last executing test programs: 6m28.115099198s ago: executing program 0 (id=1317): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x310) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/sg/parameters/def_reserved_size\x00', 0x121f01, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto(r0, 0x402, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = open(&(0x7f0000000140)='./cgroup\x00', 0xa000, 0x310) fcntl$auto(r2, 0x402, 0x1) 6m27.950462834s ago: executing program 0 (id=1318): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x7fffffffffffffff, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x3bbb) r4 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1p/sub3/status\x00', 0x84300, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_VLAN_ID={0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xff}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xffffffff}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x80) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80064, 0x9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 6m26.793224019s ago: executing program 0 (id=1321): madvise$auto(0x8, 0xd631, 0x140015) mmap$auto(0x10001, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x4242, 0x15) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x27, 0x3, 0x3f) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (fail_nth: 13) open$dir(0x0, 0x10000, 0x6) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0xfffffffc) sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') getdents$auto(r1, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) msgrcv$auto(0xffff363b, 0x0, 0x8, 0x1fd, 0x400003) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x6, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) 6m25.730739839s ago: executing program 0 (id=1325): sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_robust_list$auto(0x0, 0x92) mbind$auto(0x8, 0xffffffffffffffff, 0x7, &(0x7f0000000000)=0xcb1, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x7f, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x8, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0xfffffffd, 0x1, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x7, 0x8, 0xfffffffffffffff7, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0xe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xfffffffffffffff9, 0x100000000, 0xb, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x2000c814) setfsuid$auto(0xee01) r3 = fanotify_init$auto(0xc00, 0x2000000000002) fanotify_mark$auto(r3, 0x5, 0x10000008, 0x4, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) mmap$auto(0x40000000, 0x2020009, 0x4, 0x800000000000eb5, 0xfffffffffffffffa, 0x7ffc) futex$auto(0x0, 0x6, 0xc, 0x0, 0x0, 0x526) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 6m24.163818948s ago: executing program 0 (id=1330): r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x80201, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socketpair$auto(0x5, 0x4, 0x5, &(0x7f0000000240)=0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0x100) ioctl$auto(0x1, 0x8983, 0x4) setuid$auto(0xe) getrandom$auto(&(0x7f00000001c0)='&{{\x1c\x8c^:}\x00', 0xfffffffffffffff7, 0xfff) prctl$auto(0x1000000001c, 0x7fc, 0x0, 0x9, 0x38000000) pwritev$auto(r0, &(0x7f0000001f40)={0x0, 0x10001}, 0xe, 0x4, 0x8000000000000001) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000200), 0x422c80, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) ioctl$auto(r3, 0x8915, 0x24) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032dbd7000ffdbdf251d00000004004a015100f08072232fe07f8e44476817797a75fde417360cba67fb019b8fdbbf5a611a69cebb447a4072c47075f012975cf0c8d9fde17df15c00561099afe89ccc54888cd8887d7a02f5ea580518fd01036dcd000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x20004805) 6m23.187070282s ago: executing program 0 (id=1332): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\\@.\'\x00', 0x8, 0x7fffffffffffffff) r0 = memfd_create$auto(&(0x7f0000000040)='\\@.\'\x00', 0x3ff) r1 = socket(0x1, 0xa, 0x7fffffff) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000080)={"585d8df58bbeee5b3eeb56228e05afa22c76b7756927898c69d4e87225e25426", 0x5, 0xda78, 0x8000, 0x81, 0x0, 0xffffffffffffffff}) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/pid\x00') fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000140)='.\x00', &(0x7f0000000180)="7a88ee6b", 0x4) fstatfs$auto(r3, &(0x7f00000001c0)={0x9, 0xfff, 0x7366, 0x1, 0x1, 0x4739, 0xb, {[0x1, 0x3ff]}, 0x0, 0x998, 0x9, [0x2e1, 0xcd9, 0x6, 0x6fd]}) rt_sigqueueinfo$auto_SIGCONT(r2, 0x12, &(0x7f0000000240)={@_si_pad}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/thermal/cooling_device0/power/runtime_active_time\x00', 0x6341, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000340), 0x200202, 0x0) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000540)={{0xc, 0xee00, 0x0, 0xff, 0x4, 0x2, 0x1000}, 0x8001, 0xc5, 0xe7d, 0x9d30, @inferred=r2, @raw=0xffff, 0xdf, 0x0, &(0x7f0000000380)="7ba3453ccce7462e445b360e4ca5683393bee228c2a3f031672930b363ab7adf212789203b9dd56de008c7b0c2cc543f9df540c729a8cf24d6761f8a7deb9d32f0ba613bfd630dc77ca5fbf84f5e41fe2b78c4cfdc56b89228e75bd705f9ce6ad1efb6972e459b815f74f724a7313bf4eb3b4a385a92bf5c83cacdc954298224aa76775b245f24e9a4908c16439ec971394accbc46bdb53d3ada06463ce315630e8e9ef8324020a37ac44b8f7e8557e4b1f0cf240266d9f1c963f60c6a764dbe44dc107c308aaf2ecbebfbb00b0a55ab6e62d2087ea912bae5e1353aa89a58ff187ac2542d", &(0x7f0000000480)="fc929c09ce9e7e651a7b17580ff7e677463e4b2c11aaaca1cde09b889173df76c74484f583cb015e582cfc7469a2469515eed5f6ba6c3a91168db8587a350562e1f35451275cdb81ead325a1120ea6646a7110204297456acfba861036bd126fab89c32ad88c7b322cf95a4f55ba3721fc1a0dd13c02f501ba57ca71a1a5afa84edb2624e42e97f08aa111abe113fc13e2f93ae0ee7341c3941a56534b2d00f0607ccb283e06ad866d"}) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000005c0)={0xdb5, 0xee00, 0x8, 0x8}) msgctl$auto_MSG_STAT(0x9, 0xb, &(0x7f0000000680)={{0x6, r4, r6, 0x7ff, 0x8, 0xfffffffb, 0x4}, &(0x7f0000000600)=0x5, &(0x7f0000000640)=0xff, 0xd3a, 0x9, 0x0, 0x9b, 0x8000000000000001, 0x3, 0x6, 0x8, @inferred=r2, @inferred=r2}) getsockopt$auto_SO_KEEPALIVE(r3, 0x7, 0x9, &(0x7f0000000700)='/sys/devices/virtual/thermal/cooling_device0/power/runtime_active_time\x00', &(0x7f0000000780)=0x5) write$auto_fops_u16_(r0, &(0x7f00000007c0)="33ed20ea4ae0e1cd79f5fffcec11c7255dd978bd1c6555a9de62187dce2c6e3821664fdcde61adcf3e961c3d01666558501c1ee26a29957939f3344495e110770cd9888fa97711b12a32e67ee86af4ebc1eaa2bbc88061895b1e7cf3fd25c7d69b56a52aa3df76287addacc31498e3c0123f7022bf583d25dfd29ffa0a0a2e5ddbb2229bc92967d621175cafc021720dcdc2fc2c37d4a6f774b18834507f052c8a73b36a3f9fa1c028f6f7635a0d9416f88933752a20217ba4feec078015d057b2ac6ab2d73d81ec", 0xc8) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/dsp1\x00', 0x101940, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r7, 0x5001, &(0x7f0000000900)="c6fad2b432962e46726ff5dc71dee5961316d62545acc072886df649f1a7bdda130df8a5aa54ba72f13f44d2018b9f50645cf92689ede674335013516e83245ee946f0326fd6f7f49670f32da432503b368eaa44a83962d216553b4e0a89587380b64dd1b32939a777d465c833356311944a36533c418de353db050c0482e826973be79a91db8f63a8ae8a0074e2205dcfd9d078cf98e4e410b2f0924f4165237ab0089780774ea358e65482bfe0b98b54ca7981022a58c3a31bacedbc353ef0cceffc4bbfdf89") ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f0000000a40)={&(0x7f0000000a00)='/dev/dsp1\x00', 0xb, 0x7}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/devices/virtual/tty/ttyx0/power/runtime_suspended_time\x00', 0x400001, 0x0) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000b00), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) read$auto_proc_timens_offsets_operations_base(r0, &(0x7f0000000c00)=""/6, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000c80), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r10, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) msgctl$auto_MSG_STAT(0x5, 0xb, &(0x7f0000000e00)={{0x1000, 0xee00, r5, 0x2, 0x6, 0x800, 0x8}, &(0x7f0000000d80)=0x4, &(0x7f0000000dc0)=0xe, 0x7fffffff, 0x8000000000000000, 0x4, 0xffffffffffff7b05, 0xfffffffffffffffd, 0xd, 0x81, 0x4, @raw=0x8, @raw=0xc93}) getsockopt$auto_SO_BUF_LOCK(r0, 0x6, 0x48, &(0x7f0000000e80)='[\x00', &(0x7f0000000ec0)=0x1) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, "402dc40d74239f8bf810b5e3bfa0f7e0afa085"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004801) open_by_handle_at$auto(r1, &(0x7f0000001040)={0xd6, 0x5, "2f3e4f7bc61e2a16cb43cf9e0f9404ca17db54be4d6dcb5a211e64153db15da31e27649158483642288b64e639ed8d189375a5b0d5ea1481d9a6cc85872fd2b93a27bb134a68b23f1fca8af1c3afb05092930452781ca2f982ca524f53e17644590a85dbc2c86dcbfc96a723186aedd9057533bb439a66012020097168c22b058cb1645fa1e5f666417732a5615b2323cd0f4a89f19184f54cbd23e6b091e0dcfe8fec85741791c2498e3b4402b65e8a155abe983a82db8d3ec7a6e2c8daadc0299b32579790527c291a44ebbbc40b6d8143e4b35380"}, 0x3) io_uring_register$auto_IORING_UNREGISTER_FILES(r3, 0x3, &(0x7f0000001140)="84a2eca013e7652c67d75cca9d5b8d319ee30f", 0x7f) 6m22.659802282s ago: executing program 32 (id=1332): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\\@.\'\x00', 0x8, 0x7fffffffffffffff) r0 = memfd_create$auto(&(0x7f0000000040)='\\@.\'\x00', 0x3ff) r1 = socket(0x1, 0xa, 0x7fffffff) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000080)={"585d8df58bbeee5b3eeb56228e05afa22c76b7756927898c69d4e87225e25426", 0x5, 0xda78, 0x8000, 0x81, 0x0, 0xffffffffffffffff}) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/pid\x00') fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000140)='.\x00', &(0x7f0000000180)="7a88ee6b", 0x4) fstatfs$auto(r3, &(0x7f00000001c0)={0x9, 0xfff, 0x7366, 0x1, 0x1, 0x4739, 0xb, {[0x1, 0x3ff]}, 0x0, 0x998, 0x9, [0x2e1, 0xcd9, 0x6, 0x6fd]}) rt_sigqueueinfo$auto_SIGCONT(r2, 0x12, &(0x7f0000000240)={@_si_pad}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/thermal/cooling_device0/power/runtime_active_time\x00', 0x6341, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000340), 0x200202, 0x0) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000540)={{0xc, 0xee00, 0x0, 0xff, 0x4, 0x2, 0x1000}, 0x8001, 0xc5, 0xe7d, 0x9d30, @inferred=r2, @raw=0xffff, 0xdf, 0x0, &(0x7f0000000380)="7ba3453ccce7462e445b360e4ca5683393bee228c2a3f031672930b363ab7adf212789203b9dd56de008c7b0c2cc543f9df540c729a8cf24d6761f8a7deb9d32f0ba613bfd630dc77ca5fbf84f5e41fe2b78c4cfdc56b89228e75bd705f9ce6ad1efb6972e459b815f74f724a7313bf4eb3b4a385a92bf5c83cacdc954298224aa76775b245f24e9a4908c16439ec971394accbc46bdb53d3ada06463ce315630e8e9ef8324020a37ac44b8f7e8557e4b1f0cf240266d9f1c963f60c6a764dbe44dc107c308aaf2ecbebfbb00b0a55ab6e62d2087ea912bae5e1353aa89a58ff187ac2542d", &(0x7f0000000480)="fc929c09ce9e7e651a7b17580ff7e677463e4b2c11aaaca1cde09b889173df76c74484f583cb015e582cfc7469a2469515eed5f6ba6c3a91168db8587a350562e1f35451275cdb81ead325a1120ea6646a7110204297456acfba861036bd126fab89c32ad88c7b322cf95a4f55ba3721fc1a0dd13c02f501ba57ca71a1a5afa84edb2624e42e97f08aa111abe113fc13e2f93ae0ee7341c3941a56534b2d00f0607ccb283e06ad866d"}) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000005c0)={0xdb5, 0xee00, 0x8, 0x8}) msgctl$auto_MSG_STAT(0x9, 0xb, &(0x7f0000000680)={{0x6, r4, r6, 0x7ff, 0x8, 0xfffffffb, 0x4}, &(0x7f0000000600)=0x5, &(0x7f0000000640)=0xff, 0xd3a, 0x9, 0x0, 0x9b, 0x8000000000000001, 0x3, 0x6, 0x8, @inferred=r2, @inferred=r2}) getsockopt$auto_SO_KEEPALIVE(r3, 0x7, 0x9, &(0x7f0000000700)='/sys/devices/virtual/thermal/cooling_device0/power/runtime_active_time\x00', &(0x7f0000000780)=0x5) write$auto_fops_u16_(r0, &(0x7f00000007c0)="33ed20ea4ae0e1cd79f5fffcec11c7255dd978bd1c6555a9de62187dce2c6e3821664fdcde61adcf3e961c3d01666558501c1ee26a29957939f3344495e110770cd9888fa97711b12a32e67ee86af4ebc1eaa2bbc88061895b1e7cf3fd25c7d69b56a52aa3df76287addacc31498e3c0123f7022bf583d25dfd29ffa0a0a2e5ddbb2229bc92967d621175cafc021720dcdc2fc2c37d4a6f774b18834507f052c8a73b36a3f9fa1c028f6f7635a0d9416f88933752a20217ba4feec078015d057b2ac6ab2d73d81ec", 0xc8) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/dsp1\x00', 0x101940, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r7, 0x5001, &(0x7f0000000900)="c6fad2b432962e46726ff5dc71dee5961316d62545acc072886df649f1a7bdda130df8a5aa54ba72f13f44d2018b9f50645cf92689ede674335013516e83245ee946f0326fd6f7f49670f32da432503b368eaa44a83962d216553b4e0a89587380b64dd1b32939a777d465c833356311944a36533c418de353db050c0482e826973be79a91db8f63a8ae8a0074e2205dcfd9d078cf98e4e410b2f0924f4165237ab0089780774ea358e65482bfe0b98b54ca7981022a58c3a31bacedbc353ef0cceffc4bbfdf89") ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f0000000a40)={&(0x7f0000000a00)='/dev/dsp1\x00', 0xb, 0x7}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/devices/virtual/tty/ttyx0/power/runtime_suspended_time\x00', 0x400001, 0x0) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000b00), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) read$auto_proc_timens_offsets_operations_base(r0, &(0x7f0000000c00)=""/6, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000c80), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r10, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) msgctl$auto_MSG_STAT(0x5, 0xb, &(0x7f0000000e00)={{0x1000, 0xee00, r5, 0x2, 0x6, 0x800, 0x8}, &(0x7f0000000d80)=0x4, &(0x7f0000000dc0)=0xe, 0x7fffffff, 0x8000000000000000, 0x4, 0xffffffffffff7b05, 0xfffffffffffffffd, 0xd, 0x81, 0x4, @raw=0x8, @raw=0xc93}) getsockopt$auto_SO_BUF_LOCK(r0, 0x6, 0x48, &(0x7f0000000e80)='[\x00', &(0x7f0000000ec0)=0x1) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, "402dc40d74239f8bf810b5e3bfa0f7e0afa085"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004801) open_by_handle_at$auto(r1, &(0x7f0000001040)={0xd6, 0x5, "2f3e4f7bc61e2a16cb43cf9e0f9404ca17db54be4d6dcb5a211e64153db15da31e27649158483642288b64e639ed8d189375a5b0d5ea1481d9a6cc85872fd2b93a27bb134a68b23f1fca8af1c3afb05092930452781ca2f982ca524f53e17644590a85dbc2c86dcbfc96a723186aedd9057533bb439a66012020097168c22b058cb1645fa1e5f666417732a5615b2323cd0f4a89f19184f54cbd23e6b091e0dcfe8fec85741791c2498e3b4402b65e8a155abe983a82db8d3ec7a6e2c8daadc0299b32579790527c291a44ebbbc40b6d8143e4b35380"}, 0x3) io_uring_register$auto_IORING_UNREGISTER_FILES(r3, 0x3, &(0x7f0000001140)="84a2eca013e7652c67d75cca9d5b8d319ee30f", 0x7f) 2m46.465291001s ago: executing program 3 (id=2072): mmap$auto(0x0, 0xe97f, 0x2, 0xeb1, 0xffffffffffffffff, 0x400000000008000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0x52b801, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/lapb0/tx_queue_len\x00', 0x400180, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000000)={0x0, 0x2}, 0x77) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd14/sched/write0_next_rq\x00', 0x143000, 0x0) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0xffffff7f, 0x8000000000009) process_vm_writev$auto(0x0, 0x0, 0x1, 0x0, 0x8, 0x0) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/40, 0x28) 2m45.463728189s ago: executing program 3 (id=2074): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) futimesat$auto(0xda, 0x0, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x7fffffffffffffff, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x3bbb) r4 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1p/sub3/status\x00', 0x84300, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_VLAN_ID={0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xff}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xffffffff}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x80) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x900, 0x80064, 0x9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 2m44.397351777s ago: executing program 3 (id=2078): r0 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x169302, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x28, 0x800, 0x1) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) (async) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, 0x0) fstat$auto(r3, 0x0) (async) write$auto(r2, 0x0, 0xfffffdf2) (async) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r4 = io_uring_setup$auto(0x6, 0x0) fcntl$auto_F_SETPIPE_SZ(r4, 0x407, 0x40) (async) open(0x0, 0x22040, 0x75) utimes$auto(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x114) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000280), 0xf4e9, 0x0) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G') (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) (async) write$auto(r0, &(0x7f0000000040)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5\xfdY*\x1a\x1a\xfe\xc3X\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+\x00\x00\x00\x00\x00', 0xc) 2m43.927302551s ago: executing program 3 (id=2079): sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_robust_list$auto(0x0, 0x92) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x7f, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x8, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0xfffffffd, 0x1, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x7, 0x8, 0xfffffffffffffff7, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0xe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xfffffffffffffff9, 0x100000000, 0xb, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x2000c814) setfsuid$auto(0xee01) r3 = fanotify_init$auto(0xc00, 0x2000000000002) fanotify_mark$auto(r3, 0x5, 0x10000008, 0x4, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) mmap$auto(0x40000000, 0x2020009, 0x4, 0x800000000000eb5, 0xfffffffffffffffa, 0x7ffc) futex$auto(0x0, 0x6, 0xc, 0x0, 0x0, 0x526) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m43.355512694s ago: executing program 3 (id=2081): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x6, 0x16, 0xfffffffffffffffa, 0x7f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x24, 0x0, 0x83) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) getpgrp(r1) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x20499d, 0x9) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_timedsend$auto(r0, 0x0, 0x4800000000000000, 0xf, &(0x7f0000000180)={0x0, 0x8}) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 2m42.144984586s ago: executing program 3 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_7={@prog_id=0x8, 0x9, 0x6}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x50) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r3) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r4, 0xc8b61cca5f1dec27, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r6, 0xc0189436, 0x3) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m26.806079561s ago: executing program 33 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_7={@prog_id=0x8, 0x9, 0x6}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x50) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r3) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r4, 0xc8b61cca5f1dec27, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r6, 0xc0189436, 0x3) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m3.560735635s ago: executing program 2 (id=2386): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv2\x00', 0xc900, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/config/target/version\x00', 0x200, 0x0) r3 = setfsgid$auto(0x0) quotactl_fd$auto(r2, 0x7, r3, &(0x7f00000033c0)="c6e7ceafec467c07a9371614b896f9d1797dd49271f66699e24deaac5fcfe05cd1977860304976aafe7b369144b0b80eb948e6ac09a2f4cc54b7b707c95d92d9d642330363cd2c63b172de9bd00ab739f094a3b8e686d9663d37307a951d16fd4db1c9d5ccec9f52dacd5d4e85f580adde21957096bc72a1ce161ab279e027ac4065208f8e4a5b3003b627103a0b3168e1922b9cd44b4ab6344e35f338a7c24d562e0b185a3fed2e30ec113808c413bfd4b70a6bd3871a1215b217b9") ioctl$auto_KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0) r5 = getpid() r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x40000, 0x0) r7 = fanotify_init$auto(0xc00, 0x2000000000002) fanotify_mark$auto(r7, 0x5, 0x10000008, 0x4, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r4, @ANYRES16=r4, @ANYRES32=r7, @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\b\x00E\x00', @ANYRES32=r6, @ANYBLOB="0000e5153d7cc539189da29b4a6621e30fd052eafaede4066cf0a1b34e171717b1c453230c6e4c62fdb50fc88812aa0fbf9d17a29a4f7b1992405fbdbc3d974ef95a7953acd2a2e210f0ae67d9c14308c8c6e5a87f6ba640a5d1690c684f780d04c4820675a06e494d362c19f03972fe52cbfd1d773d9d11ff7398c4c597078840333ed0dec4796240135d4166ce0bb2529f5fa0526526ba9f98bca2dd7bb997c344adcac430e5d9"], 0x3a0}, 0x1, 0x0, 0x0, 0x11}, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)=')})<+-}-\x00', &(0x7f0000000040)="f02ad033f83069d2607f9e863630695b1bffd33dfbfe046f944fa5132941be860f0aedd1552e1edc46f088b0ed972584757609a96a87d34250f5d9165aa758058a60fda610dd5b884ca42e3dd36bde15fc939c776e442caf717995506efdcbdb4a3849257ff68b8f6d524cf3560be96a541ff9a124c4c2582ac5c84fd8c1663a43702f012c7dbddd7927ea86aa77c73265ffc6d3be9597bd171725a32569c0d0afb283df52cb", r3) setsockopt$auto_SO_WIFI_STATUS(r0, 0x5, 0x29, &(0x7f0000000200)='/dev/fuse\x00', 0xcb) r8 = io_uring_setup$auto(0x1, 0x0) r9 = socket(0x2, 0x2, 0x1) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) sendmsg$auto_NL80211_CMD_NEW_KEY(r8, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r10, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_PMK={0x11, 0xfe, "ef240a2a7f46a5fe03d5cfaf25"}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex=r11, r8, 0x4, 0x4e, r9, @relative_fd=r9, 0x41}, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) clone$auto(0xfffffffffffffffe, 0x1ff, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x7, 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) 1m2.490385337s ago: executing program 2 (id=2390): landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae47, 0x38) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x8602, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop4\x00', 0x0, 0x0) ioctl$auto_BLKPG(r2, 0x1269, 0x300000000000000) mmap$auto(0x10000, 0x2, 0xfffffffffffffe04, 0x8051, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x8000000009b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(r3, 0x8000001, 0x100, 0x0, 0x80c) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0xffffffffffffffff, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) mmap$auto(0x0, 0x3, 0x4000000000e0, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x6d, 0x3, 0x10000dd, 0x14, 0x2, 0x7fff) madvise$auto(0x0, 0x400053, 0x9) socket(0xa, 0x2, 0x3a) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) 1m1.63913102s ago: executing program 2 (id=2393): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop13/hctx0/tags_bitmap\x00', 0x16042, 0x0) r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x400400, 0x0) r3 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)=@bpf_attr_3={0xd0, 0x101, 0x401, 0x3, 0x3, 0x7, 0xdf17, 0x5, 0xfffffffb, "98a679779fc27e831e8b418d9cc72736", r0, 0x9, r1, 0x4, 0x8, 0x7f, 0xffff, 0xb6, 0x3d, 0x2, @attach_btf_obj_fd=r2, 0x7fff, 0x4, 0x8000000000000000, 0x8, 0x3, r3}, 0x200) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r6) shmctl$auto_SHM_STAT_ANY(0x72c, 0xf, &(0x7f0000000440)={{0x8, 0xee01, 0xffffffffffffffff, 0x0, 0x800, 0x35c8, 0x5}, 0x9, 0x3ff, 0x5, 0x10ae, @raw=0x3, @raw=0x3, 0x5, 0x0, &(0x7f0000000240)="0ba13870b8c0702d9a989f72187c872f6aabf3217468220849c4615c8074bb1ceeab5d2aa3eadf71e57a50acf59634fb8ca79597e748202c12e4fa771697ccb78a768ec827e226db9f1baeac142f37a346d55c3eb797b2305aac8cad39c171f2f1b24b2de34d0eadd3ac80325c4e097fe2bfd48730df3462ad26958e3ede113d07eda359152621b5bb6e276b8a40b15950823e8d3375eaee9cb01aa2eda8db5e4fe66fcc965511f74ce413935b6cf7f45f07dd27b9ca69ead115b550ae05a8758a6320c2361a46133a5648501487c680249442be26f2bf88b480", &(0x7f0000000340)="5b48cf9fa87b25f2253bea83cb37240977fa755285ccdd70ac17d203558700179d998f30eab93ebcc30f2709d7318d4c0067ae5386a448b1e75883efb1b823e100b543af65c2f92cfee629ec857ae33dcb3fa9f76b3419eacbd1b28d28a896a22bcc87ab5d2e3277f4dfd322abb59836c2ae7e74dbfb4eae2188c7b92070e3166d3e2cde1a5920046c7535cb04eb7a6da39aaae93369ea320aca76239e97c3a0686c73fa9b87cbab3ac1db83532c31648c324f86d46ae1e2f7f4ffe939404514688974c73f78aa965c7b09"}) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf0, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r9}]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_QOS_MAP={0xcc, 0xc7, "9d6fe0dec3acfb660bd4460f3f1f2450afc94630fa50e3a71902262befe7ac4952b3de1795c64c91065d8e2e2b9329fd41530e1853418156afcec89dc6f6def84be7018f59b8f58d580cf43de3766b346778bd650ddfd4b914ab9d9c629faf119974f9c895d0b7cabccc42f0742a81d396651bbe59ea018677b45e2297d99611a5b761603d5fa81b8a349f5d7076fe62c829ac8a0fd14382fea022ef3a84c1af44539b28b1ce898915136b076f92b56152c0e2fc92f56d968a0d7a956d8f7e7e906548fbe15fb798"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x12) r11 = semctl$auto(0x1, 0x0, 0x4, 0x4f54) shmctl$auto_IPC_RMID(0x1000, 0x0, &(0x7f0000001740)={{0x9, r9, r10, 0x4, 0x1, 0x7, 0xd}, 0x6, 0x100000001, 0x7f, 0x10000, @raw=0x9, @raw=0x4, 0x5, 0x0, &(0x7f0000000640)="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", &(0x7f0000001640)="59c621ed6e3eb45429984f5da9fc3cde3744d1f6aecc8a4ec878094a3217971413fd9f7006ca5276de0dfd327d798626127535cd8662218096e7e6ec3e7ee8f43926e0e5adf6cde89e1c01961267a318ea1b3d8c9378be74a2b080b687e05c6b6cd76aff6d53c007c9b0bef9bb6549474a60b75d54927b2ce4cb3f5921f44c4fae526ff64630d8b9484b6055fb8f90dd6e12a389068623acdaac6b9c9adba244deed0ce5581e215cf3dea88f69e13f318d13b1de55672cb0e7b9d028da813a24a73d1b47ecba5e15778b0c92648fc71893e7a1afd9d7f54fe1e9abed4e9ebe86dd29ad"}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000017c0), r6) r13 = getpid() shmctl$auto(0xf, 0x3, &(0x7f0000001980)={{0x80, r12, r10, 0x68, 0x4b, 0x7, 0xff}, 0x2, 0x80000000, 0xa9, 0x6, @inferred=r13, @raw=0xfffffffd, 0x1, 0x0, &(0x7f0000001800)="8bc4ec43a1fac8cf779fee785289efdce48b4a185110b822e7a14e5065ffc1358b748c0749e904d633fc3c856cb2a9519afdad78affab6345a414553b0fdad12e17818e019e8a1caf0e80cb53a4133673e0bd460ff70af4f8e1ccfb5a1b465a474e0995a782e2e113142eb147eae14ddb69cd519b96d632ce6eade02b6cadf4fff9856eac3cd9c3615b07a3e1aa553c6ed80d0b6bc0307c90531ce79328928ec4dca64f069d61399a1fe56fb2e4302c1ac1ccc6954fab9aee2a57a846f8fd27efdafd9e057dabf1a70641910c4bed6e6faa1", &(0x7f0000001900)="ac243409d74f73f858ba5c1bf6de24a40e53581b9ea8f8327578a5dea3a3185feda864f24eadc207a839a506c485f729a332f9554da548002fb8df7c8701ca7be5cbbf7e442a3d40cb923a0efc225f2c4faf2828b2f3c42e72fcf4b305fbb21abe1ed25c951dbc1c5398969019e5a1b1d5db9ce1500f2ef2cdfe4324"}) r14 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r6) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={0xb4, r14, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x804) unshare$auto(0x9) r15 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/ptyp8\x00', 0x8000, 0x0) r16 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001c40), r7) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r16, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) fcntl$auto_F_SETLK(r15, 0x6, 0xe309) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r5, &(0x7f0000001f00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x110, r14, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1d}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8084}, 0x94) ioctl$auto_BTRFS_IOC_FORGET_DEV(r6, 0x50009405, &(0x7f0000001f40)={@inferred=r15, "4552321481c3d12e5caa37f47cf2f316f4a365c475b095101b3bce3115af10e9bc8510942b286ed0103036b32df3969f3b1f35d41f671be6c64f358f83651242cefcfd28426dfcc3473a8c5c9718b9a34b6994e49bbccb1b934a67ac2c7d739d6f79ad4a95fa1f2a5aa0bf635a983fa7af5778e2bad8404147927126d19d1dd6ea461d9fd00723689beee0b528f747246e2b1404267cfdde58e8b070ee48ad981a71284040e1472c6607bf74b57660fceffb25a0b9379646e10f31e0c7ec1e5462264dec92c58a36654f243be5293923b25bff5653991ed19f11dc2f6dda627aace1bcb1d08a1300922ae5a8f7af517dd2e11d444ae287c1cd7cdef44aaeafd6f1becfab54a51ec57cf12444c1b1289f98cc51070062369bd80bc4bf97c61dbeb9902bd1709949b58f5b726ae98123a5e1d092bdf89a6b8acab09345fd7f01feeb696e3209488aa12bc0ee3e805c59f21584a29518cbf1c170d5f3c137b4c16e9a10345c56e3cc2a8f52485325cb38ce78b915ab840c35df3bd031ded2e00d4dec23afbce70bf5808ab6f2840da75ae71bbd5a810616d2d503077dcd67ea5b9d8eb7987ade317d314468782a5390bd89e0817aac6ef6fd6c7dd51afe4a6a784eb19c1c9ea4b9d9cfd7ef8543bd80f19dd9fea3f434748e8c27bfb1e770a10fa4f0aae0ce1a868f59ada7e31f90910bc9cf974bd9ae6c9b77e5493b1dda14d726cd25fe2f4e25ea2ab820ffbfecd3d1757373937043ec0928c62b1399879112dd73cd0654d79f5f698354177464f72b9b21f2bccc22be6eb7afab7df915d0df64381d0ae7878dd4e3ccf1ae5ffac928f9282285dc967e3f83021f766e2449b49f4548992458e9fa4d6ca8ca6fb42bcbb51100d4a90decf3e8665e835d0236b5f453884e40d4f3dc451072835ed16980486d22f7cf2402f1bcd0bf4576e920ea29e318e59def03d9190f906314e5208ea606239b3436a94c117cac15a5a8c62e2c028dcc10a78e21580c3d3874978a1127a62a7fd776e4fb2062481557e1da56dce3f69d74fb58dd2a7b0875d9dfb8c67dd005af064a1864e7425d17d2683d2a263af8d88cbbf598017fa5bdf0933b11c622f2c6b867e56ccc39ea00c6ac0b27339cc15f2636cd236f78ea66f8c3c0b5c53972245aeef570ff7b6084844ec772d77cdea38c5635be01e1945474a8674eb146556255c90f4fa260abe6f80daaa01ab8f7ceda82b544bb75276338204de94d6b964f99868f84d25831676236d1e984453dd1454256a18344d8c86dde26db97c5e64646db3f7da6f6a3b781ddd3686cb1db540118afa41c7cbefdc6d34312ffae86aefd69e0c44aef03529bc9a78e29b63b7ff11703d4dc64c4ff3b70e095a6e61739511cdc6d5d293d1b0b55a4d8fe4b55e666e26b6585d655cc23fe3bc172993e78a48acd2ee031f8d5dcc33a555434687f8d38c84aa950bb876b6325c70aa8b5a54682b86216d799a4085b0b89c3633e916a7140b544bbbf2ebe479da800313fb5949ac45a4a2f29d2d79ad365a56f19413fe07e4e1da75e8014165a90426fc8b752f8f2ada34a1db12e897f8d1bd74484b17bb43908c2606bd3ccde1f148d4b6811c78cde0ae688c0ebc9322b5c1b72eb2738e6f808266fa5cc5a626d0b77020af303b10e502ec1d1de3dbd8a13b5cfcdced4b0234a98a402b24b06cc908e36b8eb805733a73cf22d221088e2574847aa07e7632d31f2b97306c6945da0298be48cdd0bec3b3be721027126d4e92f34580d45f9227ecfad9ced74d5ed452142240b69d42736441ccbb643e965a58a7fdb67a864e73e70950dbbfc51e05c77d09db63784dac65566602f329152ca9775c54cd5a4116e530f0d3b926d3330ede216074f6c60188cd1160f989d798cf7cfb4b0ec77efd653a402b18f605035aa1e208c574566917bbe31e8514081cb3a4754724791f42c48080e456a9a46af0e9dfcec97e88072f2c32717def312bbd5ed729edfeafb56f54d8184ab7ff864cf40cdd91ca9e57469aaf4f494cc3ae9e91b8e6129c1b2f0e482357a458b6fd169172597dd235284f67f9d105deb2084885c103aa1c413a8ce9f2a4d6ff9d54eed97e131966b3586625a1ca9d8af19a3defad027e37f8e3113035400284cbd99cf767b334cc29f1821872e79c0dd419e2176443dbb0df1a4f541e39efa56e8132b397c45476daed641c230d6638b7b9697f6c2b5b90c613e8a54a1d10fc73838e2d1c7e22943013bac6f1b62e06a6b7e85d449f973b4f2366d59f5154b5a0f13ca6f743f7e1b5720cf2980c6ece4b4859e2aac5854a1eeb74c022a940e194b2981df8ed72baaa8cbc5ec106951f45daaee9f076e2c4d2c3c3221816eb586f444fb8a810c633a352b7fc8241b571125677e117fae586bc78cd3e9bf0a4f240ea9b2a06d8754d664fc0d96b1befad3a74615eec9a04b162b15e4615269ef7c00aed0f06ed7c67fcffa318f8af4809b56f1c1d8bf1a178f745cf60726760b45ba90a5e8eed3d8f1cfbdf2e5e292beb36073699c4450e3700d38bd243a7a7f8d6dd0d4d961c494eeb42d972264f326dcad315ad54064a8759ea190b4c9f66ac02ca4217b83a0c0a6479c25ac5712f7e3b0676d3ade0cdb4cc1d1e8485d8f38cdb08dc1aadfb2cd9beb3652381039ffb1ff9a92a6d71da46659c8b6dce57d18cc402b563be0e3dd2f68431dac325c2660e3e39f472c647c3d19fcdbd228a3d684244b8d05a757db8c65b90d49311a0b2f12eb13b03b6e84521088cf8279b47ba846d0869f9dd6f3befd424b04d2114bd1f049f00712b5194802ac051cdc1b594183b5e312da6188cc891ed80b79305c0138d59c428e4dc2c2d6c547b213367478ff26318eb2dbc3fd03dd07ebfcba43452fa4ac344a17948ae2b4402860271d2d84c98a8e34227336f403b75a349766a011f62de5130389a89783ccc26fd3edfc2b9bc83c07d6cfdefc00fbad5ea1a683630a9ff2a3661f4fd75aa07aac7f5fb57d7fdee86e2bcf7b64e35917c21e6d796cd10305e79bc0be3fe07836d60a8fe8c52bd30feb1f8a533d9b8ae7b348089363d72218f09aef3e6df397be7e42235e98c5b4662956a77e78c56bf635090d4202aa1fd6fe1a0bcdc3d212035f7d741b42dd5b88efba8adb73dfb150486698302de4fa32f7f278e17649457699e02a96fa72297fdf3d5fc114c89915852d0fb7eb7254eb8106aeb508bc405a792fb7514534601d4ef187f7ed558d6ccd6a4799e07d37b03c0b478b8ad6c6c6f54cdf52eee24419bb9eeef987ef4bf1e75afbc4749ab7542e80399f4bd86509c32314664fe2e69bbdda8358a2c81257b6ef6f43edec7487561e66433af308212369e7611409f38dc57c58ef0cca3f820c6b33c028e61c2238519bddb32207949141abda4a40aa65c97c8975ebd602dc29fde73c1920001373939529f4cd5053dd1e0934378553a5b9b14036db939fefd17526d4c60600927305a2694f600ec9866dd6bdcfc455ff89cbb6f704160b233c5e2e74b5d58333a59320e3a429bc96cd6033d95c8320da16d521e12493f678d2bf400d7a9ab956e35b7a78bdf09bc1b85cb233027977fc425c93136e15057174855eca3d59e49b8cd244977fbdd8072049128e69671cd48730c944ced6db98d7411dcf9bdfe957cfd5e7f1a68c0c270c409c7e7a57ad91b5b74cc2be24e4de3a20254c3ceb2475e87f9c591eea7a268d2b686e691f7b2663191c692041de05dc66ae1705c03d3da55a063aa34cf29faa2a99b789b3745145ac888fe16b7c3c2bf8e2bdd17726be68522420f8b89972b016f912d8e25c08ea42719129ef7aaef584a26d3ed677f70cd90018917b0e4c6e302ba354a4ee6ebd4280074ca978d0e7f3e7428fd3c93c9a4a8af6d77c4ce22dcb46f39f88e46f522fe65d7f2e106fdfd5f396b17e9c117505148ed4bc5274baf51ed9d32e01e3ac8bd9f33e29e7d0cac69fb5dd215075164e2a56e5811864eee9a0a1a798e1d35616aeb777310d206db9794073649a14c60011408d134c747901d81842c55fc8952f96fcb93fa291551cf787f0cf422e98636c547efe7f5d0df2726a809c09736770768aafab574891d5c449eca0d0b831aaa5a740e708d451bbb99dfa4adaf9dc93538e2aee3edafaa5ef0d524108a3d17e4cd4684674405f3f5e329fb712e399ebabc7e80b0f4f611f5ae7ff4c69b2275186ac8532119e17dde5b67632643c7364c80de2d1fe1ab7a2f0548970c727c0591f3429533d0a1293ce3183393893b923bf76ccd95976df15085f14a09c5703e859db2bcf82ee8de8092b1c042456c2b63cef2273ab23eae0cae4dfd3c074e84ef429544cf26d3ea1846f793220da41cd452e6df1a454c21d5e55762bcc866776fa53e033c7da81a092d6c4933fb0eae7e135d3848c1e34b90f52b2fb1b422410a754ec54005bee074ff90167cb858b2b77da698470f4e36cbcafc464389646ab08f64787b37791a4632eb0097557e8fbef737d1b80df166e8b547de3a2a9cec384f91a36154a1a96236964ffd3bd5b1d410af94c25af61858c9b1dc42dfb623545cab163319d7bca8ec3067b72cdcc43bba7ee6337ee05c6f5eb77b3700a97799f6b59d571a945515a7a08fec20cd348e9009fa68f6902f4519fa9a9f8a1e6de43b82f654b098dd927e04170a8879a747a83cba67d77723055480293fb302fc3cece6b30c01a5316831e89ce427eb7695640d2cc1cda6126e41342436fba24ccc31cabbad3d1200911fdde5a9a1eb64ed47981f1a3a6b07437435461a5b4b6fe76b5f225f846145293e381b3dec7cdfd03e67ed425cb228ebc2d1b51dde2d3b5825d5b82e85edd830d6447a5388eacf5627f2754a721310be4d6934a1e3b58fa3b7c87ca90f9e1ee86cd1adcac37d964c03e38bdc86b67121e1439a72e6b21c771c00978aa33a1d3ef0d372737946cd8c0f47508abc37240137a64d634a47871ebfb8ff63888a9be63ef3552ac4c9eea08ca5a97af6b4e345eacbc10a2938b1f1c514714e7efa96126f057bb8c918c92a52cc43fb5ad29e7c0272cab22cfd82121ffb5dd44945558e6cb7b66d06e95f7d0b19f6a4b78bc446a0d8f50f502d8d69e7f930fd72e6e3058674d7bd629dde44290f60430b2e62868259e7ab29e071029004904df308ebaa0534879b7676af2ee98299d48e326de3673b74228c716c12657327041646ca6fe35603b2b1faf18e4ef4effd7ab7c3cd98490142ca005a74842b3ee2f28c2c4e1a96ad2fa082339300f0013e9c4b3f14139c9351fd04781b9ad923918b772b60c1f7c042db99698a2db44796c8d9f5e82b4726fbd7e3f74ce077b29803d67d66fc384d92e1da067e468170fd64ef73513e1d3d8fc7a1023e4220170e2ca02729ec3ac8fcefeb1cc2a159d6cc3487435fd44b585b7efc7d25c5690f6dc3178b7aac7a39f78ee1393c80f62edcb4a5b4a435e7feb7167e835632a87101390c916bf720c515dc84bc1d73e262379da23bfcf0111451cbd07219d72f6420ebd8c0e08a99547024d128193f5a7c67b5260e403a2e744aae72b39c15ac9eab79cf9aafcbf41f9c0df316c02f9244f4ba38b51ba4079d0f54feb733590a921d1f7b48d3ab7df2b33e3eeda21ca345695df9df907360a0f87b00699ef2234f959fe1646d4c2eda8fcecce4b673781b8053a462ee4277159e7006f18f5fe5e2dd84a11adc2ca59aafd6a73a2f4f55c234ab1494bad020ea2148617dbe46b33a709b73d7d032dbd7f0fd5dfd0611ddfc9"}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002f40)={'geneve0\x00'}) r18 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002fc0), r17) sendmsg$auto_IPVS_CMD_GET_DEST(r17, &(0x7f0000004440)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004400)={&(0x7f0000003000)={0x13c4, r18, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x160, 0x3, 0x0, 0x1, [@nested={0x154, 0x8, 0x0, 0x1, [@nested={0x4, 0xe2}, @nested={0x4, 0xd3}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="08bc50fad3342e032b94d9d4b8201db2d83292c93af318da6ace1387249a3d4d50afc277f2a3f43219bf7ddc80dc4dba8b04156f13aef4a29aa8c31c72e1446445639c799618530844fe35d85586ea3252de864b0211bbe5a7e48b4c0c752af517d509ab38c047ebe57e1c6bbca97eb6cc62dd505756987df356f8814d00e94102db9893918868fed0aefbd540c39f18b4a4296b5997968f42fbdf792025e04fb6e7cdf5e3584367a667dce96daa1ba00d51ada748323613", @typed={0x8, 0xfe, 0x0, 0x0, @uid=r12}, @generic="8d9e7bab03de578ddd68ef4f14dad4cea62b6e3843e3369d35b61ceea630697a1f9c7542257270d8a42c8aa0d6c4dd6dff47598d0e12b982d5a178a3e5ca4ed80d01f5d1a0f96da39760c729c6482034dfdcbb870e81304a65e8089ddf349459a9a22b644efb03771ad62ad90dfb85c5f4a17fb1"]}, @typed={0x8, 0xb2, 0x0, 0x0, @pid=r11}]}, @IPVS_CMD_ATTR_DEST={0x123e, 0x2, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@loopback}, @generic="b0691fded81a82037d41a3745fc91ea2bdcfffac5c32c77ce510b25cc29803aa7e665cfe8745e6ed8669725fa193defb8c8ceb664691c26cd2e25e59fc530dbf3caf9a4d709426eaad495e8d618286189353f3ca0aeddea05b3a5649054073b841470cf82b7c72eb9a6dfb52c6985426427e621a10dd4ef3215db3b217bf0629fd8f497eac123e755668575ca189718c7501e7aaed3a69544c1c5973c156e8b06cac601fcba411ec28caa36825815cae443251a55dda3badfe5e1c00370f4e103bd0e06d8c1b1030b91ce8eb4899899e16c5", @nested={0x1152, 0xb3, 0x0, 0x1, [@generic="5eaa716b47f6c267ad398c7ca4412e102c20940d79788b3a884eaa9599d4a3474c5d53b79d542c869d052853ce10c29f4e5da604c9299dbb59f7d0bd0946b9e4727813445877c2c9cf140be12a744ed559b156b2c26592d7dcccd11fd948f8aba4a59ae1347076b35307ed61eab86704351454aa212db7b92d3da5a179ac3bddb8", @generic="87aaec4c57eec7e15d16eedd96c9dbb712f608ce6b3f11034f1124bd2030ebb58579419331022f43d84580a8fb174a91a3f7266819bc5a1563ba0403e9bba8a0752f8bab6c0fcd3fbb27aa20580bfb2e1c38777652fc4a7b8e7718f5c4fd08b1228adf83c5ca8ac2d832eaa6627d87541e067ea34237ffd6e985630be40fccc38936ebb492759c10a7428b32c9b8387f7e0078970925", @nested={0x4, 0x119}, @generic="239a4f7771ddb908832307e56139ce9e926fa6a30887636a6c417a", @typed={0x14, 0x101, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x31}, @generic="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"]}, @nested={0xc, 0x111, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @ipv4=@broadcast}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004040) mmap$auto(0xfffffffffffffff7, 0x3, 0xfff, 0x810, r2, 0xf) r19 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004480)='/dev/dsp\x00', 0x2, 0x0) write$auto(r19, &(0x7f00000044c0)='\xe4\'\x00', 0x28000000000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000004500), 0x101000, 0x0) semctl$auto_GETPID(0x7, 0x5, 0xb, 0x6) 1m0.395835259s ago: executing program 2 (id=2394): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lgetxattr$auto(&(0x7f0000000740)='.\x00', &(0x7f0000000780)='\xda--\x00', 0x0, 0x100) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, 0x0, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) recvmmsg$auto(r0, 0x0, 0x10000, 0x6, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0xffffffffffffffff, 0x0, 0x53) write$auto(0x3, 0x0, 0x1) io_uring_register$auto_IORING_UNREGISTER_NAPI(r0, 0x1c, 0x0, 0xc7cc) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) write$auto(0x3, 0x0, 0xfffffdef) 56.537111427s ago: executing program 2 (id=2398): unshare$auto(0x40000080) r0 = socket(0x21, 0x1, 0x4) mmap$auto(0x0, 0x4020109, 0xdf, 0xeb1, r0, 0x8000) madvise$auto(0x2000000000000000, 0xffffffffffff0005, 0x17) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x10000, 0x0) (async) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) ioctl$auto(r1, 0x800064bd, r1) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffc, 0x4, 0x404000000000df, 0x40eb1, 0xffffffffffffffff, 0x3) (async) unshare$auto(0xc1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000006400)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2001, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r3, 0x0, 0xfffffdef) (async) mseal$auto(0x0, 0x7dda, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) (async) write$auto(r2, 0x0, 0xd) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0082, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) madvise$auto(0xd, 0x20000000000005, 0x2) (async) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x402, 0x0) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) 54.929399611s ago: executing program 2 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) unshare$auto(0x8100000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) 42.394060454s ago: executing program 1 (id=2441): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) futimesat$auto(0xda, 0x0, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x7fffffffffffffff, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x3bbb) r4 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1p/sub3/status\x00', 0x84300, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_VLAN_ID={0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xff}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xffffffff}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x80) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xf000000, 0x80064, 0x9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 41.380973842s ago: executing program 1 (id=2444): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800007ffe) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/179, 0xb3) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0000e100"}, 0x982) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) socket(0x15, 0x3, 0x100) r2 = socket(0xa, 0x1, 0x0) setsockopt$auto(r2, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x20000, 0x0) ioctl$auto_SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1216c1, 0x0) poll$auto(0x0, 0x25, 0x109) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x2f, 0x4, 0x7fffffffefff, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x4802, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r5, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kc\x85\xa6|\xb4>\v\xe9\x10p\aE\x81\xed\x00<\xdb\xd8\x9d\xe6\xe1\xa4g\x85\xe0A\xea\x94=\"\x98U\x1d7\x83[[b\b,\xed\x10-d\x02\x00\xb7\x81K\x04\x15\x85O\xa9\x0e\xbd\xe3\xaf.9^\xd9n\xc3\x9f\xc2\x86l\x03\x01\xa1\xe1>P\xee\x00\'\xaad\\v=\f\x9aP\xa5x\xf0\v\xd1\x1c\xfcoR\xd2\x1dEuZy\xa5\xc3\xce\x1aIX\xee\xfb\xb9@\xc7\x82\x84&c\xaf\xd2\x8b \x1a/\xafT\x9f\x96l+$\x8d/\xa6\x19\x97\xdc\xae\r\xbe\xfd\xa7\x9d\xf8\x8c\x96\x9dYf&\x81c\x85\x95-\xaa\xdc\xcd(\xdaZ\x84X:I[\x18\xb7\xa1\xe9\xdf\x17E\x87c\xda\xa5\xad4\x86uM\xd7\xc0H\x00\x16?f\xec\xc5]\xaa]O\xd8\xae.\xad$\xec:\xd9\x9b:\xec\xfe\x8f\x11V\xb82\b\xf8\xb5\x86\x1ej\xda\x04~\xa6Z', 0x81) 40.458558577s ago: executing program 1 (id=2446): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x100, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd700002dcdf86ab61200004000800810000000800108004000780"], 0x24}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}]}, 0x38}, 0x1, 0x600000000000000, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r4 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x802, &(0x7f0000000080)={0x80000003, 0x5, 0x9, 0x806, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0xa, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) r6 = socket(0xa, 0x2, 0x0) setsockopt$auto(r6, 0x26, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x1110) ioctl$auto_SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000100)="2daccfc7a40ad09d11dd5e487e0a906004e62d12905a2547c2260603ab01091cc82a286f967975d36c4259f223fb9d01feb318ac27e458a1bef1083fbe365aab7598a2c9262524d66e0a040da4da898acc6343d00530985f8f4a72c779a4ecae7e5fb36429a695fbc76781610037bc5a50b7ad882ed418324e43da168882b0092634d663124ac504bcb669a3f1332d0ea30eb25bcf67eec4fdd7c756dbffd7c8896a1bde9185883b4733fba7a5434afdd749765caebd03be9ec8") setsockopt$auto(0x400000000000003, 0x29, 0x3b, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r8, 0x100, 0x70f52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004088}, 0x0) 39.583699376s ago: executing program 34 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) unshare$auto(0x8100000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) 39.550403s ago: executing program 1 (id=2451): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x6, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x40, r2, 0x1, 0x2070bd26, 0x25dfdb78, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, '\xc2\x00\x00\x00\x00\x00\x00\x00\n9\xac\xce\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = socket(0x2, 0xa, 0xa) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r4, r6, 0x8, 0xff, r5, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x2, 0x1, 0x50, 0x0, 0x40) sendmmsg$auto(r3, 0x0, 0x8, 0x7fff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x70bd2b, 0x25dddbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xe00}, @OVS_VPORT_ATTR_NAME={0x8, 0x3, '})[\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 38.89282478s ago: executing program 1 (id=2453): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) lseek$auto(0xffffffffffffffff, 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r0, &(0x7f0000000200)={0x0, 0x7ffffffc}, 0x6, 0x3, 0x4, 0x2c) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x9, 0x6, 0x9c, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, 0x0, 0x844) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x22, 0x80000, 0x7ffffffe) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) recvmmsg$auto(r2, 0x0, 0x1, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8005041}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010850}, 0x20004054) 37.703232475s ago: executing program 1 (id=2458): bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0x10) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) (async) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 64) r2 = epoll_create$auto(0x8800001) (async) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r3, 0x0, 0xa57c) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) open(0x0, 0x22240, 0x55) (async) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x55) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @raw=0xe, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x6, 0x0, 0x100000001, &(0x7f0000000140)="895201ffffff68f9b0408ad5db6955b530ab1a9a4cb240746124722c8ea7040058113d9eff50f35eb609", 0x8001, 0x9}, 0x8}, 0x6, 0x9) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) epoll_ctl$auto(r2, 0x1, r1, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) io_cancel$auto(0x3, &(0x7f0000000000)={0x100, 0x200, 0x8, 0x79, 0x7, 0xffffffffffffffff, 0x7, 0x1, 0x845, 0x0, 0x10001}, &(0x7f00000001c0)={0x7fff, 0x80000000, 0x5, 0x7}) 32.577249575s ago: executing program 4 (id=2470): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9bf2, 0x2, 0x28000) semctl$auto(0x80001ff, 0x20802, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8a5b, 0x401) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) mincore$auto(0x200000000000, 0xffff, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x1, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x2000, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x7fffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r2 = open(&(0x7f0000000480)='./file1\x00', 0xc0842, 0xe) sendfile$auto(r0, r2, 0x0, 0x1) select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd4]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fb, 0x20000000007, 0x4, 0x1000000000000bc3, 0xc3, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x9, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x800000000004]}, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) socket(0x2c, 0x3, 0x0) getsockopt$auto(r1, 0x11b, 0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) 31.243769551s ago: executing program 4 (id=2473): close_range$auto(0x0, 0xfffffffffffff000, 0x2) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) r0 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r0, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) (fail_nth: 1) 30.809163683s ago: executing program 4 (id=2474): r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/available_events\x00', 0xa0000, 0x0) close_range$auto(0x0, r0, 0x2) r1 = clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptyu8/power/control\x00', 0x309002, 0x0) r3 = setfsuid$auto(0xee00) setresuid$auto(r3, 0x0, r3) ioprio_set$auto(0x3, r3, 0x4b34) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x80006, 0x3, 0x1000010, 0x1, 0x3, 0x7fffffff, "9b2189084a0ff43b1b60106d75a77466", 0x0, 0x5, 0x3, 0x5, 0x3, 0x4, 0x2}) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) r5 = getgid() shmctl$auto_IPC_SET(0x5, 0x1, &(0x7f00000002c0)={{0x3, r3, r5, 0x7ff, 0xf, 0x2, 0x400}, 0xc12, 0x3, 0x8000000000000000, 0x3, @inferred=0xffffffffffffffff, @inferred=r1, 0x8, 0x0, &(0x7f0000000040), &(0x7f0000000080)="6a2acbd60796095f929b6e8ea7393affd9086963aa4d46ff76805a1a258bd9fcdf1930a1003467c5c1308ca2df8c3f7a575d135972696bb8839331d240a32d6cf329d8d9f8de61f047b60a05bb5c0801530725c9ff57ccdc5e9d5ed32291ea4ff2aabadb953faba8e4de5268c3f3548878921cbdb5c56800dde4af7d4c23554d59ffc0f2690f4ea1f299263f39c8e757caac0b8259e7c35c4c033b0deec2a17281446d3cf9d55e"}) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/238, 0xee) timerfd_create$auto(0x9, 0x0) 30.765013129s ago: executing program 4 (id=2475): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x49, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x5) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r1, 0x1, 0x74bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x30000, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0xb, 0x2, 'dummy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0xe70, 0x9, @_kill={0x0}}}, 0x5, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/xfrm0/ioam6_enabled\x00', 0x141241, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r8, 0x0, 0x45b9) write$auto(r7, 0x0, 0x3) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="908500004b58765c1f3b3be79a9ddf67b2205b57ec4cefd8612c898a35723b8d2368d5138da909b819290cb41a4ec7ff585f5783", @ANYRES16=r6, @ANYBLOB="10002cbd7000fddbdf25150000006201308099004380040042804fbafe7709f8c2db11b765ccb3aeac0b3a42ea1964c7914e8e53e28c76edff1b6d69498c896689a1f06a8e2ec03a2f27a373fd1bf5e63bab2d540e36a97b24d5d92221cfdd1a20e529d3957692787e9c892a0ec247b1b966279fb7b72ef526533fe6943f542e17323df2e2dffa9344f1476ed1666facdf4434346966dcca826b96f54b13d3c3bca5ae7a46f41cafcc973b0000002800cc00fcdf25f33e03f831508f943412c7cb74d2dd6bb6995bc5490a04de63fffe276dc4188af5c4b14b531276b1deef389bc4e9aa557ee3fad6b5d8739bfcb0f565cd3062b59bcd10b5c64d0a2a627e59e6e27241d7efac09f52277a34d4a2490c83f255a451e4d41bea11517081b955f1151683e8b9a6d75e2986120a7a9168eed2a7e46cde8a52a584ad3417a45cf1d3ac9737da89c4fa889acf77b1cc44b334bc7f177f5a7296710001e800b00360064756d6d7930000008009e00", @ANYRES32=r5, @ANYBLOB="0000180030800c00ee800400e18004007b8008003c00ac1e0001"], 0x190}}, 0x8050) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80c0050}, 0x800) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r9, &(0x7f0000000140)='7\x00\x04\xa0\x04|\x03\xcb\x12\xfa\b\x1c\x92T\xc3\xbe\x1e\xe9;l\xe4!\x90SE\xb1\xde\xc4\x10\x8b\xc4;\xc7SB\x99\xd7;lh\x04\xbbd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd9\xdd\xb0\xdfr\xda\v\x84\xa8\xdac2\x99\xcc\xad\x8b\x92\x06\xd2 B6\x1b\x1c\xd82\x85\xad\xff\x9f\xb8\v\xe9\x9d\xee{\a\x93SW\v\xdb\xd7\xfc\x05m1\xd2[c\xf06\x83Y]\xd1\xa8fFKqu\xb7\xe91Q\x82\xe9\x1c\x85_\x93', 0x81) fsconfig$auto_FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000040)='/dev/?\r\x91F\xee', &(0x7f0000000080)="c237530fbe389a21e22abec2919da924f82356d8415956daaf8f046f052e6acef535f93ebd7e8ab2982a2237d924b31688156e1c9eab0575bd3d6ce0d0f086a0bdb0", 0x10) unshare$auto(0x40000080) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4c280, 0x0) 29.790206096s ago: executing program 4 (id=2477): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup/cgroup.freeze\x00', 0xb02, 0x0) socket(0x2, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1348, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) ioctl$auto_X86_IOC_WRMSR_REGS(0xffffffffffffffff, 0xc02063a1, &(0x7f0000000180)=[0xf2, 0x3, 0x4, 0xcfc, 0xac5, 0x3, 0x8, 0x9]) pselect6$auto(0x5, &(0x7f0000000400)={[0x1000000008, 0xfffffffffffffffc, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0xffffffffffffff81, 0xffffffff, 0x7fffffffffffffff, 0x8000, 0x1004, 0x9, 0xa, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x81) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0x2) mkdir$auto(&(0x7f0000000300)='}[,&*}\x00', 0x6) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xcf, 0x0) chmod$auto(&(0x7f0000000040)='}[,&*}\x00', 0xf3) flistxattr$auto(r0, &(0x7f0000000080)='./cgroup/cgroup.freeze\x00', 0x8f61) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) setsockopt$auto_SO_BSDCOMPAT(r1, 0x3, 0xe, &(0x7f0000000200)='!{[@+#$/@\x00', 0xd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000004c0)=""/206, 0xce) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f0000000200)) 29.335790605s ago: executing program 4 (id=2479): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41d75856, 0x200000000001, 0x0, 0xfffffffffffffffe, 0x3ff) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x743203, 0x0) (async) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x743203, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x220bc2, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x220bc2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x0, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer1\x00', 0x0, 0x0) (async) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer1\x00', 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000100)) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x184) execveat$auto(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x6b2603, 0x0) keyctl$auto(0x1f, 0x1, 0x0, 0x3, 0x3ff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram0/io-timeout-fail\x00', 0x1c2b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) (async) sendfile$auto(r6, r6, 0x0, 0x3) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) (async) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r7 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/smaps\x00', 0x4a000, 0x0) faccessat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2) read$auto_proc_pid_smaps_operations_internal(r7, 0x0, 0x0) (async) read$auto_proc_pid_smaps_operations_internal(r7, 0x0, 0x0) 22.51728562s ago: executing program 35 (id=2458): bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0x10) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) (async) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 64) r2 = epoll_create$auto(0x8800001) (async) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r3, 0x0, 0xa57c) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) open(0x0, 0x22240, 0x55) (async) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x55) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @raw=0xe, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x6, 0x0, 0x100000001, &(0x7f0000000140)="895201ffffff68f9b0408ad5db6955b530ab1a9a4cb240746124722c8ea7040058113d9eff50f35eb609", 0x8001, 0x9}, 0x8}, 0x6, 0x9) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) epoll_ctl$auto(r2, 0x1, r1, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) io_cancel$auto(0x3, &(0x7f0000000000)={0x100, 0x200, 0x8, 0x79, 0x7, 0xffffffffffffffff, 0x7, 0x1, 0x845, 0x0, 0x10001}, &(0x7f00000001c0)={0x7fff, 0x80000000, 0x5, 0x7}) 14.228846387s ago: executing program 36 (id=2479): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41d75856, 0x200000000001, 0x0, 0xfffffffffffffffe, 0x3ff) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x743203, 0x0) (async) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x743203, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x220bc2, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x220bc2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x0, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer1\x00', 0x0, 0x0) (async) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer1\x00', 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000100)) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x184) execveat$auto(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x6b2603, 0x0) keyctl$auto(0x1f, 0x1, 0x0, 0x3, 0x3ff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram0/io-timeout-fail\x00', 0x1c2b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) (async) sendfile$auto(r6, r6, 0x0, 0x3) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) (async) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r7 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/smaps\x00', 0x4a000, 0x0) faccessat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2) read$auto_proc_pid_smaps_operations_internal(r7, 0x0, 0x0) (async) read$auto_proc_pid_smaps_operations_internal(r7, 0x0, 0x0) 13.974188818s ago: executing program 7 (id=2497): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setns(0xffffffffffffffff, 0x60020000) r0 = dup$auto(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xd7, 0x2, 0x0, 0x1, [@generic="0067e36fd3099a598f02fd26ac0ed375296b4d92f176cfec08f7d225810d562394319a8e067f54d2c4445539a4a5026b4fd6a068253513eca614f0e08951605b40505767b414147f10e12d6b8cb8d6f283ab77afb3f0395f080ab329a3bbf2e0c88b1d7396975dd45fe227c777b3b3b4e21980588cb55422d33ba9d799ddb00ecf36d5fb79a04409166ca6206f06db40d77b516db92a6610b5b092f586a3f6c8f177e82998978789f339b6cabc0ac0a3c414a472cb8c417abe1c8aca28aaea20e80ff0a498e99de7df4c95e3c5f70bbdcd3bb3"]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 13.601459387s ago: executing program 7 (id=2517): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\x04\xa0\x04|\x03\xcb\x12\xfa\b\x1c\x92T\xc3\xbe\x1e\xe9;l\xe4!\x90SE\xb1\xde\xc4\x10\x8b\xc4;\xc7SB\x99\xd7;lh\x04\xbbd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd9\xdd\xb0\xdfr\xda\v\x84\xa8\xdac2\x99\xcc\xad\x8b\x92\x06\xd2 B6\x1b\x1c\xd82\x85\xad\xff\x9f\xb8\v\xe9\x9d\xee{\a\x93SW\v\xdb\xd7\xfc\x05m1\xd2[c\xf06\x83Y]\xd1\xa8fFKqu\xb7\xe91Q\x82\xe9\x1c\x85_\x93', 0x81) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x600, 0x0) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 11.214207737s ago: executing program 7 (id=2523): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async, rerun: 64) r0 = socket(0x26, 0x6, 0x5) (rerun: 64) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xebf, 0x401, 0x8000) (async) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(r1, 0x1, 0x3ff, 0x0, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), r0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="3eab25bd7000ffdbdf251500000008001600ff03000074002f80a8ef35961ed8cc4caac98d3d6c71a363b2a47dbf81cce31ca2f891a84841e514007d0000000000000000000000ffffe00000026a3ff2996739214558b3b108bc09cfbf166ae88c5f55c8a075a4beceddd395273bca1fda9c1a972571ff5f419763aef55de16cf74003ac692f8aba0949"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) (async, rerun: 64) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x24048055) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80c2, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x129302, 0x0) getsockopt$auto_SO_RXQ_OVFL(r3, 0x60000, 0x28, 0x0, &(0x7f0000000140)=0x79) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, 0x0, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000640)={{@raw=0x202, 0x801, 0xa, 0x8, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d0352196ca83379bb"}, 0xfffffffc, 0x3, 0x2, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f17a5ca5dc29f0569b9fd0930da366e011ae30c0a6183e09e1a6002000", 0x8000000000000003, 0xce9}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) (async) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r5, 0x0, 0x800000008) 6.294534143s ago: executing program 6 (id=2537): sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_robust_list$auto(0x0, 0x92) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x7f, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x8, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0xfffffffd, 0x1, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x7, 0x8, 0xfffffffffffffff7, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0xe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xfffffffffffffff9, 0x100000000, 0xb, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x2000c814) setfsuid$auto(0xee01) r3 = fanotify_init$auto(0xc00, 0x2000000000002) fanotify_mark$auto(r3, 0x5, 0x10000008, 0x4, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) mmap$auto(0x40000000, 0x2020009, 0x4, 0x800000000000eb5, 0xfffffffffffffffa, 0x7ffc) futex$auto(0x0, 0x6, 0xc, 0x0, 0x0, 0x526) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 4.855558519s ago: executing program 6 (id=2541): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\x04\xa0\x04|\x03\xcb\x12\xfa\b\x1c\x92T\xc3\xbe\x1e\xe9;l\xe4!\x90SE\xb1\xde\xc4\x10\x8b\xc4;\xc7SB\x99\xd7;lh\x04\xbbd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd9\xdd\xb0\xdfr\xda\v\x84\xa8\xdac2\x99\xcc\xad\x8b\x92\x06\xd2 B6\x1b\x1c\xd82\x85\xad\xff\x9f\xb8\v\xe9\x9d\xee{\a\x93SW\v\xdb\xd7\xfc\x05m1\xd2[c\xf06\x83Y]\xd1\xa8fFKqu\xb7\xe91Q\x82\xe9\x1c\x85_\x93', 0x81) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x600, 0x0) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 4.173683192s ago: executing program 5 (id=2544): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0x9, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) bind$auto(0x3, &(0x7f0000000140), 0x6c) clone$auto(0x40020003b42, 0x10000008, 0x0, 0x0, 0x5) r1 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r1, &(0x7f0000000040)={{0x6, 0x80000001}, {0x409, 0x7}}) 3.989199218s ago: executing program 8 (id=2512): landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae47, 0x38) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x8602, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop4\x00', 0x0, 0x0) ioctl$auto_BLKPG(r2, 0x1269, 0x300000000000000) mmap$auto(0x10000, 0x2, 0xfffffffffffffe04, 0x8051, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x8000000009b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(r3, 0x8000001, 0x100, 0x0, 0x80c) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0xffffffffffffffff, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) mmap$auto(0x0, 0x3, 0x4000000000e0, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x6d, 0x3, 0x10000dd, 0x14, 0x2, 0x7fff) madvise$auto(0x0, 0x400053, 0x9) socket(0xa, 0x2, 0x3a) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) 3.873340803s ago: executing program 6 (id=2545): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x1, 0x3}) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0002, 0x19) 3.624953654s ago: executing program 5 (id=2546): socket(0x72b023b65585996e, 0x5, 0x84) r0 = socket(0xa, 0x80000, 0x4) r1 = getsockopt$auto(r0, 0xff, 0x7, 0x0, 0x0) mmap$auto(0x1, 0xffff, 0xbfb, 0x13, r1, 0x1007ffe) clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0) preadv2$auto(r1, &(0x7f00000000c0)={0x0, 0x9}, 0x100000000000006, 0x3, 0x4, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x2) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0xffffffffffffffff, 0x400202000a, 0xf, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001e00)='/sys/kernel/debug/tracing/set_event\x00', 0x2000, 0x0) pread64$auto(r4, &(0x7f0000001e40)='\x00', 0x2, 0x1) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x101, 0x7fff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x2b0, 0x6}) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0xa, 0x1, 0x84) 2.625316633s ago: executing program 8 (id=2547): r0 = socket(0xa, 0x2, 0x0) r1 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x2, 0x0) write$auto(r1, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\x10\x8b?J\x1c\xc7k', 0x81) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x4, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002b80), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x8, 0x1, '\'$#\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) setresuid$auto(0x2, 0x7, 0x8080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0xfffffffc, 0x1, 0xffffffff, 0x0) madvise$auto(0x110c230000, 0x1fffffe, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000400)={0x0, 0x10}, 0x0, 0x1001) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) socket(0x1d, 0x2, 0x2) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x34, 0xf3, 0xb0, @raw}}) 2.141553422s ago: executing program 8 (id=2548): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x4, 0xd945, 0x2, 0x40eb1, r0, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0x400053, 0x9) (async) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) (async) getpid() unshare$auto(0x40000080) prctl$auto(0x0, 0x1, 0x0, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) (async) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00060000ad7a1abb443f722ae9558628bd6c11ba7482ca52dde177a3a24da900"/43, @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf251300000004003b011a002400a136aadab859512fc8db978281233cfd3a457fbf10ea000004006c00"], 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) (async) r5 = setfsgid$auto(0xee01) fsconfig$auto(r1, 0x2, &(0x7f0000000140)='/dev/nullb0\x00', &(0x7f0000000380)="b75a9112da1730b8b07cfb78adf5604d9a7eb09caa60446e1ed52305154df21a226ba6c72a6b283ba577644518affe0ecaffb89cc37985488a9a987c450bbe2c75f9693a42356d1a838b033a0687db54e0d6f4e72b89061eed0bbd9c612a8a9f289bc150799d53b16e136cf9f70bdbcb2f839e708fa44bbcfe98d30a516b44c33fd6456f8df05247de3191e9f08afd3d9edcd4b03df48586671b013f98c7fb2cc844b999334f4d39538354b4321fb3bf7d0e429c1608872c9de6fc91e29fab936a797035e9", r5) (async) socket(0x10, 0x2, 0xc) (async) getsockopt$auto_SO_TIMESTAMP_NEW(0xffffffffffffffff, 0x4, 0x3f, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x616) (async) mmap$auto(0x7fffffff, 0x2000c, 0xdd, 0x20eb1, 0x40000000000a5, 0x8000) (async) r6 = socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3f, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x7, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x285, 0x200, 0x0, 0x7d, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xffffeffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x84e6, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x2645]}, 0x5, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r4, @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc1}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 2.133128592s ago: executing program 5 (id=2549): unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/psample/out_tc\x00', 0x50000, 0x0) openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy4/hwsim/group\x00', 0x210000, 0x0) close_range$auto(0xffffffffffffffff, r1, 0xffff0003) r2 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82042, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1f, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x7, 0x81, 0x11, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$auto_SO_TIMESTAMP_OLD(r3, 0xd1b6, 0x1d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000006) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) read$auto(0x3, 0x0, 0x8080) 1.705494223s ago: executing program 6 (id=2550): unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/psample/out_tc\x00', 0x50000, 0x0) openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy4/hwsim/group\x00', 0x210000, 0x0) close_range$auto(0xffffffffffffffff, r1, 0xffff0003) r2 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82042, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1f, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x7, 0x81, 0x11, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$auto_SO_TIMESTAMP_OLD(r3, 0xd1b6, 0x1d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000006) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x4001) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) read$auto(0x3, 0x0, 0x8080) 1.133676014s ago: executing program 5 (id=2551): r0 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/block/nbd0/pm_only\x00', 0x141340, 0x0) bpf$auto(0x200005, &(0x7f0000000000)=@task_fd_query={0x0, r1, 0x3ff, 0x5, 0x3, 0x1104, 0xffffffffffffffff, 0x6, 0x2}, 0x102) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d0000001000df28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79ba066dab614a1822b5dd65f78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) r4 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0) pread64$auto(r4, &(0x7f0000000080)='*++.\x00', 0xcded, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) msgctl$auto_MSG_INFO(0x2, 0xc, &(0x7f00000002c0)={{0x1e1, 0x0, 0xee00, 0x8, 0x9, 0xd0, 0x400}, &(0x7f0000000140)=0x7f, &(0x7f0000000180)=0x8, 0x250d5cb8, 0xfb, 0x9, 0xff, 0x7, 0x7f, 0x3, 0x7, @inferred=r2, @inferred=r2}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r6, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r7 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3e, 0x5, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x2, 0x81, 0x0, 0x8bb, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2867, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000]}, 0x202, 0x20d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 744.014116ms ago: executing program 6 (id=2552): landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae47, 0x38) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x8602, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop4\x00', 0x0, 0x0) ioctl$auto_BLKPG(r2, 0x1269, 0x300000000000000) mmap$auto(0x10000, 0x2, 0xfffffffffffffe07, 0x8051, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x8000000009b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(r3, 0x8000001, 0x100, 0x0, 0x80c) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0xffffffffffffffff, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) mmap$auto(0x0, 0x3, 0x4000000000e0, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x6d, 0x3, 0x10000dd, 0x14, 0x2, 0x7fff) madvise$auto(0x0, 0x400053, 0x9) socket(0xa, 0x2, 0x3a) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) 685.988942ms ago: executing program 5 (id=2553): close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) pipe2$auto(0x0, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) bind$auto(r1, &(0x7f0000000080)=@in={0x28, 0x0, @loopback}, 0x68) (async) listen$auto(0x3, 0x81) (async) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x2, 0x80000000, 0x7f}) (async) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x2, 0x3c, 0xc}) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r0, 0x8138ae83, &(0x7f0000000040)={0x1}) 488.324667ms ago: executing program 8 (id=2554): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) (async) io_uring_setup$auto(0x4, 0x0) (async) mmap$auto(0xfffffffffffffffc, 0x2, 0xffb, 0x8000000008011, 0x3, 0x1c0000000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) (async, rerun: 64) r0 = socket(0x2, 0x1, 0x106) (rerun: 64) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/afs/servers\x00', 0x400, 0x0) pread64$auto(r1, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\xe3A{\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8', 0x1ff, 0x5) (async) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) (async) readv$auto(0x3, &(0x7f0000001100)={0x0, 0x400000000000fffe}, 0x1) (async, rerun: 64) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (rerun: 64) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) socket(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff}, 0x3a) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 480.958227ms ago: executing program 5 (id=2555): mmap$auto(0x0, 0x2000d, 0x5b, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f00000000c0)={@sival_int=0x2, @raw=0x80, 0x9}, &(0x7f0000000140)=0x2) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(0x3, 0x400c4d05, r0) close_range$auto(0x2, 0x8, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2a, 0x2, 0x1) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) keyctl$auto(0x11, 0xdfffffffffffffff, 0x69c9, 0x0, 0xbcd) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (async) socketpair$auto(0x1, 0x5, 0x10, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x81) write$auto(0x3, 0x0, 0x9) (async) read$auto(0x3, 0x0, 0x8080) (async) execveat$auto(r1, 0x0, 0x0, 0x0, 0x7) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) io_setup$auto(0xffff, &(0x7f0000000580)) 0s ago: executing program 6 (id=2556): openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/options/test_nop_accept\x00', 0x111101, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r0, 0xda6) (async) shutdown$auto(r0, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x101002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/dvb_usb_m920x/remove_id\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/dvb_usb_m920x/remove_id\x00', 0x802, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/debug/usb/usbmon/10t\x00', 0x80000, 0x0) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/debug/usb/usbmon/10t\x00', 0x80000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x18dc87, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x109041, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af12, r2) (async) ioctl$auto(r3, 0x4008af12, r2) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x3, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x3, 0x200, 0x0, 0x7d, 0x0, 0x7, 0x0, 0x0, 0x0, [0x10001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x22, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/vhci_hcd.1/usb11/11-0:1.0/ep_81/bEndpointAddress\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003480)=""/239, 0xef) (async) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003480)=""/239, 0xef) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="42ace8311ce58fb8abfd90d83e41e7370e5943a4ceaf41e319c4757b68563da29df34b26b06b699087547ae7d72db5d771f659c699fb1575f97854412c743d2a0d251a2f85378365e63b01c04a10df65c6f36058a4604bb4e3f365e89080cae1d209b711bf75d4470595d7213f8e7a6d7602ce4dceb18c4589801c215c671f1be18a0d5404f963cd672c8def1104aa8a3c104db9f627abbfedf8a3fd74d89d5bc5fb66098a3ddd", @ANYRES32=r3, @ANYRESOCT=r1, @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x7ff}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x7ff}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x80002, 0x72) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) (async) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) kernel console output (not intermixed with test programs): T16441] ? __kasan_kmalloc+0xaa/0xb0 [ 692.373837][T16441] ? snd_timer_instance_new+0x65/0x350 [ 692.373862][T16441] kstrdup+0x51/0xe0 [ 692.373879][T16441] snd_timer_instance_new+0x65/0x350 [ 692.373901][T16441] snd_seq_timer_open+0x1d4/0x5c0 [ 692.373920][T16441] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 692.373942][T16441] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 692.373965][T16441] ? mark_held_locks+0x40/0x70 [ 692.373986][T16441] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 692.374010][T16441] queue_use+0xdc/0x1f0 [ 692.374031][T16441] snd_seq_queue_alloc+0x2e5/0x540 [ 692.374057][T16441] snd_seq_ioctl_create_queue+0xa9/0x370 [ 692.374076][T16441] call_seq_client_ctl+0xa3/0x130 [ 692.374096][T16441] snd_seq_kernel_client_ctl+0x77/0xd0 [ 692.374116][T16441] alloc_seq_queue+0xdb/0x180 [ 692.374135][T16441] ? __pfx_alloc_seq_queue+0x10/0x10 [ 692.374165][T16441] ? find_held_lock+0x2b/0x80 [ 692.374183][T16441] ? mark_held_locks+0x40/0x70 [ 692.374207][T16441] snd_seq_oss_open+0x2b2/0xa10 [ 692.374229][T16441] odev_open+0x6f/0x90 [ 692.374246][T16441] ? __pfx_odev_open+0x10/0x10 [ 692.374263][T16441] soundcore_open+0x2e3/0x5a0 [ 692.374283][T16441] ? __pfx_soundcore_open+0x10/0x10 [ 692.374301][T16441] chrdev_open+0x234/0x6a0 [ 692.374323][T16441] ? __pfx_apparmor_file_open+0x10/0x10 [ 692.374347][T16441] ? __pfx_chrdev_open+0x10/0x10 [ 692.374370][T16441] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 692.374398][T16441] do_dentry_open+0x6ab/0x14d0 [ 692.374420][T16441] ? __pfx_chrdev_open+0x10/0x10 [ 692.374448][T16441] vfs_open+0x82/0x3f0 [ 692.374468][T16441] path_openat+0x2873/0x4280 [ 692.374499][T16441] ? __pfx_path_openat+0x10/0x10 [ 692.374526][T16441] do_file_open+0x20e/0x430 [ 692.374550][T16441] ? __pfx_do_file_open+0x10/0x10 [ 692.374586][T16441] ? alloc_fd+0x471/0x7a0 [ 692.374609][T16441] ? do_getname+0x191/0x390 [ 692.374627][T16441] do_sys_openat2+0x10f/0x1e0 [ 692.374645][T16441] ? __pfx_do_sys_openat2+0x10/0x10 [ 692.374669][T16441] __x64_sys_openat+0x12d/0x210 [ 692.374688][T16441] ? __pfx___x64_sys_openat+0x10/0x10 [ 692.374713][T16441] do_syscall_64+0x115/0x840 [ 692.374734][T16441] ? clear_bhb_loop+0x40/0x90 [ 692.374754][T16441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.374769][T16441] RIP: 0033:0x7f259c59de59 [ 692.374783][T16441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.374799][T16441] RSP: 002b:00007f259d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 692.374814][T16441] RAX: ffffffffffffffda RBX: 00007f259c825fa0 RCX: 00007f259c59de59 [ 692.374826][T16441] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 692.374836][T16441] RBP: 00007f259c633e6f R08: 0000000000000000 R09: 0000000000000000 [ 692.374846][T16441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.374856][T16441] R13: 00007f259c826038 R14: 00007f259c825fa0 R15: 00007ffdded8f418 [ 692.374876][T16441] [ 694.312256][T16482] FAULT_INJECTION: forcing a failure. [ 694.312256][T16482] name failslab, interval 1, probability 0, space 0, times 0 [ 694.349179][T11628] Bluetooth: hci5: command 0x1003 tx timeout [ 694.357647][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 694.409999][T16482] CPU: 0 UID: 0 PID: 16482 Comm: syz.5.2239 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.410026][T16482] Tainted: [L]=SOFTLOCKUP [ 694.410032][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 694.410042][T16482] Call Trace: [ 694.410049][T16482] [ 694.410055][T16482] dump_stack_lvl+0x100/0x190 [ 694.410079][T16482] should_fail_ex.cold+0x5/0xa [ 694.410097][T16482] should_failslab+0xc2/0x120 [ 694.410117][T16482] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 694.410135][T16482] ? __kasan_kmalloc+0xaa/0xb0 [ 694.410165][T16482] ? snd_timer_instance_new+0x65/0x350 [ 694.410192][T16482] kstrdup+0x51/0xe0 [ 694.410215][T16482] snd_timer_instance_new+0x65/0x350 [ 694.410240][T16482] snd_seq_timer_open+0x1d4/0x5c0 [ 694.410260][T16482] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 694.410276][T16482] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 694.410296][T16482] ? mark_held_locks+0x40/0x70 [ 694.410316][T16482] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 694.410340][T16482] queue_use+0xdc/0x1f0 [ 694.410361][T16482] snd_seq_queue_alloc+0x2e5/0x540 [ 694.410387][T16482] snd_seq_ioctl_create_queue+0xa9/0x370 [ 694.410407][T16482] call_seq_client_ctl+0xa3/0x130 [ 694.410427][T16482] snd_seq_kernel_client_ctl+0x77/0xd0 [ 694.410447][T16482] alloc_seq_queue+0xdb/0x180 [ 694.410466][T16482] ? __pfx_alloc_seq_queue+0x10/0x10 [ 694.410493][T16482] ? find_held_lock+0x2b/0x80 [ 694.410511][T16482] ? mark_held_locks+0x40/0x70 [ 694.410534][T16482] snd_seq_oss_open+0x2b2/0xa10 [ 694.410557][T16482] odev_open+0x6f/0x90 [ 694.410573][T16482] ? __pfx_odev_open+0x10/0x10 [ 694.410590][T16482] soundcore_open+0x2e3/0x5a0 [ 694.410611][T16482] ? __pfx_soundcore_open+0x10/0x10 [ 694.410628][T16482] chrdev_open+0x234/0x6a0 [ 694.410650][T16482] ? __pfx_apparmor_file_open+0x10/0x10 [ 694.410674][T16482] ? __pfx_chrdev_open+0x10/0x10 [ 694.410697][T16482] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 694.410717][T16482] do_dentry_open+0x6ab/0x14d0 [ 694.410738][T16482] ? __pfx_chrdev_open+0x10/0x10 [ 694.410764][T16482] vfs_open+0x82/0x3f0 [ 694.410783][T16482] path_openat+0x2873/0x4280 [ 694.410814][T16482] ? __pfx_path_openat+0x10/0x10 [ 694.410841][T16482] do_file_open+0x20e/0x430 [ 694.410864][T16482] ? __pfx_do_file_open+0x10/0x10 [ 694.410900][T16482] ? alloc_fd+0x471/0x7a0 [ 694.410924][T16482] ? do_getname+0x191/0x390 [ 694.410941][T16482] do_sys_openat2+0x10f/0x1e0 [ 694.410959][T16482] ? __pfx_do_sys_openat2+0x10/0x10 [ 694.410984][T16482] __x64_sys_openat+0x12d/0x210 [ 694.411002][T16482] ? __pfx___x64_sys_openat+0x10/0x10 [ 694.411028][T16482] do_syscall_64+0x115/0x840 [ 694.411049][T16482] ? clear_bhb_loop+0x40/0x90 [ 694.411068][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.411083][T16482] RIP: 0033:0x7efda039de59 [ 694.411099][T16482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.411114][T16482] RSP: 002b:00007efda1266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 694.411129][T16482] RAX: ffffffffffffffda RBX: 00007efda0625fa0 RCX: 00007efda039de59 [ 694.411140][T16482] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 694.411150][T16482] RBP: 00007efda0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 694.411160][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.411169][T16482] R13: 00007efda0626038 R14: 00007efda0625fa0 R15: 00007fff30b61fa8 [ 694.411190][T16482] [ 695.325152][T16494] FAULT_INJECTION: forcing a failure. [ 695.325152][T16494] name failslab, interval 1, probability 0, space 0, times 0 [ 695.338091][T16494] CPU: 0 UID: 0 PID: 16494 Comm: syz.1.2250 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.338119][T16494] Tainted: [L]=SOFTLOCKUP [ 695.338125][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 695.338134][T16494] Call Trace: [ 695.338140][T16494] [ 695.338147][T16494] dump_stack_lvl+0x100/0x190 [ 695.338170][T16494] should_fail_ex.cold+0x5/0xa [ 695.338189][T16494] should_failslab+0xc2/0x120 [ 695.338214][T16494] kmem_cache_alloc_noprof+0x91/0x6a0 [ 695.338233][T16494] ? do_getname+0x35/0x390 [ 695.338253][T16494] do_getname+0x35/0x390 [ 695.338271][T16494] do_sys_openat2+0xc7/0x1e0 [ 695.338289][T16494] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.338314][T16494] __x64_sys_openat+0x12d/0x210 [ 695.338333][T16494] ? __pfx___x64_sys_openat+0x10/0x10 [ 695.338357][T16494] do_syscall_64+0x115/0x840 [ 695.338379][T16494] ? clear_bhb_loop+0x40/0x90 [ 695.338397][T16494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.338412][T16494] RIP: 0033:0x7f259c59de59 [ 695.338426][T16494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.338441][T16494] RSP: 002b:00007f259d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.338456][T16494] RAX: ffffffffffffffda RBX: 00007f259c825fa0 RCX: 00007f259c59de59 [ 695.338467][T16494] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 695.338476][T16494] RBP: 00007f259c633e6f R08: 0000000000000000 R09: 0000000000000000 [ 695.338485][T16494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.338494][T16494] R13: 00007f259c826038 R14: 00007f259c825fa0 R15: 00007ffdded8f418 [ 695.338514][T16494] [ 695.655108][T16498] FAULT_INJECTION: forcing a failure. [ 695.655108][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 695.667848][T16498] CPU: 0 UID: 0 PID: 16498 Comm: syz.2.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.667874][T16498] Tainted: [L]=SOFTLOCKUP [ 695.667880][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 695.667890][T16498] Call Trace: [ 695.667897][T16498] [ 695.667903][T16498] dump_stack_lvl+0x100/0x190 [ 695.667926][T16498] should_fail_ex.cold+0x5/0xa [ 695.667944][T16498] should_failslab+0xc2/0x120 [ 695.667965][T16498] __kmalloc_cache_noprof+0x91/0x6c0 [ 695.667994][T16498] ? snd_timer_instance_new+0x47/0x350 [ 695.668020][T16498] snd_timer_instance_new+0x47/0x350 [ 695.668042][T16498] snd_seq_timer_open+0x1d4/0x5c0 [ 695.668108][T16498] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 695.668126][T16498] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 695.668148][T16498] ? mark_held_locks+0x40/0x70 [ 695.668171][T16498] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 695.668195][T16498] queue_use+0xdc/0x1f0 [ 695.668217][T16498] snd_seq_queue_alloc+0x2e5/0x540 [ 695.668242][T16498] snd_seq_ioctl_create_queue+0xa9/0x370 [ 695.668261][T16498] call_seq_client_ctl+0xa3/0x130 [ 695.668280][T16498] snd_seq_kernel_client_ctl+0x77/0xd0 [ 695.668299][T16498] alloc_seq_queue+0xdb/0x180 [ 695.668318][T16498] ? __pfx_alloc_seq_queue+0x10/0x10 [ 695.668345][T16498] ? find_held_lock+0x2b/0x80 [ 695.668363][T16498] ? mark_held_locks+0x40/0x70 [ 695.668386][T16498] snd_seq_oss_open+0x2b2/0xa10 [ 695.668409][T16498] odev_open+0x6f/0x90 [ 695.668425][T16498] ? __pfx_odev_open+0x10/0x10 [ 695.668442][T16498] soundcore_open+0x2e3/0x5a0 [ 695.668462][T16498] ? __pfx_soundcore_open+0x10/0x10 [ 695.668480][T16498] chrdev_open+0x234/0x6a0 [ 695.668507][T16498] ? __pfx_apparmor_file_open+0x10/0x10 [ 695.668532][T16498] ? __pfx_chrdev_open+0x10/0x10 [ 695.668556][T16498] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 695.668576][T16498] do_dentry_open+0x6ab/0x14d0 [ 695.668602][T16498] ? __pfx_chrdev_open+0x10/0x10 [ 695.668628][T16498] vfs_open+0x82/0x3f0 [ 695.668647][T16498] path_openat+0x2873/0x4280 [ 695.668678][T16498] ? __pfx_path_openat+0x10/0x10 [ 695.668705][T16498] do_file_open+0x20e/0x430 [ 695.668728][T16498] ? __pfx_do_file_open+0x10/0x10 [ 695.668764][T16498] ? alloc_fd+0x471/0x7a0 [ 695.668787][T16498] ? do_getname+0x191/0x390 [ 695.668805][T16498] do_sys_openat2+0x10f/0x1e0 [ 695.668823][T16498] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.668848][T16498] __x64_sys_openat+0x12d/0x210 [ 695.668866][T16498] ? __pfx___x64_sys_openat+0x10/0x10 [ 695.668891][T16498] do_syscall_64+0x115/0x840 [ 695.668913][T16498] ? clear_bhb_loop+0x40/0x90 [ 695.668932][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.668947][T16498] RIP: 0033:0x7f8e3e79de59 [ 695.668962][T16498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.668977][T16498] RSP: 002b:00007f8e3f5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.668993][T16498] RAX: ffffffffffffffda RBX: 00007f8e3ea25fa0 RCX: 00007f8e3e79de59 [ 695.669004][T16498] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 695.669015][T16498] RBP: 00007f8e3e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 695.669025][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.669034][T16498] R13: 00007f8e3ea26038 R14: 00007f8e3ea25fa0 R15: 00007ffcd56631e8 [ 695.669055][T16498] [ 696.525926][T16506] FAULT_INJECTION: forcing a failure. [ 696.525926][T16506] name failslab, interval 1, probability 0, space 0, times 0 [ 696.567941][T16506] CPU: 0 UID: 0 PID: 16506 Comm: syz.4.2246 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.567974][T16506] Tainted: [L]=SOFTLOCKUP [ 696.567981][T16506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 696.567991][T16506] Call Trace: [ 696.567997][T16506] [ 696.568003][T16506] dump_stack_lvl+0x100/0x190 [ 696.568027][T16506] should_fail_ex.cold+0x5/0xa [ 696.568047][T16506] should_failslab+0xc2/0x120 [ 696.568066][T16506] __kmalloc_cache_noprof+0x91/0x6c0 [ 696.568090][T16506] ? snd_timer_instance_new+0x47/0x350 [ 696.568122][T16506] snd_timer_instance_new+0x47/0x350 [ 696.568144][T16506] snd_seq_timer_open+0x1d4/0x5c0 [ 696.568163][T16506] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 696.568181][T16506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 696.568201][T16506] ? mark_held_locks+0x40/0x70 [ 696.568222][T16506] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 696.568246][T16506] queue_use+0xdc/0x1f0 [ 696.568267][T16506] snd_seq_queue_alloc+0x2e5/0x540 [ 696.568294][T16506] snd_seq_ioctl_create_queue+0xa9/0x370 [ 696.568319][T16506] call_seq_client_ctl+0xa3/0x130 [ 696.568339][T16506] snd_seq_kernel_client_ctl+0x77/0xd0 [ 696.568358][T16506] alloc_seq_queue+0xdb/0x180 [ 696.568378][T16506] ? __pfx_alloc_seq_queue+0x10/0x10 [ 696.568405][T16506] ? find_held_lock+0x2b/0x80 [ 696.568423][T16506] ? mark_held_locks+0x40/0x70 [ 696.568446][T16506] snd_seq_oss_open+0x2b2/0xa10 [ 696.568469][T16506] odev_open+0x6f/0x90 [ 696.568485][T16506] ? __pfx_odev_open+0x10/0x10 [ 696.568502][T16506] soundcore_open+0x2e3/0x5a0 [ 696.568522][T16506] ? __pfx_soundcore_open+0x10/0x10 [ 696.568543][T16506] chrdev_open+0x234/0x6a0 [ 696.568565][T16506] ? __pfx_apparmor_file_open+0x10/0x10 [ 696.568589][T16506] ? __pfx_chrdev_open+0x10/0x10 [ 696.568613][T16506] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 696.568633][T16506] do_dentry_open+0x6ab/0x14d0 [ 696.568655][T16506] ? __pfx_chrdev_open+0x10/0x10 [ 696.568681][T16506] vfs_open+0x82/0x3f0 [ 696.568700][T16506] path_openat+0x2873/0x4280 [ 696.568731][T16506] ? __pfx_path_openat+0x10/0x10 [ 696.568758][T16506] do_file_open+0x20e/0x430 [ 696.568782][T16506] ? __pfx_do_file_open+0x10/0x10 [ 696.568818][T16506] ? alloc_fd+0x471/0x7a0 [ 696.568841][T16506] ? do_getname+0x191/0x390 [ 696.568859][T16506] do_sys_openat2+0x10f/0x1e0 [ 696.568877][T16506] ? __pfx_do_sys_openat2+0x10/0x10 [ 696.568901][T16506] __x64_sys_openat+0x12d/0x210 [ 696.568919][T16506] ? __pfx___x64_sys_openat+0x10/0x10 [ 696.568945][T16506] do_syscall_64+0x115/0x840 [ 696.568966][T16506] ? clear_bhb_loop+0x40/0x90 [ 696.568984][T16506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.569000][T16506] RIP: 0033:0x7f5b6819de59 [ 696.569015][T16506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.569031][T16506] RSP: 002b:00007f5b690fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 696.569050][T16506] RAX: ffffffffffffffda RBX: 00007f5b68425fa0 RCX: 00007f5b6819de59 [ 696.569061][T16506] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 696.569071][T16506] RBP: 00007f5b68233e6f R08: 0000000000000000 R09: 0000000000000000 [ 696.569080][T16506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.569090][T16506] R13: 00007f5b68426038 R14: 00007f5b68425fa0 R15: 00007ffd8c1f5078 [ 696.569116][T16506] [ 697.365273][T16525] FAULT_INJECTION: forcing a failure. [ 697.365273][T16525] name fail_futex, interval 1, probability 0, space 0, times 0 [ 697.440094][T16525] CPU: 0 UID: 0 PID: 16525 Comm: syz.4.2249 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.440119][T16525] Tainted: [L]=SOFTLOCKUP [ 697.440124][T16525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.440134][T16525] Call Trace: [ 697.440139][T16525] [ 697.440145][T16525] dump_stack_lvl+0x100/0x190 [ 697.440166][T16525] should_fail_ex.cold+0x5/0xa [ 697.440183][T16525] get_futex_key+0x1d2/0x14f0 [ 697.440208][T16525] ? __pfx_get_futex_key+0x10/0x10 [ 697.440229][T16525] ? orangefs_debug_write+0x41e/0x640 [ 697.440292][T16525] futex_wake+0xf4/0x5e0 [ 697.440309][T16525] ? find_held_lock+0x2b/0x80 [ 697.440326][T16525] ? __pfx_futex_wake+0x10/0x10 [ 697.440347][T16525] ? rcu_read_lock_any_held+0x6a/0xa0 [ 697.440363][T16525] ? find_held_lock+0x2b/0x80 [ 697.440378][T16525] ? ksys_write+0x190/0x250 [ 697.440398][T16525] ? ksys_write+0x190/0x250 [ 697.440419][T16525] do_futex+0x2b2/0x440 [ 697.440434][T16525] ? __pfx_do_futex+0x10/0x10 [ 697.440448][T16525] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 697.440474][T16525] __x64_sys_futex+0x34f/0x4d0 [ 697.440490][T16525] ? fput+0x79/0x100 [ 697.440503][T16525] ? __pfx___x64_sys_futex+0x10/0x10 [ 697.440517][T16525] ? ksys_write+0x1ac/0x250 [ 697.440536][T16525] ? __pfx_ksys_write+0x10/0x10 [ 697.440561][T16525] do_syscall_64+0x115/0x840 [ 697.440581][T16525] ? clear_bhb_loop+0x40/0x90 [ 697.440598][T16525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.440613][T16525] RIP: 0033:0x7f5b6819de59 [ 697.440626][T16525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.440640][T16525] RSP: 002b:00007f5b690fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 697.440654][T16525] RAX: ffffffffffffffda RBX: 00007f5b68425fa8 RCX: 00007f5b6819de59 [ 697.440664][T16525] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5b68425fac [ 697.440673][T16525] RBP: 00007f5b68425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 697.440681][T16525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.440690][T16525] R13: 00007f5b68426038 R14: 00007ffd8c1f4f90 R15: 00007ffd8c1f5078 [ 697.440708][T16525] [ 698.165803][T16541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2253'. [ 698.709197][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2255'. [ 699.662183][T16559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2257'. [ 699.985401][T16559] bond0: (slave bond_slave_0): Releasing backup interface [ 700.031799][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 700.486393][T16564] FAULT_INJECTION: forcing a failure. [ 700.486393][T16564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 700.553419][T16564] CPU: 0 UID: 0 PID: 16564 Comm: syz.2.2259 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.553447][T16564] Tainted: [L]=SOFTLOCKUP [ 700.553453][T16564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.553466][T16564] Call Trace: [ 700.553472][T16564] [ 700.553479][T16564] dump_stack_lvl+0x100/0x190 [ 700.553501][T16564] should_fail_ex.cold+0x5/0xa [ 700.553516][T16564] ? prepare_alloc_pages+0x16d/0x5f0 [ 700.553538][T16564] should_fail_alloc_page+0xeb/0x140 [ 700.553558][T16564] prepare_alloc_pages+0x1f0/0x5f0 [ 700.553576][T16564] ? __lock_acquire+0x49f/0x1a40 [ 700.553600][T16564] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 700.553622][T16564] ? do_raw_spin_lock+0x128/0x260 [ 700.553641][T16564] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 700.553664][T16564] ? do_raw_spin_lock+0x128/0x260 [ 700.553683][T16564] ? mark_held_locks+0x40/0x70 [ 700.553703][T16564] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 700.553724][T16564] ? lockdep_hardirqs_on+0x78/0x100 [ 700.553746][T16564] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 700.553766][T16564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 700.553794][T16564] ? policy_nodemask+0xed/0x4f0 [ 700.553817][T16564] alloc_pages_mpol+0x1fb/0x540 [ 700.553837][T16564] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 700.553857][T16564] ? snd_seq_kernel_client_ctl+0x7e/0xd0 [ 700.553877][T16564] ? alloc_seq_queue+0x121/0x180 [ 700.553899][T16564] ___kmalloc_large_node+0xe5/0x120 [ 700.553921][T16564] __kmalloc_large_node_noprof+0x1c/0x70 [ 700.553943][T16564] __kmalloc_noprof+0x5a1/0x820 [ 700.553959][T16564] ? find_held_lock+0x2b/0x80 [ 700.553975][T16564] ? snd_seq_oss_readq_new+0x70/0x210 [ 700.553994][T16564] snd_seq_oss_readq_new+0x70/0x210 [ 700.554010][T16564] snd_seq_oss_open+0x476/0xa10 [ 700.554033][T16564] odev_open+0x6f/0x90 [ 700.554049][T16564] ? __pfx_odev_open+0x10/0x10 [ 700.554067][T16564] soundcore_open+0x2e3/0x5a0 [ 700.554087][T16564] ? __pfx_soundcore_open+0x10/0x10 [ 700.554106][T16564] chrdev_open+0x234/0x6a0 [ 700.554128][T16564] ? __pfx_apparmor_file_open+0x10/0x10 [ 700.554151][T16564] ? __pfx_chrdev_open+0x10/0x10 [ 700.554174][T16564] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 700.554194][T16564] do_dentry_open+0x6ab/0x14d0 [ 700.554216][T16564] ? __pfx_chrdev_open+0x10/0x10 [ 700.554242][T16564] vfs_open+0x82/0x3f0 [ 700.554262][T16564] path_openat+0x2873/0x4280 [ 700.554292][T16564] ? __pfx_path_openat+0x10/0x10 [ 700.554319][T16564] do_file_open+0x20e/0x430 [ 700.554343][T16564] ? __pfx_do_file_open+0x10/0x10 [ 700.554379][T16564] ? alloc_fd+0x471/0x7a0 [ 700.554403][T16564] ? do_getname+0x191/0x390 [ 700.554421][T16564] do_sys_openat2+0x10f/0x1e0 [ 700.554438][T16564] ? __pfx_do_sys_openat2+0x10/0x10 [ 700.554463][T16564] __x64_sys_openat+0x12d/0x210 [ 700.554481][T16564] ? __pfx___x64_sys_openat+0x10/0x10 [ 700.554506][T16564] do_syscall_64+0x115/0x840 [ 700.554528][T16564] ? clear_bhb_loop+0x40/0x90 [ 700.554546][T16564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.554562][T16564] RIP: 0033:0x7f8e3e79de59 [ 700.554576][T16564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.554591][T16564] RSP: 002b:00007f8e3f5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.554607][T16564] RAX: ffffffffffffffda RBX: 00007f8e3ea25fa0 RCX: 00007f8e3e79de59 [ 700.554617][T16564] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 700.554627][T16564] RBP: 00007f8e3e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 700.554636][T16564] R10: 0000000000000500 R11: 0000000000000246 R12: 0000000000000000 [ 700.554646][T16564] R13: 00007f8e3ea26038 R14: 00007f8e3ea25fa0 R15: 00007ffcd56631e8 [ 700.554666][T16564] [ 701.397072][T16566] FAULT_INJECTION: forcing a failure. [ 701.397072][T16566] name failslab, interval 1, probability 0, space 0, times 0 [ 701.418938][T16566] CPU: 0 UID: 0 PID: 16566 Comm: syz.4.2260 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.418967][T16566] Tainted: [L]=SOFTLOCKUP [ 701.418973][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 701.418983][T16566] Call Trace: [ 701.418989][T16566] [ 701.418999][T16566] dump_stack_lvl+0x100/0x190 [ 701.419022][T16566] should_fail_ex.cold+0x5/0xa [ 701.419041][T16566] should_failslab+0xc2/0x120 [ 701.419061][T16566] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 701.419080][T16566] ? __kasan_kmalloc+0xaa/0xb0 [ 701.419098][T16566] ? snd_timer_instance_new+0x65/0x350 [ 701.419122][T16566] kstrdup+0x51/0xe0 [ 701.419139][T16566] snd_timer_instance_new+0x65/0x350 [ 701.419165][T16566] snd_seq_timer_open+0x1d4/0x5c0 [ 701.419183][T16566] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 701.419200][T16566] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 701.419226][T16566] ? mark_held_locks+0x40/0x70 [ 701.419246][T16566] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 701.419271][T16566] queue_use+0xdc/0x1f0 [ 701.419293][T16566] snd_seq_queue_alloc+0x2e5/0x540 [ 701.419318][T16566] snd_seq_ioctl_create_queue+0xa9/0x370 [ 701.419338][T16566] call_seq_client_ctl+0xa3/0x130 [ 701.419357][T16566] snd_seq_kernel_client_ctl+0x77/0xd0 [ 701.419377][T16566] alloc_seq_queue+0xdb/0x180 [ 701.419396][T16566] ? __pfx_alloc_seq_queue+0x10/0x10 [ 701.419423][T16566] ? find_held_lock+0x2b/0x80 [ 701.419441][T16566] ? mark_held_locks+0x40/0x70 [ 701.419464][T16566] snd_seq_oss_open+0x2b2/0xa10 [ 701.419486][T16566] odev_open+0x6f/0x90 [ 701.419511][T16566] ? __pfx_odev_open+0x10/0x10 [ 701.419529][T16566] soundcore_open+0x2e3/0x5a0 [ 701.419551][T16566] ? __pfx_soundcore_open+0x10/0x10 [ 701.419570][T16566] chrdev_open+0x234/0x6a0 [ 701.419593][T16566] ? __pfx_apparmor_file_open+0x10/0x10 [ 701.419617][T16566] ? __pfx_chrdev_open+0x10/0x10 [ 701.419640][T16566] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 701.419660][T16566] do_dentry_open+0x6ab/0x14d0 [ 701.419681][T16566] ? __pfx_chrdev_open+0x10/0x10 [ 701.419712][T16566] vfs_open+0x82/0x3f0 [ 701.419731][T16566] path_openat+0x2873/0x4280 [ 701.419772][T16566] ? __pfx_path_openat+0x10/0x10 [ 701.419801][T16566] do_file_open+0x20e/0x430 [ 701.419826][T16566] ? __pfx_do_file_open+0x10/0x10 [ 701.419868][T16566] ? alloc_fd+0x471/0x7a0 [ 701.419893][T16566] ? do_getname+0x191/0x390 [ 701.419911][T16566] do_sys_openat2+0x10f/0x1e0 [ 701.419929][T16566] ? __pfx_do_sys_openat2+0x10/0x10 [ 701.419953][T16566] __x64_sys_openat+0x12d/0x210 [ 701.419972][T16566] ? __pfx___x64_sys_openat+0x10/0x10 [ 701.419999][T16566] do_syscall_64+0x115/0x840 [ 701.420021][T16566] ? clear_bhb_loop+0x40/0x90 [ 701.420039][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.420055][T16566] RIP: 0033:0x7f5b6819de59 [ 701.420069][T16566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.420084][T16566] RSP: 002b:00007f5b690fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 701.420100][T16566] RAX: ffffffffffffffda RBX: 00007f5b68425fa0 RCX: 00007f5b6819de59 [ 701.420113][T16566] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 701.420124][T16566] RBP: 00007f5b68233e6f R08: 0000000000000000 R09: 0000000000000000 [ 701.420133][T16566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.420143][T16566] R13: 00007f5b68426038 R14: 00007f5b68425fa0 R15: 00007ffd8c1f5078 [ 701.420164][T16566] [ 702.755026][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2264'. [ 705.381046][T16632] vivid-007: ================= START STATUS ================= [ 705.401617][T16632] vivid-007: Generate PTS: true [ 705.417795][T16632] vivid-007: Generate SCR: true [ 705.446828][T16632] tpg source WxH: 320x240 (Y'CbCr) [ 705.481650][T16632] tpg field: 1 [ 705.512816][T16632] tpg crop: (0,0)/320x240 [ 705.580776][T16632] tpg compose: (0,0)/320x240 [ 705.613778][T16632] tpg colorspace: 8 [ 705.644973][T16632] tpg transfer function: 0/0 [ 705.667451][T16632] tpg Y'CbCr encoding: 0/0 [ 705.707620][T16632] tpg quantization: 0/0 [ 705.730048][T16632] tpg RGB range: 0/2 [ 705.790204][T16632] vivid-007: ================== END STATUS ================== [ 706.293936][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2278'. [ 706.936123][T16679] FAULT_INJECTION: forcing a failure. [ 706.936123][T16679] name failslab, interval 1, probability 0, space 0, times 0 [ 706.986683][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.2.2284 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.986711][T16679] Tainted: [L]=SOFTLOCKUP [ 706.986717][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.986728][T16679] Call Trace: [ 706.986734][T16679] [ 706.986740][T16679] dump_stack_lvl+0x100/0x190 [ 706.986764][T16679] should_fail_ex.cold+0x5/0xa [ 706.986783][T16679] should_failslab+0xc2/0x120 [ 706.986804][T16679] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 706.986823][T16679] ? __kasan_kmalloc+0xaa/0xb0 [ 706.986840][T16679] ? snd_timer_instance_new+0x65/0x350 [ 706.986865][T16679] kstrdup+0x51/0xe0 [ 706.986881][T16679] snd_timer_instance_new+0x65/0x350 [ 706.986903][T16679] snd_seq_timer_open+0x1d4/0x5c0 [ 706.986929][T16679] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 706.986947][T16679] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 706.986969][T16679] ? mark_held_locks+0x40/0x70 [ 706.986989][T16679] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 706.987018][T16679] queue_use+0xdc/0x1f0 [ 706.987041][T16679] snd_seq_queue_alloc+0x2e5/0x540 [ 706.987067][T16679] snd_seq_ioctl_create_queue+0xa9/0x370 [ 706.987087][T16679] call_seq_client_ctl+0xa3/0x130 [ 706.987107][T16679] snd_seq_kernel_client_ctl+0x77/0xd0 [ 706.987126][T16679] alloc_seq_queue+0xdb/0x180 [ 706.987146][T16679] ? __pfx_alloc_seq_queue+0x10/0x10 [ 706.987173][T16679] ? find_held_lock+0x2b/0x80 [ 706.987192][T16679] ? mark_held_locks+0x40/0x70 [ 706.987215][T16679] snd_seq_oss_open+0x2b2/0xa10 [ 706.987237][T16679] odev_open+0x6f/0x90 [ 706.987253][T16679] ? __pfx_odev_open+0x10/0x10 [ 706.987271][T16679] soundcore_open+0x2e3/0x5a0 [ 706.987290][T16679] ? __pfx_soundcore_open+0x10/0x10 [ 706.987309][T16679] chrdev_open+0x234/0x6a0 [ 706.987331][T16679] ? __pfx_apparmor_file_open+0x10/0x10 [ 706.987355][T16679] ? __pfx_chrdev_open+0x10/0x10 [ 706.987378][T16679] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 706.987398][T16679] do_dentry_open+0x6ab/0x14d0 [ 706.987419][T16679] ? __pfx_chrdev_open+0x10/0x10 [ 706.987446][T16679] vfs_open+0x82/0x3f0 [ 706.987466][T16679] path_openat+0x2873/0x4280 [ 706.987500][T16679] ? __pfx_path_openat+0x10/0x10 [ 706.987530][T16679] do_file_open+0x20e/0x430 [ 706.987555][T16679] ? __pfx_do_file_open+0x10/0x10 [ 706.987591][T16679] ? alloc_fd+0x471/0x7a0 [ 706.987616][T16679] ? do_getname+0x191/0x390 [ 706.987635][T16679] do_sys_openat2+0x10f/0x1e0 [ 706.987653][T16679] ? __pfx_do_sys_openat2+0x10/0x10 [ 706.987677][T16679] __x64_sys_openat+0x12d/0x210 [ 706.987696][T16679] ? __pfx___x64_sys_openat+0x10/0x10 [ 706.987721][T16679] do_syscall_64+0x115/0x840 [ 706.987742][T16679] ? clear_bhb_loop+0x40/0x90 [ 706.987761][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.987776][T16679] RIP: 0033:0x7f8e3e79de59 [ 706.987791][T16679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.987806][T16679] RSP: 002b:00007f8e3f5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 706.987822][T16679] RAX: ffffffffffffffda RBX: 00007f8e3ea25fa0 RCX: 00007f8e3e79de59 [ 706.987833][T16679] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 706.987843][T16679] RBP: 00007f8e3e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 706.987853][T16679] R10: 0000000000006300 R11: 0000000000000246 R12: 0000000000000000 [ 706.987863][T16679] R13: 00007f8e3ea26038 R14: 00007f8e3ea25fa0 R15: 00007ffcd56631e8 [ 706.987883][T16679] [ 708.907275][T16707] pim6reg: entered allmulticast mode [ 710.063613][T16719] FAULT_INJECTION: forcing a failure. [ 710.063613][T16719] name failslab, interval 1, probability 0, space 0, times 0 [ 710.114249][T16719] CPU: 0 UID: 0 PID: 16719 Comm: syz.2.2293 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.114277][T16719] Tainted: [L]=SOFTLOCKUP [ 710.114283][T16719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.114293][T16719] Call Trace: [ 710.114299][T16719] [ 710.114305][T16719] dump_stack_lvl+0x100/0x190 [ 710.114328][T16719] should_fail_ex.cold+0x5/0xa [ 710.114347][T16719] should_failslab+0xc2/0x120 [ 710.114366][T16719] __kmalloc_cache_noprof+0x91/0x6c0 [ 710.114390][T16719] ? find_held_lock+0x2b/0x80 [ 710.114408][T16719] ? snd_seq_port_connect+0x61/0x540 [ 710.114431][T16719] snd_seq_port_connect+0x61/0x540 [ 710.114449][T16719] ? _raw_read_unlock+0x28/0x50 [ 710.114470][T16719] ? check_subscription_permission.isra.0+0x146/0x240 [ 710.114493][T16719] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 710.114516][T16719] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 710.114545][T16719] call_seq_client_ctl+0xa3/0x130 [ 710.114565][T16719] snd_seq_kernel_client_ctl+0x77/0xd0 [ 710.114584][T16719] snd_seq_oss_midi_open+0x587/0x680 [ 710.114608][T16719] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 710.114637][T16719] ? kasan_save_track+0x14/0x30 [ 710.114654][T16719] ? __kasan_kmalloc+0xaa/0xb0 [ 710.114673][T16719] snd_seq_oss_synth_setup_midi+0x131/0x590 [ 710.114701][T16719] snd_seq_oss_open+0x82e/0xa10 [ 710.114723][T16719] odev_open+0x6f/0x90 [ 710.114739][T16719] ? __pfx_odev_open+0x10/0x10 [ 710.114756][T16719] soundcore_open+0x2e3/0x5a0 [ 710.114777][T16719] ? __pfx_soundcore_open+0x10/0x10 [ 710.114795][T16719] chrdev_open+0x234/0x6a0 [ 710.114826][T16719] ? __pfx_apparmor_file_open+0x10/0x10 [ 710.114853][T16719] ? __pfx_chrdev_open+0x10/0x10 [ 710.114877][T16719] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 710.114897][T16719] do_dentry_open+0x6ab/0x14d0 [ 710.114919][T16719] ? __pfx_chrdev_open+0x10/0x10 [ 710.114946][T16719] vfs_open+0x82/0x3f0 [ 710.114965][T16719] path_openat+0x2873/0x4280 [ 710.114996][T16719] ? __pfx_path_openat+0x10/0x10 [ 710.115023][T16719] do_file_open+0x20e/0x430 [ 710.115047][T16719] ? __pfx_do_file_open+0x10/0x10 [ 710.115083][T16719] ? alloc_fd+0x471/0x7a0 [ 710.115107][T16719] ? do_getname+0x191/0x390 [ 710.115125][T16719] do_sys_openat2+0x10f/0x1e0 [ 710.115143][T16719] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.115168][T16719] __x64_sys_openat+0x12d/0x210 [ 710.115186][T16719] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.115211][T16719] do_syscall_64+0x115/0x840 [ 710.115233][T16719] ? clear_bhb_loop+0x40/0x90 [ 710.115252][T16719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.115268][T16719] RIP: 0033:0x7f8e3e79de59 [ 710.115283][T16719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.115298][T16719] RSP: 002b:00007f8e3f5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.115314][T16719] RAX: ffffffffffffffda RBX: 00007f8e3ea25fa0 RCX: 00007f8e3e79de59 [ 710.115325][T16719] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 710.115335][T16719] RBP: 00007f8e3e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 710.115345][T16719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.115355][T16719] R13: 00007f8e3ea26038 R14: 00007f8e3ea25fa0 R15: 00007ffcd56631e8 [ 710.115376][T16719] [ 710.849044][T16735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2297'. [ 711.230356][T16737] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 4 with max blocks 3 with error 117 [ 711.260421][T16742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2298'. [ 711.274575][T16737] EXT4-fs (sda1): This should not happen!! Data will be lost [ 711.274575][T16737] [ 712.334460][T16751] FAULT_INJECTION: forcing a failure. [ 712.334460][T16751] name failslab, interval 1, probability 0, space 0, times 0 [ 712.423161][T16751] CPU: 0 UID: 0 PID: 16751 Comm: syz.5.2301 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.423189][T16751] Tainted: [L]=SOFTLOCKUP [ 712.423195][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 712.423205][T16751] Call Trace: [ 712.423211][T16751] [ 712.423217][T16751] dump_stack_lvl+0x100/0x190 [ 712.423241][T16751] should_fail_ex.cold+0x5/0xa [ 712.423259][T16751] should_failslab+0xc2/0x120 [ 712.423279][T16751] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 712.423298][T16751] ? __kasan_kmalloc+0xaa/0xb0 [ 712.423315][T16751] ? snd_timer_instance_new+0x65/0x350 [ 712.423340][T16751] kstrdup+0x51/0xe0 [ 712.423356][T16751] snd_timer_instance_new+0x65/0x350 [ 712.423378][T16751] snd_seq_timer_open+0x1d4/0x5c0 [ 712.423397][T16751] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 712.423414][T16751] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 712.423434][T16751] ? mark_held_locks+0x40/0x70 [ 712.423454][T16751] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 712.423496][T16751] queue_use+0xdc/0x1f0 [ 712.423520][T16751] snd_seq_queue_alloc+0x2e5/0x540 [ 712.423546][T16751] snd_seq_ioctl_create_queue+0xa9/0x370 [ 712.423566][T16751] call_seq_client_ctl+0xa3/0x130 [ 712.423586][T16751] snd_seq_kernel_client_ctl+0x77/0xd0 [ 712.423607][T16751] alloc_seq_queue+0xdb/0x180 [ 712.423626][T16751] ? __pfx_alloc_seq_queue+0x10/0x10 [ 712.423654][T16751] ? find_held_lock+0x2b/0x80 [ 712.423672][T16751] ? mark_held_locks+0x40/0x70 [ 712.423695][T16751] snd_seq_oss_open+0x2b2/0xa10 [ 712.423718][T16751] odev_open+0x6f/0x90 [ 712.423734][T16751] ? __pfx_odev_open+0x10/0x10 [ 712.423751][T16751] soundcore_open+0x2e3/0x5a0 [ 712.423770][T16751] ? __pfx_soundcore_open+0x10/0x10 [ 712.423788][T16751] chrdev_open+0x234/0x6a0 [ 712.423810][T16751] ? __pfx_apparmor_file_open+0x10/0x10 [ 712.423834][T16751] ? __pfx_chrdev_open+0x10/0x10 [ 712.423857][T16751] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 712.423877][T16751] do_dentry_open+0x6ab/0x14d0 [ 712.423900][T16751] ? __pfx_chrdev_open+0x10/0x10 [ 712.423926][T16751] vfs_open+0x82/0x3f0 [ 712.423946][T16751] path_openat+0x2873/0x4280 [ 712.423976][T16751] ? __pfx_path_openat+0x10/0x10 [ 712.424004][T16751] do_file_open+0x20e/0x430 [ 712.424027][T16751] ? __pfx_do_file_open+0x10/0x10 [ 712.424063][T16751] ? alloc_fd+0x471/0x7a0 [ 712.424086][T16751] ? do_getname+0x191/0x390 [ 712.424105][T16751] do_sys_openat2+0x10f/0x1e0 [ 712.424122][T16751] ? __pfx_do_sys_openat2+0x10/0x10 [ 712.424147][T16751] __x64_sys_openat+0x12d/0x210 [ 712.424165][T16751] ? __pfx___x64_sys_openat+0x10/0x10 [ 712.424190][T16751] do_syscall_64+0x115/0x840 [ 712.424211][T16751] ? clear_bhb_loop+0x40/0x90 [ 712.424229][T16751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.424245][T16751] RIP: 0033:0x7efda039de59 [ 712.424259][T16751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.424274][T16751] RSP: 002b:00007efda1266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 712.424290][T16751] RAX: ffffffffffffffda RBX: 00007efda0625fa0 RCX: 00007efda039de59 [ 712.424301][T16751] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 712.424311][T16751] RBP: 00007efda0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 712.424320][T16751] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000 [ 712.424330][T16751] R13: 00007efda0626038 R14: 00007efda0625fa0 R15: 00007fff30b61fa8 [ 712.424351][T16751] [ 713.430899][T16764] FAULT_INJECTION: forcing a failure. [ 713.430899][T16764] name failslab, interval 1, probability 0, space 0, times 0 [ 713.461476][T16764] CPU: 0 UID: 0 PID: 16764 Comm: syz.4.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.461504][T16764] Tainted: [L]=SOFTLOCKUP [ 713.461509][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.461519][T16764] Call Trace: [ 713.461525][T16764] [ 713.461532][T16764] dump_stack_lvl+0x100/0x190 [ 713.461555][T16764] should_fail_ex.cold+0x5/0xa [ 713.461573][T16764] should_failslab+0xc2/0x120 [ 713.461594][T16764] __kmalloc_cache_noprof+0x91/0x6c0 [ 713.461618][T16764] ? snd_timer_instance_new+0x47/0x350 [ 713.461643][T16764] snd_timer_instance_new+0x47/0x350 [ 713.461664][T16764] snd_seq_timer_open+0x1d4/0x5c0 [ 713.461685][T16764] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 713.461702][T16764] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 713.461722][T16764] ? mark_held_locks+0x40/0x70 [ 713.461742][T16764] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 713.461766][T16764] queue_use+0xdc/0x1f0 [ 713.461788][T16764] snd_seq_queue_alloc+0x2e5/0x540 [ 713.461813][T16764] snd_seq_ioctl_create_queue+0xa9/0x370 [ 713.461832][T16764] call_seq_client_ctl+0xa3/0x130 [ 713.461852][T16764] snd_seq_kernel_client_ctl+0x77/0xd0 [ 713.461871][T16764] alloc_seq_queue+0xdb/0x180 [ 713.461890][T16764] ? __pfx_alloc_seq_queue+0x10/0x10 [ 713.461918][T16764] ? find_held_lock+0x2b/0x80 [ 713.461936][T16764] ? mark_held_locks+0x40/0x70 [ 713.461959][T16764] snd_seq_oss_open+0x2b2/0xa10 [ 713.461982][T16764] odev_open+0x6f/0x90 [ 713.461999][T16764] ? __pfx_odev_open+0x10/0x10 [ 713.462015][T16764] soundcore_open+0x2e3/0x5a0 [ 713.462036][T16764] ? __pfx_soundcore_open+0x10/0x10 [ 713.462054][T16764] chrdev_open+0x234/0x6a0 [ 713.462075][T16764] ? __pfx_apparmor_file_open+0x10/0x10 [ 713.462099][T16764] ? __pfx_chrdev_open+0x10/0x10 [ 713.462122][T16764] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 713.462142][T16764] do_dentry_open+0x6ab/0x14d0 [ 713.462164][T16764] ? __pfx_chrdev_open+0x10/0x10 [ 713.462191][T16764] vfs_open+0x82/0x3f0 [ 713.462210][T16764] path_openat+0x2873/0x4280 [ 713.462240][T16764] ? __pfx_path_openat+0x10/0x10 [ 713.462268][T16764] do_file_open+0x20e/0x430 [ 713.462291][T16764] ? __pfx_do_file_open+0x10/0x10 [ 713.462327][T16764] ? alloc_fd+0x471/0x7a0 [ 713.462351][T16764] ? do_getname+0x191/0x390 [ 713.462369][T16764] do_sys_openat2+0x10f/0x1e0 [ 713.462396][T16764] ? __pfx_do_sys_openat2+0x10/0x10 [ 713.462421][T16764] __x64_sys_openat+0x12d/0x210 [ 713.462441][T16764] ? __pfx___x64_sys_openat+0x10/0x10 [ 713.462467][T16764] do_syscall_64+0x115/0x840 [ 713.462488][T16764] ? clear_bhb_loop+0x40/0x90 [ 713.462507][T16764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.462522][T16764] RIP: 0033:0x7f5b6819de59 [ 713.462537][T16764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.462553][T16764] RSP: 002b:00007f5b690fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 713.462568][T16764] RAX: ffffffffffffffda RBX: 00007f5b68425fa0 RCX: 00007f5b6819de59 [ 713.462579][T16764] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 713.462590][T16764] RBP: 00007f5b68233e6f R08: 0000000000000000 R09: 0000000000000000 [ 713.462599][T16764] R10: 0000000000000500 R11: 0000000000000246 R12: 0000000000000000 [ 713.462608][T16764] R13: 00007f5b68426038 R14: 00007f5b68425fa0 R15: 00007ffd8c1f5078 [ 713.462628][T16764] [ 713.963345][T16772] Process accounting paused [ 716.208901][ T30] audit: type=1800 audit(2147483754.782:9): pid=16803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2312" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 716.873575][T16814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2314'. [ 717.381083][T16813] FAULT_INJECTION: forcing a failure. [ 717.381083][T16813] name failslab, interval 1, probability 0, space 0, times 0 [ 717.521331][T16813] CPU: 0 UID: 0 PID: 16813 Comm: syz.1.2315 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.521359][T16813] Tainted: [L]=SOFTLOCKUP [ 717.521365][T16813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.521375][T16813] Call Trace: [ 717.521381][T16813] [ 717.521388][T16813] dump_stack_lvl+0x100/0x190 [ 717.521411][T16813] should_fail_ex.cold+0x5/0xa [ 717.521429][T16813] should_failslab+0xc2/0x120 [ 717.521449][T16813] __kmalloc_cache_noprof+0x91/0x6c0 [ 717.521474][T16813] ? snd_timer_instance_new+0x47/0x350 [ 717.521507][T16813] snd_timer_instance_new+0x47/0x350 [ 717.521528][T16813] snd_seq_timer_open+0x1d4/0x5c0 [ 717.521548][T16813] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 717.521566][T16813] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 717.521587][T16813] ? mark_held_locks+0x40/0x70 [ 717.521608][T16813] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 717.521631][T16813] queue_use+0xdc/0x1f0 [ 717.521653][T16813] snd_seq_queue_alloc+0x2e5/0x540 [ 717.521680][T16813] snd_seq_ioctl_create_queue+0xa9/0x370 [ 717.521700][T16813] call_seq_client_ctl+0xa3/0x130 [ 717.521719][T16813] snd_seq_kernel_client_ctl+0x77/0xd0 [ 717.521739][T16813] alloc_seq_queue+0xdb/0x180 [ 717.521758][T16813] ? __pfx_alloc_seq_queue+0x10/0x10 [ 717.521786][T16813] ? find_held_lock+0x2b/0x80 [ 717.521804][T16813] ? mark_held_locks+0x40/0x70 [ 717.521827][T16813] snd_seq_oss_open+0x2b2/0xa10 [ 717.521850][T16813] odev_open+0x6f/0x90 [ 717.521866][T16813] ? __pfx_odev_open+0x10/0x10 [ 717.521883][T16813] soundcore_open+0x2e3/0x5a0 [ 717.521904][T16813] ? __pfx_soundcore_open+0x10/0x10 [ 717.521922][T16813] chrdev_open+0x234/0x6a0 [ 717.521944][T16813] ? __pfx_apparmor_file_open+0x10/0x10 [ 717.521968][T16813] ? __pfx_chrdev_open+0x10/0x10 [ 717.521991][T16813] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 717.522011][T16813] do_dentry_open+0x6ab/0x14d0 [ 717.522033][T16813] ? __pfx_chrdev_open+0x10/0x10 [ 717.522059][T16813] vfs_open+0x82/0x3f0 [ 717.522078][T16813] path_openat+0x2873/0x4280 [ 717.522109][T16813] ? __pfx_path_openat+0x10/0x10 [ 717.522144][T16813] do_file_open+0x20e/0x430 [ 717.522169][T16813] ? __pfx_do_file_open+0x10/0x10 [ 717.522205][T16813] ? alloc_fd+0x471/0x7a0 [ 717.522229][T16813] ? do_getname+0x191/0x390 [ 717.522248][T16813] do_sys_openat2+0x10f/0x1e0 [ 717.522267][T16813] ? __pfx_do_sys_openat2+0x10/0x10 [ 717.522292][T16813] __x64_sys_openat+0x12d/0x210 [ 717.522310][T16813] ? __pfx___x64_sys_openat+0x10/0x10 [ 717.522335][T16813] do_syscall_64+0x115/0x840 [ 717.522357][T16813] ? clear_bhb_loop+0x40/0x90 [ 717.522375][T16813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.522391][T16813] RIP: 0033:0x7f259c59de59 [ 717.522406][T16813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.522421][T16813] RSP: 002b:00007f259d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 717.522437][T16813] RAX: ffffffffffffffda RBX: 00007f259c825fa0 RCX: 00007f259c59de59 [ 717.522447][T16813] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 717.522458][T16813] RBP: 00007f259c633e6f R08: 0000000000000000 R09: 0000000000000000 [ 717.522468][T16813] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000 [ 717.522478][T16813] R13: 00007f259c826038 R14: 00007f259c825fa0 R15: 00007ffdded8f418 [ 717.522498][T16813] [ 719.486670][T11628] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 720.896118][T16862] FAULT_INJECTION: forcing a failure. [ 720.896118][T16862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.959718][T16862] CPU: 0 UID: 0 PID: 16862 Comm: syz.2.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.959747][T16862] Tainted: [L]=SOFTLOCKUP [ 720.959753][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 720.959762][T16862] Call Trace: [ 720.959770][T16862] [ 720.959776][T16862] dump_stack_lvl+0x100/0x190 [ 720.959802][T16862] should_fail_ex.cold+0x5/0xa [ 720.959818][T16862] ? prepare_alloc_pages+0x16d/0x5f0 [ 720.959841][T16862] should_fail_alloc_page+0xeb/0x140 [ 720.959863][T16862] prepare_alloc_pages+0x1f0/0x5f0 [ 720.959886][T16862] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 720.959908][T16862] ? find_held_lock+0x2b/0x80 [ 720.959926][T16862] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 720.959950][T16862] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 720.959974][T16862] ? rcu_is_watching+0x12/0xc0 [ 720.959991][T16862] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 720.960006][T16862] ? lockdep_hardirqs_on+0x78/0x100 [ 720.960033][T16862] ? rcu_is_watching+0x12/0xc0 [ 720.960048][T16862] ? trace_sched_exit_tp+0x120/0x160 [ 720.960074][T16862] ? __lock_acquire+0x49f/0x1a40 [ 720.960097][T16862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 720.960119][T16862] ? policy_nodemask+0xed/0x4f0 [ 720.960140][T16862] alloc_pages_mpol+0x1fb/0x540 [ 720.960160][T16862] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 720.960184][T16862] alloc_pages_noprof+0x1a/0x160 [ 720.960205][T16862] anon_pipe_write+0x23e/0x1d90 [ 720.960230][T16862] ? __pfx_aa_file_perm+0x10/0x10 [ 720.960256][T16862] ? __pfx_anon_pipe_write+0x10/0x10 [ 720.960277][T16862] ? __pfx___might_resched+0x10/0x10 [ 720.960297][T16862] ? get_pid_task+0xfc/0x250 [ 720.960322][T16862] ? bpf_lsm_file_permission+0x9/0x10 [ 720.960344][T16862] ? security_file_permission+0x76/0x210 [ 720.960363][T16862] ? rw_verify_area+0xce/0x6d0 [ 720.960384][T16862] vfs_write+0x6ac/0x1050 [ 720.960408][T16862] ? __pfx_anon_pipe_write+0x10/0x10 [ 720.960432][T16862] ? __pfx_vfs_write+0x10/0x10 [ 720.960451][T16862] ? find_held_lock+0x2b/0x80 [ 720.960478][T16862] ksys_write+0x1f8/0x250 [ 720.960500][T16862] ? __pfx_ksys_write+0x10/0x10 [ 720.960520][T16862] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 720.960543][T16862] ? syscall_user_dispatch+0x76/0x130 [ 720.960569][T16862] do_syscall_64+0x115/0x840 [ 720.960591][T16862] ? clear_bhb_loop+0x40/0x90 [ 720.960609][T16862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.960625][T16862] RIP: 0033:0x7f8e3e79de59 [ 720.960640][T16862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.960654][T16862] RSP: 002b:00007f8e3f5dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 720.960676][T16862] RAX: ffffffffffffffda RBX: 00007f8e3ea26090 RCX: 00007f8e3e79de59 [ 720.960687][T16862] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 720.960696][T16862] RBP: 00007f8e3e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 720.960706][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.960716][T16862] R13: 00007f8e3ea26128 R14: 00007f8e3ea26090 R15: 00007ffcd56631e8 [ 720.960736][T16862] [ 724.152909][T16887] FAULT_INJECTION: forcing a failure. [ 724.152909][T16887] name failslab, interval 1, probability 0, space 0, times 0 [ 724.252565][T16887] CPU: 0 UID: 0 PID: 16887 Comm: syz.2.2328 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.252593][T16887] Tainted: [L]=SOFTLOCKUP [ 724.252599][T16887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.252609][T16887] Call Trace: [ 724.252615][T16887] [ 724.252622][T16887] dump_stack_lvl+0x100/0x190 [ 724.252644][T16887] should_fail_ex.cold+0x5/0xa [ 724.252662][T16887] should_failslab+0xc2/0x120 [ 724.252682][T16887] __kmalloc_cache_noprof+0x91/0x6c0 [ 724.252705][T16887] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 724.252727][T16887] ? snd_seq_timer_new+0x44/0x1a0 [ 724.252749][T16887] snd_seq_timer_new+0x44/0x1a0 [ 724.252765][T16887] snd_seq_queue_alloc+0x177/0x540 [ 724.252794][T16887] snd_seq_ioctl_create_queue+0xa9/0x370 [ 724.252814][T16887] call_seq_client_ctl+0xa3/0x130 [ 724.252834][T16887] snd_seq_kernel_client_ctl+0x77/0xd0 [ 724.252853][T16887] alloc_seq_queue+0xdb/0x180 [ 724.252872][T16887] ? __pfx_alloc_seq_queue+0x10/0x10 [ 724.252899][T16887] ? find_held_lock+0x2b/0x80 [ 724.252918][T16887] ? mark_held_locks+0x40/0x70 [ 724.252941][T16887] snd_seq_oss_open+0x2b2/0xa10 [ 724.252964][T16887] odev_open+0x6f/0x90 [ 724.252980][T16887] ? __pfx_odev_open+0x10/0x10 [ 724.252997][T16887] soundcore_open+0x2e3/0x5a0 [ 724.253017][T16887] ? __pfx_soundcore_open+0x10/0x10 [ 724.253036][T16887] chrdev_open+0x234/0x6a0 [ 724.253058][T16887] ? __pfx_apparmor_file_open+0x10/0x10 [ 724.253082][T16887] ? __pfx_chrdev_open+0x10/0x10 [ 724.253105][T16887] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 724.253125][T16887] do_dentry_open+0x6ab/0x14d0 [ 724.253147][T16887] ? __pfx_chrdev_open+0x10/0x10 [ 724.253174][T16887] vfs_open+0x82/0x3f0 [ 724.253192][T16887] path_openat+0x2873/0x4280 [ 724.253223][T16887] ? __pfx_path_openat+0x10/0x10 [ 724.253250][T16887] do_file_open+0x20e/0x430 [ 724.253274][T16887] ? __pfx_do_file_open+0x10/0x10 [ 724.253310][T16887] ? alloc_fd+0x471/0x7a0 [ 724.253333][T16887] ? do_getname+0x191/0x390 [ 724.253360][T16887] do_sys_openat2+0x10f/0x1e0 [ 724.253378][T16887] ? __pfx_do_sys_openat2+0x10/0x10 [ 724.253404][T16887] __x64_sys_openat+0x12d/0x210 [ 724.253424][T16887] ? __pfx___x64_sys_openat+0x10/0x10 [ 724.253450][T16887] do_syscall_64+0x115/0x840 [ 724.253472][T16887] ? clear_bhb_loop+0x40/0x90 [ 724.253492][T16887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.253508][T16887] RIP: 0033:0x7f8e3e79de59 [ 724.253522][T16887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.253538][T16887] RSP: 002b:00007f8e3f5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 724.253554][T16887] RAX: ffffffffffffffda RBX: 00007f8e3ea25fa0 RCX: 00007f8e3e79de59 [ 724.253565][T16887] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 724.253576][T16887] RBP: 00007f8e3e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 724.253586][T16887] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000 [ 724.253595][T16887] R13: 00007f8e3ea26038 R14: 00007f8e3ea25fa0 R15: 00007ffcd56631e8 [ 724.253616][T16887] [ 725.810541][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 726.124932][T16927] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.4.2331: iget: checksum invalid [ 726.237233][T16927] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 726.328058][T16927] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 726.434087][T16927] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 728.227586][T16967] FAULT_INJECTION: forcing a failure. [ 728.227586][T16967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.276637][T16967] CPU: 0 UID: 0 PID: 16967 Comm: syz.5.2342 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.276667][T16967] Tainted: [L]=SOFTLOCKUP [ 728.276673][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.276683][T16967] Call Trace: [ 728.276689][T16967] [ 728.276696][T16967] dump_stack_lvl+0x100/0x190 [ 728.276719][T16967] should_fail_ex.cold+0x5/0xa [ 728.276740][T16967] _copy_to_iter+0x1f3/0x1720 [ 728.276764][T16967] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 728.276793][T16967] ? __pfx__copy_to_iter+0x10/0x10 [ 728.276818][T16967] ? __skb_recv_datagram+0x1b2/0x220 [ 728.276845][T16967] simple_copy_to_iter+0x46/0x90 [ 728.276869][T16967] __skb_datagram_iter+0x129/0x900 [ 728.276891][T16967] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 728.276916][T16967] ? skb_recv_datagram+0x88/0xc0 [ 728.276941][T16967] skb_copy_datagram_iter+0xa1/0x250 [ 728.276967][T16967] netlink_recvmsg+0x27e/0xa90 [ 728.276992][T16967] ? __pfx_netlink_recvmsg+0x10/0x10 [ 728.277012][T16967] ? __fget_files+0x215/0x3d0 [ 728.277034][T16967] ? __fget_files+0x215/0x3d0 [ 728.277059][T16967] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 728.277084][T16967] ? __pfx_netlink_recvmsg+0x10/0x10 [ 728.277106][T16967] sock_recvmsg+0x1d5/0x220 [ 728.277129][T16967] __sys_recvfrom+0x1f2/0x2f0 [ 728.277146][T16967] ? __pfx___sys_recvfrom+0x10/0x10 [ 728.277168][T16967] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 728.277195][T16967] ? xfd_validate_state+0x129/0x190 [ 728.277219][T16967] __x64_sys_recvfrom+0xe0/0x1c0 [ 728.277235][T16967] ? do_syscall_64+0x90/0x840 [ 728.277258][T16967] ? lockdep_hardirqs_on+0x78/0x100 [ 728.277281][T16967] do_syscall_64+0x115/0x840 [ 728.277303][T16967] ? clear_bhb_loop+0x40/0x90 [ 728.277322][T16967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.277339][T16967] RIP: 0033:0x7efda035e68e [ 728.277358][T16967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 728.277375][T16967] RSP: 002b:00007efda1264e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 728.277394][T16967] RAX: ffffffffffffffda RBX: 00007efda12666c0 RCX: 00007efda035e68e [ 728.277405][T16967] RDX: 0000000000001000 RSI: 00007efda1265000 RDI: 0000000000000002 [ 728.277415][T16967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 728.277424][T16967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.277433][T16967] R13: 00007efda1264f58 R14: 00007efda1265000 R15: 0000000000000000 [ 728.277452][T16967] [ 729.279402][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2344'. [ 730.175055][T16983] FAULT_INJECTION: forcing a failure. [ 730.175055][T16983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 730.279950][T16983] CPU: 0 UID: 0 PID: 16983 Comm: syz.5.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.279979][T16983] Tainted: [L]=SOFTLOCKUP [ 730.279985][T16983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 730.279995][T16983] Call Trace: [ 730.280001][T16983] [ 730.280008][T16983] dump_stack_lvl+0x100/0x190 [ 730.280031][T16983] should_fail_ex.cold+0x5/0xa [ 730.280046][T16983] ? prepare_alloc_pages+0x16d/0x5f0 [ 730.280067][T16983] should_fail_alloc_page+0xeb/0x140 [ 730.280088][T16983] prepare_alloc_pages+0x1f0/0x5f0 [ 730.280111][T16983] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 730.280134][T16983] ? find_held_lock+0x2b/0x80 [ 730.280150][T16983] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 730.280174][T16983] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 730.280198][T16983] ? rcu_is_watching+0x12/0xc0 [ 730.280215][T16983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 730.280230][T16983] ? lockdep_hardirqs_on+0x78/0x100 [ 730.280256][T16983] ? rcu_is_watching+0x12/0xc0 [ 730.280271][T16983] ? trace_sched_exit_tp+0x120/0x160 [ 730.280296][T16983] ? __lock_acquire+0x49f/0x1a40 [ 730.280319][T16983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 730.280343][T16983] ? policy_nodemask+0xed/0x4f0 [ 730.280363][T16983] alloc_pages_mpol+0x1fb/0x540 [ 730.280383][T16983] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 730.280407][T16983] alloc_pages_noprof+0x1a/0x160 [ 730.280429][T16983] anon_pipe_write+0x23e/0x1d90 [ 730.280454][T16983] ? __pfx_aa_file_perm+0x10/0x10 [ 730.280478][T16983] ? __pfx_anon_pipe_write+0x10/0x10 [ 730.280499][T16983] ? __pfx___might_resched+0x10/0x10 [ 730.280519][T16983] ? get_pid_task+0xfc/0x250 [ 730.280543][T16983] ? bpf_lsm_file_permission+0x9/0x10 [ 730.280566][T16983] ? security_file_permission+0x76/0x210 [ 730.280584][T16983] ? rw_verify_area+0xce/0x6d0 [ 730.280604][T16983] vfs_write+0x6ac/0x1050 [ 730.280625][T16983] ? __pfx_anon_pipe_write+0x10/0x10 [ 730.280649][T16983] ? __pfx_vfs_write+0x10/0x10 [ 730.280668][T16983] ? find_held_lock+0x2b/0x80 [ 730.280696][T16983] ksys_write+0x1f8/0x250 [ 730.280716][T16983] ? __pfx_ksys_write+0x10/0x10 [ 730.280743][T16983] do_syscall_64+0x115/0x840 [ 730.280764][T16983] ? clear_bhb_loop+0x40/0x90 [ 730.280782][T16983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.280797][T16983] RIP: 0033:0x7efda039de59 [ 730.280812][T16983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.280826][T16983] RSP: 002b:00007efda1224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 730.280842][T16983] RAX: ffffffffffffffda RBX: 00007efda0626180 RCX: 00007efda039de59 [ 730.280853][T16983] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 730.280862][T16983] RBP: 00007efda0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 730.280872][T16983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.280890][T16983] R13: 00007efda0626218 R14: 00007efda0626180 R15: 00007fff30b61fa8 [ 730.280910][T16983] [ 730.645467][T16989] random: crng reseeded on system resumption [ 731.244568][T16997] netlink: 'syz.2.2348': attribute type 23 has an invalid length. [ 731.350522][T16994] nvme_fabrics: missing parameter 'transport=%s' [ 731.370220][T16994] nvme_fabrics: missing parameter 'nqn=%s' [ 732.690758][T16847] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 733.119965][T17020] FAULT_INJECTION: forcing a failure. [ 733.119965][T17020] name failslab, interval 1, probability 0, space 0, times 0 [ 733.166399][T17020] CPU: 0 UID: 0 PID: 17020 Comm: syz.2.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.166427][T17020] Tainted: [L]=SOFTLOCKUP [ 733.166433][T17020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 733.166444][T17020] Call Trace: [ 733.166450][T17020] [ 733.166457][T17020] dump_stack_lvl+0x100/0x190 [ 733.166479][T17020] should_fail_ex.cold+0x5/0xa [ 733.166519][T17020] should_failslab+0xc2/0x120 [ 733.166540][T17020] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 733.166560][T17020] ? sock_alloc_inode+0x26/0x2c0 [ 733.166581][T17020] ? __pfx_sock_alloc_inode+0x10/0x10 [ 733.166602][T17020] sock_alloc_inode+0x26/0x2c0 [ 733.166620][T17020] ? __pfx_sock_alloc_inode+0x10/0x10 [ 733.166638][T17020] alloc_inode+0x68/0x250 [ 733.166657][T17020] sock_alloc+0x44/0x280 [ 733.166679][T17020] ? security_socket_create+0x7f/0x250 [ 733.166705][T17020] __sock_create+0xc2/0x860 [ 733.166730][T17020] __sys_socket+0x14d/0x260 [ 733.166752][T17020] ? __pfx___sys_socket+0x10/0x10 [ 733.166779][T17020] __x64_sys_socket+0x72/0xb0 [ 733.166800][T17020] ? lockdep_hardirqs_on+0x78/0x100 [ 733.166823][T17020] do_syscall_64+0x115/0x840 [ 733.166844][T17020] ? clear_bhb_loop+0x40/0x90 [ 733.166862][T17020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.166878][T17020] RIP: 0033:0x7f8e3e79de59 [ 733.166892][T17020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.166907][T17020] RSP: 002b:00007f8e3f5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 733.166922][T17020] RAX: ffffffffffffffda RBX: 00007f8e3ea25fa0 RCX: 00007f8e3e79de59 [ 733.166932][T17020] RDX: 0000000000000004 RSI: 0000000000000006 RDI: 000000000000001a [ 733.166941][T17020] RBP: 00007f8e3e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 733.166951][T17020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.166960][T17020] R13: 00007f8e3ea26038 R14: 00007f8e3ea25fa0 R15: 00007ffcd56631e8 [ 733.166980][T17020] [ 733.166990][T17020] socket: no more sockets [ 734.699050][T17038] FAULT_INJECTION: forcing a failure. [ 734.699050][T17038] name failslab, interval 1, probability 0, space 0, times 0 [ 734.778730][T17038] CPU: 0 UID: 0 PID: 17038 Comm: syz.2.2357 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.778774][T17038] Tainted: [L]=SOFTLOCKUP [ 734.778784][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 734.778802][T17038] Call Trace: [ 734.778812][T17038] [ 734.778823][T17038] dump_stack_lvl+0x100/0x190 [ 734.778859][T17038] should_fail_ex.cold+0x5/0xa [ 734.778892][T17038] should_failslab+0xc2/0x120 [ 734.778928][T17038] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 734.778960][T17038] ? __pfx___handle_mm_fault+0x10/0x10 [ 734.779004][T17038] ? sock_alloc_inode+0x26/0x2c0 [ 734.779045][T17038] ? __pfx_sock_alloc_inode+0x10/0x10 [ 734.779084][T17038] sock_alloc_inode+0x26/0x2c0 [ 734.779120][T17038] ? __pfx_sock_alloc_inode+0x10/0x10 [ 734.779156][T17038] alloc_inode+0x68/0x250 [ 734.779190][T17038] sock_alloc+0x44/0x280 [ 734.779221][T17038] ? security_socket_create+0x7f/0x250 [ 734.779269][T17038] __sock_create+0xc2/0x860 [ 734.779317][T17038] __sys_socket+0x14d/0x260 [ 734.779357][T17038] ? exc_page_fault+0x6f/0xd0 [ 734.779399][T17038] ? __pfx___sys_socket+0x10/0x10 [ 734.779451][T17038] __x64_sys_socket+0x72/0xb0 [ 734.779471][T17038] ? lockdep_hardirqs_on+0x78/0x100 [ 734.779490][T17038] do_syscall_64+0x115/0x840 [ 734.779510][T17038] ? clear_bhb_loop+0x40/0x90 [ 734.779529][T17038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.779544][T17038] RIP: 0033:0x7f8e3e79f6c7 [ 734.779557][T17038] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.779572][T17038] RSP: 002b:00007f8e3f5fcf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 734.779586][T17038] RAX: ffffffffffffffda RBX: 00007f8e3ea25fa0 RCX: 00007f8e3e79f6c7 [ 734.779596][T17038] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 734.779605][T17038] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 734.779613][T17038] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000001 [ 734.779622][T17038] R13: 00007f8e3ea26038 R14: 00007f8e3ea25fa0 R15: 00007ffcd56631e8 [ 734.779640][T17038] [ 734.779650][T17038] socket: no more sockets [ 735.481526][T16847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.554416][T16847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.618450][T16847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.707147][T11628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.738998][T11628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 736.344934][ T9278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.872605][ T9278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.227928][ T9278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.555600][ T9278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.582117][T17076] FAULT_INJECTION: forcing a failure. [ 737.582117][T17076] name failslab, interval 1, probability 0, space 0, times 0 [ 737.715962][T17076] CPU: 0 UID: 0 PID: 17076 Comm: syz.5.2366 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.715989][T17076] Tainted: [L]=SOFTLOCKUP [ 737.715995][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 737.716005][T17076] Call Trace: [ 737.716011][T17076] [ 737.716018][T17076] dump_stack_lvl+0x100/0x190 [ 737.716041][T17076] should_fail_ex.cold+0x5/0xa [ 737.716060][T17076] should_failslab+0xc2/0x120 [ 737.716080][T17076] __kmalloc_cache_noprof+0x91/0x6c0 [ 737.716109][T17076] ? snd_hrtimer_open+0x43/0xf0 [ 737.716137][T17076] ? __pfx_snd_hrtimer_open+0x10/0x10 [ 737.716161][T17076] snd_hrtimer_open+0x43/0xf0 [ 737.716193][T17076] snd_timer_open+0xbc3/0x1190 [ 737.716218][T17076] ? __pfx_snd_timer_open+0x10/0x10 [ 737.716242][T17076] ? kstrdup+0xb3/0xe0 [ 737.716260][T17076] snd_seq_timer_open+0x289/0x5c0 [ 737.716278][T17076] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 737.716296][T17076] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 737.716317][T17076] ? mark_held_locks+0x40/0x70 [ 737.716337][T17076] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 737.716361][T17076] queue_use+0xdc/0x1f0 [ 737.716383][T17076] snd_seq_queue_alloc+0x2e5/0x540 [ 737.716408][T17076] snd_seq_ioctl_create_queue+0xa9/0x370 [ 737.716428][T17076] call_seq_client_ctl+0xa3/0x130 [ 737.716449][T17076] snd_seq_kernel_client_ctl+0x77/0xd0 [ 737.716469][T17076] alloc_seq_queue+0xdb/0x180 [ 737.716488][T17076] ? __pfx_alloc_seq_queue+0x10/0x10 [ 737.716516][T17076] ? find_held_lock+0x2b/0x80 [ 737.716534][T17076] ? mark_held_locks+0x40/0x70 [ 737.716558][T17076] snd_seq_oss_open+0x2b2/0xa10 [ 737.716581][T17076] odev_open+0x6f/0x90 [ 737.716597][T17076] ? __pfx_odev_open+0x10/0x10 [ 737.716614][T17076] soundcore_open+0x2e3/0x5a0 [ 737.716635][T17076] ? __pfx_soundcore_open+0x10/0x10 [ 737.716653][T17076] chrdev_open+0x234/0x6a0 [ 737.716675][T17076] ? __pfx_apparmor_file_open+0x10/0x10 [ 737.716699][T17076] ? __pfx_chrdev_open+0x10/0x10 [ 737.716723][T17076] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 737.716743][T17076] do_dentry_open+0x6ab/0x14d0 [ 737.716764][T17076] ? __pfx_chrdev_open+0x10/0x10 [ 737.716791][T17076] vfs_open+0x82/0x3f0 [ 737.716810][T17076] path_openat+0x2873/0x4280 [ 737.716841][T17076] ? __pfx_path_openat+0x10/0x10 [ 737.716869][T17076] do_file_open+0x20e/0x430 [ 737.716893][T17076] ? __pfx_do_file_open+0x10/0x10 [ 737.716929][T17076] ? alloc_fd+0x471/0x7a0 [ 737.716952][T17076] ? do_getname+0x191/0x390 [ 737.716970][T17076] do_sys_openat2+0x10f/0x1e0 [ 737.716988][T17076] ? __pfx_do_sys_openat2+0x10/0x10 [ 737.717013][T17076] __x64_sys_openat+0x12d/0x210 [ 737.717031][T17076] ? __pfx___x64_sys_openat+0x10/0x10 [ 737.717056][T17076] do_syscall_64+0x115/0x840 [ 737.717078][T17076] ? clear_bhb_loop+0x40/0x90 [ 737.717097][T17076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.717113][T17076] RIP: 0033:0x7efda039de59 [ 737.717128][T17076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.717144][T17076] RSP: 002b:00007efda1266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 737.717160][T17076] RAX: ffffffffffffffda RBX: 00007efda0625fa0 RCX: 00007efda039de59 [ 737.717177][T17076] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 737.717187][T17076] RBP: 00007efda0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 737.717197][T17076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.717207][T17076] R13: 00007efda0626038 R14: 00007efda0625fa0 R15: 00007fff30b61fa8 [ 737.717228][T17076] [ 738.570586][T11628] Bluetooth: hci5: command tx timeout [ 739.640378][T17047] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.689274][T17047] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.734211][T17047] bridge_slave_0: entered allmulticast mode [ 739.777274][T17047] bridge_slave_0: entered promiscuous mode [ 739.960100][ T9278] bridge_slave_1: left allmulticast mode [ 739.987315][ T9278] bridge_slave_1: left promiscuous mode [ 740.020854][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.087419][ T9278] bridge_slave_0: left allmulticast mode [ 740.115708][ T9278] bridge_slave_0: left promiscuous mode [ 740.154947][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.577621][T17119] FAULT_INJECTION: forcing a failure. [ 740.577621][T17119] name failslab, interval 1, probability 0, space 0, times 0 [ 740.602281][ T5626] Bluetooth: hci5: command tx timeout [ 740.654549][T17119] CPU: 0 UID: 0 PID: 17119 Comm: syz.4.2371 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.654577][T17119] Tainted: [L]=SOFTLOCKUP [ 740.654583][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 740.654593][T17119] Call Trace: [ 740.654599][T17119] [ 740.654605][T17119] dump_stack_lvl+0x100/0x190 [ 740.654628][T17119] should_fail_ex.cold+0x5/0xa [ 740.654648][T17119] should_failslab+0xc2/0x120 [ 740.654667][T17119] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 740.654687][T17119] ? __kasan_kmalloc+0xaa/0xb0 [ 740.654710][T17119] ? snd_timer_instance_new+0x65/0x350 [ 740.654735][T17119] kstrdup+0x51/0xe0 [ 740.654752][T17119] snd_timer_instance_new+0x65/0x350 [ 740.654774][T17119] snd_seq_timer_open+0x1d4/0x5c0 [ 740.654798][T17119] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 740.654816][T17119] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 740.654837][T17119] ? mark_held_locks+0x40/0x70 [ 740.654858][T17119] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 740.654881][T17119] queue_use+0xdc/0x1f0 [ 740.654903][T17119] snd_seq_queue_alloc+0x2e5/0x540 [ 740.654928][T17119] snd_seq_ioctl_create_queue+0xa9/0x370 [ 740.654948][T17119] call_seq_client_ctl+0xa3/0x130 [ 740.654969][T17119] snd_seq_kernel_client_ctl+0x77/0xd0 [ 740.654989][T17119] alloc_seq_queue+0xdb/0x180 [ 740.655008][T17119] ? __pfx_alloc_seq_queue+0x10/0x10 [ 740.655036][T17119] ? find_held_lock+0x2b/0x80 [ 740.655054][T17119] ? mark_held_locks+0x40/0x70 [ 740.655077][T17119] snd_seq_oss_open+0x2b2/0xa10 [ 740.655100][T17119] odev_open+0x6f/0x90 [ 740.655117][T17119] ? __pfx_odev_open+0x10/0x10 [ 740.655134][T17119] soundcore_open+0x2e3/0x5a0 [ 740.655154][T17119] ? __pfx_soundcore_open+0x10/0x10 [ 740.655172][T17119] chrdev_open+0x234/0x6a0 [ 740.655194][T17119] ? __pfx_apparmor_file_open+0x10/0x10 [ 740.655218][T17119] ? __pfx_chrdev_open+0x10/0x10 [ 740.655241][T17119] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 740.655261][T17119] do_dentry_open+0x6ab/0x14d0 [ 740.655284][T17119] ? __pfx_chrdev_open+0x10/0x10 [ 740.655311][T17119] vfs_open+0x82/0x3f0 [ 740.655330][T17119] path_openat+0x2873/0x4280 [ 740.655361][T17119] ? __pfx_path_openat+0x10/0x10 [ 740.655389][T17119] do_file_open+0x20e/0x430 [ 740.655412][T17119] ? __pfx_do_file_open+0x10/0x10 [ 740.655448][T17119] ? alloc_fd+0x471/0x7a0 [ 740.655471][T17119] ? do_getname+0x191/0x390 [ 740.655489][T17119] do_sys_openat2+0x10f/0x1e0 [ 740.655506][T17119] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.655531][T17119] __x64_sys_openat+0x12d/0x210 [ 740.655549][T17119] ? __pfx___x64_sys_openat+0x10/0x10 [ 740.655575][T17119] do_syscall_64+0x115/0x840 [ 740.655596][T17119] ? clear_bhb_loop+0x40/0x90 [ 740.655614][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.655630][T17119] RIP: 0033:0x7f5b6819de59 [ 740.655645][T17119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.655659][T17119] RSP: 002b:00007f5b690fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 740.655675][T17119] RAX: ffffffffffffffda RBX: 00007f5b68425fa0 RCX: 00007f5b6819de59 [ 740.655685][T17119] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 740.655695][T17119] RBP: 00007f5b68233e6f R08: 0000000000000000 R09: 0000000000000000 [ 740.655705][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.655714][T17119] R13: 00007f5b68426038 R14: 00007f5b68425fa0 R15: 00007ffd8c1f5078 [ 740.655735][T17119] [ 741.487984][ T9278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.508946][ T9278] bond0 (unregistering): Released all slaves [ 741.552298][T17047] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.586977][T17047] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.610278][T17047] bridge_slave_1: entered allmulticast mode [ 741.640413][T17047] bridge_slave_1: entered promiscuous mode [ 741.672956][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 741.929520][T17047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.088227][T17047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.344987][ T9278] hsr_slave_0: left promiscuous mode [ 742.393553][ T9278] hsr_slave_1: left promiscuous mode [ 742.495123][ T9278] veth1_macvtap: left promiscuous mode [ 742.525308][ T9278] veth0_macvtap: left promiscuous mode [ 742.558424][ T9278] veth1_vlan: left promiscuous mode [ 742.584407][ T9278] veth0_vlan: left promiscuous mode [ 742.668902][ T5626] Bluetooth: hci5: command tx timeout [ 743.520647][ T9278] team0 (unregistering): Port device team_slave_1 removed [ 743.574047][ T9278] team0 (unregistering): Port device team_slave_0 removed [ 743.985970][T17047] team0: Port device team_slave_0 added [ 744.160696][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 744.195548][T17047] team0: Port device team_slave_1 added [ 744.373797][T17047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.406951][T17047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.485733][T17047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.553707][T17047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.595687][T17047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.749278][ T5626] Bluetooth: hci5: command tx timeout [ 744.756484][T17047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.751289][T17047] hsr_slave_0: entered promiscuous mode [ 745.773929][T17047] hsr_slave_1: entered promiscuous mode [ 745.820058][T17047] debugfs: 'hsr0' already exists in 'hsr' [ 745.830813][T17047] Cannot create hsr debugfs directory [ 745.916639][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 746.525661][T17198] FAULT_INJECTION: forcing a failure. [ 746.525661][T17198] name failslab, interval 1, probability 0, space 0, times 0 [ 746.606880][T17198] CPU: 0 UID: 0 PID: 17198 Comm: syz.2.2380 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.606907][T17198] Tainted: [L]=SOFTLOCKUP [ 746.606913][T17198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.606923][T17198] Call Trace: [ 746.606929][T17198] [ 746.606935][T17198] dump_stack_lvl+0x100/0x190 [ 746.606994][T17198] should_fail_ex.cold+0x5/0xa [ 746.607023][T17198] should_failslab+0xc2/0x120 [ 746.607054][T17198] __kmalloc_cache_noprof+0x91/0x6c0 [ 746.607084][T17198] ? snd_seq_oss_writeq_new+0xb5/0x2b0 [ 746.607126][T17198] snd_seq_oss_writeq_new+0xb5/0x2b0 [ 746.607144][T17198] ? __pfx_snd_seq_oss_writeq_new+0x10/0x10 [ 746.607160][T17198] ? trace_kmalloc+0xeb/0x110 [ 746.607183][T17198] ? lockdep_init_map_type+0x5c/0x250 [ 746.607217][T17198] ? __raw_spin_lock_init+0x3a/0x110 [ 746.607241][T17198] snd_seq_oss_open+0x7bc/0xa10 [ 746.607265][T17198] odev_open+0x6f/0x90 [ 746.607282][T17198] ? __pfx_odev_open+0x10/0x10 [ 746.607299][T17198] soundcore_open+0x2e3/0x5a0 [ 746.607324][T17198] ? __pfx_soundcore_open+0x10/0x10 [ 746.607342][T17198] chrdev_open+0x234/0x6a0 [ 746.607371][T17198] ? __pfx_apparmor_file_open+0x10/0x10 [ 746.607410][T17198] ? __pfx_chrdev_open+0x10/0x10 [ 746.607434][T17198] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 746.607458][T17198] do_dentry_open+0x6ab/0x14d0 [ 746.607480][T17198] ? __pfx_chrdev_open+0x10/0x10 [ 746.607507][T17198] vfs_open+0x82/0x3f0 [ 746.607527][T17198] path_openat+0x2873/0x4280 [ 746.607557][T17198] ? __pfx_path_openat+0x10/0x10 [ 746.607585][T17198] do_file_open+0x20e/0x430 [ 746.607609][T17198] ? __pfx_do_file_open+0x10/0x10 [ 746.607644][T17198] ? alloc_fd+0x471/0x7a0 [ 746.607670][T17198] ? do_getname+0x191/0x390 [ 746.607689][T17198] do_sys_openat2+0x10f/0x1e0 [ 746.607707][T17198] ? __pfx_do_sys_openat2+0x10/0x10 [ 746.607732][T17198] __x64_sys_openat+0x12d/0x210 [ 746.607750][T17198] ? __pfx___x64_sys_openat+0x10/0x10 [ 746.607776][T17198] do_syscall_64+0x115/0x840 [ 746.607815][T17198] ? clear_bhb_loop+0x40/0x90 [ 746.607841][T17198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.607857][T17198] RIP: 0033:0x7f8e3e79de59 [ 746.607871][T17198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.607887][T17198] RSP: 002b:00007f8e3f5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 746.607902][T17198] RAX: ffffffffffffffda RBX: 00007f8e3ea25fa0 RCX: 00007f8e3e79de59 [ 746.607912][T17198] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 746.607922][T17198] RBP: 00007f8e3e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 746.607932][T17198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.607942][T17198] R13: 00007f8e3ea26038 R14: 00007f8e3ea25fa0 R15: 00007ffcd56631e8 [ 746.607963][T17198] [ 746.998962][ T5626] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 747.814478][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2385'. [ 747.922212][ T30] audit: type=1800 audit(2147483786.492:10): pid=17227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2386" name="version" dev="configfs" ino=80118 res=0 errno=0 [ 748.034147][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.042514][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.661290][T17047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 749.706386][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.751370][T17047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 749.802574][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.846970][T17047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 749.906953][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.947040][T17047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 750.020009][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.393050][T17263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 750.408506][T17263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 750.422334][T17263] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 750.493929][T17263] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 750.516890][T17263] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 750.553923][T17263] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 750.590294][T17263] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 750.617131][T17263] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 750.652081][T17263] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 751.002789][T17047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.086315][T17047] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.192313][T10646] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.199605][T10646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.297618][T10646] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.304826][T10646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.948723][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 752.431910][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 752.508749][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 752.669339][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 753.597628][T17047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.104223][T17047] veth0_vlan: entered promiscuous mode [ 754.432223][T17047] veth1_vlan: entered promiscuous mode [ 754.509205][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 754.597629][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 754.697931][T17047] veth0_macvtap: entered promiscuous mode [ 754.750105][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 754.770294][T17047] veth1_macvtap: entered promiscuous mode [ 754.892131][T17047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.991877][T17047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.059522][T17353] bond0: option packets_per_slave: invalid value ( Xµn) [ 755.105172][T17353] bond0: option packets_per_slave: allowed values 0 - 65535 [ 755.198937][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.234273][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.294216][T17349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 755.324979][T17349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 755.353440][T17349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 755.384538][T17349] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 755.414443][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.463728][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.150585][ T9278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.214638][ T9278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.362515][ T9278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.416519][ T9278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.438510][T17391] random: crng reseeded on system resumption [ 756.746744][T17398] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 756.757045][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 757.389082][T11628] Bluetooth: hci4: command 0x0c1a tx timeout [ 757.395426][T11628] Bluetooth: hci0: command 0x0c1a tx timeout [ 757.401549][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 758.363600][T17432] Format for adding new port is "id [perm_addr]" (uint MAC). [ 758.897847][ T30] audit: type=1800 audit(2147483797.462:11): pid=17441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2411" name="version" dev="configfs" ino=81501 res=0 errno=0 [ 763.746654][T17515] Â: entered promiscuous mode [ 769.859407][T17606] FAULT_INJECTION: forcing a failure. [ 769.859407][T17606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.905585][T17606] CPU: 0 UID: 0 PID: 17606 Comm: syz.1.2444 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.905611][T17606] Tainted: [L]=SOFTLOCKUP [ 769.905617][T17606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 769.905626][T17606] Call Trace: [ 769.905632][T17606] [ 769.905640][T17606] dump_stack_lvl+0x100/0x190 [ 769.905662][T17606] should_fail_ex.cold+0x5/0xa [ 769.905679][T17606] _copy_to_iter+0x1f3/0x1720 [ 769.905718][T17606] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 769.905754][T17606] ? __pfx__copy_to_iter+0x10/0x10 [ 769.905777][T17606] ? __skb_recv_datagram+0x1b2/0x220 [ 769.905805][T17606] simple_copy_to_iter+0x46/0x90 [ 769.905826][T17606] __skb_datagram_iter+0x129/0x900 [ 769.905847][T17606] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 769.905871][T17606] ? skb_recv_datagram+0x88/0xc0 [ 769.905895][T17606] skb_copy_datagram_iter+0xa1/0x250 [ 769.905918][T17606] netlink_recvmsg+0x27e/0xa90 [ 769.905950][T17606] ? __pfx_netlink_recvmsg+0x10/0x10 [ 769.905969][T17606] ? __fget_files+0x215/0x3d0 [ 769.905991][T17606] ? __fget_files+0x215/0x3d0 [ 769.906013][T17606] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 769.906043][T17606] ? __pfx_netlink_recvmsg+0x10/0x10 [ 769.906065][T17606] sock_recvmsg+0x1d5/0x220 [ 769.906090][T17606] __sys_recvfrom+0x1f2/0x2f0 [ 769.906107][T17606] ? __pfx___sys_recvfrom+0x10/0x10 [ 769.906128][T17606] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 769.906159][T17606] __x64_sys_recvfrom+0xe0/0x1c0 [ 769.906174][T17606] ? do_syscall_64+0x90/0x840 [ 769.906196][T17606] ? lockdep_hardirqs_on+0x78/0x100 [ 769.906218][T17606] do_syscall_64+0x115/0x840 [ 769.906238][T17606] ? clear_bhb_loop+0x40/0x90 [ 769.906257][T17606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.906272][T17606] RIP: 0033:0x7f7ef415e68e [ 769.906287][T17606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 769.906302][T17606] RSP: 002b:00007f7ef5067e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 769.906317][T17606] RAX: ffffffffffffffda RBX: 00007f7ef50696c0 RCX: 00007f7ef415e68e [ 769.906327][T17606] RDX: 0000000000001000 RSI: 00007f7ef5068000 RDI: 0000000000000002 [ 769.906337][T17606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 769.906346][T17606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 769.906356][T17606] R13: 00007f7ef5067f58 R14: 00007f7ef5068000 R15: 0000000000000000 [ 769.906375][T17606] [ 770.474675][T10632] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 4 with max blocks 2 with error 117 [ 770.503872][T10632] EXT4-fs (sda1): This should not happen!! Data will be lost [ 770.503872][T10632] [ 770.906713][T17611] serio: Serial port pty173 [ 772.042932][T16847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 772.062753][T16847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 772.071817][T16847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 772.079890][T16847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 772.090177][T16847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 772.101923][T17635] Â: entered promiscuous mode [ 773.038991][T17665] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2455'. [ 774.022259][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.047573][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.072074][T17639] bridge_slave_0: entered allmulticast mode [ 774.101388][T17639] bridge_slave_0: entered promiscuous mode [ 774.128277][T17639] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.158058][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.177414][T17639] bridge_slave_1: entered allmulticast mode [ 774.183713][T17415] Bluetooth: hci3: command tx timeout [ 774.199059][T17639] bridge_slave_1: entered promiscuous mode [ 774.367243][T17639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.455496][T17639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.733069][T17639] team0: Port device team_slave_0 added [ 774.769329][T17639] team0: Port device team_slave_1 added [ 774.908269][T17639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.939846][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.032505][T17639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.096869][T17639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.124037][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.215788][T17639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.480165][T17639] hsr_slave_0: entered promiscuous mode [ 775.513390][T17639] hsr_slave_1: entered promiscuous mode [ 775.532169][T17639] debugfs: 'hsr0' already exists in 'hsr' [ 775.567285][T17639] Cannot create hsr debugfs directory [ 776.024535][T17708] FAULT_INJECTION: forcing a failure. [ 776.024535][T17708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.127803][T17708] CPU: 0 UID: 0 PID: 17708 Comm: syz.4.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.127830][T17708] Tainted: [L]=SOFTLOCKUP [ 776.127836][T17708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 776.127846][T17708] Call Trace: [ 776.127853][T17708] [ 776.127859][T17708] dump_stack_lvl+0x100/0x190 [ 776.127882][T17708] should_fail_ex.cold+0x5/0xa [ 776.127901][T17708] _copy_to_iter+0x1f3/0x1720 [ 776.127924][T17708] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 776.127949][T17708] ? __pfx__copy_to_iter+0x10/0x10 [ 776.127971][T17708] ? __skb_recv_datagram+0x1b2/0x220 [ 776.127997][T17708] simple_copy_to_iter+0x46/0x90 [ 776.128020][T17708] __skb_datagram_iter+0x129/0x900 [ 776.128042][T17708] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 776.128065][T17708] ? skb_recv_datagram+0x88/0xc0 [ 776.128090][T17708] skb_copy_datagram_iter+0xa1/0x250 [ 776.128114][T17708] netlink_recvmsg+0x27e/0xa90 [ 776.128137][T17708] ? __pfx_netlink_recvmsg+0x10/0x10 [ 776.128155][T17708] ? __fget_files+0x215/0x3d0 [ 776.128176][T17708] ? __fget_files+0x215/0x3d0 [ 776.128199][T17708] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 776.128223][T17708] ? __pfx_netlink_recvmsg+0x10/0x10 [ 776.128244][T17708] sock_recvmsg+0x1d5/0x220 [ 776.128265][T17708] __sys_recvfrom+0x1f2/0x2f0 [ 776.128282][T17708] ? __pfx___sys_recvfrom+0x10/0x10 [ 776.128302][T17708] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 776.128332][T17708] __x64_sys_recvfrom+0xe0/0x1c0 [ 776.128347][T17708] ? do_syscall_64+0x90/0x840 [ 776.128369][T17708] ? lockdep_hardirqs_on+0x78/0x100 [ 776.128390][T17708] do_syscall_64+0x115/0x840 [ 776.128411][T17708] ? clear_bhb_loop+0x40/0x90 [ 776.128430][T17708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.128447][T17708] RIP: 0033:0x7f5b6815e68e [ 776.128461][T17708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 776.128479][T17708] RSP: 002b:00007f5b690dae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 776.128495][T17708] RAX: ffffffffffffffda RBX: 00007f5b690dc6c0 RCX: 00007f5b6815e68e [ 776.128505][T17708] RDX: 0000000000001000 RSI: 00007f5b690db000 RDI: 0000000000000002 [ 776.128515][T17708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 776.128525][T17708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.128534][T17708] R13: 00007f5b690daf58 R14: 00007f5b690db000 R15: 0000000000000000 [ 776.128553][T17708] [ 776.555740][T17415] Bluetooth: hci3: command tx timeout [ 777.117585][T17726] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.4.2466: iget: checksum invalid [ 777.161022][T17726] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 777.198952][T17726] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 777.260930][T17726] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 777.396854][T17639] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 777.429939][T17736] random: crng reseeded on system resumption [ 777.446523][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.469691][T17736] Restarting kernel threads ... [ 777.477133][T17639] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 777.498526][T17736] Done restarting kernel threads. [ 777.506437][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.646201][T17639] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 777.702309][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.745637][T17639] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 777.804622][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.876751][T17741] bond0: no command found in slaves file - use +ifname or -ifname [ 778.003038][T17639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.042730][T17639] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.066620][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.074267][ T9278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.121924][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.129118][ T9278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.557235][T17415] Bluetooth: hci3: command tx timeout [ 779.082597][T17639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.757716][T17639] veth0_vlan: entered promiscuous mode [ 779.784341][T17639] veth1_vlan: entered promiscuous mode [ 779.880471][T17639] veth0_macvtap: entered promiscuous mode [ 779.972999][T17807] FAULT_INJECTION: forcing a failure. [ 779.972999][T17807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.028159][T17639] veth1_macvtap: entered promiscuous mode [ 780.036054][T17807] CPU: 0 UID: 0 PID: 17807 Comm: syz.4.2473 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.036078][T17807] Tainted: [L]=SOFTLOCKUP [ 780.036083][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.036092][T17807] Call Trace: [ 780.036098][T17807] [ 780.036104][T17807] dump_stack_lvl+0x100/0x190 [ 780.036125][T17807] should_fail_ex.cold+0x5/0xa [ 780.036143][T17807] _copy_to_user+0x32/0xd0 [ 780.036163][T17807] put_itimerspec64+0xbd/0x1e0 [ 780.036202][T17807] ? __pfx_put_itimerspec64+0x10/0x10 [ 780.036221][T17807] ? lockdep_hardirqs_on+0x78/0x100 [ 780.036242][T17807] ? _raw_spin_unlock_irq+0x2e/0x50 [ 780.036261][T17807] ? do_timerfd_gettime+0x24b/0x3c0 [ 780.036287][T17807] __x64_sys_timerfd_gettime+0x142/0x180 [ 780.036306][T17807] ? __pfx___x64_sys_timerfd_gettime+0x10/0x10 [ 780.036324][T17807] ? ksys_write+0x1ac/0x250 [ 780.036351][T17807] do_syscall_64+0x115/0x840 [ 780.036371][T17807] ? clear_bhb_loop+0x40/0x90 [ 780.036389][T17807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.036404][T17807] RIP: 0033:0x7f5b6819de59 [ 780.036417][T17807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.036431][T17807] RSP: 002b:00007f5b690fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 780.036445][T17807] RAX: ffffffffffffffda RBX: 00007f5b68425fa0 RCX: 00007f5b6819de59 [ 780.036455][T17807] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 780.036464][T17807] RBP: 00007f5b690fd090 R08: 0000000000000000 R09: 0000000000000000 [ 780.036473][T17807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.036482][T17807] R13: 00007f5b68426038 R14: 00007f5b68425fa0 R15: 00007ffd8c1f5078 [ 780.036501][T17807] [ 780.237251][T17639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.247194][T17639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.298104][T10634] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.311656][T10634] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.322448][T10634] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.332352][T10634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.618149][T10646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.630802][T17415] Bluetooth: hci3: command tx timeout [ 780.649807][T10646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.790865][T17811] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 780.807070][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.816793][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.930936][T17812] FAULT_INJECTION: forcing a failure. [ 780.930936][T17812] name failslab, interval 1, probability 0, space 0, times 0 [ 781.096831][T17812] CPU: 0 UID: 0 PID: 17812 Comm: syz.4.2475 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.096858][T17812] Tainted: [L]=SOFTLOCKUP [ 781.096865][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.096875][T17812] Call Trace: [ 781.096881][T17812] [ 781.096887][T17812] dump_stack_lvl+0x100/0x190 [ 781.096911][T17812] should_fail_ex.cold+0x5/0xa [ 781.096929][T17812] should_failslab+0xc2/0x120 [ 781.096948][T17812] kmem_cache_alloc_noprof+0x91/0x6a0 [ 781.096974][T17812] ? net_alloc_generic+0x1e/0x70 [ 781.096993][T17812] ? copy_net_ns+0xe8/0x7c0 [ 781.097020][T17812] copy_net_ns+0xe8/0x7c0 [ 781.097037][T17812] ? copy_cgroup_ns+0x71/0x970 [ 781.097072][T17812] create_new_namespaces+0x3ea/0xac0 [ 781.097106][T17812] unshare_nsproxy_namespaces+0xf2/0x220 [ 781.097132][T17812] ksys_unshare+0x438/0xab0 [ 781.097156][T17812] ? __pfx_ksys_unshare+0x10/0x10 [ 781.097174][T17812] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 781.097198][T17812] ? syscall_user_dispatch+0x76/0x130 [ 781.097227][T17812] __x64_sys_unshare+0x31/0x40 [ 781.097243][T17812] do_syscall_64+0x115/0x840 [ 781.097266][T17812] ? clear_bhb_loop+0x40/0x90 [ 781.097284][T17812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.097300][T17812] RIP: 0033:0x7f5b6819de59 [ 781.097315][T17812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.097330][T17812] RSP: 002b:00007f5b690dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 781.097345][T17812] RAX: ffffffffffffffda RBX: 00007f5b68426090 RCX: 00007f5b6819de59 [ 781.097355][T17812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 781.097364][T17812] RBP: 00007f5b68233e6f R08: 0000000000000000 R09: 0000000000000000 [ 781.097373][T17812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.097382][T17812] R13: 00007f5b68426128 R14: 00007f5b68426090 R15: 00007ffd8c1f5078 [ 781.097402][T17812] [ 781.682977][T17830] nfsd: Unknown parameter '!{[@+#$/@' [ 781.757712][T17820] zswap: compressor not available [ 782.914153][T17845] FAULT_INJECTION: forcing a failure. [ 782.914153][T17845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.949005][T17845] CPU: 0 UID: 0 PID: 17845 Comm: syz.6.2482 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.949031][T17845] Tainted: [L]=SOFTLOCKUP [ 782.949037][T17845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 782.949046][T17845] Call Trace: [ 782.949051][T17845] [ 782.949057][T17845] dump_stack_lvl+0x100/0x190 [ 782.949081][T17845] should_fail_ex.cold+0x5/0xa [ 782.949097][T17845] _copy_to_user+0x32/0xd0 [ 782.949118][T17845] put_itimerspec64+0x13c/0x1e0 [ 782.949138][T17845] ? __pfx_put_itimerspec64+0x10/0x10 [ 782.949157][T17845] ? lockdep_hardirqs_on+0x78/0x100 [ 782.949178][T17845] ? _raw_spin_unlock_irq+0x2e/0x50 [ 782.949196][T17845] ? do_timerfd_gettime+0x24b/0x3c0 [ 782.949217][T17845] __x64_sys_timerfd_gettime+0x142/0x180 [ 782.949236][T17845] ? __pfx___x64_sys_timerfd_gettime+0x10/0x10 [ 782.949255][T17845] ? ksys_write+0x1ac/0x250 [ 782.949281][T17845] do_syscall_64+0x115/0x840 [ 782.949301][T17845] ? clear_bhb_loop+0x40/0x90 [ 782.949319][T17845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.949334][T17845] RIP: 0033:0x7f9f9559de59 [ 782.949347][T17845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.949360][T17845] RSP: 002b:00007f9f96396028 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 782.949375][T17845] RAX: ffffffffffffffda RBX: 00007f9f95825fa0 RCX: 00007f9f9559de59 [ 782.949384][T17845] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 782.949393][T17845] RBP: 00007f9f96396090 R08: 0000000000000000 R09: 0000000000000000 [ 782.949402][T17845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.949411][T17845] R13: 00007f9f95826038 R14: 00007f9f95825fa0 R15: 00007fff485093a8 [ 782.949430][T17845] [ 783.215959][T17847] hub 1-0:1.0: USB hub found [ 783.221414][T17847] hub 1-0:1.0: 1 port detected [ 783.234715][T17849] hub 1-0:1.0: USB hub found [ 783.239659][T17849] hub 1-0:1.0: 1 port detected [ 783.592321][T17853] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.6.2485: iget: checksum invalid [ 783.605767][T17853] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 783.616444][T17853] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 783.627419][T17853] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 786.931980][ T5714] Process accounting resumed [ 786.975078][T17884] Process accounting resumed [ 788.969363][T16847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 788.987638][T16847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 788.997221][T16847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 789.011261][T16847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 789.018944][T16847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 790.831482][T17957] netlink: 252 bytes leftover after parsing attributes in process `syz.6.2502'. [ 790.890799][T17957] unsupported nla_type 65535 [ 790.932000][T17957] netlink: 252 bytes leftover after parsing attributes in process `syz.6.2502'. [ 791.001239][T17924] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.032619][T17924] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.039921][T17953] nfsd: Unknown parameter '!{[@+#$/@' [ 791.075483][T17924] bridge_slave_0: entered allmulticast mode [ 791.109504][T17924] bridge_slave_0: entered promiscuous mode [ 791.131814][T16847] Bluetooth: hci6: command tx timeout [ 791.148984][T17924] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.157613][T17950] zswap: compressor not available [ 791.179714][T17924] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.207784][T17924] bridge_slave_1: entered allmulticast mode [ 791.243898][T17924] bridge_slave_1: entered promiscuous mode [ 791.362383][T17924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.426705][T17924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.539055][T17924] team0: Port device team_slave_0 added [ 791.580055][T17924] team0: Port device team_slave_1 added [ 791.678327][T17924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.700567][T17924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.791081][T17924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.854811][T17924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.879962][T17924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.963587][T17924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.225115][T17924] hsr_slave_0: entered promiscuous mode [ 792.253012][T17924] hsr_slave_1: entered promiscuous mode [ 792.273245][T17924] debugfs: 'hsr0' already exists in 'hsr' [ 792.292577][T17924] Cannot create hsr debugfs directory [ 793.112984][T17924] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 793.137745][T17924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.164961][T17924] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 793.200881][T16847] Bluetooth: hci6: command tx timeout [ 793.210095][T17924] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.245491][T17924] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 793.279785][T17924] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.331960][T17924] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 793.359462][T17924] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.674924][T17924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.732359][T17924] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.768992][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.776330][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.825730][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.832917][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.208627][T17924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.271020][T16847] Bluetooth: hci6: command tx timeout [ 795.685306][T18014] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 795.824480][T17924] veth0_vlan: entered promiscuous mode [ 795.864633][T17924] veth1_vlan: entered promiscuous mode [ 795.944790][T17924] veth0_macvtap: entered promiscuous mode [ 795.981693][T17924] veth1_macvtap: entered promiscuous mode [ 796.031948][T17924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.082731][T17924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.132635][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.164558][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.188278][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.211842][T18012] FAULT_INJECTION: forcing a failure. [ 796.211842][T18012] name failslab, interval 1, probability 0, space 0, times 0 [ 796.233617][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.267577][T18012] CPU: 0 UID: 0 PID: 18012 Comm: syz.5.2510 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.267605][T18012] Tainted: [L]=SOFTLOCKUP [ 796.267611][T18012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 796.267620][T18012] Call Trace: [ 796.267626][T18012] [ 796.267633][T18012] dump_stack_lvl+0x100/0x190 [ 796.267656][T18012] should_fail_ex.cold+0x5/0xa [ 796.267683][T18012] should_failslab+0xc2/0x120 [ 796.267703][T18012] kmem_cache_alloc_noprof+0x91/0x6a0 [ 796.267721][T18012] ? net_alloc_generic+0x1e/0x70 [ 796.267741][T18012] ? copy_net_ns+0xe8/0x7c0 [ 796.267762][T18012] copy_net_ns+0xe8/0x7c0 [ 796.267779][T18012] ? copy_cgroup_ns+0x71/0x970 [ 796.267802][T18012] create_new_namespaces+0x3ea/0xac0 [ 796.267831][T18012] unshare_nsproxy_namespaces+0xf2/0x220 [ 796.267857][T18012] ksys_unshare+0x438/0xab0 [ 796.267876][T18012] ? __pfx_ksys_unshare+0x10/0x10 [ 796.267900][T18012] __x64_sys_unshare+0x31/0x40 [ 796.267917][T18012] do_syscall_64+0x115/0x840 [ 796.267940][T18012] ? clear_bhb_loop+0x40/0x90 [ 796.267959][T18012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.267975][T18012] RIP: 0033:0x7efda039de59 [ 796.267990][T18012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.268005][T18012] RSP: 002b:00007efda1266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 796.268021][T18012] RAX: ffffffffffffffda RBX: 00007efda0625fa0 RCX: 00007efda039de59 [ 796.268031][T18012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 796.268040][T18012] RBP: 00007efda0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 796.268049][T18012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.268059][T18012] R13: 00007efda0626038 R14: 00007efda0625fa0 R15: 00007fff30b61fa8 [ 796.268078][T18012] [ 796.710040][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.746702][ T9278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.777643][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.823934][ T9278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.355214][T17415] Bluetooth: hci6: command tx timeout [ 797.361329][T17415] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 797.385532][T17415] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 797.408310][T17415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 797.426944][T17415] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 797.440451][T17415] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 797.686270][T18041] FAULT_INJECTION: forcing a failure. [ 797.686270][T18041] name failslab, interval 1, probability 0, space 0, times 0 [ 797.755837][T18041] CPU: 0 UID: 0 PID: 18041 Comm: syz.7.2517 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.755868][T18041] Tainted: [L]=SOFTLOCKUP [ 797.755874][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.755884][T18041] Call Trace: [ 797.755890][T18041] [ 797.755897][T18041] dump_stack_lvl+0x100/0x190 [ 797.755921][T18041] should_fail_ex.cold+0x5/0xa [ 797.755940][T18041] should_failslab+0xc2/0x120 [ 797.755959][T18041] __kmalloc_cache_noprof+0x91/0x6c0 [ 797.755984][T18041] ? proc_thread_self_get_link+0x1a6/0x210 [ 797.756010][T18041] proc_thread_self_get_link+0x1a6/0x210 [ 797.756032][T18041] pick_link+0xac2/0x13c0 [ 797.756052][T18041] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 797.756075][T18041] step_into_slowpath+0x9ba/0xf90 [ 797.756099][T18041] ? __pfx_step_into_slowpath+0x10/0x10 [ 797.756122][T18041] ? lookup_fast+0x2da/0x600 [ 797.756139][T18041] ? inode_permission+0x374/0x620 [ 797.756158][T18041] link_path_walk+0xf28/0x1cc0 [ 797.756185][T18041] path_openat+0x1c9/0x4280 [ 797.756206][T18041] ? __kasan_slab_alloc+0x89/0x90 [ 797.756223][T18041] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 797.756238][T18041] ? do_getname+0x35/0x390 [ 797.756253][T18041] ? __x64_sys_openat+0x12d/0x210 [ 797.756277][T18041] ? __pfx_path_openat+0x10/0x10 [ 797.756305][T18041] do_file_open+0x20e/0x430 [ 797.756329][T18041] ? __pfx_do_file_open+0x10/0x10 [ 797.756365][T18041] ? alloc_fd+0x471/0x7a0 [ 797.756395][T18041] ? do_getname+0x191/0x390 [ 797.756414][T18041] do_sys_openat2+0x10f/0x1e0 [ 797.756433][T18041] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.756459][T18041] __x64_sys_openat+0x12d/0x210 [ 797.756478][T18041] ? __pfx___x64_sys_openat+0x10/0x10 [ 797.756504][T18041] do_syscall_64+0x115/0x840 [ 797.756526][T18041] ? clear_bhb_loop+0x40/0x90 [ 797.756545][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.756561][T18041] RIP: 0033:0x7f63ead9de59 [ 797.756575][T18041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.756589][T18041] RSP: 002b:00007f63ebc51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 797.756605][T18041] RAX: ffffffffffffffda RBX: 00007f63eb025fa0 RCX: 00007f63ead9de59 [ 797.756619][T18041] RDX: 0000000000000600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 797.756632][T18041] RBP: 00007f63eae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 797.756649][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.756658][T18041] R13: 00007f63eb026038 R14: 00007f63eb025fa0 R15: 00007ffd1d7eee28 [ 797.756679][T18041] [ 798.296624][T18038] vivid-007: ================= START STATUS ================= [ 798.329696][T18038] vivid-007: Generate PTS: true [ 798.349621][T18038] vivid-007: Generate SCR: true [ 798.395570][T18038] tpg source WxH: 320x240 (Y'CbCr) [ 798.444206][T18038] tpg field: 1 [ 798.462320][T18038] tpg crop: (0,0)/320x240 [ 798.497429][T18038] tpg compose: (0,0)/320x240 [ 798.519332][T18038] tpg colorspace: 8 [ 798.538054][T18038] tpg transfer function: 0/0 [ 798.562763][T18038] tpg Y'CbCr encoding: 0/0 [ 798.585406][T18038] tpg quantization: 0/0 [ 798.625882][T18038] tpg RGB range: 0/2 [ 798.638362][T18038] vivid-007: ================== END STATUS ================== [ 799.488956][T17415] Bluetooth: hci7: command tx timeout [ 800.089653][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.118322][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.141892][T18031] bridge_slave_0: entered allmulticast mode [ 800.167855][T18031] bridge_slave_0: entered promiscuous mode [ 800.196980][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.224782][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.248000][T18031] bridge_slave_1: entered allmulticast mode [ 800.286380][T18031] bridge_slave_1: entered promiscuous mode [ 800.447513][T18094] ima: policy update failed [ 800.464194][ T30] audit: type=1802 audit(2147485887.188:12): pid=18094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2525" res=0 errno=0 [ 800.532061][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.582661][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.904392][T18031] team0: Port device team_slave_0 added [ 801.018267][T18031] team0: Port device team_slave_1 added [ 801.113300][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.141438][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.226246][T18097] block2mtd: Using custom MTD label '' for dev [ 801.237167][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.252594][T18097] block2mtd: error: cannot open device [ 801.274804][T18031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.318771][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.396965][T18031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.557549][T17415] Bluetooth: hci7: command tx timeout [ 801.588781][T18031] hsr_slave_0: entered promiscuous mode [ 801.601691][T18031] hsr_slave_1: entered promiscuous mode [ 801.618805][T18031] debugfs: 'hsr0' already exists in 'hsr' [ 801.641013][T18031] Cannot create hsr debugfs directory [ 802.458332][T18031] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 802.487152][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 802.531318][T18031] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 802.572704][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.608778][T18118] FAULT_INJECTION: forcing a failure. [ 802.608778][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 802.654939][T18118] CPU: 0 UID: 0 PID: 18118 Comm: syz.5.2531 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.654968][T18118] Tainted: [L]=SOFTLOCKUP [ 802.654973][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 802.654984][T18118] Call Trace: [ 802.654995][T18118] [ 802.655002][T18118] dump_stack_lvl+0x100/0x190 [ 802.655025][T18118] should_fail_ex.cold+0x5/0xa [ 802.655045][T18118] should_failslab+0xc2/0x120 [ 802.655065][T18118] __kmalloc_cache_noprof+0x91/0x6c0 [ 802.655090][T18118] ? proc_thread_self_get_link+0x1a6/0x210 [ 802.655114][T18118] proc_thread_self_get_link+0x1a6/0x210 [ 802.655137][T18118] pick_link+0xac2/0x13c0 [ 802.655156][T18118] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 802.655180][T18118] step_into_slowpath+0x9ba/0xf90 [ 802.655203][T18118] ? __pfx_step_into_slowpath+0x10/0x10 [ 802.655226][T18118] ? lookup_fast+0x2da/0x600 [ 802.655243][T18118] ? inode_permission+0x374/0x620 [ 802.655265][T18118] link_path_walk+0xf28/0x1cc0 [ 802.655292][T18118] path_openat+0x1c9/0x4280 [ 802.655313][T18118] ? __kasan_slab_alloc+0x89/0x90 [ 802.655329][T18118] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 802.655344][T18118] ? do_getname+0x35/0x390 [ 802.655360][T18118] ? __x64_sys_openat+0x12d/0x210 [ 802.655383][T18118] ? __pfx_path_openat+0x10/0x10 [ 802.655411][T18118] do_file_open+0x20e/0x430 [ 802.655434][T18118] ? __pfx_do_file_open+0x10/0x10 [ 802.655470][T18118] ? alloc_fd+0x471/0x7a0 [ 802.655494][T18118] ? do_getname+0x191/0x390 [ 802.655512][T18118] do_sys_openat2+0x10f/0x1e0 [ 802.655530][T18118] ? __pfx_do_sys_openat2+0x10/0x10 [ 802.655554][T18118] __x64_sys_openat+0x12d/0x210 [ 802.655572][T18118] ? __pfx___x64_sys_openat+0x10/0x10 [ 802.655597][T18118] do_syscall_64+0x115/0x840 [ 802.655620][T18118] ? clear_bhb_loop+0x40/0x90 [ 802.655638][T18118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.655654][T18118] RIP: 0033:0x7efda039de59 [ 802.655668][T18118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.655683][T18118] RSP: 002b:00007efda1266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 802.655698][T18118] RAX: ffffffffffffffda RBX: 00007efda0625fa0 RCX: 00007efda039de59 [ 802.655709][T18118] RDX: 0000000000000600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 802.655719][T18118] RBP: 00007efda0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 802.655728][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.655737][T18118] R13: 00007efda0626038 R14: 00007efda0625fa0 R15: 00007fff30b61fa8 [ 802.655758][T18118] [ 803.007215][T18031] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 803.016790][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 803.027245][T18031] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 803.242313][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 803.491208][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2533'. [ 803.628632][T17415] Bluetooth: hci7: command tx timeout [ 803.731320][T18031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.828005][T18031] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.879066][T10646] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.886266][T10646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.951752][T10646] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.959015][T10646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.081799][T18031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.004131][T18031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.607076][T18031] veth0_vlan: entered promiscuous mode [ 805.641847][T18031] veth1_vlan: entered promiscuous mode [ 805.696761][T17415] Bluetooth: hci7: command tx timeout [ 805.710213][T18031] veth0_macvtap: entered promiscuous mode [ 805.733231][T18031] veth1_macvtap: entered promiscuous mode [ 805.779982][T18031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.810790][T18031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.839083][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.862009][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.901876][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.932356][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.198855][ T9278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.236490][ T9278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.337883][ T9278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.378845][ T9278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.399699][T18176] FAULT_INJECTION: forcing a failure. [ 806.399699][T18176] name failslab, interval 1, probability 0, space 0, times 0 [ 806.445182][T18176] CPU: 0 UID: 0 PID: 18176 Comm: syz.6.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.445209][T18176] Tainted: [L]=SOFTLOCKUP [ 806.445215][T18176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 806.445225][T18176] Call Trace: [ 806.445231][T18176] [ 806.445238][T18176] dump_stack_lvl+0x100/0x190 [ 806.445261][T18176] should_fail_ex.cold+0x5/0xa [ 806.445279][T18176] should_failslab+0xc2/0x120 [ 806.445299][T18176] __kmalloc_cache_noprof+0x91/0x6c0 [ 806.445322][T18176] ? proc_thread_self_get_link+0x1a6/0x210 [ 806.445347][T18176] proc_thread_self_get_link+0x1a6/0x210 [ 806.445369][T18176] pick_link+0xac2/0x13c0 [ 806.445388][T18176] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 806.445412][T18176] step_into_slowpath+0x9ba/0xf90 [ 806.445435][T18176] ? __pfx_step_into_slowpath+0x10/0x10 [ 806.445458][T18176] ? lookup_fast+0x2da/0x600 [ 806.445475][T18176] ? inode_permission+0x374/0x620 [ 806.445495][T18176] link_path_walk+0xf28/0x1cc0 [ 806.445521][T18176] path_openat+0x1c9/0x4280 [ 806.445542][T18176] ? __kasan_slab_alloc+0x89/0x90 [ 806.445559][T18176] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 806.445574][T18176] ? do_getname+0x35/0x390 [ 806.445589][T18176] ? __x64_sys_openat+0x12d/0x210 [ 806.445620][T18176] ? __pfx_path_openat+0x10/0x10 [ 806.445648][T18176] do_file_open+0x20e/0x430 [ 806.445673][T18176] ? __pfx_do_file_open+0x10/0x10 [ 806.445711][T18176] ? alloc_fd+0x471/0x7a0 [ 806.445735][T18176] ? do_getname+0x191/0x390 [ 806.445754][T18176] do_sys_openat2+0x10f/0x1e0 [ 806.445772][T18176] ? __pfx_do_sys_openat2+0x10/0x10 [ 806.445797][T18176] __x64_sys_openat+0x12d/0x210 [ 806.445815][T18176] ? __pfx___x64_sys_openat+0x10/0x10 [ 806.445840][T18176] do_syscall_64+0x115/0x840 [ 806.445863][T18176] ? clear_bhb_loop+0x40/0x90 [ 806.445880][T18176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.445896][T18176] RIP: 0033:0x7f9f9559de59 [ 806.445910][T18176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.445925][T18176] RSP: 002b:00007f9f96396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 806.445941][T18176] RAX: ffffffffffffffda RBX: 00007f9f95825fa0 RCX: 00007f9f9559de59 [ 806.445952][T18176] RDX: 0000000000000600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 806.445962][T18176] RBP: 00007f9f95633e6f R08: 0000000000000000 R09: 0000000000000000 [ 806.445972][T18176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.445982][T18176] R13: 00007f9f95826038 R14: 00007f9f95825fa0 R15: 00007fff485093a8 [ 806.446002][T18176] [ 808.147711][T18191] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 808.590762][T18208] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 809.300791][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.307154][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.763774][T18247] zero sized request [ 811.190599][ T31] INFO: task syz.3.2085:15770 blocked for more than 143 seconds. [ 811.201539][ T31] Tainted: G L syzkaller #0 [ 811.230389][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 811.255138][ T31] task:syz.3.2085 state:D stack:26440 pid:15770 tgid:15766 ppid:8697 task_flags:0x400140 flags:0x00080002 [ 811.303411][ T31] Call Trace: [ 811.326071][ T31] [ 811.339740][ T31] __schedule+0x125c/0x6730 [ 811.361323][ T31] ? do_raw_spin_lock+0x128/0x260 [ 811.383171][ T31] ? __pfx___schedule+0x10/0x10 [ 811.407492][ T31] ? find_held_lock+0x2b/0x80 [ 811.467802][ T31] ? schedule+0x225/0x2c0 [ 811.515255][ T31] schedule+0xdd/0x2c0 [ 811.545992][ T31] schedule_preempt_disabled+0x13/0x30 [ 811.583231][ T31] __mutex_lock+0xccc/0x1bd0 [ 811.606325][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 811.622010][ T31] ? __lock_acquire+0x49f/0x1a40 [ 811.627486][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 811.632860][ T31] ? net_generic+0xea/0x2a0 [ 811.642173][ T31] ? net_generic+0xea/0x2a0 [ 811.648067][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 811.656442][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 811.662512][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 811.677208][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 811.687529][ T31] ? genl_get_cmd+0x3e7/0x760 [ 811.695187][ T31] ? bpf_lsm_capable+0x9/0x10 [ 811.699916][ T31] ? security_capable+0x80/0x260 [ 811.705200][ T31] genl_rcv_msg+0x560/0x800 [ 811.709733][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.715004][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 811.721116][ T31] netlink_rcv_skb+0x159/0x420 [ 811.726208][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.731294][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 811.736910][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 811.742221][ T31] genl_rcv+0x28/0x40 [ 811.748891][ T31] netlink_unicast+0x585/0x850 [ 811.753691][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 811.760574][ T31] netlink_sendmsg+0x8b0/0xda0 [ 811.766251][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.771675][ T31] ? apparmor_socket_sendmsg+0x15b/0x270 [ 811.779413][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 811.784944][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.790265][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.798465][ T31] ? plist_check_list+0x1b8/0x280 [ 811.803526][ T31] ? plist_del+0x308/0x510 [ 811.808326][ T31] ___sys_sendmsg+0x190/0x1e0 [ 811.813025][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.818569][ T31] ? __lock_acquire+0x49f/0x1a40 [ 811.823521][ T31] ? futex_wake+0x220/0x5e0 [ 811.832027][ T31] __sys_sendmsg+0x160/0x210 [ 811.836942][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 811.842145][ T31] do_syscall_64+0x115/0x840 [ 811.847263][ T31] ? clear_bhb_loop+0x40/0x90 [ 811.851983][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.860121][ T31] RIP: 0033:0x7f15cdb9de59 [ 811.866209][ T31] RSP: 002b:00007f15ce9f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.875463][ T31] RAX: ffffffffffffffda RBX: 00007f15cde26090 RCX: 00007f15cdb9de59 [ 811.885229][ T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000007 [ 811.895733][ T31] RBP: 00007f15cdc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 811.911326][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.919619][ T31] R13: 00007f15cde26128 R14: 00007f15cde26090 R15: 00007ffe0e6e7368 [ 811.927869][ T31] [ 811.976170][ T31] [ 811.976170][ T31] Showing all locks held in the system: [ 812.030349][ T31] 1 lock held by khungtaskd/31: [ 812.062137][ T31] #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 812.118657][ T31] 6 locks held by kworker/u8:3/47: [ 812.143582][ T31] 2 locks held by syz.2.394/7734: [ 812.155912][ T31] #0: ffff888030d6e0d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 812.193473][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 812.223559][ T31] 2 locks held by syz-executor/12124: [ 812.241719][ T31] #0: ffff888035bea0d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 812.261406][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 812.281308][ T31] 2 locks held by getty/15426: [ 812.286092][ T31] #0: ffff888036cff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 812.311647][ T31] #1: ffffc900050dd2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 812.327126][ T31] 2 locks held by syz.3.2085/15768: [ 812.334654][ T31] #0: ffffffff90b4c928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 812.343423][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 812.353855][ T31] 2 locks held by syz.3.2085/15770: [ 812.359055][ T31] #0: ffffffff90b4c928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 812.367866][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 812.378181][ T31] 2 locks held by syz-executor/17047: [ 812.383893][ T31] #0: ffff88807d6d20d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 812.394467][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 812.407731][ T31] 2 locks held by syz.2.2401/17387: [ 812.414906][ T31] #0: ffffffff90b4c928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 812.423936][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 812.434375][ T31] 1 lock held by syz-executor/17924: [ 812.444081][ T31] #0: ffff888032964ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 812.454544][ T31] 1 lock held by syz.5.2555/18259: [ 812.459677][ T31] #0: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 812.470856][ T31] 4 locks held by syz.6.2556/18257: [ 812.476084][ T31] #0: ffffffff900c32e0 (mon_lock){+.+.}-{4:4}, at: mon_text_release+0x4e/0x3b0 [ 812.485573][ T31] #1: ffffffff8ea78130 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 812.495881][ T31] #2: ffffffff8ed84b00 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 812.508116][ T31] #3: ffffffff8ebf1878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 812.572873][ T31] [ 812.604540][ T31] ============================================= [ 812.604540][ T31] [ 812.650464][ T31] NMI backtrace for cpu 0 [ 812.650484][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 812.650505][ T31] Tainted: [L]=SOFTLOCKUP [ 812.650510][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.650519][ T31] Call Trace: [ 812.650525][ T31] [ 812.650530][ T31] dump_stack_lvl+0x100/0x190 [ 812.650552][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 812.650569][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 812.650586][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 812.650608][ T31] sys_info+0x141/0x190 [ 812.650623][ T31] watchdog+0xcb1/0x1030 [ 812.650646][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 812.650667][ T31] ? __pfx_watchdog+0x10/0x10 [ 812.650685][ T31] ? __kthread_parkme+0x18c/0x230 [ 812.650702][ T31] ? kthread+0x13a/0x450 [ 812.650717][ T31] ? __pfx_watchdog+0x10/0x10 [ 812.650733][ T31] kthread+0x370/0x450 [ 812.650749][ T31] ? __pfx_kthread+0x10/0x10 [ 812.650767][ T31] ret_from_fork+0x72b/0xd50 [ 812.650784][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 812.650800][ T31] ? __switch_to+0x800/0x10f0 [ 812.650821][ T31] ? __switch_to_asm+0x39/0x70 [ 812.650839][ T31] ? __pfx_kthread+0x10/0x10 [ 812.650857][ T31] ret_from_fork_asm+0x1a/0x30 [ 812.650883][ T31] [ 813.178319][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 813.185221][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 813.195888][ T31] Tainted: [L]=SOFTLOCKUP [ 813.200193][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 813.210404][ T31] Call Trace: [ 813.213668][ T31] [ 813.216693][ T31] dump_stack_lvl+0x100/0x190 [ 813.221362][ T31] vpanic+0x552/0x970 [ 813.225330][ T31] ? __pfx_vpanic+0x10/0x10 [ 813.229912][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 813.236149][ T31] panic+0xd1/0xe0 [ 813.239851][ T31] ? __pfx_panic+0x10/0x10 [ 813.244250][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 813.250445][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 813.256626][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 813.262767][ T31] ? watchdog.cold+0x1ec/0x234 [ 813.267518][ T31] ? watchdog+0xcc1/0x1030 [ 813.271929][ T31] watchdog.cold+0x1fd/0x234 [ 813.276526][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 813.282349][ T31] ? __pfx_watchdog+0x10/0x10 [ 813.287011][ T31] ? __kthread_parkme+0x18c/0x230 [ 813.292048][ T31] ? kthread+0x13a/0x450 [ 813.296388][ T31] ? __pfx_watchdog+0x10/0x10 [ 813.301052][ T31] kthread+0x370/0x450 [ 813.305107][ T31] ? __pfx_kthread+0x10/0x10 [ 813.309681][ T31] ret_from_fork+0x72b/0xd50 [ 813.314272][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 813.319367][ T31] ? __switch_to+0x800/0x10f0 [ 813.324030][ T31] ? __switch_to_asm+0x39/0x70 [ 813.328779][ T31] ? __pfx_kthread+0x10/0x10 [ 813.333354][ T31] ret_from_fork_asm+0x1a/0x30 [ 813.338113][ T31] [ 813.341174][ T31] Kernel Offset: disabled [ 813.345497][ T31] Rebooting in 86400 seconds..