [ 1312.561371][T22030] do_syscall_64+0x106/0xf80 [ 1312.577782][T22030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.546747][T22063] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3347'. [ 1313.671611][T22065] netlink: 'syz.6.3347': attribute type 1 has an invalid length. [ 1313.679416][T22065] netlink: 306 bytes leftover after parsing attributes in process `syz.6.3347'. [ 1314.308196][T22076] FAULT_INJECTION: forcing a failure. [ 1314.308196][T22076] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1314.438627][T22076] CPU: 0 UID: 0 PID: 22076 Comm: syz.6.3350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1314.438669][T22076] Tainted: [L]=SOFTLOCKUP [ 1314.438679][T22076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1314.438695][T22076] Call Trace: [ 1314.438703][T22076] [ 1314.438714][T22076] dump_stack_lvl+0x100/0x190 [ 1314.438758][T22076] should_fail_ex.cold+0x5/0xa [ 1314.438787][T22076] get_futex_key+0x1d2/0x1620 [ 1314.438822][T22076] ? __pfx_get_futex_key+0x10/0x10 [ 1314.438853][T22076] ? do_mmap+0x93f/0x12f0 [ 1314.438887][T22076] futex_wake+0xea/0x530 [ 1314.438923][T22076] ? __pfx___mm_populate+0x10/0x10 [ 1314.438956][T22076] ? __pfx_futex_wake+0x10/0x10 [ 1314.439007][T22076] do_futex+0x32b/0x350 [ 1314.439040][T22076] ? __pfx_do_futex+0x10/0x10 [ 1314.439071][T22076] ? __pfx_do_sys_openat2+0x10/0x10 [ 1314.439112][T22076] __x64_sys_futex+0x34f/0x4d0 [ 1314.439146][T22076] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1314.439173][T22076] ? __pfx___x64_sys_futex+0x10/0x10 [ 1314.439218][T22076] do_syscall_64+0x106/0xf80 [ 1314.439248][T22076] ? clear_bhb_loop+0x40/0x90 [ 1314.439279][T22076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.439305][T22076] RIP: 0033:0x7fc0fcf9c799 [ 1314.439326][T22076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.439357][T22076] RSP: 002b:00007fc0fde8d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1314.439382][T22076] RAX: ffffffffffffffda RBX: 00007fc0fd215fa8 RCX: 00007fc0fcf9c799 [ 1314.439399][T22076] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc0fd215fac [ 1314.439415][T22076] RBP: 00007fc0fd215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1314.439431][T22076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.439447][T22076] R13: 00007fc0fd216038 R14: 00007ffc690516b0 R15: 00007ffc69051798 [ 1314.439479][T22076] [ 1314.862350][T22075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1315.350673][T22092] can: request_module (can-proto-0) failed. [ 1315.980218][T22102] netlink: 'syz.3.3355': attribute type 27 has an invalid length. [ 1316.038755][T22102] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3355'. [ 1316.556980][T22112] KVM: debugfs: duplicate directory 22112-3 [ 1318.872925][ T29] audit: type=1800 audit(4294967490.940:36): pid=22156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3367" name="discovery_nqn" dev="configfs" ino=93935 res=0 errno=0 [ 1320.477552][T22192] netlink: 326 bytes leftover after parsing attributes in process `syz.6.3373'. [ 1322.049279][T22210] FAULT_INJECTION: forcing a failure. [ 1322.049279][T22210] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.169559][T22210] CPU: 0 UID: 0 PID: 22210 Comm: syz.6.3379 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.169597][T22210] Tainted: [L]=SOFTLOCKUP [ 1322.169606][T22210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1322.169621][T22210] Call Trace: [ 1322.169629][T22210] [ 1322.169638][T22210] dump_stack_lvl+0x100/0x190 [ 1322.169681][T22210] should_fail_ex.cold+0x5/0xa [ 1322.169708][T22210] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1322.169745][T22210] should_failslab+0xc2/0x120 [ 1322.169770][T22210] __kmalloc_noprof+0xe0/0x850 [ 1322.169811][T22210] tomoyo_realpath_from_path+0xb6/0x690 [ 1322.169845][T22210] tomoyo_path_number_perm+0x23c/0x580 [ 1322.169882][T22210] ? tomoyo_path_number_perm+0x22e/0x580 [ 1322.169922][T22210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1322.169988][T22210] ? find_held_lock+0x2b/0x80 [ 1322.170011][T22210] ? __fget_files+0x215/0x3d0 [ 1322.170031][T22210] ? hook_file_ioctl_common+0x146/0x410 [ 1322.170093][T22210] ? __fget_files+0x21f/0x3d0 [ 1322.170119][T22210] security_file_ioctl+0xd3/0x230 [ 1322.170159][T22210] __x64_sys_ioctl+0xb7/0x210 [ 1322.170195][T22210] do_syscall_64+0x106/0xf80 [ 1322.170223][T22210] ? clear_bhb_loop+0x40/0x90 [ 1322.170252][T22210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.170276][T22210] RIP: 0033:0x7fc0fcf9c799 [ 1322.170295][T22210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.170319][T22210] RSP: 002b:00007fc0fde8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1322.170342][T22210] RAX: ffffffffffffffda RBX: 00007fc0fd215fa0 RCX: 00007fc0fcf9c799 [ 1322.170359][T22210] RDX: 0000200000000080 RSI: 0000000080045510 RDI: 0000000000000003 [ 1322.170374][T22210] RBP: 00007fc0fde8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.170388][T22210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.170403][T22210] R13: 00007fc0fd216038 R14: 00007fc0fd215fa0 R15: 00007ffc69051798 [ 1322.170434][T22210] [ 1322.170444][T22210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1337.092770][T22419] FAULT_INJECTION: forcing a failure. [ 1337.092770][T22419] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.563172][T22419] CPU: 0 UID: 0 PID: 22419 Comm: syz.6.3411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.563214][T22419] Tainted: [L]=SOFTLOCKUP [ 1337.563224][T22419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1337.563241][T22419] Call Trace: [ 1337.563250][T22419] [ 1337.563260][T22419] dump_stack_lvl+0x100/0x190 [ 1337.563304][T22419] should_fail_ex.cold+0x5/0xa [ 1337.563334][T22419] should_failslab+0xc2/0x120 [ 1337.563360][T22419] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1337.563393][T22419] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 1337.563528][T22419] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 1337.563560][T22419] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 1337.563591][T22419] vidtv_channel_si_init+0x1289/0x18d0 [ 1337.563641][T22419] vidtv_mux_init+0x526/0xbf0 [ 1337.563676][T22419] vidtv_start_feed+0x33e/0x4c0 [ 1337.563733][T22419] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1337.563780][T22419] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1337.563827][T22419] ? mark_held_locks+0x40/0x70 [ 1337.563866][T22419] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1337.563906][T22419] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1337.563970][T22419] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1337.564012][T22419] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1337.564056][T22419] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 1337.564099][T22419] dvb_demux_do_ioctl+0xe64/0x1200 [ 1337.564148][T22419] dvb_usercopy+0x167/0x340 [ 1337.564181][T22419] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1337.564223][T22419] ? __pfx_dvb_usercopy+0x10/0x10 [ 1337.564275][T22419] ? __fget_files+0x21f/0x3d0 [ 1337.564304][T22419] dvb_demux_ioctl+0x29/0x40 [ 1337.564339][T22419] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1337.564375][T22419] __x64_sys_ioctl+0x18e/0x210 [ 1337.564414][T22419] do_syscall_64+0x106/0xf80 [ 1337.564445][T22419] ? clear_bhb_loop+0x40/0x90 [ 1337.564477][T22419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.564507][T22419] RIP: 0033:0x7fc0fcf9c799 [ 1337.564535][T22419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.564561][T22419] RSP: 002b:00007fc0fde8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1337.564587][T22419] RAX: ffffffffffffffda RBX: 00007fc0fd215fa0 RCX: 00007fc0fcf9c799 [ 1337.564604][T22419] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 1337.564620][T22419] RBP: 00007fc0fd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1337.564641][T22419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1337.564657][T22419] R13: 00007fc0fd216038 R14: 00007fc0fd215fa0 R15: 00007ffc69051798 [ 1337.564689][T22419] [ 1337.564762][T22419] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1337.832811][T22419] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1337.841294][T22419] CPU: 0 UID: 0 PID: 22419 Comm: syz.6.3411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.852246][T22419] Tainted: [L]=SOFTLOCKUP [ 1337.856572][T22419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1337.866633][T22419] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 1337.872564][T22419] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 ed 3b dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 c9 3b dc f9 4d 85 e4 [ 1337.892184][T22419] RSP: 0018:ffffc90002f47a10 EFLAGS: 00010247 [ 1337.898278][T22419] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc90019952000 [ 1337.906275][T22419] RDX: 0000000000000000 RSI: ffffffff882bbeb3 RDI: 0000000000000005 [ 1337.914258][T22419] RBP: ffff88805abe4920 R08: 0000000000000000 R09: 4453534204050000 [ 1337.922238][T22419] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 1337.930215][T22419] R13: ffff88805abc4400 R14: ffff8880227d46e0 R15: ffff88809f470b80 [ 1337.938202][T22419] FS: 00007fc0fde8d6c0(0000) GS:ffff88812434c000(0000) knlGS:0000000000000000 [ 1337.947145][T22419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1337.953737][T22419] CR2: 0000001b2ea06ff8 CR3: 000000005c9d4000 CR4: 00000000003526f0 [ 1337.961719][T22419] Call Trace: [ 1337.965006][T22419] [ 1337.967944][T22419] vidtv_channel_si_init+0x12fc/0x18d0 [ 1337.973433][T22419] vidtv_mux_init+0x526/0xbf0 [ 1337.978129][T22419] vidtv_start_feed+0x33e/0x4c0 [ 1337.983002][T22419] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1337.988422][T22419] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1337.995066][T22419] ? mark_held_locks+0x40/0x70 [ 1337.999862][T22419] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1338.005273][T22419] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1338.011057][T22419] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1338.016373][T22419] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1338.021865][T22419] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 1338.027214][T22419] dvb_demux_do_ioctl+0xe64/0x1200 [ 1338.032432][T22419] dvb_usercopy+0x167/0x340 [ 1338.036983][T22419] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1338.042578][T22419] ? __pfx_dvb_usercopy+0x10/0x10 [ 1338.047658][T22419] ? __fget_files+0x21f/0x3d0 [ 1338.052355][T22419] dvb_demux_ioctl+0x29/0x40 [ 1338.056972][T22419] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1338.062296][T22419] __x64_sys_ioctl+0x18e/0x210 [ 1338.067096][T22419] do_syscall_64+0x106/0xf80 [ 1338.071790][T22419] ? clear_bhb_loop+0x40/0x90 [ 1338.076485][T22419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.082426][T22419] RIP: 0033:0x7fc0fcf9c799 [ 1338.086852][T22419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.106556][T22419] RSP: 002b:00007fc0fde8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1338.114996][T22419] RAX: ffffffffffffffda RBX: 00007fc0fd215fa0 RCX: 00007fc0fcf9c799 [ 1338.122971][T22419] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 1338.130951][T22419] RBP: 00007fc0fd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1338.138926][T22419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.146902][T22419] R13: 00007fc0fd216038 R14: 00007fc0fd215fa0 R15: 00007ffc69051798 [ 1338.154901][T22419] [ 1338.157943][T22419] Modules linked in: [ 1338.163872][T22419] ---[ end trace 0000000000000000 ]--- [ 1343.191227][T22419] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 1343.228627][T22419] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 ed 3b dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 c9 3b dc f9 4d 85 e4 [ 1343.322305][T22419] RSP: 0018:ffffc90002f47a10 EFLAGS: 00010247 [ 1343.348083][T22419] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc90019952000 [ 1343.386679][T22419] RDX: 0000000000000000 RSI: ffffffff882bbeb3 RDI: 0000000000000005 [ 1343.424425][T22419] RBP: ffff88805abe4920 R08: 0000000000000000 R09: 4453534204050000 [ 1343.457721][T22419] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 1343.496618][T22419] R13: ffff88805abc4400 R14: ffff8880227d46e0 R15: ffff88809f470b80 [ 1343.532127][T22419] FS: 00007fc0fde8d6c0(0000) GS:ffff88812434c000(0000) knlGS:0000000000000000 [ 1343.567839][T22419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1343.582516][T22419] CR2: 00005555685804e8 CR3: 000000005c9d4000 CR4: 00000000003526f0 [ 1343.603261][T22419] Kernel panic - not syncing: Fatal exception [ 1343.609429][T22419] Kernel Offset: disabled [ 1343.613762][T22419] Rebooting in 86400 seconds..