last executing test programs: 23m39.184344702s ago: executing program 32 (id=555): r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async, rerun: 32) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) (rerun: 32) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) (async) getsockopt$auto(r1, 0x7, 0x9, &(0x7f00000000c0)='!\x00', &(0x7f0000000140)=0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) (rerun: 32) socket(0x3f, 0x2, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async, rerun: 32) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) (async) write$auto(0x3, 0x0, 0x1) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r3 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r3, 0x205, 0xa, 0x4, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) r4 = socket(0x10, 0x2, 0x0) (async) r5 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x20002, 0x0) read$auto_bdi_debug_stats_fops_(r5, &(0x7f0000000040)=""/69, 0x45) bind$auto(r4, 0x0, 0x6b) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x7000000000, 0x978f, 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 9m5.442632757s ago: executing program 33 (id=3113): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x800a, 0x1, 0x9, 0x3, 0x3e, 0x93f, 0x41fedf, 0x3, 0x200006, 0xfffffffffffffffe, 0x1ff, 0xfffffffa, 0x8005, 0x7, 0xb0, 0xb, 0x5, 0x3, 0x0, 0x2, 0x10, 0xb64, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7fc, 0xffffff01, 0x3, [0x5, 0x0, 0x80000000, 0xffffff7ffffffffe, 0xfffffffffffffffc, 0x0, 0x9f49, 0x9, 0x0, 0x200000000000, 0x9, 0xfff, 0x8f3, 0x0, 0x9, 0x0, 0x0, 0x200000000, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff397e, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x8aa5, 0x3, 0x8, 0x400, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x2]}, 0x1fe, 0x80082) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_events\x00', 0x680, 0x0) read$auto_ftrace_avail_fops_trace_events(r1, &(0x7f00000000c0)=""/197, 0xc5) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x80000001, 0x44, &(0x7f0000000380)='/proc/fs/ext4/sda1/options\x00', 0x6) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000001480)={{@raw=0x9, 0x2, 0x5, 0x0, "e462f5a29a0b2f987b9ea452a1bc9eaafd83a8eb9eea79a10397a3126cb6c4380ae1dc84e847c5ccf57f14eb", @raw=0x8}, 0x1, @integer64=@value=[0xf, 0x80, 0x0, 0x3, 0x3, 0x1000, 0xd1f6, 0x5, 0x10, 0x6, 0x4, 0xbe1, 0x1, 0x0, 0x0, 0xffffffffffffff80, 0x40, 0x5, 0x4, 0x3, 0xfffffffffffff000, 0x5, 0x2, 0x2, 0x7, 0x8, 0x2, 0x1, 0x2, 0x5cb56b90, 0x0, 0x81, 0xfffffffffffffffb, 0x9, 0x0, 0x10, 0x2, 0x6, 0x0, 0x6, 0x5, 0x5, 0x8, 0x6, 0xe7d8, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x0, 0x8000000000000001, 0x6, 0xc500000000000000, 0x2, 0x9, 0x0, 0x40, 0x4, 0x5, 0x4, 0xe, 0xb, 0x800, 0x10000], "2ffa3e20e80e755123e1f42e350d190e3032fa30c3621af4571878aad95f51aea60df3a075b1c15529b67947b4b67f290e12883f526b4e566ef511611abf96d1d9b723613b1fce6def179ed465852003f47d532de2721cc6b407490cd09e96be8bf6d01dca81d1d22f2554f48d1796ac750c48d1a4c1d889a0e6b6528742320c"}) unshare$auto(0x40000080) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x141100, 0x0) read$auto(r3, &(0x7f0000000000)='vdpa\x00', 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffe8}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/fs/ext4/sda1/options\x00', 0x181202, 0x0) pread64$auto(r4, 0x0, 0x400100000001, 0x1ff) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 7m5.083894897s ago: executing program 34 (id=3498): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x200a41, 0x0) bpf$auto(0x8000000, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x40040) unshare$auto(0x40000080) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1, r1, @relative_id=0x13, 0xe600}, 0xf) r4 = open(0x0, 0x221c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram3\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0x7fffffff) getpid() ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) 3m8.028869481s ago: executing program 3 (id=4382): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mbind$auto(0x2, 0x2, 0x492, &(0x7f0000000100)=0x2, 0x100000000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x800000009}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)='nbd\x00', &(0x7f00000001c0)={0x0, 0xa50}, 0x1000) r0 = memfd_create$auto(0x0, 0x8) ftruncate$auto(0x0, 0x8800000) mmap$auto(0x2, 0x5, 0x2, 0x1010, r0, 0x3) pwritev$auto(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffff274, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) 3m7.355969856s ago: executing program 3 (id=4383): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x8, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x1, 0x90, 0xfffffff5}) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x40045613, r1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x3, 0x2) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x24500, 0x0) getsockopt$auto(r2, 0x103, 0xfffffff9, 0x0, 0x0) write$auto(r0, 0x0, 0x100000a3d9) prctl$auto(0x6, 0x4, 0x0, 0x7ea, 0xbd) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="00020000", @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) 3m6.727652752s ago: executing program 3 (id=4385): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0x124a000, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x2}, 0x20000003) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x32, 0x0, 0x6, 0x0, 0x81, 0x1}, 0x5}, 0x1fe, 0x6) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x8008, 0xfffc}, 0x1, 0x0) 3m6.342641466s ago: executing program 3 (id=4387): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000000)='\x00', 0x91e2) socket(0x2, 0x3, 0x100) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)=@bpf_attr_0={0xfff, 0x184dc235, 0x7, 0x9, 0x9, r1, 0x7, "eeddf820121f0dc6d1430cf0a3ed30e5", 0x0, r0, 0x2, 0x0, 0x40000, 0x8, r2, r2}, 0x40) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000300), r1) shmctl$auto_SHM_INFO(0xee141de, 0xe, &(0x7f0000000380)={{0x3, 0xee00, 0xee01, 0x7, 0x0, 0xd267, 0xf44d}, 0x8, 0xff, 0x100000000, 0x7, @raw=0x3ff, @raw=0x7, 0xc82, 0x0, &(0x7f0000000440)="6598ec2d650cfbb8e0aa0bcbb3bfebf6ba3c808933e7f74ec34354c8d2e72d40940e022d1f2017a56b4c0cb9209771a4d42102c783fc5fc87bcd29ff73ced18a170a787b4dc5306c9d16c8f8127ce9bb4c95317fc159a3e5014c09fc164f51da5f626dbe456a006f58e8c7f473547e27ee386c1237b9c23887ddbb3dabff9879d99e1871359d4e5062ebffc9a9011046aec6e952725d2743b70218bc7bb959692bbaf34c189f418dcc27d1d5a67a5d53e671ec82e08c9c734ae1ae02c61c632b5211cc1934f75ccc", &(0x7f0000000340)="4c42851fce44f2c738f3e7a986dc77d4a209b548e9f1d2defe13cf5b1297b898631627be7eca695279552e8227962b56292c0b73cccbaaf8bb2807a0465f5c"}) shmctl$auto_IPC_SET(0x9, 0x1, &(0x7f0000000700)={{0x6, 0xee01, 0x0, 0x7791, 0x7d3, 0x0, 0x8000}, 0x4473, 0x4, 0x2, 0x6, @raw=0xb5, @inferred=0xffffffffffffffff, 0xfff7, 0x0, &(0x7f0000000540)="3cc4aa7c32875db8690a8b4271dc792fefca247b87bfd740f3567713ed48f6c760b5c4bd92a79134ef06c1028c3cfa5dc06117b74d61af10976a3c5d6a6e2d57f1c5796b896ab5dbd79ebc87e1b92dac8214315d0e2754688cafee7396a7701c0b06734c87019911a834e98d375bedb477f87e77a594b07dbc34b224770f8c966b3e2487b767bee1eb64d0a64447ecc1c72361ff6716357b4f12b6fd32477f3366e6", &(0x7f0000000600)="2c1f30e402a0918f044dfc183344d45cfda7c1e9aaf03f272044465c93e2eff53ffc2fb669ac6cd90731dcf42b049bca2a7d70452709043a25b6cabe83d20fa6b1e68b0c0ae226642aed6c788da47f8e961c961a66de8e61959ec13b3479529ff4714def474d9b6812c490db70f217a4d4a8c3edf5a7830ef05cd1d57099490d28ff8762c7850a1a3155dbef1b888bc4c491cc2593620cc3cf9119d2995764f24069d1960f6ba19e0dd2ca094bec1212e055efab9bb277aeb22401c26a4fa51802861aa25c38"}) r7 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x6) msgctl$auto_IPC_STAT(0xffffffff, 0x2, &(0x7f0000000840)={{0xfffffff7, 0xffffffffffffffff, 0xee00, 0x5ce5, 0x10, 0x0, 0xfffc}, &(0x7f00000007c0)=0x4, &(0x7f0000000800)=0x74, 0x9, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x9, 0x4, 0x6, 0x0, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="70050000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="4881cfbbf4e0af00b4e9970ac86f15a68fe2bab7997b3be0e8b681e5eee7ece414cb6798ea4deca73566adf6d732c800088367aed9c3c9ac2d4169a66d6c7415eee10d57a4a84f5fbf8de72fc9c9ebea09e03fa4f64001a9d447a3a898f3705dfc5372881f20b1c37f11bfb8f05cc1956ac5a0acebb325a012b99b526505e3e22a141ab5ab2657faf5ff027b779b594c6c0e5288738a9cbafae74f16b1152ab2324e876d06e0fe9cfe1e56be28bb48e9b781b8c74cef5b893db3cf9d25351a2836a28b5c1e2ee08c34d0c31befc844f9529e5ee36f8f015e01c9bf9a10239da51fae490d4c46505da106516d14b417eda2e2d68fc64870290dce5c1bbc617138d84b15956929318fdbf86a280147b18152dccb0c00c9000500000000000000000000c9000780eaf55c40aa7fe8ad78c88a8692b4a21e6893f85428d60007ff25945e730601cd04dcd83c9602da881c70e6fed33761b0675bdbf3fb4d9875cc84f5bfdad8f12b434794becd90e7a577f34ef4ab3e6e33feb3888354eb3924bfda17e0f53598510d61a289d01d98e624ac605c1ec677ed5647f132c8e1d2c26b7aa26914589a0cfabf95209e5537f7a6f745f9a1f4e2cf7020524dab7548fdbe432e06aa0c47d2ffcbd1277cb095ad01459858d8080002000600000005000900000000000800cf00", @ANYRES32=r6, @ANYBLOB="0000006000028008003200030000000400ad000c00628008003200", @ANYRES32=r7, @ANYBLOB="0c00858008002e00", @ANYRES32=r8, @ANYBLOB="9be80cf0f99199397406cdf56944993d0e59b526f5e98a2b53f18c8eca2dd8dac60ef9d44bdba59d5cbbae641d8454027ccbb7b3a0f6bfd908000a00010000000400080008000a0000080000"], 0x570}, 0x1, 0x0, 0x0, 0x8000}, 0x20) close_range$auto(0x2, 0x8, 0x0) r9 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x200002, 0x0) r11 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x48, r11, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r12 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r12, @ANYBLOB="18000000", @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r9, &(0x7f0000000000)='\xde\x00', 0xfded) 3m6.042876231s ago: executing program 3 (id=4389): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto_TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000200)=0x8) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x2a52) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) r3 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x55, 0x9, r3, 0x0) fanotify_mark$auto(0x0, 0x1, 0xa, r2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m5.895031184s ago: executing program 3 (id=4390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)=0x7) fanotify_mark$auto(r0, 0x2, 0x9, r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) ioctl$auto_SCSI_IOCTL_DOORLOCK(r2, 0x5380, &(0x7f0000001080)="572b5b69678b17fe362e5d1a") 2m50.320939544s ago: executing program 35 (id=4390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)=0x7) fanotify_mark$auto(r0, 0x2, 0x9, r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) ioctl$auto_SCSI_IOCTL_DOORLOCK(r2, 0x5380, &(0x7f0000001080)="572b5b69678b17fe362e5d1a") 2m35.038576546s ago: executing program 0 (id=4471): bpf$auto_BPF_LINK_CREATE(0x1c, 0x0, 0x5) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x40, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r0, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00'}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000240)={0xffffffffffffffff, 0x7ff}) mmap$auto(0x0, 0x400008, 0x7c74, 0x14, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) 2m32.797234605s ago: executing program 0 (id=4475): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x1e) (async) pipe2$auto(0x0, 0x0) 2m32.488013518s ago: executing program 0 (id=4477): rseq$auto(0x0, 0x18, 0x5d7, 0x6) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)}) r0 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r0, 0xc08, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r1, 0x0, 0x5) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cgroup\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) 2m31.952860711s ago: executing program 0 (id=4479): unshare$auto(0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee00) 2m31.685486215s ago: executing program 0 (id=4481): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) (async) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) madvise$auto(0x0, 0x8, 0x3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0x8000000000000001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) (async) pipe2$auto(0x0, 0x0) 2m30.789591937s ago: executing program 0 (id=4485): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0xf03, 0x5, 0x2e, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x208000) close_range$auto(r0, r0, 0x9) r1 = socket(0x5, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x1ff, r1, @relative_id=0x8, 0x7}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r4, &(0x7f00000003c0)={0x0, 0x5}, 0xa) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="65971f6cadda92e4fe48d8a952784cfc12865ac62d0ae4f22ded5fccbf953428fce990f0d37424dc8d8d9e28ac944cacc36d7bbf55c4727042da65d051be417a538fc42c1b746788ad583d9c754bfd206d7d375feecd3846644f574dc957313502c1f7e16383"], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x504}}, 0xc0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x5}, 0xa) process_madvise$auto_MADV_KEEPONFORK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)="e71dbb198b53b6eba33587467a6a3806dabe214aed10f5368cf8edbcd3cfdc9d455aa5f88fc9b9bf10ccc7b61adf499c7fa2b3a91da25cefcb946aac6074082e143e8b90ed420d532569ec5907d68ac08b7da6eab68a65b5adfb52fabc5f214002c5dac8a193169082152f", 0x83}, 0x57, 0x13, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000340)='/dev/binderfs/binder0\x00', 0x179841, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmsg$auto_TIPC_NL_BEARER_ADD(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="000327bd7010ffdbdf2515010000af0101800e017180a1ab52e4cbfea97f4d56be003382197fb5755725ee5e8858ea490d4f230c9e982b0fc932df5d847e91aad3fdab5e3cea8e0d3ab93a08", @ANYRES32=r2, @ANYRES16], 0x1c4}, 0x1, 0x0, 0x0, 0x20000884}, 0x4000004) socketpair$auto(0x5b, 0x9, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r7, 0x5437, 0x0) 2m15.599724589s ago: executing program 36 (id=4485): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0xf03, 0x5, 0x2e, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x208000) close_range$auto(r0, r0, 0x9) r1 = socket(0x5, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x1ff, r1, @relative_id=0x8, 0x7}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r4, &(0x7f00000003c0)={0x0, 0x5}, 0xa) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="65971f6cadda92e4fe48d8a952784cfc12865ac62d0ae4f22ded5fccbf953428fce990f0d37424dc8d8d9e28ac944cacc36d7bbf55c4727042da65d051be417a538fc42c1b746788ad583d9c754bfd206d7d375feecd3846644f574dc957313502c1f7e16383"], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x504}}, 0xc0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x5}, 0xa) process_madvise$auto_MADV_KEEPONFORK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)="e71dbb198b53b6eba33587467a6a3806dabe214aed10f5368cf8edbcd3cfdc9d455aa5f88fc9b9bf10ccc7b61adf499c7fa2b3a91da25cefcb946aac6074082e143e8b90ed420d532569ec5907d68ac08b7da6eab68a65b5adfb52fabc5f214002c5dac8a193169082152f", 0x83}, 0x57, 0x13, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000340)='/dev/binderfs/binder0\x00', 0x179841, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmsg$auto_TIPC_NL_BEARER_ADD(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="000327bd7010ffdbdf2515010000af0101800e017180a1ab52e4cbfea97f4d56be003382197fb5755725ee5e8858ea490d4f230c9e982b0fc932df5d847e91aad3fdab5e3cea8e0d3ab93a08", @ANYRES32=r2, @ANYRES16], 0x1c4}, 0x1, 0x0, 0x0, 0x20000884}, 0x4000004) socketpair$auto(0x5b, 0x9, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r7, 0x5437, 0x0) 1m53.465241619s ago: executing program 7 (id=4592): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) mmap$auto(0x8, 0x4020008, 0x9, 0x40000eb0, 0x401, 0x10000000008000) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000100), r0) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/kvm\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x2ff, 0x400, 0x2}]}) (async) socket(0x2, 0x3, 0xa) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) io_uring_setup$auto(0x2, 0x0) (async, rerun: 32) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0xb) (async) bind$auto(0x3, 0x0, 0x6b) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x5, 0x21, 0x4909b6f5, 0x401, 0x7, 0x3, 0x9, 0x6, 0x3, 0x4, 0x2, 0xb4, 0x9, 0x208, 0x10003, 0x80, 0x80000000003, 0x80, 0xa, 0x22000, 0x204, 0x7, 0x84, 0x0, 0x9, 0xfffbffff, 0x0, 0x0, [0x17f2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e4, 0x1f, 0x0, 0x2, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x8000000000000000]}, 0x3, 0xd) (async) r4 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x101402, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r4, &(0x7f0000000240)=""/194, 0xc2) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (rerun: 64) 1m51.359026473s ago: executing program 7 (id=4595): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r1, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000008000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0xc, 0x7, 0x6d3f, 0x6, 0x7, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 1m50.222610916s ago: executing program 7 (id=4599): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf25030000041f1120c139451dfa960004000800100003800c000c80081006800111e15812000100898771f1c19f177904857ae4a19e1664e3f3e2f4b5d6d0e1d3a3762bf037047f44d1c7fe64e380e80e9300e1b707837669a3154039dbe4bc4ad7cd47800d46f9284b1fde92b71565c847ef09acffcdd5abcd0691c6626d2aee7f894e8efc792f1af3"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0xb, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0x20000000bfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x1}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0xfffffe02) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x8}]}, 0x2c}}, 0x8880) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) ioctl$auto_SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) socketcall$auto(0x8000, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) 1m48.848368298s ago: executing program 7 (id=4607): ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000000)={0xffffffffffffffff, 0xffff1dbd}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x200}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x762}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x240000c0}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) sendfile$auto(r10, 0x3, 0x0, 0x400000000006) 1m47.894738838s ago: executing program 7 (id=4612): mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_general\x00', 0x40aa2, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x7) writev$auto(r1, &(0x7f0000000000)={&(0x7f0000000080)="5203565fca5d18c1a7a384ee31871326422dfcf7d4d1ef8673cd4ef0d2fe7ce2055066f4c7bccc19fd0da0884e85abe59575e08757a46cad8d74195514c4dae5b1acf7a55f9fcb163e9d556be0394c2ba1c908b47bb63425f383924af2b3d8b17d53a2ff8cde55d25c517577fac8e7425d6efcd8da2590f248a9613e9ba098fa613485794876f00b206de5da9e0a7d70f47f28eb26ef8385e1de53b09c9c28b2b9e0a8c56cef9e421cc76a83f490236b3bd7f12c341bff5a3e80209100c35a1cdaef888cb098f4d675847dea5701faeca0bcedea0aa5aa4c40649ef8f72fc028b2ecd75f0ea48c46fa275f466dc546ed9eec520879015ed9b0", 0x9}, 0xff) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x40045613, r0) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) (async) open(0x0, 0x22240, 0x155) (async) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_general\x00', 0x40aa2, 0x0) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) (async) read$auto(r1, 0x0, 0x7) (async) writev$auto(r1, &(0x7f0000000000)={&(0x7f0000000080)="5203565fca5d18c1a7a384ee31871326422dfcf7d4d1ef8673cd4ef0d2fe7ce2055066f4c7bccc19fd0da0884e85abe59575e08757a46cad8d74195514c4dae5b1acf7a55f9fcb163e9d556be0394c2ba1c908b47bb63425f383924af2b3d8b17d53a2ff8cde55d25c517577fac8e7425d6efcd8da2590f248a9613e9ba098fa613485794876f00b206de5da9e0a7d70f47f28eb26ef8385e1de53b09c9c28b2b9e0a8c56cef9e421cc76a83f490236b3bd7f12c341bff5a3e80209100c35a1cdaef888cb098f4d675847dea5701faeca0bcedea0aa5aa4c40649ef8f72fc028b2ecd75f0ea48c46fa275f466dc546ed9eec520879015ed9b0", 0x9}, 0xff) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) ioctl$auto(0x3, 0x40045613, r0) (async) 1m47.517407834s ago: executing program 7 (id=4614): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[], 0x3d4}}, 0x80) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$auto(r1, 0x9000643a, 0xc35) connect$auto(0x3, 0x0, 0x55) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) 1m38.200970619s ago: executing program 8 (id=4640): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0x124a000, 0x0, 0x0, 0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x2}, 0x20000003) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x32, 0x0, 0x6, 0x0, 0x81, 0x1}, 0x5}, 0x1fe, 0x6) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x8008, 0xfffc}, 0x1, 0x0) 1m32.797851851s ago: executing program 8 (id=4649): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400c4) connect$auto(0x3, &(0x7f0000000080)=@can={0x1d, r3}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0xa0900, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/freezer.self_freezing\x00', 0x101080, 0x0) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 1m32.240785462s ago: executing program 37 (id=4614): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[], 0x3d4}}, 0x80) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$auto(r1, 0x9000643a, 0xc35) connect$auto(0x3, 0x0, 0x55) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) 1m32.180123499s ago: executing program 8 (id=4645): socket(0x2, 0x80802, 0x0) mmap$auto(0x50002, 0x20009, 0x4000000000df, 0x17, 0x401, 0x8000) socket(0x2, 0x2, 0x0) socket(0x23, 0xa, 0x0) seccomp$auto(0x2, 0x10, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r5 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x8040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r6, 0x80004507, 0x10000000000402) madvise$auto(0x8000, 0x87fff, 0xc) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="036c25bd7000fedbdf25040000000c0017000200000004001d00"], 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) fcntl$getown(r0, 0x9) poll$auto(&(0x7f0000000000)={r0, 0x2, 0x1}, 0x4, 0x9cff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2a01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001c00)=""/4109, 0x100d) 1m31.230462092s ago: executing program 5 (id=4650): r0 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd$auto(0x1) r2 = socket(0xa, 0x801, 0x84) socket(0xa, 0x3, 0x73) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001240)={r3, &(0x7f00000000c0)="51cfadf2a4a549db96ce7d6ae2587e34204d355f132d560f709ccef75332f146cf6645e7eaaaa99183bafc06401044da4ff610b597bd709026e8f6d49d74065ec099333bf4c88f277f8a016a0ea33c33d9311620db4787c999ba026b1569d06605dcbdb58a1a3955f3f958f569f7a2282fff6cc0a7fdd6ddd336b98f5eb8735695c846a273484763faf22e2e057a93da6fb320533d7f38175979d5b0bacb021bf5e7b01e3cd3af433c2053241151bb27d5c6f8e3ef87d8d53436498b8348e7d893883d3977537f9cc3e6840984111391c7deb822913a60c9", 0x8, &(0x7f00000001c0)="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", 0x8, &(0x7f00000011c0)="1066334f1e5f8bdba664526c3914b841624350ee51", &(0x7f0000001200)=0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000012c0), r2) sendmsg$auto_NL80211_CMD_FRAME(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x5, 0x7) ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r5, 0x4, 0x34) socket(0x2, 0x801, 0x106) socket(0x24, 0x2, 0x3a) r6 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r6, @new_prog_fd=0x4, 0x4, @old_prog_fd=r6}, 0xa3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x3, 0x0, 0x7) 1m31.069192898s ago: executing program 8 (id=4651): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3e, 0x0, 0x1ff) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/pcm0c/sub3/xrun_injection\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) madvise$auto(0x0, 0xbfffffffffff0006, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) setns$auto(0x0, 0xb) 1m30.460579013s ago: executing program 5 (id=4653): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0x157b41, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xf0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r0, 0xc028ae92, &(0x7f00000001c0)={0xb, 0x0, [{0xffffff47, 0x8, 0xf}]}) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x8b21, 0x0) unshare$auto(0x3a) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) mmap$auto(0x0, 0x0, 0x1000000000000009, 0x410, r0, 0x7) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0xfffffffffffffffe, &(0x7f0000000280)={0x0, 0xffffffff}, 0x3, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x6fe6, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x23, 0x80805, 0x0) ioctl$auto(0x3, 0x6, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20048810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb-serial/drivers/keyspan_no_firm/uevent\x00', 0x55b3c2, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1m29.905184559s ago: executing program 8 (id=4655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0800050080000000110001006f76735f12000000000007000000000008000200", @ANYRES32=0x0, @ANYBLOB="341f5728bffa740c9db9d41eac8bd4"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 1m29.855014622s ago: executing program 5 (id=4656): r0 = socket(0xa, 0x1, 0x0) setsockopt$auto(r0, 0x29, 0x3c, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0x9, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES16=r4, @ANYBLOB="20002bbd7000fedbdf252400000005001700070000000500280005000000"], 0x24}, 0x1, 0x0, 0x0, 0xaaaba978e63e307e}, 0x40000) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c03005a2754a3ef921c7a1053f830386464d09bedf4e0a583da7d8a62e7e1c65c017537b9c813f6b8a43c32bb9336fb5ed1243fa84516ee62c647d1f59ee6ee0244094abaa02160b151ab1190e504b320e70b09be7cdc8986562b85cbde8a76a7a061c63a4b8db84fe925224a16bff91d1b", @ANYRES16=r4, @ANYBLOB="000827bd7000fddbdf250300000006000d000800000005003100000000000500360006000000050031002b0000000500150004000000050007000200000005001800070000000500330004000000050003000c000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000800", @ANYRES16=r4, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x26000806}, 0x840) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81100400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xf9}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x800}]}, 0x40}, 0x1, 0x0, 0x0, 0x200c0080}, 0x800) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setrlimit$auto(0x1000000007, 0x0) r5 = setfsuid$auto(0xee00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r9 = setfsuid$auto(0xee01) setresuid$auto(r5, r9, r5) ioctl$auto(r2, 0x89f2, 0x24) 1m29.624135302s ago: executing program 8 (id=4657): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @raw=0xce8}, 0x287) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000040)=':,\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x9, 0x0) 1m29.517612933s ago: executing program 5 (id=4658): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fb\x00', 0xd00, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/249, 0xf9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) (async) sysfs$auto(0x2, 0xd, 0x0) (async) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) (async) socket(0x29, 0x2, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0x10, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) (async) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) fsmount$auto(0x4, 0x0, 0x200003) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) (async) statmount$auto(0x0, 0x0, 0x7, 0x281) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x18000, 0x0) (async) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x2800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(r4, 0x40184152, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x100000a3d9) 1m29.129524232s ago: executing program 5 (id=4660): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_IOCTL_START_ACCEL_DEV(r1, 0x40096102, 0x0) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, 0x0, 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) write$auto(0xffffffffffffffff, 0x0, 0xa) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4605, 0x0) socket(0x22, 0x3, 0x0) socket(0x10, 0x2, 0xc) 1m28.134471527s ago: executing program 5 (id=4662): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/tkip_mic_test\x00', 0x822, 0x0) write$auto(r0, 0x0, 0xfff) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r1) 1m14.515670337s ago: executing program 38 (id=4657): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @raw=0xce8}, 0x287) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000040)=':,\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x9, 0x0) 1m12.983469173s ago: executing program 39 (id=4662): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/tkip_mic_test\x00', 0x822, 0x0) write$auto(r0, 0x0, 0xfff) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r1) 44.20722015s ago: executing program 6 (id=4748): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x124a000, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x2}, 0x20000003) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x32, 0x0, 0x6, 0x0, 0x81, 0x1}, 0x5}, 0x1fe, 0x6) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x8008, 0xfffc}, 0x1, 0x0) 42.85398778s ago: executing program 6 (id=4750): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20005, 0x7fffffff, 0xeb1, r1, 0x7ffe) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xffffffffffffffc0, 0x800000000006, 0x9b72, 0x2, 0x8006) socket(0x22, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r2, 0x0, 0x9, 0x90) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r5, r4, 0x0, 0x10000) close_range$auto(0x2, r3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 39.825594565s ago: executing program 6 (id=4755): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyt1\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x1289c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_IOCTL_START_ACCEL_DEV(r1, 0x40096102, 0x0) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, 0x0, 0x91e2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004010) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) r3 = socket(0x11, 0x3, 0x9) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x80020009, 0xa, 0xeb1, 0x401, 0x8040) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) write$auto(0xffffffffffffffff, 0x0, 0xa) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) 38.412732377s ago: executing program 6 (id=4763): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, 0x0, 0x1) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r1, 0x540a, 0x0) unshare$auto(0x40000080) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/ieee80211/phy8/user_power\x00', 0x400840, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) 36.383535543s ago: executing program 6 (id=4768): clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) 35.059035924s ago: executing program 6 (id=4774): unshare$auto(0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) sendfile$auto(0x1, 0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) setfsuid$auto(0xee00) 32.362377506s ago: executing program 2 (id=4783): socket(0x2, 0x9, 0xffff8001) fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) read$auto_udf_dir_operations_udfdecl(r0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x2) timerfd_gettime$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x7, 0xae0}, {0x7, 0x2}}) lseek$auto(0xffffffffffffffff, 0x7fd, 0x1) set_mempolicy$auto(0x6, 0x0, 0x21) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 31.748548282s ago: executing program 2 (id=4784): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) write$auto(r1, &(0x7f0000000180)='!h\x8b\xaeE\xc5\xf3\xec@\xdbS\xcc\x04', 0x1) capset$auto(0x0, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000100)='./cgroup\x00', &(0x7f00000000c0)='./file0\x00') r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x10001}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) setreuid$auto(0x9, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r4 = geteuid() keyctl$auto(0x1f, r4, r4, 0x5, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x1e1e80, 0x62) 30.795775542s ago: executing program 2 (id=4788): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(r0, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/pagetypeinfo\x00', 0x109040, 0x0) ioctl$auto_FS_IOC_RESVSP(r1, 0x40305828, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/address\x00', 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram15\x00', 0x7e9d00, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 29.777387536s ago: executing program 1 (id=4792): mmap$auto(0x0, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x8, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x20202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2c476942", 0x25) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) bind$auto(0x3, 0x0, 0x67) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/dummy_pcm\x00', 0x80001, 0x0) pread64$auto(r1, 0x0, 0xf42c, 0x38) socketpair$auto(0x1e, 0x5, 0x40000, 0x0) write$auto(0x3, 0x0, 0x800) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video12\x00', 0x900, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sda1\x00', 0x44003, 0x0) ioctl$auto_BLKPG(r3, 0x1269, 0x300) 29.693859557s ago: executing program 2 (id=4794): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="592e651ee22371bab76f0efa882cd66d43dd3370f8906d523cdaab9fd0b1bfa4b229da363f2a04d9081ca34df959290a062c3e0bb78ddb28d43f5993301b4845e1bc34e3dd6287838c4ece05cfcb77a0ad7ca1f0a148116b9f47346ef1548290a8c3620211ef1cc5c24e075b083fa30d42505f73433e6a8d4b42a5104c1fec47cb496f849d3854dc9a1099ed8b4a6c1eb0250c3c86448f8c0bffb4b73061e4fe9ced8edbc702000000000000004b764883c42a16a18b01d4fa0174cfdf2b783095712adebadbb20c2c1bdf121fc1997c565a066ca437321201", @ANYRES16=r0, @ANYBLOB="010029bd7100f9db5f250200000008000300", @ANYRES32=r2, @ANYBLOB="08000a0100000000"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) socket(0x2, 0x9, 0xffff8001) fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) read$auto_udf_dir_operations_udfdecl(r4, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, 0x0, 0x2) lseek$auto(0xffffffffffffffff, 0x7fd, 0x1) set_mempolicy$auto(0x6, 0x0, 0x21) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 29.420829462s ago: executing program 9 (id=4795): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x80e, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 29.347630824s ago: executing program 1 (id=4796): close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80202, 0x0) (async) r1 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2, 0xa, 0x106) (async) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x06\x01e\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14N\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xd4f, 0x3) (async) preadv$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x2}, 0x3, 0x5, 0x0) sendfile$auto(r0, r1, 0x0, 0xfffffffffffffffe) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x7, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x2, 0x0) (async) socket(0x1e, 0x1, 0x3ff) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast2}, 0x51) (async) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x102, 0x0, 0x6) 29.231557527s ago: executing program 2 (id=4797): getcwd$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x402, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) sysfs$auto(0x2, 0x2000000000040, 0x0) r3 = socket(0x2, 0x3, 0xa) setsockopt$auto(r3, 0xfffffffe, 0x15, 0x0, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b62, r4) mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0xfffffffffffffffc, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0) ioctl$auto(r7, 0x4020565a, r6) rt_sigtimedwait$auto(0x0, &(0x7f0000000300)={@siginfo_0_0={0x0, 0x3, 0x0, @_sigpoll={0xc8}}}, 0x0, 0x8) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) r8 = socket(0x11, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f00000003c0), 0x5, 0x1000}, 0x5}, 0x2, 0x100) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') 29.105331819s ago: executing program 9 (id=4798): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x123040, 0x0) ioctl$auto(r0, 0x80004536, r0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/v4l-touch14\x00', 0x200, 0x0) mmap$auto(0x0, 0x2, 0xdb, 0x9b72, 0x6, 0x100000000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb5, r1, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyc2\x00', 0x80000, 0x0) r4 = gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) kill$auto(r4, 0xf) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000100)="17") read$auto(r2, 0x0, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r7 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0x200000, 0x0) mmap$auto(0xfffffffdffffffd5, 0xffffffffffeffffa, 0xf30, 0x17, 0xffffffffffffffff, 0xbffc) socketpair$auto(0x3, 0x3, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x21, 0x2, 0xa) write$auto(0x3, 0x0, 0x8100) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(r8, 0x0, 0x2) mmap$auto(0x8, 0x400008, 0xdf, 0x9b72, r7, 0x37f8) 29.024579398s ago: executing program 1 (id=4799): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x124a000, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) writev$auto(0xffffffffffffffff, 0x0, 0x20000003) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x32, 0x0, 0x6, 0x0, 0x81, 0x1}, 0x5}, 0x1fe, 0x6) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x8008, 0xfffc}, 0x1, 0x0) 28.590225858s ago: executing program 1 (id=4800): r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x105480, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, r0, 0x100007fff) (async) r1 = socket(0xa, 0x5, 0x84) (async) io_uring_setup$auto(0x401, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xe) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = getpid() pipe2$auto(&(0x7f00000000c0), 0x0) (async) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) ioctl$auto(r2, 0x40246f4c, 0x38) (async) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) 28.493987918s ago: executing program 1 (id=4801): mmap$auto(0x0, 0x400006, 0x6, 0x9b72, 0x2, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_pgetevents$auto(0x7, 0x9, 0x7ff, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1}}) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) getcwd$auto(0x0, 0xffffffffffffffff) (async) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) 28.430652184s ago: executing program 1 (id=4802): socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x448) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r1) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x5}, 0xa) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401b7, 0x7352, 0x2d, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x8, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x8002, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = syz_clone(0x8001800, &(0x7f0000000380)="80841a7e5f4cd53305b1cd819c2ce9212eb0ec55d1f7ea1bd9bf6548665d4007814834d5dae9c88172f103f36b323510ffde4b715b81084db72269f6377d36f188cb5eba347c3f60ad7423c1a8f4110fdbb839c579f3d78fca78011c870eb6d56316788eb99c0ad403", 0x69, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="c588e42208d73c3dacc7c6c029266395fda3b68b4343ab3e65b3cd74bc8d9ac63d31e0a771034caabaaefc4b805a210f0afda03d77b4bf0f855f3c088d1ce08b441b7589c609215630dd8177ac03c063c24691e8bd3c66") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r5, 0x0) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000580)=""/113, 0x71) rt_sigqueueinfo$auto(r4, 0x9, &(0x7f0000000500)={@siginfo_0_0={0xe4, 0x0, 0x8, @_timer={r5, 0x1, @sival_int=0x3}}}) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf2502"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 28.352248479s ago: executing program 9 (id=4803): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() (async) mmap$auto(0x6, 0x7f, 0x4003, 0x5af3, r0, 0x80000008000) (async) close_range$auto(r0, r0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) (async) io_uring_setup$auto(0xdd4, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/comedi/parameters/comedi_default_buf_maxsize_kb\x00', 0x420c0, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x14f682, 0x0) syz_open_procfs$namespace(r1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x3, 0x0, 0x18, 0xffffffffffffffff, 0x1fb) r3 = socket(0x23, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xcc_\x85|&\xcb\xde\x12\v\x02\xdf\x95N\'\xaa(3\xcd\xae\x8e\x9b\xc2\xcf/Z\xf7\x14r\x91w.\xd6\x96\xec&\x89\xbd\'\x88\x19il51l\xbfr\xb2\xadK\x1a\xf1\x01\xc4*\xe0\x00\xb9\xd9\xe5j\xc9\xd4U\x17Ny$\x10I\xd9\x1d\xda\xd8\x8f*+h]\xa4\xc7\xaeGn\xb5\xd1u\xfb\x1aCt\xe4g\xf2\x118\xaa\xf7\x8b^^Rg\xfa{x\x05\v\xa5y\xc0&\x02\xba\x1dY\xbf\xb7\xb6q\xc7\xfa\x1d\x16\xcf_\xba\xce\x01\x8b\xde\xefev\x10\xda\xc3\xf4\xe61l\xd4\x83OU1.f\xb9DV\xab\x92\xb3v\xb3Q}\xd8}N\xd8\x06\xd4\x9fum\xf1q\xa6\x7f9;\xdb\x1e\x7f\nPB]X\xf2\x14I~qG\xa1\rx\f\xde\xd4\"\'\xdc\xf5\xd8\xf1fcV\xad\xf3\x99\xeb\xe7\xdc\t!:e\xa4\x006\xf0\xbbt\x8b\xad-\xf3W\x95U\x94\x84\x04+\xc7\xf7\xe0\x87\x1e\x0e+a\xa1\x05\xa4\xcc\xac\xa2n\xb1\xa8\xdc\x16\x9c\xe3U)\xc6EE\xaf\'\xcd\'v2\x98d\x1b[5\x00'/441, 0x100000a3db) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd11\x00', 0x24040, 0x0) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) (async) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) r5 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x307082, 0x0) recvmmsg$auto(r5, 0x0, 0x0, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 28.169794538s ago: executing program 9 (id=4804): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xfffffffffffffffe, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x1000) madvise$auto(0x0, 0x200, 0x9) (async) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r1, 0xc0104d08, r1) (async, rerun: 32) mlock$auto(0x2000100000000, 0x7bfffffffffffffe) (rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw4\x00', 0xd8003, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mmap$auto(0xfffffffffffffffc, 0x4020009, 0x4000000000df, 0xeb1, 0x401, 0xd) (async, rerun: 64) r2 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@link_detach, 0x40) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = open(0x0, 0x161342, 0x100) write$auto(r4, &(0x7f0000000000)='}\x00', 0x5) (async) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 64) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) (async) r5 = memfd_create$auto(0x0, 0xe) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r6, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) (async, rerun: 32) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) (async) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000400)={r5, &(0x7f0000000240)="c099d4f256158c5b4b5d36e15687a9109c95538bdfd31f53bfc13156bb095ef179306bd35f514b7fd0e8f264772180a1003cb7c8ed16ebaa69dbcfe4e6e87f3252f3b3ba79354a5b2926f3cba5efb2f7b6fdba6a46ccf3ae4dd94e457105e25abcb3da080c37f4f68f5ff2e8f8759346d6c96cdd", 0x401, &(0x7f00000002c0)="1a8bceabafbb25d08f652c687c1f388ca9973a14723e848afc3fc44fd9cc23a4b89603b12d88063ffdd227ea32de58512be579d684d96b72a1580da5bf23aabbacbf103c2de01932583065382c323efc52d235b2d34869f90489fde45960c1c17a305669a2a0b6c1d3e82ecbe2789fae09ec6bc6c1ad40785e5a3328f48459ff3ef2b49519aa6bbff29d2abd049762df05cf8317", 0x1, &(0x7f0000000380)="723ec7b05c47aef595a509fa998c191b8582c5c30bc45e3b0ac2ade296bc0d3e519f8f95dca1f5f03b92c9b8770b796f472642b4cfcb3d03e460c788a47c94e7", &(0x7f00000003c0)=0x9}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="41dd8115896c8834601f7ce94754a3955d2c6dc71b40221d0aa9ec3d3498e0d3fbb98d410f259dbf841e87674978a65e8ba444d37caba2458b8913e0f024eafc8ddba4c808a745d272dffac021b9deaf3d174716d317f54f57be4221e72800000000000000021aa9cb1818911b5d76f41badf49deee03dbb36cd46f129c6e40d6dc763eefb48d9157e1bd809ad1023e738c356f15d052d55e177f2462c8d219a070cf444fe60ef940178eecdb38ec0e59de042617ed0925b8488ffa6ac96f69358d5874c9e2c3da2244019cb3b4fc6a048f62191ba77c975dca66b1d6cb6acf9", @ANYRES16=r8, @ANYBLOB="050725bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYBLOB="8ee41c9abb5a5bafe260f289ccefd7c9995136af14f0e8f858219f889eebccb57af4a23711330fdd11a072bf36b0e030cbf74752f32550f54aaef7bf6856eed92cc26cdb82406a094b28e8c013436a327e77ea0b5dfaa9b47fb0d4cd5d256be25d2258f52a36fde44ab867d23fdc4d7c6cc62caef07ad786f5aac1126f965540a2b1e11c22a43a2c1fdce6b88a76aa5a3994779da5892eda1856f0dc91df937789d042c652e8a6ac7391e4e907c1", @ANYBLOB="010027bd700000dcdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) (rerun: 64) 27.514339991s ago: executing program 2 (id=4805): unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/pagemap\x00', 0x200000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000040)=0x3, 0x269, 0x9, &(0x7f0000000080)={0xc1, 0x2}, &(0x7f00000000c0)=0x8, 0xc) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x5, 0x4000000000db, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4241, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto(r0, &(0x7f0000000140)='./file0\x00', 0x4, 0x37e8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open_tree$auto(0xffffffffffffffff, 0x0, 0x80) 26.982771283s ago: executing program 9 (id=4806): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) (async) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0x0, 0x13, 0x2, 0x400) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) (async) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) (async) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() (async) gettid() mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 26.001163471s ago: executing program 9 (id=4807): socket(0x2, 0x9, 0xffff8001) fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000480)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) read$auto_udf_dir_operations_udfdecl(r0, 0x0, 0x0) mmap$auto(0x8000000080000000, 0x8c, 0xd, 0x1c, 0xffffffffffffffff, 0x8000) epoll_create$auto(0xd) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) r1 = socket(0x1d, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r1) kexec_load$auto(0xf, 0x0, 0x0, 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x81, 0x0) madvise$auto(0x40, 0x7ff, 0x1ff) write$auto(r4, 0x0, 0x2) 19.279646753s ago: executing program 40 (id=4774): unshare$auto(0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) sendfile$auto(0x1, 0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) setfsuid$auto(0xee00) 13.264317389s ago: executing program 41 (id=4802): socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x448) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r1) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x5}, 0xa) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401b7, 0x7352, 0x2d, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x8, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x8002, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400000003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = syz_clone(0x8001800, &(0x7f0000000380)="80841a7e5f4cd53305b1cd819c2ce9212eb0ec55d1f7ea1bd9bf6548665d4007814834d5dae9c88172f103f36b323510ffde4b715b81084db72269f6377d36f188cb5eba347c3f60ad7423c1a8f4110fdbb839c579f3d78fca78011c870eb6d56316788eb99c0ad403", 0x69, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="c588e42208d73c3dacc7c6c029266395fda3b68b4343ab3e65b3cd74bc8d9ac63d31e0a771034caabaaefc4b805a210f0afda03d77b4bf0f855f3c088d1ce08b441b7589c609215630dd8177ac03c063c24691e8bd3c66") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r5, 0x0) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000580)=""/113, 0x71) rt_sigqueueinfo$auto(r4, 0x9, &(0x7f0000000500)={@siginfo_0_0={0xe4, 0x0, 0x8, @_timer={r5, 0x1, @sival_int=0x3}}}) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf2502"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 12.336267821s ago: executing program 42 (id=4805): unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/pagemap\x00', 0x200000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000040)=0x3, 0x269, 0x9, &(0x7f0000000080)={0xc1, 0x2}, &(0x7f00000000c0)=0x8, 0xc) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x5, 0x4000000000db, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4241, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto(r0, &(0x7f0000000140)='./file0\x00', 0x4, 0x37e8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open_tree$auto(0xffffffffffffffff, 0x0, 0x80) 12.003517801s ago: executing program 4 (id=4816): r0 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000000)=0x49) r1 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), 0xffffffffffffffff) r2 = setfsuid$auto(0xffffffffffffffff) r3 = clone3$auto(&(0x7f00000000c0)={0xc, 0x7fffffff, 0x8, 0x9, 0x1, 0x7fffffff, 0x5, 0x4, 0x80000000, 0x8, 0x5765}, 0xf6) msgctl$auto_IPC_INFO(0xfffffffa, 0x3, &(0x7f00000001c0)={{0x8, 0xffffffffffffffff, 0xee00, 0x7, 0x3, 0x400}, &(0x7f0000000140)=0x7f, &(0x7f0000000180)=0x4, 0x6, 0x4, 0x7fffffff, 0xaa, 0x1ff, 0x9, 0x92, 0xcd, @raw=0x6}) capget$auto(&(0x7f0000000240)={0x4, 0x0}, &(0x7f0000000280)={0x22a, 0x3, 0x40}) r6 = clone$auto(0xc, 0x3, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0xf, 0x400) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f0000002d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002cc0)={&(0x7f0000000340)={0x2970, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_CDEV={0x6e1, 0xe, 0x0, 0x1, [@nested={0x2a0, 0xd7, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x36}, @generic="0d61a92d7f4534200e75cd5abfdd1f02ed5809b6bae8431bf86464fd1077f29b5ed433f1ff4ba8f9598c8e937e90672ac634d5b633ce5d49fe330b7f1dff3ae54bc5bcf35ee51eb8b44fe7c413a8952a0f4144b85aaa92113063ebe8195f924a37da01cc88a07bc2c5fc2e36", @typed={0x46, 0xa, 0x0, 0x0, @binary="127bb858193b5fcccfe6afd63549ba7d7cd0482004b63959df2e050ae8775c07ef57d4e5ae15c1c416c29d3131cb88735c7656f93578b35088451b2f01c29936a274"}, @generic="5a8924c5f8da1f74598641edfe27cfec4650c5c6c4b22f3d48e01c24cbb9efdd41cb61ac3615e65c8876210991ccd659e979c2386ae56d3cfcbff4d9acd1f1c22c06bcf624f423a4339ffbf165d26029c0aa31bf4bff25f0820768d7314fbb9e474c220bc1a83e5bc7c1774dab7b23fc465c4f7e7a965b91d86b606b90937cc1b73816905c566786606e8c431575e858cb89d3792e3922fcbe690bbeef390717ac5d9542709cce7ac970e247cba7cc0c88b5c5ec7eafc769e022c21a756eff0e6e633bfe2d831efec3ef5cb053d2baa550d1804997e561a5ccfe023943b1d1ad81b122fb4fe66c1204eed2b4ea07bf", @generic="0df598cd0f545142ee19f7b564f2c6055b2e5d68dc198bb08c3c8b47e32d9e10269e3e62dd2dbb702732bb21c8689085cd76d410b03831273e99fcaa2523731869d47bd5945fe74a02aa8604c2b47d547678e7baa47d7fdde10ef4844f681589e337720417673e1f8cc808390e963e34ad424636555bcd4e9f269e3162e8aa53b2f9511a2fb22c21ea4b1a8deb0d41339e095b93256e84fcd5abbd4c8b2fa8b21c9d1ecb3c89aa7c02c6f5353e9cc4d8eb7da7ae7f571cccded818ae16261999b69ef92b851295c1d54744dc1fbea8e68af9dd7efb70623aae51aef3ff6639359710b460517c47c122672f70d1"]}, @generic="f6cb805d804eeafe565966d790f366b3a991ff233452bd9c036652f0d1c80fc1206d8b16173f1c5034fcd14d023cb8ceafaaef954309a678eb14b2134e", @generic="f9e05afe04902ce8f57ba7979590b6ee3017a090060cecaebe6f3be6104a9ba00449f1d63d43382339554af99983773b81f047f21f7d261f0773aaf1394edc12927971ed7f0d8aefd72555e704fa71f575739e3ce9726bdf8d0ea3b40b00e80f3876b8294e2b7c18f0e6d587036b09eec8cf212d78d5827dae0fb73564a84192426f7028a56d6798555eff46f697367ccd9f025e85a31028d44c5d733ca4774737874cd40d0e81c267d8661bf7650590390fd3dbc3a63ee42ab4b69f4fc5f4671be6b1ead40538dd17c99c7e5d15c67660f289ea683e3e23066e06c46dd3640382235a6f057b1e65", @typed={0x14, 0x151, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xd1, 0x0, 0x0, @uid=r2}, @nested={0x1d6, 0x8b, 0x0, 0x1, [@generic="df9d5a421b8e62baf6f36e640929f305e268b0589b33c5573bed872c1b5055c7e1df179b7cf87f5b086d023412ba17d88d3ef0bf35e114b1c9acb740b5dbb47bce81a5aea5c57a826f1605b182bb1de07cbda4985e022bf8b180daa5642afd7c53c393464fff0f87ca06cc172441199c1b46aaa9ad8fb56e76a0a7ec9d33f339de6cd1296c50feab41418abcf7b12536", @nested={0x4, 0x13d}, @typed={0xc, 0x9d, 0x0, 0x0, @u64=0xb15}, @generic="e4bfa3a5912dec9afa6d1cb48e7569dabd74f6b70f56c84156ec3a2d88a07a0ccc908895b91c454dc0fa8427b9d592b09bc5b9f9ec885b2ae0a78ab67ca0cc99b4ca8d69f62f015923cd4a261a011bd1d5750ccbfb2ca8ea3c2a36217b8c4d2043882e596650e02057fa5ac054dbf202c703d63b6eb272e2a770e959791e8c0d96918a0730bf0125d3f481b54860a273c1861e4abd3a72409abf275fd74a6b6a69ff99453eabd167312d8541989205b8818007956f9c46641bebd5259efdad75b7d4b3db386e7c35a6d17a77085e8ff5aeadc01b972c9d3f5d4ec5fdd3a22e652e54e06f6556c3698bcf502d", @nested={0x4, 0xd4}, @nested={0x4, 0xf0}, @typed={0x8, 0x12a, 0x0, 0x0, @pid=r3}, @generic="3b96e7a57817e148366796b5646be60e42983de5e95fb223c5ac89c96cccff85bf0b48c80b9939c1518d24e947e5276df6b3548e031e"]}, @typed={0xeb, 0x30, 0x0, 0x0, @binary="39ddf921b40c25cba4be78461d546223b990da4a07c341b5d4a166c85a9f928f6a8b98e82131d8a2c935f38151a317f175f4c58f55cf6f30d3b7c985a3a9068d3220371d349f6df5fdabde67ec158e7ad8881dfce7d4028535e0d9327f9081d2e98ee32ecbeac866313ffb4bbb4bbf5aacfa9a588683d0b7d6e593703ab929bf69a95d2d4329d1dca383a512f4db3d6a4feebeeb0c28b38049143f3b1bf3e7314ac5fb3b83caeecb42281f54d4bd9ded85fdb1fc30f67c695c851f92257e65b8aa11b84b80a475436c40652fa752ef255c0e53d4563eed76ec7ea5c2d2496f20dd60f52b42ac5a"}, @nested={0x28, 0x7, 0x0, 0x1, [@typed={0x14, 0xbb, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x10d, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x3}, @nested={0x4, 0xd7}]}, @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @typed={0x8, 0x88, 0x0, 0x0, @pid=r5}]}, @THERMAL_GENL_ATTR_TZ={0x226e, 0x1, 0x0, 0x1, [@generic="2f5a81c42dd0d4c8b5cdf52a7558f2fc09d4081f2adcdf80d12a3802fc5b1c9da472153f005c21b112c2ced117ff37f704fd578d856332b8f809915bc70fb9d5e480bfe614d3b4477d", @nested={0x10da, 0x74, 0x0, 0x1, [@generic="8f3a638491a5908b942ef84ade60d8bcc1a3337aa2fe0c982ce7f54805c91d8ee9a9b509ce89372ff79f8ffa4a3d36efe298d0a1aaf3953ca5fdd668968775496cf6f9f5ba4e81e6521deac4219b6a32c1efd9bee348", @generic="5616d3ab48f94213e7a8af18ef34b1992a7a3cc24273cef9af3ffe5b8d3f0ae6182a9e2b33f22a42c9271edb2e23ec94a6e247245750a4370a72f3c5ce80109fd8eb5261438c5bc6201a8874bddebcd96855ba", @typed={0x8, 0xa4, 0x0, 0x0, @pid=r6}, @generic="b58180658cc90302e72ae06ad38d35f274430b2a2505016829", @typed={0x8, 0x12b, 0x0, 0x0, @u32=0x5e}, @generic="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", @nested={0x4, 0xa7}]}, @typed={0x1004, 0x1d, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x2b, 0x0, 0x0, @str='-,/[[%$\x00'}, @nested={0x75, 0x22, 0x0, 0x1, [@generic="62c55de7b319234ef9a07a19837cde1f25cf2e0127308d91a29de903b691f4f290195e2e1e890bf7db3d20cd7a97db41d38eb9a5c177884ad88206ae2774e25013d75ca85fdd7709b991c8d0081d9d1e1ba47260d1afa581d2cfa094da82796053e65e1a5d76f2d571674fa956", @nested={0x4, 0xb6}]}, @generic="d527c23acaf0357aecd27e3b501255c132ab21257447f7d63d44fb0166eada400d86510f6d75e01ddf96b905bcc38ebb58253cc78ac9e44f04f993dab4087354ab068ae7fb9106dd570981d40ae28da2bffb4b725d6a3dc3d73755641242f5178a6e248a4924232b9f3d8105df34395430aec1a13edf69cea40d400f3e013dd5018e36182b0c83dedac73510a22b6988e92a4487f6b14c3a8da41d422bf050856e7c294a800e1262577dd8c450547cbb960a4469dc78a828690b1e9686"]}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x8}]}, 0x2970}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r7 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0) read$auto_check_wx_fops_(r7, &(0x7f0000002d80)=""/149, 0x95) sendmsg$auto_NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc041) writev$auto(r0, &(0x7f0000002f80)={&(0x7f0000002f40)="ff", 0x100}, 0x200) writev$auto(r0, &(0x7f0000003040)={&(0x7f0000002fc0)="f08b8a1a1ccf1809cc48bedb4daabc69954fc9b8f49916dc19bbefa6a07824e4dfe1b376f75710fe506c9e3d6a437b6346d3e87fe0e14fc7719c8ef2aa8df08714208698d7d20c7547f44d88501341356a5fb705238be71852dc44007b6dc819b6c3ed4602d5727adf7272d55f", 0x3}, 0xff) r8 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000003080), 0x18000, 0x0) read$auto_check_wx_fops_(r9, &(0x7f00000030c0)=""/136, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000031c0), r8) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r10, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x1c, r11, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r12 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000003300), r8) r13 = semctl$auto(0x7, 0x7b, 0x2, 0x8674) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000037c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003780)={&(0x7f0000003340)={0x42c, r12, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x40f, 0xc, 0x0, 0x1, [@nested={0x8c, 0x79, 0x0, 0x1, [@generic="dff2e870ce625fd8d9c5d6e96224d1532a31b2a5d963e57f5d496f0e2870888ae96412bf38cc7f8e83e3a4600decf886159930292f6957952cbbea0f1682b9e1b047d7ee0d7152f55cad72dc21e61b00447b834f46739a1f", @nested={0x4, 0x15a}, @generic="bb2a658a1daba39721d808757fb486bf726827d088127c3a2b50b1fd354af8b3979a89dc286b4bb2", @nested={0x4, 0x131}]}, @typed={0x8, 0xd7, 0x0, 0x0, @pid=r3}, @typed={0xf0, 0x74, 0x0, 0x0, @binary="469116ddf9f4ec9f1461963f10aaee73650832c62c22d5a2347dc0480b7ce4d9eceab22d925647fa3004e5700edbb6d815cf3b8be8961667ef732380c7ecd04add3406093619f2cb65554028664a4c047a531e8bc74d72db3a6a517dd66273eca1a5fd349a83a418fb13c9ee6f997a188718f5b94765360fcf28ce1c4847787dba3d26a7e82db611550d0e4b0b0c2413fa0d66ee571e1b8a525254443a753c8fc2a39383a9f3ee0874d65a9320b7533efa04c865a8ff0e400b95921be26aada893bce9fe1c08f0ed7d9f7535556dd25e85f61a9ec2875c0da31f9c706921f11441c4882f30edc7f91b656e24"}, @nested={0x39, 0x64, 0x0, 0x1, [@nested={0x4, 0x20}, @generic="c2760674e9b0baebb8dcfc8110ce14d25c7d1d8cee", @typed={0x8, 0x135, 0x0, 0x0, @pid=r13}, @nested={0x4, 0x8b}, @typed={0x8, 0xc4, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x146}, @nested={0x4, 0x8c}]}, @nested={0x101, 0x54, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @u32=0xfffffe00}, @generic="c1bece49078c58b5b12d1e004b26f2e675e6aedba593e1d7bbd9f1692762666b8c524f0d12cd79d714209ec60e0eb57fb47013b539191ce7f70b621158e27407b0fb4f095e4b1b147292cc1794cd3628df8873ab71173f8eff8ea16596ba8929a6f00f91087e3f0c1fc3dd7aaf0fea489aab759576fcc5e651d88a74ca5837ad607f1107a675d12488f7ae545b5831f7c06e613a0b662cb97a6074503a7ee4afd8dec33c0266cc64be377a66d5677fdaf6b1481ea75484c2d6081330018af49a713efe8cca3c37789e58a8fb67d1cde3382456c03c4ca9470f3940b1a1c5cb43d44301e21f", @nested={0x4, 0x10d}, @typed={0xc, 0xff, 0x0, 0x0, @u64=0x4}]}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x917}, @generic="ef1b106953f4a0a7abc52b736c82af7b5c24d3b7851ce2f647f45d671743c94cdc279c9dcac78f272b320218862453efdaf6071a6a94b19d6f59ac0709a75670c9ac897b61b3e5ed99221f45f5a491be518f4ff01ed21313d127012d8b2342ccd446b6b36582f49c3b1ca7455dd24f4f514c23066e144a956d94f2199f699c1db926f05c293326cb9bde7408a058f3ca5d013c1ee253535b2ab61c3be6b9fb2922da0b73bf241b3e357cc2c0f02c839ac2ae449b7ba9562aa549ca47b67a0a54e8a27b00faed00fec27abc", @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="c0ad3a75de8775d66cdb0980fd517de0803843ba40ef190677d86e22c4755f505c22236dac09246eff4f68737d957b9ab5344f1e140b9cac36fc654966510308011a058f277df520428c471a13a123df1830c9468ed0a4e34410a09b2339b199c45121f6ed664e9c77ad532f"]}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fff}]}, 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) io_uring_setup$auto(0x590, &(0x7f0000003800)={0x2, 0x3ff, 0x53aa6222, 0x4, 0x2, 0x7, r9, [0x8, 0x8, 0x6], {0x0, 0x9, 0x2, 0x1, 0xb, 0x8, 0x7, 0x20, 0xba}, {0x80000000, 0x1, 0x5, 0x3, 0x200, 0x1, 0xbf, 0x0, 0xd601}}) r14 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000038c0), r10) sendmsg$auto_OVS_METER_CMD_FEATURES(r10, &(0x7f00000039c0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x6c, r14, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x42}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_USED={0xc}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_USED={0xc, 0x5, 0xf3c}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfd}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0xba}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0xfbba}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x101, 0x401}}]}, 0x6c}}, 0x80) ioctl$auto_VHOST_SET_OWNER(r8, 0xaf01, 0x0) r15 = fcntl$auto_F_UNLCK(r7, 0xfffffffe, 0x2) r16 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000003a00), 0x280000, 0x0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r15, 0x40285881, &(0x7f0000003a40)={r16, 0x0, 0xe62, 0x1ff, 0x81, 0x100000000}) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r8, &(0x7f0000003bc0)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x89808c}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b00)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xe8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x200}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x87}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7fff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2040) 10.20724218s ago: executing program 43 (id=4807): socket(0x2, 0x9, 0xffff8001) fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000480)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) read$auto_udf_dir_operations_udfdecl(r0, 0x0, 0x0) mmap$auto(0x8000000080000000, 0x8c, 0xd, 0x1c, 0xffffffffffffffff, 0x8000) epoll_create$auto(0xd) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) r1 = socket(0x1d, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r1) kexec_load$auto(0xf, 0x0, 0x0, 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x81, 0x0) madvise$auto(0x40, 0x7ff, 0x1ff) write$auto(r4, 0x0, 0x2) 8.315519869s ago: executing program 4 (id=4818): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_DP_ATTR_USER_FEATURES={0x0, 0x5, 0xffff}]}, 0xffffffffffffffc7}, 0x1, 0x0, 0x0, 0x20040cc4}, 0x4004450) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0xfffffffffffffffc, 0xb4d1}, 0x7}, 0x8, 0x0) mmap$auto(0x0, 0x240009, 0xdf, 0x8000009b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)={0x9, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x6}]}) setsockopt$auto(r1, 0x0, 0x6, &(0x7f0000000040)='/dev/nullb0\x00', 0x400) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x5d3, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x8, 0x0, 0xa) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 6.533477106s ago: executing program 4 (id=4819): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) r1 = socket(0x11, 0xa, 0x9) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x8) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x7f835763b555bbe0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xe187) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x0f\x97\xa1\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd3lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\xfa\v?\\#\xfc\x15-\xbc\xcd$\x83\xcf\xc5D\xcc', 0xc8) socket(0x1f, 0x1, 0x8) keyctl$auto(0x23, 0x1, 0x6, 0x3, 0x9) prctl$auto(0x1000000003b, 0x80001, 0xffffffffffffffff, 0x200000005, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 4.624215331s ago: executing program 4 (id=4820): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) pipe$auto(&(0x7f0000000080)=0xe7da) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) dup2$auto(0x0, 0x4) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x0, 0x0) socket(0x29, 0x2, 0x0) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r0, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) 1.372498453s ago: executing program 4 (id=4821): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x13, r2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 0s ago: executing program 4 (id=4822): socket(0xa, 0x1, 0x84) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0xfffffffffffffc00, 0x240029, 0x7ff, 0x8000009b72, r0, 0x28000) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x10080, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/user_power\x00', 0x60a40, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): ][T25982] macvtap0: entered allmulticast mode [ 1530.517699][T25982] veth0_macvtap: entered allmulticast mode [ 1532.257694][T26014] serio: Serial port ttyS0 [ 1532.329639][T26015] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 1532.386880][T26015] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1532.386880][T26015] [ 1534.560118][T26060] serio: Serial port ttyS0 [ 1537.210285][T17979] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 903 with max blocks 23 with error 117 [ 1537.266055][T17979] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1537.266055][T17979] [ 1537.555807][T26105] netlink: 346 bytes leftover after parsing attributes in process `syz.5.4295'. [ 1537.757005][T26113] serio: Serial port ttyS0 [ 1538.792288][T17981] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1538.911384][T17981] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1538.911384][T17981] [ 1540.146641][T26164] serio: Serial port ttyS0 [ 1541.812084][T13929] Bluetooth: hci4: Unexpected cc 0x7c89 with no status [ 1544.192368][T26243] FAULT_INJECTION: forcing a failure. [ 1544.192368][T26243] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.237220][T26213] Process accounting paused [ 1544.252721][T26243] CPU: 0 UID: 0 PID: 26243 Comm: syz.3.4321 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1544.252767][T26243] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1544.252779][T26243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1544.252794][T26243] Call Trace: [ 1544.252803][T26243] [ 1544.252813][T26243] dump_stack_lvl+0x100/0x190 [ 1544.252854][T26243] should_fail_ex.cold+0x5/0xa [ 1544.252888][T26243] should_failslab+0xc2/0x120 [ 1544.252912][T26243] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1544.252942][T26243] ? single_open+0x4d/0x1d0 [ 1544.252977][T26243] ? __pfx_binder_features_show+0x10/0x10 [ 1544.253017][T26243] single_open+0x4d/0x1d0 [ 1544.253049][T26243] do_dentry_open+0x6d8/0x1660 [ 1544.253088][T26243] ? __pfx_binder_features_open+0x10/0x10 [ 1544.253133][T26243] vfs_open+0x82/0x3f0 [ 1544.253165][T26243] path_openat+0x208c/0x31a0 [ 1544.253198][T26243] ? __pfx_path_openat+0x10/0x10 [ 1544.253231][T26243] do_file_open+0x20e/0x430 [ 1544.253257][T26243] ? __pfx_do_file_open+0x10/0x10 [ 1544.253301][T26243] ? alloc_fd+0x476/0x790 [ 1544.253343][T26243] ? do_getname+0x191/0x390 [ 1544.253374][T26243] do_sys_openat2+0x10d/0x1e0 [ 1544.253405][T26243] ? __pfx_do_sys_openat2+0x10/0x10 [ 1544.253437][T26243] ? __x64_sys_close_range+0x2d9/0x5d0 [ 1544.253469][T26243] __x64_sys_openat+0x12d/0x210 [ 1544.253501][T26243] ? __pfx___x64_sys_openat+0x10/0x10 [ 1544.253543][T26243] do_syscall_64+0x106/0xf80 [ 1544.253570][T26243] ? clear_bhb_loop+0x40/0x90 [ 1544.253606][T26243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.253632][T26243] RIP: 0033:0x7f58abb9c629 [ 1544.253652][T26243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.253678][T26243] RSP: 002b:00007f58aca77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1544.253702][T26243] RAX: ffffffffffffffda RBX: 00007f58abe15fa0 RCX: 00007f58abb9c629 [ 1544.253719][T26243] RDX: 0000000000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1544.253735][T26243] RBP: 00007f58abc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1544.253750][T26243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.253766][T26243] R13: 00007f58abe16038 R14: 00007f58abe15fa0 R15: 00007ffcb81c09d8 [ 1544.253798][T26243] [ 1545.877644][T26269] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1545.950342][T26269] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1545.950342][T26269] [ 1546.031351][T26269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4328'. [ 1546.258361][T26273] serio: Serial port ttyS0 [ 1546.437652][T26281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1546.501818][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.510224][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.403686][ C0] sched: DL replenish lagged too much [ 1552.146535][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.146569][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.161902][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.161953][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.182776][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.182808][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.199001][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.199051][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.213723][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.213750][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.228633][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.228682][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.248422][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.248449][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.263420][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.263469][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.277085][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.277110][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.292639][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.292686][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.305851][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.305876][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.321984][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.322050][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.336361][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.336388][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.351403][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.351450][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.364747][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.364775][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.380046][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.380096][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.396619][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.396646][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.411448][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.411496][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.424790][T13929] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1552.424816][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.440833][T13929] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1552.440881][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.454250][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.461785][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.467890][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.478113][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.489533][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.499894][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.505993][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.513503][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.521004][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.528730][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.543782][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.551994][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.559766][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.567484][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.573553][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.581130][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.587757][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.595933][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.602738][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.610386][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.616425][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.624141][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.630218][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.638711][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.645493][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.653024][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.662718][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.670501][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.676655][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.686715][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.692731][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.703703][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.709726][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.718139][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.724269][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.731912][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.738116][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.745767][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.751777][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.759943][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.773766][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.781304][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.787459][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.804533][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.812226][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.820651][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.826785][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.834553][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.840698][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.848287][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.856625][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.864771][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.870741][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.878470][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.884520][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.899339][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.913030][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.920683][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.927549][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.935291][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.941415][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.953779][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.959819][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.967898][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.973954][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.981450][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.987456][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1552.995753][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.001716][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.011061][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.023834][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.031373][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.042334][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.050056][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.057612][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.065416][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.071877][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.079544][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.085756][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.093256][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.099809][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.111382][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.118103][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.125837][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.131800][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.139521][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.145855][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.153359][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.164564][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.172123][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.178287][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.185857][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.191821][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.203699][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.209675][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.217837][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.224308][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.231812][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.238734][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.246295][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.252551][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.260364][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.266473][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.274062][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.280010][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.288224][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.294386][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.302368][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.308372][T13929] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1553.316750][T13929] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1553.944104][T26329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 1554.336842][T26332] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 1554.770339][T26350] serio: Serial port ttyS0 [ 1555.300439][T26354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4346'. [ 1556.809809][T26393] FAULT_INJECTION: forcing a failure. [ 1556.809809][T26393] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.850838][T26393] CPU: 0 UID: 0 PID: 26393 Comm: syz.6.4355 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1556.850885][T26393] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1556.850897][T26393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.850914][T26393] Call Trace: [ 1556.850922][T26393] [ 1556.850932][T26393] dump_stack_lvl+0x100/0x190 [ 1556.850973][T26393] should_fail_ex.cold+0x5/0xa [ 1556.851002][T26393] should_failslab+0xc2/0x120 [ 1556.851026][T26393] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1556.851062][T26393] ? __d_alloc+0x34/0xa80 [ 1556.851093][T26393] __d_alloc+0x34/0xa80 [ 1556.851120][T26393] d_alloc+0x4a/0x1e0 [ 1556.851147][T26393] lookup_one_qstr_excl+0x175/0x250 [ 1556.851179][T26393] start_dirop+0x59/0xb0 [ 1556.851216][T26393] simple_start_creating+0xf9/0x110 [ 1556.851253][T26393] ? __pfx_simple_start_creating+0x10/0x10 [ 1556.851291][T26393] ? mntput+0x70/0xa0 [ 1556.851325][T26393] ? simple_pin_fs+0xa3/0x190 [ 1556.851359][T26393] debugfs_start_creating.part.0+0x82/0x170 [ 1556.851396][T26393] __debugfs_create_file+0xb3/0x4f0 [ 1556.851435][T26393] debugfs_create_file_full+0x41/0x60 [ 1556.851473][T26393] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1556.851500][T26393] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1556.851523][T26393] ? rcu_is_watching+0x12/0xc0 [ 1556.851584][T26393] ? lockdep_init_map_type+0x5c/0x250 [ 1556.851621][T26393] preinit_net.part.0+0x24e/0x8f0 [ 1556.851651][T26393] copy_net_ns+0x339/0x7c0 [ 1556.851685][T26393] create_new_namespaces+0x3ea/0xac0 [ 1556.851725][T26393] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1556.851754][T26393] ksys_unshare+0x455/0xab0 [ 1556.851786][T26393] ? __pfx_ksys_unshare+0x10/0x10 [ 1556.851829][T26393] __x64_sys_unshare+0x31/0x40 [ 1556.851858][T26393] do_syscall_64+0x106/0xf80 [ 1556.851885][T26393] ? clear_bhb_loop+0x40/0x90 [ 1556.851916][T26393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.851942][T26393] RIP: 0033:0x7fb1a7b9c629 [ 1556.851962][T26393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.851985][T26393] RSP: 002b:00007fb1a8a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1556.852009][T26393] RAX: ffffffffffffffda RBX: 00007fb1a7e15fa0 RCX: 00007fb1a7b9c629 [ 1556.852025][T26393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1556.852041][T26393] RBP: 00007fb1a7c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1556.852055][T26393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1556.852070][T26393] R13: 00007fb1a7e16038 R14: 00007fb1a7e15fa0 R15: 00007fffbba3f3a8 [ 1556.852102][T26393] [ 1557.268419][T13929] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 1558.797386][T26424] serio: Serial port ttyS0 [ 1558.852233][T26426] futex_wake_op: syz.5.4361 tries to shift op by -2048; fix this program [ 1559.253297][T26418] Process accounting resumed [ 1559.690841][T26452] FAULT_INJECTION: forcing a failure. [ 1559.690841][T26452] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.783578][T26452] CPU: 0 UID: 0 PID: 26452 Comm: syz.6.4368 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1559.783622][T26452] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1559.783633][T26452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1559.783648][T26452] Call Trace: [ 1559.783656][T26452] [ 1559.783666][T26452] dump_stack_lvl+0x100/0x190 [ 1559.783705][T26452] should_fail_ex.cold+0x5/0xa [ 1559.783733][T26452] should_failslab+0xc2/0x120 [ 1559.783756][T26452] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1559.783791][T26452] ? __d_alloc+0x34/0xa80 [ 1559.783820][T26452] __d_alloc+0x34/0xa80 [ 1559.783847][T26452] d_alloc+0x4a/0x1e0 [ 1559.783873][T26452] lookup_one_qstr_excl+0x175/0x250 [ 1559.783905][T26452] start_creating_noperm+0x90/0xd0 [ 1559.783944][T26452] do_mq_open+0x250/0x9c0 [ 1559.783978][T26452] ? __pfx_do_mq_open+0x10/0x10 [ 1559.784015][T26452] __x64_sys_mq_open+0x152/0x1e0 [ 1559.784046][T26452] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1559.784091][T26452] do_syscall_64+0x106/0xf80 [ 1559.784117][T26452] ? clear_bhb_loop+0x40/0x90 [ 1559.784146][T26452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.784170][T26452] RIP: 0033:0x7fb1a7b9c629 [ 1559.784189][T26452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.784212][T26452] RSP: 002b:00007fb1a8a18028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1559.784235][T26452] RAX: ffffffffffffffda RBX: 00007fb1a7e15fa0 RCX: 00007fb1a7b9c629 [ 1559.784251][T26452] RDX: 0000000000000008 RSI: 0000000000000dd1 RDI: 0000200000000000 [ 1559.784266][T26452] RBP: 00007fb1a7c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1559.784280][T26452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.784294][T26452] R13: 00007fb1a7e16038 R14: 00007fb1a7e15fa0 R15: 00007fffbba3f3a8 [ 1559.784325][T26452] [ 1559.980435][T26460] FAULT_INJECTION: forcing a failure. [ 1559.980435][T26460] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.993168][T26460] CPU: 0 UID: 0 PID: 26460 Comm: syz.5.4369 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1559.993209][T26460] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1559.993220][T26460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1559.993234][T26460] Call Trace: [ 1559.993243][T26460] [ 1559.993253][T26460] dump_stack_lvl+0x100/0x190 [ 1559.993293][T26460] should_fail_ex.cold+0x5/0xa [ 1559.993320][T26460] should_failslab+0xc2/0x120 [ 1559.993343][T26460] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1559.993377][T26460] ? security_inode_alloc+0x3b/0x2c0 [ 1559.993416][T26460] ? lockdep_init_map_type+0x5c/0x250 [ 1559.993450][T26460] security_inode_alloc+0x3b/0x2c0 [ 1559.993485][T26460] inode_init_always_gfp+0xced/0x1040 [ 1559.993526][T26460] alloc_inode+0x8e/0x250 [ 1559.993555][T26460] sock_alloc+0x44/0x280 [ 1559.993582][T26460] ? security_socket_create+0x7f/0x250 [ 1559.993615][T26460] __sock_create+0xc2/0x860 [ 1559.993653][T26460] __sys_socket+0x14d/0x260 [ 1559.993688][T26460] ? __pfx___sys_socket+0x10/0x10 [ 1559.993731][T26460] __x64_sys_socket+0x72/0xb0 [ 1559.993764][T26460] ? lockdep_hardirqs_on+0x78/0x100 [ 1559.993790][T26460] do_syscall_64+0x106/0xf80 [ 1559.993814][T26460] ? clear_bhb_loop+0x40/0x90 [ 1559.993843][T26460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.993867][T26460] RIP: 0033:0x7ff94a59c629 [ 1559.993887][T26460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.993910][T26460] RSP: 002b:00007ff94b419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1559.993933][T26460] RAX: ffffffffffffffda RBX: 00007ff94a816180 RCX: 00007ff94a59c629 [ 1559.993949][T26460] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 1559.993963][T26460] RBP: 00007ff94a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1559.993978][T26460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.993993][T26460] R13: 00007ff94a816218 R14: 00007ff94a816180 R15: 00007ffe540962f8 [ 1559.994023][T26460] [ 1559.994057][T26460] socket: no more sockets [ 1561.140928][T26481] serio: Serial port ttyS0 [ 1563.615262][T26526] serio: Serial port ttyS0 [ 1564.697076][T26546] futex_wake_op: syz.6.4388 tries to shift op by -2048; fix this program [ 1564.737111][T26546] futex_wake_op: syz.6.4388 tries to shift op by -2048; fix this program [ 1564.775247][T26547] 0x000000000001-0x000000020000 : "" [ 1564.833796][T26547] ftl_cs: FTL header corrupt! [ 1565.013260][T26550] ERROR: Out of memory at tomoyo_memory_ok. [ 1567.928275][T26609] serio: Serial port ttyS0 [ 1572.625198][T26680] serio: Serial port ttyS0 [ 1572.845263][T26683] FAULT_INJECTION: forcing a failure. [ 1572.845263][T26683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.044383][T26683] CPU: 0 UID: 0 PID: 26683 Comm: syz.5.4408 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1573.044433][T26683] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1573.044445][T26683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1573.044460][T26683] Call Trace: [ 1573.044470][T26683] [ 1573.044480][T26683] dump_stack_lvl+0x100/0x190 [ 1573.044522][T26683] should_fail_ex.cold+0x5/0xa [ 1573.044551][T26683] _copy_to_iter+0x5a4/0x1720 [ 1573.044595][T26683] ? __pfx__copy_to_iter+0x10/0x10 [ 1573.044633][T26683] ? __up_read+0x2c5/0x700 [ 1573.044669][T26683] ? __pfx___up_read+0x10/0x10 [ 1573.044703][T26683] ? seq_read_iter+0xd33/0x1270 [ 1573.044738][T26683] ? seq_read_iter+0xd33/0x1270 [ 1573.044779][T26683] seq_read_iter+0xdab/0x1270 [ 1573.044828][T26683] seq_read+0x33b/0x4c0 [ 1573.044863][T26683] ? __pfx_seq_read+0x10/0x10 [ 1573.044897][T26683] ? __pfx___might_resched+0x10/0x10 [ 1573.044949][T26683] ? rw_verify_area+0xce/0x6d0 [ 1573.044981][T26683] ? __pfx_seq_read+0x10/0x10 [ 1573.045016][T26683] vfs_read+0x1e4/0xb30 [ 1573.045056][T26683] ? __pfx_vfs_read+0x10/0x10 [ 1573.045091][T26683] ? __fget_files+0x215/0x3d0 [ 1573.045135][T26683] ? __fget_files+0x21f/0x3d0 [ 1573.045180][T26683] ksys_read+0x12a/0x250 [ 1573.045224][T26683] ? __pfx_ksys_read+0x10/0x10 [ 1573.045269][T26683] do_syscall_64+0x106/0xf80 [ 1573.045296][T26683] ? clear_bhb_loop+0x40/0x90 [ 1573.045327][T26683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.045353][T26683] RIP: 0033:0x7ff94a59c629 [ 1573.045374][T26683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.045398][T26683] RSP: 002b:00007ff94b45b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1573.045421][T26683] RAX: ffffffffffffffda RBX: 00007ff94a815fa0 RCX: 00007ff94a59c629 [ 1573.045438][T26683] RDX: 0000000000000ffc RSI: 0000200000000580 RDI: 0000000000000007 [ 1573.045454][T26683] RBP: 00007ff94a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1573.045469][T26683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.045484][T26683] R13: 00007ff94a816038 R14: 00007ff94a815fa0 R15: 00007ffe540962f8 [ 1573.045516][T26683] [ 1573.725245][T26692] netlink: get zone limit has 8 unknown bytes [ 1575.366824][T26688] Process accounting resumed [ 1576.030959][T26730] wlan1: mtu less than device minimum [ 1576.662326][T26732] sp0: Synchronizing with TNC [ 1577.693452][T26747] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 1578.200668][T26736] Process accounting resumed [ 1578.921271][T26758] zswap: compressor 0 not available [ 1579.536440][T26774] FAULT_INJECTION: forcing a failure. [ 1579.536440][T26774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1579.608246][T26774] CPU: 0 UID: 0 PID: 26774 Comm: syz.0.4427 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1579.608291][T26774] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1579.608303][T26774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1579.608318][T26774] Call Trace: [ 1579.608326][T26774] [ 1579.608336][T26774] dump_stack_lvl+0x100/0x190 [ 1579.608390][T26774] should_fail_ex.cold+0x5/0xa [ 1579.608418][T26774] _copy_to_iter+0x5a4/0x1720 [ 1579.608461][T26774] ? __pfx__copy_to_iter+0x10/0x10 [ 1579.608496][T26774] ? __up_read+0x2c5/0x700 [ 1579.608532][T26774] ? __pfx___up_read+0x10/0x10 [ 1579.608564][T26774] ? seq_read_iter+0xd33/0x1270 [ 1579.608597][T26774] ? seq_read_iter+0xd33/0x1270 [ 1579.608644][T26774] seq_read_iter+0xdab/0x1270 [ 1579.608690][T26774] seq_read+0x33b/0x4c0 [ 1579.608725][T26774] ? __pfx_seq_read+0x10/0x10 [ 1579.608757][T26774] ? __pfx___might_resched+0x10/0x10 [ 1579.608808][T26774] ? rw_verify_area+0xce/0x6d0 [ 1579.608839][T26774] ? __pfx_seq_read+0x10/0x10 [ 1579.608873][T26774] vfs_read+0x1e4/0xb30 [ 1579.608912][T26774] ? __pfx_vfs_read+0x10/0x10 [ 1579.608945][T26774] ? __fget_files+0x215/0x3d0 [ 1579.608987][T26774] ? __fget_files+0x21f/0x3d0 [ 1579.609031][T26774] ksys_read+0x12a/0x250 [ 1579.609066][T26774] ? __pfx_ksys_read+0x10/0x10 [ 1579.609109][T26774] do_syscall_64+0x106/0xf80 [ 1579.609135][T26774] ? clear_bhb_loop+0x40/0x90 [ 1579.609163][T26774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.609188][T26774] RIP: 0033:0x7f7d0c19c629 [ 1579.609208][T26774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.609232][T26774] RSP: 002b:00007f7d0d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1579.609255][T26774] RAX: ffffffffffffffda RBX: 00007f7d0c415fa0 RCX: 00007f7d0c19c629 [ 1579.609271][T26774] RDX: 0000000000000ffc RSI: 0000200000000580 RDI: 0000000000000007 [ 1579.609286][T26774] RBP: 00007f7d0c232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1579.609300][T26774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.609315][T26774] R13: 00007f7d0c416038 R14: 00007f7d0c415fa0 R15: 00007fff3af6a9a8 [ 1579.609344][T26774] [ 1580.969129][T26323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1580.986993][T26323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1580.998625][T26323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1581.006816][T26323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1581.014525][T26323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1582.112447][T26786] chnl_net:caif_netlink_parms(): no params data found [ 1583.032883][T26786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.070201][T26786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.119041][T26786] bridge_slave_0: entered allmulticast mode [ 1583.129071][T26323] Bluetooth: hci1: command tx timeout [ 1583.163897][T26786] bridge_slave_0: entered promiscuous mode [ 1583.210219][T26786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.240679][T26786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.261183][T26786] bridge_slave_1: entered allmulticast mode [ 1583.317815][T26786] bridge_slave_1: entered promiscuous mode [ 1583.440316][T26786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.514403][T26786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.597926][T26807] Invalid ELF header magic: != ELF [ 1583.673943][T26786] team0: Port device team_slave_0 added [ 1583.709989][T26786] team0: Port device team_slave_1 added [ 1583.853570][T26786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.887576][T26786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.995655][T26786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.039697][T26786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.077197][T26786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.124999][T26810] netlink: 'syz.0.4436': attribute type 12 has an invalid length. [ 1584.175120][T26810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4436'. [ 1584.209393][T26786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.474069][T26786] hsr_slave_0: entered promiscuous mode [ 1584.501493][T26786] hsr_slave_1: entered promiscuous mode [ 1585.208218][T26323] Bluetooth: hci1: command tx timeout [ 1585.330493][T26786] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1585.395890][T26786] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1585.462054][T26786] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1585.793451][T26786] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1586.385718][T26786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.674909][T26786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.812927][T13097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.820147][T13097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.998837][T21919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.006132][T21919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.295859][T26323] Bluetooth: hci1: command tx timeout [ 1587.894351][T26786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1588.157356][T26849] netlink: 'syz.0.4443': attribute type 4 has an invalid length. [ 1588.300963][T26849] netlink: 'syz.0.4443': attribute type 1 has an invalid length. [ 1588.702539][T26786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.370641][T26323] Bluetooth: hci1: command tx timeout [ 1589.945997][T26786] veth0_vlan: entered promiscuous mode [ 1590.009206][T26786] veth1_vlan: entered promiscuous mode [ 1590.175777][T26786] veth0_macvtap: entered promiscuous mode [ 1590.254210][T26786] veth1_macvtap: entered promiscuous mode [ 1590.338614][T26786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.468791][T26786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.535923][T21917] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.603748][T21917] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.682702][T21917] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.712609][T21917] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.078053][T21917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.119448][T21917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.235224][T17981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.274598][T17981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.910777][T26899] futex_wake_op: syz.5.4454 tries to shift op by -2048; fix this program [ 1592.004442][T26899] futex_wake_op: syz.5.4454 tries to shift op by -2048; fix this program [ 1592.065967][T26909] 0x000000000001-0x000000020000 : "" [ 1592.158558][T26909] ftl_cs: FTL header corrupt! [ 1592.395444][T26916] ERROR: Out of memory at tomoyo_memory_ok. [ 1592.720091][T26922] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 1594.383551][T26960] netlink: set zone limit has 8 unknown bytes [ 1594.593446][T26965] netlink: 980 bytes leftover after parsing attributes in process `syz.5.4465'. [ 1594.646555][T26970] netlink: 980 bytes leftover after parsing attributes in process `syz.5.4465'. [ 1596.074848][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4472'. [ 1596.213189][T27003] FAULT_INJECTION: forcing a failure. [ 1596.213189][T27003] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.299307][T27003] CPU: 0 UID: 0 PID: 27003 Comm: syz.5.4473 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1596.299352][T27003] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1596.299364][T27003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1596.299384][T27003] Call Trace: [ 1596.299393][T27003] [ 1596.299406][T27003] dump_stack_lvl+0x100/0x190 [ 1596.299448][T27003] should_fail_ex.cold+0x5/0xa [ 1596.299477][T27003] should_failslab+0xc2/0x120 [ 1596.299501][T27003] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1596.299532][T27003] ? sctp_transport_new+0xa4/0x760 [ 1596.299565][T27003] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1596.299600][T27003] sctp_transport_new+0xa4/0x760 [ 1596.299635][T27003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1596.299679][T27003] sctp_assoc_add_peer+0x302/0x14f0 [ 1596.299719][T27003] sctp_connect_new_asoc+0x1f8/0x770 [ 1596.299756][T27003] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1596.299797][T27003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1596.299853][T27003] sctp_sendmsg+0x171a/0x22b0 [ 1596.299893][T27003] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1596.299926][T27003] ? do_user_addr_fault+0x8d6/0x12f0 [ 1596.299969][T27003] ? aa_sk_perm+0x309/0xaa0 [ 1596.300010][T27003] ? __pfx_aa_sk_perm+0x10/0x10 [ 1596.300054][T27003] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1596.300094][T27003] inet_sendmsg+0x11c/0x140 [ 1596.300130][T27003] ____sys_sendmsg+0x9ad/0xc30 [ 1596.300168][T27003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1596.300226][T27003] ? futex_unqueue+0x133/0x2c0 [ 1596.300263][T27003] ___sys_sendmsg+0x190/0x1e0 [ 1596.300302][T27003] ? __pfx____sys_sendmsg+0x10/0x10 [ 1596.300338][T27003] ? __pfx___futex_wait+0x10/0x10 [ 1596.300374][T27003] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1596.300412][T27003] ? find_held_lock+0x2b/0x80 [ 1596.300453][T27003] __sys_sendmmsg+0x205/0x430 [ 1596.300485][T27003] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1596.300521][T27003] ? __pfx_do_futex+0x10/0x10 [ 1596.300595][T27003] ? xfd_validate_state+0x129/0x190 [ 1596.300639][T27003] __x64_sys_sendmmsg+0x9c/0x100 [ 1596.300666][T27003] ? lockdep_hardirqs_on+0x78/0x100 [ 1596.300692][T27003] do_syscall_64+0x106/0xf80 [ 1596.300719][T27003] ? clear_bhb_loop+0x40/0x90 [ 1596.300749][T27003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.300775][T27003] RIP: 0033:0x7ff94a59c629 [ 1596.300795][T27003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.300820][T27003] RSP: 002b:00007ff94b45b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1596.300849][T27003] RAX: ffffffffffffffda RBX: 00007ff94a815fa0 RCX: 00007ff94a59c629 [ 1596.300866][T27003] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000005 [ 1596.300881][T27003] RBP: 00007ff94a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1596.300897][T27003] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 1596.300912][T27003] R13: 00007ff94a816038 R14: 00007ff94a815fa0 R15: 00007ffe540962f8 [ 1596.300944][T27003] [ 1599.941067][T27069] netlink: 326 bytes leftover after parsing attributes in process `syz.5.4484'. [ 1600.033212][T27065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4484'. [ 1601.183593][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4488'. [ 1602.707506][T27113] netlink: 350 bytes leftover after parsing attributes in process `syz.6.4494'. [ 1603.768240][T27134] FAULT_INJECTION: forcing a failure. [ 1603.768240][T27134] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.896447][T27135] FAULT_INJECTION: forcing a failure. [ 1603.896447][T27135] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.996986][T27134] CPU: 0 UID: 0 PID: 27134 Comm: syz.5.4497 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1603.997029][T27134] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1603.997041][T27134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1603.997055][T27134] Call Trace: [ 1603.997063][T27134] [ 1603.997072][T27134] dump_stack_lvl+0x100/0x190 [ 1603.997113][T27134] should_fail_ex.cold+0x5/0xa [ 1603.997139][T27134] should_failslab+0xc2/0x120 [ 1603.997162][T27134] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1603.997196][T27134] ? security_file_alloc+0x34/0x2c0 [ 1603.997234][T27134] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1603.997262][T27134] security_file_alloc+0x34/0x2c0 [ 1603.997314][T27134] init_file+0x95/0x480 [ 1603.997340][T27134] alloc_empty_file+0x73/0x1c0 [ 1603.997368][T27134] alloc_file_pseudo+0x13a/0x230 [ 1603.997397][T27134] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1603.997426][T27134] ? alloc_fd+0x476/0x790 [ 1603.997467][T27134] sock_alloc_file+0x50/0x210 [ 1603.997497][T27134] __sys_socket+0x1c0/0x260 [ 1603.997536][T27134] ? __pfx___sys_socket+0x10/0x10 [ 1603.997579][T27134] __x64_sys_socket+0x72/0xb0 [ 1603.997613][T27134] ? lockdep_hardirqs_on+0x78/0x100 [ 1603.997641][T27134] do_syscall_64+0x106/0xf80 [ 1603.997666][T27134] ? clear_bhb_loop+0x40/0x90 [ 1603.997695][T27134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.997719][T27134] RIP: 0033:0x7ff94a59c629 [ 1603.997739][T27134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.997763][T27134] RSP: 002b:00007ff94b3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1603.997786][T27134] RAX: ffffffffffffffda RBX: 00007ff94a816270 RCX: 00007ff94a59c629 [ 1603.997802][T27134] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000011 [ 1603.997816][T27134] RBP: 00007ff94a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1603.997831][T27134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.997845][T27134] R13: 00007ff94a816308 R14: 00007ff94a816270 R15: 00007ffe540962f8 [ 1603.997875][T27134] [ 1604.887890][T27135] CPU: 0 UID: 0 PID: 27135 Comm: syz.5.4497 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1604.887931][T27135] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1604.887942][T27135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1604.887959][T27135] Call Trace: [ 1604.887967][T27135] [ 1604.887977][T27135] dump_stack_lvl+0x100/0x190 [ 1604.888016][T27135] should_fail_ex.cold+0x5/0xa [ 1604.888043][T27135] should_failslab+0xc2/0x120 [ 1604.888066][T27135] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1604.888097][T27135] ? __anon_vma_prepare+0xae/0x5e0 [ 1604.888132][T27135] __anon_vma_prepare+0xae/0x5e0 [ 1604.888160][T27135] ? do_raw_spin_lock+0x128/0x260 [ 1604.888197][T27135] __vmf_anon_prepare+0x11f/0x250 [ 1604.888223][T27135] do_huge_pmd_anonymous_page+0x15c/0x1a60 [ 1604.888265][T27135] ? __pmd_alloc+0x6aa/0x9c0 [ 1604.888291][T27135] __handle_mm_fault+0x1e9e/0x2b60 [ 1604.888324][T27135] ? mt_find+0x45e/0x8e0 [ 1604.888353][T27135] ? __pfx___handle_mm_fault+0x10/0x10 [ 1604.888380][T27135] ? __pfx_mt_find+0x10/0x10 [ 1604.888429][T27135] handle_mm_fault+0x36d/0xa20 [ 1604.888464][T27135] __get_user_pages+0xf9c/0x34d0 [ 1604.888498][T27135] ? __pfx___get_user_pages+0x10/0x10 [ 1604.888530][T27135] populate_vma_page_range+0x267/0x3f0 [ 1604.888557][T27135] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1604.888582][T27135] ? __pfx_find_vma_intersection+0x10/0x10 [ 1604.888622][T27135] ? do_mmap+0x93f/0x12f0 [ 1604.888647][T27135] __mm_populate+0x107/0x3a0 [ 1604.888674][T27135] ? __pfx___mm_populate+0x10/0x10 [ 1604.888700][T27135] ? up_write+0x290/0x4f0 [ 1604.888735][T27135] vm_mmap_pgoff+0x37f/0x470 [ 1604.888762][T27135] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1604.888788][T27135] ? do_futex+0x192/0x350 [ 1604.888817][T27135] ? __pfx_do_futex+0x10/0x10 [ 1604.888844][T27135] ? __pfx_do_sys_openat2+0x10/0x10 [ 1604.888877][T27135] ksys_mmap_pgoff+0xe1/0x650 [ 1604.888899][T27135] ? __x64_sys_futex+0x34f/0x4d0 [ 1604.888927][T27135] ? __x64_sys_futex+0x358/0x4d0 [ 1604.888956][T27135] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1604.888979][T27135] ? xfd_validate_state+0x129/0x190 [ 1604.889016][T27135] __x64_sys_mmap+0x125/0x190 [ 1604.889052][T27135] do_syscall_64+0x106/0xf80 [ 1604.889077][T27135] ? clear_bhb_loop+0x40/0x90 [ 1604.889106][T27135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.889129][T27135] RIP: 0033:0x7ff94a59c629 [ 1604.889148][T27135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.889172][T27135] RSP: 002b:00007ff94b3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1604.889194][T27135] RAX: ffffffffffffffda RBX: 00007ff94a816360 RCX: 00007ff94a59c629 [ 1604.889210][T27135] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1604.889230][T27135] RBP: 00007ff94a632b39 R08: ffffffffffffffff R09: 0000000000000000 [ 1604.889245][T27135] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1604.889259][T27135] R13: 00007ff94a8163f8 R14: 00007ff94a816360 R15: 00007ffe540962f8 [ 1604.889289][T27135] [ 1607.922768][T27200] serio: Serial port ttyS0 [ 1607.948266][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.954734][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.427229][T27203] Process accounting paused [ 1609.185347][T27226] bridge0: port 4(gretap0) entered blocking state [ 1609.249208][T27226] bridge0: port 4(gretap0) entered disabled state [ 1609.323967][T27226] gretap0: entered allmulticast mode [ 1609.381450][T27226] gretap0: entered promiscuous mode [ 1609.437863][T27226] FAULT_INJECTION: forcing a failure. [ 1609.437863][T27226] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.451048][T27226] CPU: 0 UID: 0 PID: 27226 Comm: syz.5.4515 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1609.451091][T27226] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1609.451102][T27226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1609.451119][T27226] Call Trace: [ 1609.451131][T27226] [ 1609.451142][T27226] dump_stack_lvl+0x100/0x190 [ 1609.451183][T27226] should_fail_ex.cold+0x5/0xa [ 1609.451211][T27226] should_failslab+0xc2/0x120 [ 1609.451235][T27226] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1609.451269][T27226] ? fdb_create+0x22f/0x1960 [ 1609.451306][T27226] fdb_create+0x22f/0x1960 [ 1609.451360][T27226] ? lock_acquire+0x1cf/0x380 [ 1609.451395][T27226] ? __pfx_fdb_create+0x10/0x10 [ 1609.451437][T27226] fdb_add_local+0x155/0x1c0 [ 1609.451474][T27226] br_fdb_add_local+0x39/0x60 [ 1609.451514][T27226] __vlan_add+0x1820/0x2dd0 [ 1609.451568][T27226] ? __pfx___vlan_add+0x10/0x10 [ 1609.451615][T27226] nbp_vlan_add+0x258/0x3e0 [ 1609.451656][T27226] nbp_vlan_init+0x373/0x500 [ 1609.451680][T27226] ? __pfx_nbp_vlan_init+0x10/0x10 [ 1609.451724][T27226] ? __local_bh_enable_ip+0x9e/0x120 [ 1609.451750][T27226] ? lockdep_hardirqs_on+0x78/0x100 [ 1609.451777][T27226] ? br_fdb_add_local+0x43/0x60 [ 1609.451820][T27226] ? __local_bh_enable_ip+0x9e/0x120 [ 1609.451851][T27226] br_add_if+0xf79/0x1b40 [ 1609.451875][T27226] ? veth_get_iflink+0x213/0x2c0 [ 1609.451908][T27226] add_del_if+0x114/0x160 [ 1609.451934][T27226] br_dev_siocdevprivate+0x8ac/0x1650 [ 1609.451964][T27226] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1609.452002][T27226] ? lock_acquire+0x1cf/0x380 [ 1609.452042][T27226] ? netdev_name_node_lookup+0x107/0x150 [ 1609.452081][T27226] ? __mutex_lock+0x26a/0x1b90 [ 1609.452112][T27226] dev_ifsioc+0xc1e/0x1e90 [ 1609.452139][T27226] ? __pfx_dev_ifsioc+0x10/0x10 [ 1609.452161][T27226] ? __pfx___mutex_lock+0x10/0x10 [ 1609.452199][T27226] ? dev_load+0x8e/0x240 [ 1609.452219][T27226] ? dev_load+0x8e/0x240 [ 1609.452248][T27226] dev_ioctl+0x70e/0x1070 [ 1609.452274][T27226] sock_ioctl+0x494/0x6b0 [ 1609.452310][T27226] ? __pfx_sock_ioctl+0x10/0x10 [ 1609.452344][T27226] ? hook_file_ioctl_common+0x146/0x410 [ 1609.452388][T27226] ? __fget_files+0x21f/0x3d0 [ 1609.452430][T27226] ? __pfx_sock_ioctl+0x10/0x10 [ 1609.452466][T27226] __x64_sys_ioctl+0x18e/0x210 [ 1609.452503][T27226] do_syscall_64+0x106/0xf80 [ 1609.452529][T27226] ? clear_bhb_loop+0x40/0x90 [ 1609.452559][T27226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.452584][T27226] RIP: 0033:0x7ff94a59c629 [ 1609.452606][T27226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.452629][T27226] RSP: 002b:00007ff94b419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1609.452653][T27226] RAX: ffffffffffffffda RBX: 00007ff94a816180 RCX: 00007ff94a59c629 [ 1609.452670][T27226] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 1609.452685][T27226] RBP: 00007ff94a632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1609.452700][T27226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.452715][T27226] R13: 00007ff94a816218 R14: 00007ff94a816180 R15: 00007ffe540962f8 [ 1609.452750][T27226] [ 1610.035786][T27226] bridge0: failed insert local address into bridge forwarding table [ 1610.799828][T27226] gretap0: failed to initialize vlan filtering on this port [ 1610.861969][T27226] gretap0: left allmulticast mode [ 1611.211964][T27241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.237528][T27241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.263331][T27238] netlink: 'syz.5.4518': attribute type 1 has an invalid length. [ 1611.298414][T27243] netlink: 326 bytes leftover after parsing attributes in process `syz.7.4519'. [ 1611.343482][T27242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4519'. [ 1611.594183][T27248] serio: Serial port ttyS0 [ 1614.116628][T27287] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4529'. [ 1614.293862][T27292] netlink: 326 bytes leftover after parsing attributes in process `syz.6.4528'. [ 1614.444508][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4528'. [ 1615.110752][T17818] Process accounting paused [ 1615.581871][T27316] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1615.652357][T13929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1615.669302][T13929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1615.678046][T13929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1615.686196][T13929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1615.710999][T13929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1615.800069][T27316] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1615.918123][T27316] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1615.974741][T27316] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1616.082855][T27316] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1616.143742][T27316] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1616.880168][T27321] chnl_net:caif_netlink_parms(): no params data found [ 1617.266667][T27321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.314630][T27321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.334805][T27321] bridge_slave_0: entered allmulticast mode [ 1617.414469][T27321] bridge_slave_0: entered promiscuous mode [ 1617.443618][T27321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.473157][T27321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.527537][T27321] bridge_slave_1: entered allmulticast mode [ 1617.562318][T27321] bridge_slave_1: entered promiscuous mode [ 1617.738348][T27321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.784896][T13929] Bluetooth: hci5: command tx timeout [ 1617.819287][T27321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.098071][T27321] team0: Port device team_slave_0 added [ 1618.293644][T27321] team0: Port device team_slave_1 added [ 1618.815975][T27321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.823005][T27321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.958265][T27321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.032326][T27321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.055212][T27321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.175187][T27321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.676743][T27321] hsr_slave_0: entered promiscuous mode [ 1619.710211][T27321] hsr_slave_1: entered promiscuous mode [ 1619.749162][T27321] debugfs: 'hsr0' already exists in 'hsr' [ 1619.755189][T27321] Cannot create hsr debugfs directory [ 1619.866611][T13929] Bluetooth: hci5: command tx timeout [ 1621.598735][T27321] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1621.696830][T27321] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1621.740048][T27321] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1621.792931][T27321] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1621.949941][T13929] Bluetooth: hci5: command tx timeout [ 1622.283684][T27321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.420026][T27321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.518985][T17974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.526165][T17974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.612528][T17974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.619728][T17974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.734747][T27397] netlink: 338 bytes leftover after parsing attributes in process `syz.7.4548'. [ 1623.684652][T27415] ACPI: Can not change Invalid GPE/Fixed Event status [ 1623.742951][T27321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.027692][T13929] Bluetooth: hci5: command tx timeout [ 1625.359575][T27432] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4556'. [ 1625.482686][T27321] veth0_vlan: entered promiscuous mode [ 1625.557961][T27321] veth1_vlan: entered promiscuous mode [ 1625.742640][T27321] veth0_macvtap: entered promiscuous mode [ 1625.810753][T27321] veth1_macvtap: entered promiscuous mode [ 1625.931970][T27321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.994130][T27321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.037218][T27426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1626.077497][T17948] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.092363][T27426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1626.128849][T27426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1626.157790][T27426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1626.175277][T17948] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.202514][T27426] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1626.228823][T17948] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.252590][T27426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1626.292896][T17948] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.316393][T27426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1626.340931][T27426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1626.390676][T27426] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1626.396656][T27426] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1626.429939][T13929] Bluetooth: hci3: command 0x0c1a tx timeout [ 1626.456539][T27426] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1626.712314][T26948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.773789][T26948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.901118][T17948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.936702][T17948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.748673][T27460] serio: Serial port ttyS0 [ 1628.111316][T13929] Bluetooth: hci2: command 0x0c1a tx timeout [ 1628.190890][T13929] Bluetooth: hci0: command 0x0406 tx timeout [ 1628.196969][T13929] Bluetooth: hci4: command 0x0c1a tx timeout [ 1628.271138][T13929] Bluetooth: hci1: command 0x0c1a tx timeout [ 1628.287081][T27466] FAULT_INJECTION: forcing a failure. [ 1628.287081][T27466] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.367348][T27466] CPU: 0 UID: 0 PID: 27466 Comm: syz.6.4560 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1628.367391][T27466] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1628.367403][T27466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1628.367417][T27466] Call Trace: [ 1628.367426][T27466] [ 1628.367436][T27466] dump_stack_lvl+0x100/0x190 [ 1628.367476][T27466] should_fail_ex.cold+0x5/0xa [ 1628.367503][T27466] ? copy_splice_read+0x1a3/0xb90 [ 1628.367539][T27466] should_failslab+0xc2/0x120 [ 1628.367562][T27466] __kmalloc_noprof+0xe0/0x850 [ 1628.367602][T27466] copy_splice_read+0x1a3/0xb90 [ 1628.367640][T27466] ? pipe_lock+0x69/0x80 [ 1628.367678][T27466] ? __pfx_copy_splice_read+0x10/0x10 [ 1628.367727][T27466] ? __fget_files+0x215/0x3d0 [ 1628.367765][T27466] ? __pfx_copy_splice_read+0x10/0x10 [ 1628.367802][T27466] do_splice_read+0x285/0x370 [ 1628.367842][T27466] splice_file_to_pipe+0x82/0x120 [ 1628.367882][T27466] do_sendfile+0x366/0xe20 [ 1628.367921][T27466] ? __pfx_do_sendfile+0x10/0x10 [ 1628.367955][T27466] ? __fget_files+0x21f/0x3d0 [ 1628.367997][T27466] __x64_sys_sendfile64+0x1d8/0x220 [ 1628.368021][T27466] ? ksys_write+0x1ac/0x250 [ 1628.368055][T27466] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1628.368098][T27466] do_syscall_64+0x106/0xf80 [ 1628.368123][T27466] ? clear_bhb_loop+0x40/0x90 [ 1628.368152][T27466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.368176][T27466] RIP: 0033:0x7fb1a7b9c629 [ 1628.368195][T27466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.368218][T27466] RSP: 002b:00007fb1a8a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1628.368241][T27466] RAX: ffffffffffffffda RBX: 00007fb1a7e15fa0 RCX: 00007fb1a7b9c629 [ 1628.368257][T27466] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1628.368272][T27466] RBP: 00007fb1a8a18090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.368286][T27466] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1628.368301][T27466] R13: 00007fb1a7e16038 R14: 00007fb1a7e15fa0 R15: 00007fffbba3f3a8 [ 1628.368332][T27466] [ 1628.678691][T13929] Bluetooth: hci5: command 0x0c1a tx timeout [ 1628.826614][T27474] netlink: zone id is out of range [ 1628.838005][T13929] bt_warn_ratelimited: 55 callbacks suppressed [ 1628.838027][T13929] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 1628.844767][T27474] netlink: zone id is out of range [ 1628.857287][T27474] netlink: zone id is out of range [ 1628.864296][T27474] netlink: zone id is out of range [ 1628.869684][T27474] netlink: zone id is out of range [ 1628.875373][T27474] netlink: zone id is out of range [ 1628.882010][T27474] netlink: zone id is out of range [ 1628.888238][T27474] netlink: zone id is out of range [ 1628.894159][T27474] netlink: zone id is out of range [ 1628.899409][T27474] netlink: zone id is out of range [ 1629.771929][T17981] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 33 with max blocks 25 with error 117 [ 1629.889097][T17981] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1629.889097][T17981] [ 1630.272700][T13929] Bluetooth: hci0: command 0x0406 tx timeout [ 1630.351268][T13929] Bluetooth: hci1: command 0x0c1a tx timeout [ 1630.537690][T27513] serio: Serial port ttyS0 [ 1630.751117][T13929] Bluetooth: hci5: command 0x0c1a tx timeout [ 1630.943759][T27519] FAULT_INJECTION: forcing a failure. [ 1630.943759][T27519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1631.060194][T27519] CPU: 0 UID: 0 PID: 27519 Comm: syz.5.4570 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1631.060238][T27519] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1631.060250][T27519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1631.060264][T27519] Call Trace: [ 1631.060272][T27519] [ 1631.060281][T27519] dump_stack_lvl+0x100/0x190 [ 1631.060322][T27519] should_fail_ex.cold+0x5/0xa [ 1631.060345][T27519] ? prepare_alloc_pages+0x16d/0x5f0 [ 1631.060374][T27519] should_fail_alloc_page+0xeb/0x140 [ 1631.060398][T27519] prepare_alloc_pages+0x1f0/0x5f0 [ 1631.060423][T27519] ? kernel_text_address+0x8d/0x100 [ 1631.060461][T27519] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1631.060506][T27519] ? copy_splice_read+0x1a3/0xb90 [ 1631.060542][T27519] ? stack_trace_save+0x8e/0xc0 [ 1631.060564][T27519] ? __pfx_stack_trace_save+0x10/0x10 [ 1631.060589][T27519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1631.060626][T27519] ? copy_splice_read+0x1a3/0xb90 [ 1631.060660][T27519] ? kasan_save_stack+0x3f/0x50 [ 1631.060694][T27519] ? kasan_save_stack+0x30/0x50 [ 1631.060726][T27519] ? kasan_save_track+0x14/0x30 [ 1631.060758][T27519] ? __kasan_kmalloc+0xaa/0xb0 [ 1631.060790][T27519] ? __kmalloc_noprof+0x301/0x850 [ 1631.060821][T27519] ? copy_splice_read+0x1a3/0xb90 [ 1631.060863][T27519] ? do_splice_read+0x285/0x370 [ 1631.060918][T27519] alloc_pages_bulk_noprof+0x782/0x1490 [ 1631.060963][T27519] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1631.061006][T27519] ? __kmalloc_noprof+0x320/0x850 [ 1631.061051][T27519] copy_splice_read+0x1e1/0xb90 [ 1631.061089][T27519] ? pipe_lock+0x69/0x80 [ 1631.061127][T27519] ? __pfx_copy_splice_read+0x10/0x10 [ 1631.061175][T27519] ? __fget_files+0x215/0x3d0 [ 1631.061214][T27519] ? __pfx_copy_splice_read+0x10/0x10 [ 1631.061250][T27519] do_splice_read+0x285/0x370 [ 1631.061289][T27519] splice_file_to_pipe+0x82/0x120 [ 1631.061330][T27519] do_sendfile+0x366/0xe20 [ 1631.061370][T27519] ? __pfx_do_sendfile+0x10/0x10 [ 1631.061405][T27519] ? __fget_files+0x21f/0x3d0 [ 1631.061448][T27519] __x64_sys_sendfile64+0x1d8/0x220 [ 1631.061472][T27519] ? ksys_write+0x1ac/0x250 [ 1631.061506][T27519] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1631.061540][T27519] do_syscall_64+0x106/0xf80 [ 1631.061565][T27519] ? clear_bhb_loop+0x40/0x90 [ 1631.061595][T27519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.061619][T27519] RIP: 0033:0x7ff94a59c629 [ 1631.061638][T27519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.061662][T27519] RSP: 002b:00007ff94b45b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1631.061684][T27519] RAX: ffffffffffffffda RBX: 00007ff94a815fa0 RCX: 00007ff94a59c629 [ 1631.061701][T27519] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1631.061715][T27519] RBP: 00007ff94b45b090 R08: 0000000000000000 R09: 0000000000000000 [ 1631.061730][T27519] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1631.061745][T27519] R13: 00007ff94a816038 R14: 00007ff94a815fa0 R15: 00007ffe540962f8 [ 1631.061775][T27519] [ 1631.462824][T27487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1631.469508][T27487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1631.475718][T27487] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1631.481873][T27487] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1631.488884][T27487] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1631.496023][T27487] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1631.725853][T13929] Bluetooth: hci3: command 0x0c1a tx timeout [ 1632.023675][T27530] serio: Serial port ttyS0 [ 1633.458464][T27545] ACPI: Can not change Invalid GPE/Fixed Event status [ 1633.792623][T26323] Bluetooth: hci5: command 0x0c1a tx timeout [ 1633.798800][T13929] Bluetooth: hci1: command 0x0c1a tx timeout [ 1633.806246][T27324] Bluetooth: hci0: command 0x0406 tx timeout [ 1633.812367][T27324] Bluetooth: hci4: command 0x0c1a tx timeout [ 1633.819160][T13929] Bluetooth: hci2: command 0x0c1a tx timeout [ 1633.912679][T27556] serio: Serial port ttyS0 [ 1633.949542][T27558] FAULT_INJECTION: forcing a failure. [ 1633.949542][T27558] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.988248][T27558] CPU: 0 UID: 0 PID: 27558 Comm: syz.8.4581 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1633.988294][T27558] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1633.988306][T27558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1633.988321][T27558] Call Trace: [ 1633.988330][T27558] [ 1633.988339][T27558] dump_stack_lvl+0x100/0x190 [ 1633.988386][T27558] should_fail_ex.cold+0x5/0xa [ 1633.988416][T27558] should_failslab+0xc2/0x120 [ 1633.988441][T27558] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1633.988472][T27558] ? netdev_init+0x151/0x3c0 [ 1633.988512][T27558] netdev_init+0x151/0x3c0 [ 1633.988547][T27558] ? __pfx_netdev_init+0x10/0x10 [ 1633.988581][T27558] ops_init+0x1e2/0x5f0 [ 1633.988619][T27558] setup_net+0x118/0x3a0 [ 1633.988649][T27558] ? __pfx_setup_net+0x10/0x10 [ 1633.988676][T27558] ? lockdep_init_map_type+0x5c/0x250 [ 1633.988710][T27558] ? mutex_init_lockep+0x110/0x150 [ 1633.988748][T27558] copy_net_ns+0x46f/0x7c0 [ 1633.988782][T27558] create_new_namespaces+0x3ea/0xac0 [ 1633.988814][T27558] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1633.988843][T27558] ksys_unshare+0x455/0xab0 [ 1633.988876][T27558] ? __pfx_ksys_unshare+0x10/0x10 [ 1633.988918][T27558] __x64_sys_unshare+0x31/0x40 [ 1633.988947][T27558] do_syscall_64+0x106/0xf80 [ 1633.988974][T27558] ? clear_bhb_loop+0x40/0x90 [ 1633.989004][T27558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.989030][T27558] RIP: 0033:0x7f385119c629 [ 1633.989051][T27558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1633.989074][T27558] RSP: 002b:00007f3851f98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1633.989098][T27558] RAX: ffffffffffffffda RBX: 00007f3851415fa0 RCX: 00007f385119c629 [ 1633.989115][T27558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1633.989130][T27558] RBP: 00007f3851232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1633.989145][T27558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1633.989160][T27558] R13: 00007f3851416038 R14: 00007f3851415fa0 R15: 00007ffc00b91d58 [ 1633.989192][T27558] [ 1634.779218][T27569] bridge0: port 4(gretap0) entered blocking state [ 1634.852363][T27569] bridge0: port 4(gretap0) entered disabled state [ 1634.878161][T27569] gretap0: entered allmulticast mode [ 1634.931874][T27569] gretap0: entered promiscuous mode [ 1634.965982][T27569] FAULT_INJECTION: forcing a failure. [ 1634.965982][T27569] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.058087][T27569] CPU: 0 UID: 0 PID: 27569 Comm: syz.6.4582 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1635.058132][T27569] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1635.058144][T27569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1635.058160][T27569] Call Trace: [ 1635.058168][T27569] [ 1635.058178][T27569] dump_stack_lvl+0x100/0x190 [ 1635.058220][T27569] should_fail_ex.cold+0x5/0xa [ 1635.058255][T27569] should_failslab+0xc2/0x120 [ 1635.058282][T27569] __kvmalloc_node_noprof+0xfa/0xa00 [ 1635.058319][T27569] ? bucket_table_alloc.isra.0+0x88/0x460 [ 1635.058361][T27569] bucket_table_alloc.isra.0+0x88/0x460 [ 1635.058398][T27569] rhashtable_init_noprof+0x43b/0x7d0 [ 1635.058436][T27569] nbp_vlan_init+0x238/0x500 [ 1635.058460][T27569] ? __pfx_nbp_vlan_init+0x10/0x10 [ 1635.058515][T27569] ? br_fdb_add_local+0x43/0x60 [ 1635.058550][T27569] ? __local_bh_enable_ip+0xff/0x120 [ 1635.058580][T27569] br_add_if+0xf79/0x1b40 [ 1635.058603][T27569] ? veth_get_iflink+0x213/0x2c0 [ 1635.058636][T27569] add_del_if+0x114/0x160 [ 1635.058662][T27569] br_dev_siocdevprivate+0x8ac/0x1650 [ 1635.058689][T27569] ? __lock_acquire+0x4a5/0x2630 [ 1635.058720][T27569] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1635.058756][T27569] ? do_raw_spin_lock+0x128/0x260 [ 1635.058798][T27569] ? mark_held_locks+0x40/0x70 [ 1635.058831][T27569] ? netdev_name_node_lookup+0x107/0x150 [ 1635.058870][T27569] ? __mutex_lock+0x26a/0x1b90 [ 1635.058902][T27569] dev_ifsioc+0xc1e/0x1e90 [ 1635.058929][T27569] ? __pfx_dev_ifsioc+0x10/0x10 [ 1635.058950][T27569] ? __pfx___mutex_lock+0x10/0x10 [ 1635.058989][T27569] ? dev_load+0x8e/0x240 [ 1635.059009][T27569] ? dev_load+0x8e/0x240 [ 1635.059038][T27569] dev_ioctl+0x70e/0x1070 [ 1635.059064][T27569] sock_ioctl+0x494/0x6b0 [ 1635.059101][T27569] ? __pfx_sock_ioctl+0x10/0x10 [ 1635.059134][T27569] ? hook_file_ioctl_common+0x146/0x410 [ 1635.059178][T27569] ? __fget_files+0x21f/0x3d0 [ 1635.059219][T27569] ? __pfx_sock_ioctl+0x10/0x10 [ 1635.059257][T27569] __x64_sys_ioctl+0x18e/0x210 [ 1635.059292][T27569] do_syscall_64+0x106/0xf80 [ 1635.059318][T27569] ? clear_bhb_loop+0x40/0x90 [ 1635.059348][T27569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.059373][T27569] RIP: 0033:0x7fb1a7b9c629 [ 1635.059394][T27569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1635.059418][T27569] RSP: 002b:00007fb1a89d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1635.059441][T27569] RAX: ffffffffffffffda RBX: 00007fb1a7e16180 RCX: 00007fb1a7b9c629 [ 1635.059458][T27569] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 1635.059480][T27569] RBP: 00007fb1a7c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1635.059496][T27569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1635.059512][T27569] R13: 00007fb1a7e16218 R14: 00007fb1a7e16180 R15: 00007fffbba3f3a8 [ 1635.059552][T27569] [ 1636.071318][T27569] bridge0: port 4(gretap0) entered blocking state [ 1636.077987][T27569] bridge0: port 4(gretap0) entered forwarding state [ 1637.075327][T27596] net_ratelimit: 4 callbacks suppressed [ 1637.075348][T27596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1637.234283][T27603] vivid-007: ================= START STATUS ================= [ 1637.348519][T27603] vivid-007: Generate PTS: true [ 1637.440464][T27603] vivid-007: Generate SCR: true [ 1637.462634][T27603] tpg source WxH: 320x240 (Y'CbCr) [ 1637.537264][T27603] tpg field: 1 [ 1637.635264][T27603] tpg crop: (0,0)/320x240 [ 1637.678602][T27603] tpg compose: (0,0)/320x240 [ 1637.683260][T27603] tpg colorspace: 8 [ 1637.882524][T27603] tpg transfer function: 0/0 [ 1637.917093][T27603] tpg Y'CbCr encoding: 0/0 [ 1638.036690][T27603] tpg quantization: 0/0 [ 1638.157015][T27603] tpg RGB range: 0/2 [ 1638.160971][T27603] vivid-007: ================== END STATUS ================== [ 1638.854659][T27622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4594'. [ 1639.412141][T27623] Process accounting resumed [ 1639.954266][T27650] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1640.660246][T27657] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4599'. [ 1640.959352][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4601'. [ 1640.977280][T27660] nbd: must specify a size in bytes for the device [ 1642.343417][T27690] QAT: failed to copy from user cfg_data. [ 1643.581883][T27725] Invalid ELF header magic: != ELF [ 1643.762250][T27702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4611'. [ 1645.468828][T27762] QAT: failed to copy from user cfg_data. [ 1645.511839][T27757] zswap: compressor not available [ 1646.124854][T27770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1646.216521][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1649.676646][T27816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4634'. [ 1650.307402][T27830] ERROR: Out of memory at tomoyo_memory_ok. [ 1650.329125][T27830] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/283/file0' not defined. [ 1650.479068][T27831] ERROR: Out of memory at tomoyo_memory_ok. [ 1651.149878][T27833] QAT: failed to copy from user cfg_data. [ 1652.272454][T27842] serio: Serial port ttyS0 [ 1658.716441][T27872] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1658.795530][T27872] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1658.841105][T27876] QAT: failed to copy from user cfg_data. [ 1658.923364][T27872] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1659.011201][T27881] netlink: 'syz.8.4645': attribute type 23 has an invalid length. [ 1659.056326][T27872] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1659.093654][T12996] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1659.119765][T12996] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1659.129434][T12996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1659.138968][T12996] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1659.173055][T12996] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1659.257589][T27872] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1659.315254][T27872] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1660.015275][T27882] chnl_net:caif_netlink_parms(): no params data found [ 1660.428144][T27882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.461837][T27893] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 1660.484476][T27882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.522048][T27882] bridge_slave_0: entered allmulticast mode [ 1660.573804][T27882] bridge_slave_0: entered promiscuous mode [ 1660.695499][T27882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.719220][T27882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.752791][T27882] bridge_slave_1: entered allmulticast mode [ 1660.804225][T27882] bridge_slave_1: entered promiscuous mode [ 1660.933485][T27916] ovs_: entered promiscuous mode [ 1661.033214][T27882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.092775][T27882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.167873][T27921] ERROR: Out of memory at tomoyo_memory_ok. [ 1661.246526][T12996] Bluetooth: hci6: command tx timeout [ 1661.261550][T27882] team0: Port device team_slave_0 added [ 1661.309793][T27882] team0: Port device team_slave_1 added [ 1661.632501][T27882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.662801][T27932] QAT: failed to copy from user cfg_data. [ 1661.670644][T27882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.737388][T27882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.782901][T27882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.800213][T27882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.889369][T27882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.007305][T27882] hsr_slave_0: entered promiscuous mode [ 1662.021055][T27882] hsr_slave_1: entered promiscuous mode [ 1662.037697][T27882] debugfs: 'hsr0' already exists in 'hsr' [ 1662.054829][T27882] Cannot create hsr debugfs directory [ 1662.410779][T27940] __vm_enough_memory: pid: 27940, comm: syz.6.4661, bytes: 4398046511104 not enough memory for the allocation [ 1662.630746][T27882] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1662.663322][T27882] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1662.681675][T27882] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1662.706419][T27882] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1662.929199][T27882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.983238][T27882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1663.009525][T17974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.016730][T17974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.068045][T17974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.075230][T17974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.329513][T12996] Bluetooth: hci6: command tx timeout [ 1663.572394][T27957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4663'. [ 1663.629424][T27882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.299414][T27882] veth0_vlan: entered promiscuous mode [ 1664.335712][T27882] veth1_vlan: entered promiscuous mode [ 1664.402989][T27882] veth0_macvtap: entered promiscuous mode [ 1664.444504][T27882] veth1_macvtap: entered promiscuous mode [ 1664.501163][T27882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.532297][T27882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.569841][T17979] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.600142][T17979] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.619963][T17979] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.692196][T17979] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.821549][T17977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.853120][T17977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.966724][T11843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.994634][T11843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.287224][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4644'. [ 1665.408513][T12996] Bluetooth: hci6: command tx timeout [ 1666.461556][T28002] serio: Serial port ttyS0 [ 1667.490944][T12996] Bluetooth: hci6: command tx timeout [ 1668.598067][T28022] zswap: compressor d_ not available [ 1669.421083][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.427530][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.266109][T28048] FAULT_INJECTION: forcing a failure. [ 1670.266109][T28048] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1670.297133][T28048] CPU: 0 UID: 0 PID: 28048 Comm: syz.9.4680 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1670.297184][T28048] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1670.297196][T28048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1670.297211][T28048] Call Trace: [ 1670.297219][T28048] [ 1670.297230][T28048] dump_stack_lvl+0x100/0x190 [ 1670.297272][T28048] should_fail_ex.cold+0x5/0xa [ 1670.297301][T28048] get_futex_key+0x1d2/0x1620 [ 1670.297339][T28048] ? __pfx_get_futex_key+0x10/0x10 [ 1670.297369][T28048] ? find_held_lock+0x2b/0x80 [ 1670.297391][T28048] ? futex_wake+0x456/0x530 [ 1670.297443][T28048] ? __lock_acquire+0x4a5/0x2630 [ 1670.297476][T28048] futex_wake+0xea/0x530 [ 1670.297513][T28048] ? __lock_acquire+0x4a5/0x2630 [ 1670.297544][T28048] ? __pfx_futex_wake+0x10/0x10 [ 1670.297583][T28048] ? find_held_lock+0x2b/0x80 [ 1670.297614][T28048] do_futex+0x32b/0x350 [ 1670.297647][T28048] ? __pfx_do_futex+0x10/0x10 [ 1670.297677][T28048] ? __sys_socketpair+0x493/0x5b0 [ 1670.297717][T28048] ? do_raw_spin_unlock+0x145/0x1e0 [ 1670.297756][T28048] __x64_sys_futex+0x34f/0x4d0 [ 1670.297791][T28048] ? __pfx___x64_sys_futex+0x10/0x10 [ 1670.297834][T28048] do_syscall_64+0x106/0xf80 [ 1670.297861][T28048] ? clear_bhb_loop+0x40/0x90 [ 1670.297891][T28048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.297916][T28048] RIP: 0033:0x7f1a25b9c629 [ 1670.297937][T28048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.297961][T28048] RSP: 002b:00007f1a23df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1670.297994][T28048] RAX: ffffffffffffffda RBX: 00007f1a25e15fa8 RCX: 00007f1a25b9c629 [ 1670.298012][T28048] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1a25e15fac [ 1670.298029][T28048] RBP: 00007f1a25e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.298045][T28048] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1670.298060][T28048] R13: 00007f1a25e16038 R14: 00007fff98310190 R15: 00007fff98310278 [ 1670.298098][T28048] [ 1670.542696][T28048] FAULT_INJECTION: forcing a failure. [ 1670.542696][T28048] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.555804][T28048] CPU: 0 UID: 0 PID: 28048 Comm: syz.9.4680 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1670.555847][T28048] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1670.555860][T28048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1670.555875][T28048] Call Trace: [ 1670.555883][T28048] [ 1670.555892][T28048] dump_stack_lvl+0x100/0x190 [ 1670.555934][T28048] should_fail_ex.cold+0x5/0xa [ 1670.555963][T28048] should_failslab+0xc2/0x120 [ 1670.555987][T28048] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1670.556022][T28048] ? __kernfs_new_node+0xd2/0x960 [ 1670.556053][T28048] ? __lock_acquire+0x4a5/0x2630 [ 1670.556090][T28048] __kernfs_new_node+0xd2/0x960 [ 1670.556120][T28048] ? __kernel_text_address+0xd/0x30 [ 1670.556161][T28048] ? __pfx___kernfs_new_node+0x10/0x10 [ 1670.556192][T28048] ? do_raw_spin_lock+0x128/0x260 [ 1670.556235][T28048] ? find_held_lock+0x2b/0x80 [ 1670.556257][T28048] ? kernfs_root+0xee/0x2a0 [ 1670.556288][T28048] ? kernfs_root+0xee/0x2a0 [ 1670.556327][T28048] kernfs_new_node+0x11b/0x1a0 [ 1670.556368][T28048] kernfs_create_dir_ns+0x4c/0x1a0 [ 1670.556409][T28048] sysfs_create_dir_ns+0x13a/0x2b0 [ 1670.556440][T28048] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1670.556473][T28048] ? kfree_const+0x5a/0x70 [ 1670.556516][T28048] ? rcu_is_watching+0x12/0xc0 [ 1670.556553][T28048] ? kfree_const+0x5a/0x70 [ 1670.556588][T28048] ? kfree+0x2ec/0x6b0 [ 1670.556619][T28048] kobject_add_internal+0x2c8/0x930 [ 1670.556657][T28048] kobject_add+0x16a/0x1e0 [ 1670.556689][T28048] ? __pfx_kobject_add+0x10/0x10 [ 1670.556736][T28048] kobject_create_and_add+0x7a/0xc0 [ 1670.556771][T28048] __add_disk+0x66f/0xe40 [ 1670.556804][T28048] ? find_held_lock+0x2b/0x80 [ 1670.556829][T28048] add_disk_fwnode+0x3d4/0x5c0 [ 1670.556866][T28048] zram_add+0x4d2/0x610 [ 1670.556891][T28048] ? __pfx_zram_add+0x10/0x10 [ 1670.556933][T28048] ? find_held_lock+0x2b/0x80 [ 1670.556955][T28048] ? sysfs_file_kobj+0xe4/0x290 [ 1670.556986][T28048] ? __pfx_hot_add_show+0x10/0x10 [ 1670.557011][T28048] hot_add_show+0x21/0x80 [ 1670.557036][T28048] class_attr_show+0x72/0xa0 [ 1670.557073][T28048] ? __pfx_class_attr_show+0x10/0x10 [ 1670.557108][T28048] sysfs_kf_seq_show+0x217/0x3a0 [ 1670.557142][T28048] seq_read_iter+0x32f/0x1270 [ 1670.557191][T28048] kernfs_fop_read_iter+0x46c/0x610 [ 1670.557217][T28048] ? rw_verify_area+0xce/0x6d0 [ 1670.557249][T28048] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1670.557277][T28048] vfs_read+0x825/0xb30 [ 1670.557316][T28048] ? __pfx_vfs_read+0x10/0x10 [ 1670.557371][T28048] ksys_read+0x12a/0x250 [ 1670.557407][T28048] ? __pfx_ksys_read+0x10/0x10 [ 1670.557452][T28048] do_syscall_64+0x106/0xf80 [ 1670.557477][T28048] ? clear_bhb_loop+0x40/0x90 [ 1670.557515][T28048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.557541][T28048] RIP: 0033:0x7f1a25b9c629 [ 1670.557563][T28048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.557588][T28048] RSP: 002b:00007f1a23df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1670.557611][T28048] RAX: ffffffffffffffda RBX: 00007f1a25e15fa0 RCX: 00007f1a25b9c629 [ 1670.557628][T28048] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 000000000000000a [ 1670.557644][T28048] RBP: 00007f1a25c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1670.557662][T28048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.557677][T28048] R13: 00007f1a25e16038 R14: 00007f1a25e15fa0 R15: 00007fff98310278 [ 1670.557709][T28048] [ 1670.557721][T28048] kobject: kobject_add_internal failed for holders (error: -12 parent: zram0) [ 1671.143443][T28048] kobject: kobject_create_and_add: kobject_add error: -12 [ 1673.091790][T28068] binder: 28067:28068 ioctl c0485619 38 returned -22 [ 1673.245853][T28070] QAT: failed to copy from user cfg_data. [ 1675.371929][T28096] FAULT_INJECTION: forcing a failure. [ 1675.371929][T28096] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.463902][T28096] CPU: 0 UID: 0 PID: 28096 Comm: syz.9.4689 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1675.463952][T28096] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1675.463967][T28096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.463982][T28096] Call Trace: [ 1675.463992][T28096] [ 1675.464002][T28096] dump_stack_lvl+0x100/0x190 [ 1675.464045][T28096] should_fail_ex.cold+0x5/0xa [ 1675.464073][T28096] ? __seq_open_private+0x22/0xd0 [ 1675.464107][T28096] should_failslab+0xc2/0x120 [ 1675.464131][T28096] __kmalloc_noprof+0xe0/0x850 [ 1675.464172][T28096] ? __pfx_stats_fop_open+0x10/0x10 [ 1675.464196][T28096] __seq_open_private+0x22/0xd0 [ 1675.464231][T28096] sc_common_open+0x6b/0x200 [ 1675.464255][T28096] full_proxy_open_regular+0x1b6/0x370 [ 1675.464291][T28096] do_dentry_open+0x6d8/0x1660 [ 1675.464329][T28096] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1675.464368][T28096] vfs_open+0x82/0x3f0 [ 1675.464400][T28096] path_openat+0x208c/0x31a0 [ 1675.464433][T28096] ? __pfx_path_openat+0x10/0x10 [ 1675.464468][T28096] do_file_open+0x20e/0x430 [ 1675.464493][T28096] ? __pfx_do_file_open+0x10/0x10 [ 1675.464538][T28096] ? alloc_fd+0x476/0x790 [ 1675.464579][T28096] ? do_getname+0x191/0x390 [ 1675.464611][T28096] do_sys_openat2+0x10d/0x1e0 [ 1675.464641][T28096] ? __pfx_do_sys_openat2+0x10/0x10 [ 1675.464673][T28096] ? __fget_files+0x21f/0x3d0 [ 1675.464728][T28096] __x64_sys_openat+0x12d/0x210 [ 1675.464760][T28096] ? __pfx___x64_sys_openat+0x10/0x10 [ 1675.464803][T28096] do_syscall_64+0x106/0xf80 [ 1675.464830][T28096] ? clear_bhb_loop+0x40/0x90 [ 1675.464860][T28096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.464886][T28096] RIP: 0033:0x7f1a25b9c629 [ 1675.464907][T28096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.464931][T28096] RSP: 002b:00007f1a23dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1675.464956][T28096] RAX: ffffffffffffffda RBX: 00007f1a25e16090 RCX: 00007f1a25b9c629 [ 1675.464973][T28096] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 1675.464989][T28096] RBP: 00007f1a25c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1675.465005][T28096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1675.465020][T28096] R13: 00007f1a25e16128 R14: 00007f1a25e16090 R15: 00007fff98310278 [ 1675.465052][T28096] [ 1676.613299][T27554] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1676.626076][T27554] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1676.634931][T27554] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1676.643267][T27554] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1676.653140][T27554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1677.424130][T28111] chnl_net:caif_netlink_parms(): no params data found [ 1677.733602][T20930] Process accounting paused [ 1677.927306][T28111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.978598][T28111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.024849][T28111] bridge_slave_0: entered allmulticast mode [ 1678.084360][T28111] bridge_slave_0: entered promiscuous mode [ 1678.114402][T28111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.175253][T28111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.183084][T28111] bridge_slave_1: entered allmulticast mode [ 1678.257601][T28132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4695'. [ 1678.268351][T28111] bridge_slave_1: entered promiscuous mode [ 1678.389671][T12996] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1678.415618][T12996] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1678.434198][T12996] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1678.442661][T12996] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1678.451743][T12996] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1678.528084][T28137] ERROR: Out of memory at tomoyo_memory_ok. [ 1678.541629][T28111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.606826][T28111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.620972][T28134] ERROR: Out of memory at tomoyo_memory_ok. [ 1678.637032][T28137] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1678.697702][T27554] Bluetooth: hci7: command tx timeout [ 1678.818448][T28111] team0: Port device team_slave_0 added [ 1678.848206][T28111] team0: Port device team_slave_1 added [ 1679.035374][T28111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.049430][T28111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.114843][T28111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.171490][T28111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.187952][T28111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.263029][T28111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.599432][T28111] hsr_slave_0: entered promiscuous mode [ 1679.614902][T28111] hsr_slave_1: entered promiscuous mode [ 1679.631179][T28111] debugfs: 'hsr0' already exists in 'hsr' [ 1679.646695][T28111] Cannot create hsr debugfs directory [ 1680.167520][T28135] chnl_net:caif_netlink_parms(): no params data found [ 1680.301825][T28155] QAT: failed to copy from user cfg_data. [ 1680.536306][T27554] Bluetooth: hci8: command tx timeout [ 1680.776267][T27554] Bluetooth: hci7: command tx timeout [ 1680.958197][T28135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.989354][T28135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.023424][T28135] bridge_slave_0: entered allmulticast mode [ 1681.047470][T28135] bridge_slave_0: entered promiscuous mode [ 1681.244435][T28135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.287688][T28135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.340382][T28135] bridge_slave_1: entered allmulticast mode [ 1681.378223][T28135] bridge_slave_1: entered promiscuous mode [ 1682.013592][T28135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.072065][T28135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.272685][T28187] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1682.324860][T28135] team0: Port device team_slave_0 added [ 1682.384534][T28135] team0: Port device team_slave_1 added [ 1682.608464][T28135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.616452][T28135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.670029][T27554] Bluetooth: hci8: command tx timeout [ 1682.812521][T28135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.859154][T27554] Bluetooth: hci7: command tx timeout [ 1682.992574][T28135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.019225][T28135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.074122][T28202] serio: Serial port ttyS0 [ 1683.156535][T28135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1683.316701][T28111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1683.425478][T28111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1683.511738][T28111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1683.579989][T28135] hsr_slave_0: entered promiscuous mode [ 1683.612927][T28135] hsr_slave_1: entered promiscuous mode [ 1683.642678][T28135] debugfs: 'hsr0' already exists in 'hsr' [ 1683.663563][T28135] Cannot create hsr debugfs directory [ 1683.691991][T28111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1684.367988][T28223] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input58 [ 1684.698196][T12996] Bluetooth: hci8: command tx timeout [ 1684.938462][T12996] Bluetooth: hci7: command tx timeout [ 1685.106436][T28135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.301562][T28111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.725498][T28135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.852806][T28111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.926744][T17979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.933942][T17979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.009731][T17979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.016915][T17979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.413163][T28135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.716404][T28135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.780759][T12996] Bluetooth: hci8: command tx timeout [ 1687.838139][T28135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1687.943724][T28111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.023489][T28135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1688.055641][T28135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1688.393897][T28135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1688.740898][T28111] veth0_vlan: entered promiscuous mode [ 1688.806565][T28111] veth1_vlan: entered promiscuous mode [ 1689.091647][T28111] veth0_macvtap: entered promiscuous mode [ 1689.143110][T28111] veth1_macvtap: entered promiscuous mode [ 1689.314206][T28111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.377524][T28135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.427636][T28111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.552026][T17979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.577752][T28135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.684828][T17979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.710513][T17979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.719433][T17979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.855459][T26948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.862728][T26948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.046148][T17979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.053383][T17979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.203967][T28311] ERROR: Out of memory at tomoyo_memory_ok. [ 1690.398969][T17974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.473976][T17974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.606968][T26948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.651256][T26948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.746249][T28315] Invalid ELF header magic: != ELF [ 1692.400843][T28135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.738863][T28135] veth0_vlan: entered promiscuous mode [ 1692.835182][T28135] veth1_vlan: entered promiscuous mode [ 1693.079315][T28135] veth0_macvtap: entered promiscuous mode [ 1693.353960][T28135] veth1_macvtap: entered promiscuous mode [ 1693.550506][T28135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.681552][T28135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1693.794730][T11843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.794817][T11843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.794859][T11843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.794899][T11843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.950468][T28349] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1694.929287][T17979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.929311][T17979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.108260][T17979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.108287][T17979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.169223][T28379] kexec: Could not allocate control_code_buffer [ 1697.200161][T28395] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1699.032947][T28430] QAT: failed to copy from user cfg_data. [ 1700.013722][T28433] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1700.396625][T28458] sg_write: data in/out 262169/4198358 bytes for SCSI command 0x0-- guessing data in; [ 1700.396625][T28458] program syz.1.4731 not setting count and/or reply_len properly [ 1700.566765][T28466] program syz.1.4731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1702.535289][T28508] QAT: failed to copy from user cfg_data. [ 1702.701234][T28509] FAULT_INJECTION: forcing a failure. [ 1702.701234][T28509] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.796604][T28515] ERROR: Out of memory at tomoyo_memory_ok. [ 1702.810675][T28509] CPU: 0 UID: 0 PID: 28509 Comm: syz.1.4741 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1702.810719][T28509] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1702.810730][T28509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1702.810746][T28509] Call Trace: [ 1702.810754][T28509] [ 1702.810763][T28509] dump_stack_lvl+0x100/0x190 [ 1702.810804][T28509] should_fail_ex.cold+0x5/0xa [ 1702.810831][T28509] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1702.810857][T28509] should_failslab+0xc2/0x120 [ 1702.810881][T28509] __kmalloc_noprof+0xe0/0x850 [ 1702.810921][T28509] tomoyo_realpath_from_path+0xb6/0x690 [ 1702.810953][T28509] tomoyo_path_number_perm+0x23c/0x580 [ 1702.810987][T28509] ? tomoyo_path_number_perm+0x22e/0x580 [ 1702.811025][T28509] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1702.811098][T28509] ? find_held_lock+0x2b/0x80 [ 1702.811120][T28509] ? __fget_files+0x215/0x3d0 [ 1702.811185][T28509] ? hook_file_ioctl_common+0x146/0x410 [ 1702.811228][T28509] ? __fget_files+0x21f/0x3d0 [ 1702.811268][T28509] security_file_ioctl+0xd3/0x230 [ 1702.811305][T28509] __x64_sys_ioctl+0xb7/0x210 [ 1702.811339][T28509] do_syscall_64+0x106/0xf80 [ 1702.811365][T28509] ? clear_bhb_loop+0x40/0x90 [ 1702.811394][T28509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.811418][T28509] RIP: 0033:0x7f5ca359c629 [ 1702.811438][T28509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.811461][T28509] RSP: 002b:00007f5ca17f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1702.811486][T28509] RAX: ffffffffffffffda RBX: 00007f5ca3816090 RCX: 00007f5ca359c629 [ 1702.811502][T28509] RDX: 0000000000000000 RSI: 0000000000004605 RDI: 0000000000000007 [ 1702.811516][T28509] RBP: 00007f5ca17f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.811531][T28509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.811545][T28509] R13: 00007f5ca3816128 R14: 00007f5ca3816090 R15: 00007ffee39c8c18 [ 1702.811575][T28509] [ 1702.811585][T28509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1704.533285][T28536] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 1705.807759][T28525] serio: Serial port ttyS0 [ 1705.865187][T28531] random: crng reseeded on system resumption [ 1706.245984][T28559] [ 1707.134779][T28537] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1711.226019][T28632] QAT: failed to copy from user cfg_data. [ 1711.391931][T28636] serio: Serial port ttyS0 [ 1713.239668][T28657] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1715.886505][T28700] serio: Serial port ttyS0 [ 1716.576440][T28711] QAT: failed to copy from user cfg_data. [ 1716.643107][T28711] program syz.1.4777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1718.081363][T28733] zswap: compressor not available [ 1719.326417][T28751] FAULT_INJECTION: forcing a failure. [ 1719.326417][T28751] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1719.397264][T28751] CPU: 0 UID: 0 PID: 28751 Comm: syz.1.4785 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1719.397310][T28751] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1719.397322][T28751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1719.397337][T28751] Call Trace: [ 1719.397346][T28751] [ 1719.397356][T28751] dump_stack_lvl+0x100/0x190 [ 1719.397399][T28751] should_fail_ex.cold+0x5/0xa [ 1719.397430][T28751] get_futex_key+0x1d2/0x1620 [ 1719.397463][T28751] ? __pfx_get_futex_key+0x10/0x10 [ 1719.397503][T28751] futex_wait_setup+0x81/0x500 [ 1719.397548][T28751] __futex_wait+0x19f/0x300 [ 1719.397588][T28751] ? __pfx___futex_wait+0x10/0x10 [ 1719.397630][T28751] ? __pfx_futex_wake_mark+0x10/0x10 [ 1719.397672][T28751] ? find_held_lock+0x2b/0x80 [ 1719.397694][T28751] ? futex_wake+0x456/0x530 [ 1719.397737][T28751] futex_wait+0xed/0x380 [ 1719.397774][T28751] ? __pfx_futex_wait+0x10/0x10 [ 1719.397820][T28751] ? do_vfs_ioctl+0x226/0x13e0 [ 1719.397857][T28751] do_futex+0x1ef/0x350 [ 1719.397889][T28751] ? __pfx_do_futex+0x10/0x10 [ 1719.397930][T28751] ? find_held_lock+0x2b/0x80 [ 1719.397956][T28751] __x64_sys_futex+0x34f/0x4d0 [ 1719.397993][T28751] ? __pfx___x64_sys_futex+0x10/0x10 [ 1719.398037][T28751] do_syscall_64+0x106/0xf80 [ 1719.398064][T28751] ? clear_bhb_loop+0x40/0x90 [ 1719.398094][T28751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.398120][T28751] RIP: 0033:0x7f5ca359c629 [ 1719.398142][T28751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.398166][T28751] RSP: 002b:00007f5ca436f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1719.398190][T28751] RAX: ffffffffffffffda RBX: 00007f5ca3815fa8 RCX: 00007f5ca359c629 [ 1719.398206][T28751] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ca3815fa8 [ 1719.398222][T28751] RBP: 00007f5ca3815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1719.398237][T28751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1719.398253][T28751] R13: 00007f5ca3816038 R14: 00007ffee39c8b30 R15: 00007ffee39c8c18 [ 1719.398283][T28751] [ 1721.058683][T28786] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 1721.702463][T28811] FAULT_INJECTION: forcing a failure. [ 1721.702463][T28811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1721.733149][T28810] FAULT_INJECTION: forcing a failure. [ 1721.733149][T28810] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1721.780027][T28810] CPU: 0 UID: 0 PID: 28810 Comm: syz.9.4798 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1721.780072][T28810] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1721.780084][T28810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1721.780099][T28810] Call Trace: [ 1721.780107][T28810] [ 1721.780117][T28810] dump_stack_lvl+0x100/0x190 [ 1721.780158][T28810] should_fail_ex.cold+0x5/0xa [ 1721.780187][T28810] get_futex_key+0x1d2/0x1620 [ 1721.780221][T28810] ? __pfx_get_futex_key+0x10/0x10 [ 1721.780251][T28810] ? __lock_acquire+0x4a5/0x2630 [ 1721.780289][T28810] futex_wait_setup+0x81/0x500 [ 1721.780334][T28810] __futex_wait+0x19f/0x300 [ 1721.780374][T28810] ? __pfx___futex_wait+0x10/0x10 [ 1721.780416][T28810] ? __pfx_futex_wake_mark+0x10/0x10 [ 1721.780467][T28810] ? futex_hash+0x2c5/0x380 [ 1721.780504][T28810] futex_wait+0xed/0x380 [ 1721.780541][T28810] ? __pfx_futex_wait+0x10/0x10 [ 1721.780588][T28810] ? do_vfs_ioctl+0x226/0x13e0 [ 1721.780626][T28810] do_futex+0x1ef/0x350 [ 1721.780658][T28810] ? __pfx_do_futex+0x10/0x10 [ 1721.780691][T28810] ? find_held_lock+0x2b/0x80 [ 1721.780717][T28810] __x64_sys_futex+0x34f/0x4d0 [ 1721.780751][T28810] ? __fget_files+0x21f/0x3d0 [ 1721.780789][T28810] ? __pfx___x64_sys_futex+0x10/0x10 [ 1721.780832][T28810] do_syscall_64+0x106/0xf80 [ 1721.780859][T28810] ? clear_bhb_loop+0x40/0x90 [ 1721.780889][T28810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.780915][T28810] RIP: 0033:0x7f1a25b9c629 [ 1721.780936][T28810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.780960][T28810] RSP: 002b:00007f1a23df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1721.780983][T28810] RAX: ffffffffffffffda RBX: 00007f1a25e15fa8 RCX: 00007f1a25b9c629 [ 1721.781000][T28810] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a25e15fa8 [ 1721.781015][T28810] RBP: 00007f1a25e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.781030][T28810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1721.781045][T28810] R13: 00007f1a25e16038 R14: 00007fff98310190 R15: 00007fff98310278 [ 1721.781076][T28810] [ 1722.337126][T28811] CPU: 0 UID: 0 PID: 28811 Comm: syz.2.4797 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1722.337171][T28811] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1722.337183][T28811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1722.337198][T28811] Call Trace: [ 1722.337207][T28811] [ 1722.337216][T28811] dump_stack_lvl+0x100/0x190 [ 1722.337258][T28811] should_fail_ex.cold+0x5/0xa [ 1722.337287][T28811] _copy_to_iter+0x5a4/0x1720 [ 1722.337332][T28811] ? __pfx__copy_to_iter+0x10/0x10 [ 1722.337379][T28811] ? folio_mark_accessed+0xf3/0x1040 [ 1722.337417][T28811] ? __pfx_filemap_get_pages+0x10/0x10 [ 1722.337455][T28811] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1722.337498][T28811] copy_page_to_iter+0x12a/0x1e0 [ 1722.337539][T28811] filemap_read+0x7a9/0x10a0 [ 1722.337589][T28811] ? __pfx_filemap_read+0x10/0x10 [ 1722.337645][T28811] ? __pfx_down_read+0x10/0x10 [ 1722.337678][T28811] ? futex_unqueue+0x133/0x2c0 [ 1722.337709][T28811] ? __pfx_aa_file_perm+0x10/0x10 [ 1722.337738][T28811] blkdev_read_iter+0x2c4/0x4f0 [ 1722.337773][T28811] do_iter_readv_writev+0x60d/0x920 [ 1722.337817][T28811] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1722.337858][T28811] ? bpf_lsm_file_permission+0x9/0x10 [ 1722.337894][T28811] ? security_file_permission+0x76/0x210 [ 1722.337935][T28811] ? rw_verify_area+0xce/0x6d0 [ 1722.337971][T28811] vfs_readv+0x4d3/0x8d0 [ 1722.338013][T28811] ? __pfx_vfs_readv+0x10/0x10 [ 1722.338068][T28811] ? __fget_files+0x21f/0x3d0 [ 1722.338113][T28811] ? do_readv+0x13e/0x340 [ 1722.338145][T28811] do_readv+0x13e/0x340 [ 1722.338180][T28811] ? __pfx_do_readv+0x10/0x10 [ 1722.338214][T28811] ? xfd_validate_state+0x129/0x190 [ 1722.338255][T28811] __x64_sys_preadv2+0x11f/0x160 [ 1722.338281][T28811] do_syscall_64+0x106/0xf80 [ 1722.338307][T28811] ? clear_bhb_loop+0x40/0x90 [ 1722.338338][T28811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.338368][T28811] RIP: 0033:0x7f706839c629 [ 1722.338390][T28811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.338415][T28811] RSP: 002b:00007f70692ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1722.338439][T28811] RAX: ffffffffffffffda RBX: 00007f7068616090 RCX: 00007f706839c629 [ 1722.338456][T28811] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000006 [ 1722.338472][T28811] RBP: 00007f7068432b39 R08: 0000000000000004 R09: 000000000000002e [ 1722.338487][T28811] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1722.338503][T28811] R13: 00007f7068616128 R14: 00007f7068616090 R15: 00007ffd6e928278 [ 1722.338536][T28811] [ 1722.715485][T28836] __vm_enough_memory: pid: 28836, comm: syz.9.4804, bytes: 4398046511104 not enough memory for the allocation [ 1723.932206][T28857] bridge0: port 3(gretap0) entered blocking state [ 1723.959914][T28857] bridge0: port 3(gretap0) entered disabled state [ 1723.966590][T28857] gretap0: entered allmulticast mode [ 1724.044227][T28857] gretap0: entered promiscuous mode [ 1724.067407][T28857] bridge0: port 3(gretap0) entered blocking state [ 1724.074038][T28857] bridge0: port 3(gretap0) entered forwarding state [ 1730.891186][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.897667][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.575308][T27554] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1731.593723][T27554] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1731.603578][T27554] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1731.618544][T27554] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1731.632130][T27554] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1731.858417][T28864] chnl_net:caif_netlink_parms(): no params data found [ 1731.956855][T28864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.964272][T28864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.972101][T28864] bridge_slave_0: entered allmulticast mode [ 1731.980537][T28864] bridge_slave_0: entered promiscuous mode [ 1731.991210][T28864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.002535][T28864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.009842][T28864] bridge_slave_1: entered allmulticast mode [ 1732.018148][T28864] bridge_slave_1: entered promiscuous mode [ 1732.059853][T28864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.076217][T28864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.119526][T28864] team0: Port device team_slave_0 added [ 1732.128204][T28864] team0: Port device team_slave_1 added [ 1732.159629][T28864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.176744][T28864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.208076][T28864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.220880][T28864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.228387][T28864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.255352][T28864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.318633][T28864] hsr_slave_0: entered promiscuous mode [ 1732.326490][T28864] hsr_slave_1: entered promiscuous mode [ 1732.333557][T28864] debugfs: 'hsr0' already exists in 'hsr' [ 1732.340501][T28864] Cannot create hsr debugfs directory [ 1733.234273][T28864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1733.256077][T28864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1733.288780][T28864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1733.316288][T28864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1733.510807][T28864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.570830][T28864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.603825][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.611013][T17977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.646004][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.653204][T17977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.684004][T27554] Bluetooth: hci9: command tx timeout [ 1733.761854][T28864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1734.211208][T28864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.797785][T28864] veth0_vlan: entered promiscuous mode [ 1734.831295][T28864] veth1_vlan: entered promiscuous mode [ 1734.923918][T28864] veth0_macvtap: entered promiscuous mode [ 1734.951486][T28864] veth1_macvtap: entered promiscuous mode [ 1735.006202][T28864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.036354][T28864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.085267][T12845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.113890][T12845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.122648][T12845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.171460][T12845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.396065][T17977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.427354][T17977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.515502][T17976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.528673][T17976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.764903][T27554] Bluetooth: hci9: command tx timeout [ 1736.773037][T28963] QAT: failed to copy from user cfg_data. [ 1737.785618][T12996] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1737.798447][T12996] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1737.814141][T12996] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1737.822196][T12996] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1737.845423][T12996] Bluetooth: hci9: command tx timeout [ 1737.856035][T12996] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1738.420607][T28986] chnl_net:caif_netlink_parms(): no params data found [ 1738.864810][T28986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.906259][T28986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.913571][T28986] bridge_slave_0: entered allmulticast mode [ 1738.969268][T27554] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1738.984083][T27554] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1738.996757][T27554] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1739.006803][T27554] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1739.014418][T27554] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1739.075267][T28986] bridge_slave_0: entered promiscuous mode [ 1739.106588][T28986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.113904][T28986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.166853][T28986] bridge_slave_1: entered allmulticast mode [ 1739.209798][T28986] bridge_slave_1: entered promiscuous mode [ 1739.354922][T28986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.420815][T28986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.599315][T28986] team0: Port device team_slave_0 added [ 1739.660386][T28986] team0: Port device team_slave_1 added [ 1739.764454][T28986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.817097][T28986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.905553][T28986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.927816][T27554] Bluetooth: hci10: command tx timeout [ 1739.934552][T27554] Bluetooth: hci9: command tx timeout [ 1739.992340][T28986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.035677][T28986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.116862][T28986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.302490][T28986] hsr_slave_0: entered promiscuous mode [ 1740.338252][T28986] hsr_slave_1: entered promiscuous mode [ 1740.354967][T28986] debugfs: 'hsr0' already exists in 'hsr' [ 1740.393210][T28986] Cannot create hsr debugfs directory [ 1741.080900][T29013] chnl_net:caif_netlink_parms(): no params data found [ 1741.132791][T27554] Bluetooth: hci11: command tx timeout [ 1741.220616][T12996] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1741.233112][T12996] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1741.241741][T12996] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1741.258955][T12996] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1741.269945][T12996] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1741.649183][T28986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.959521][T28986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.010231][T12996] Bluetooth: hci10: command tx timeout [ 1742.111077][T29013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.144669][T29013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.169659][T29013] bridge_slave_0: entered allmulticast mode [ 1742.199059][T29013] bridge_slave_0: entered promiscuous mode [ 1742.207281][T29009] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1742.295743][T28986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.386240][T29013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.423782][T29013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.457070][T29013] bridge_slave_1: entered allmulticast mode [ 1742.488324][T29013] bridge_slave_1: entered promiscuous mode [ 1742.657641][T28986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.785680][T29013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.872364][T29013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1743.085455][T29013] team0: Port device team_slave_0 added [ 1743.120036][T29013] team0: Port device team_slave_1 added [ 1743.208548][T12996] Bluetooth: hci11: command tx timeout [ 1743.367411][T12996] Bluetooth: hci12: command tx timeout [ 1743.398027][T29013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.405007][T29013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.521889][T29013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1743.600131][T29013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1743.623895][T29013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.747484][T29013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.005579][T29038] chnl_net:caif_netlink_parms(): no params data found [ 1744.070031][T28986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1744.093152][T12996] Bluetooth: hci10: command tx timeout [ 1744.136796][T28986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1744.223754][T29013] hsr_slave_0: entered promiscuous mode [ 1744.247321][T29013] hsr_slave_1: entered promiscuous mode [ 1744.274760][T29013] debugfs: 'hsr0' already exists in 'hsr' [ 1744.289180][T29013] Cannot create hsr debugfs directory [ 1744.307333][T28986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1744.372665][T28986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1744.900058][T29038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.912146][T29038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.923598][T29038] bridge_slave_0: entered allmulticast mode [ 1744.932613][T29038] bridge_slave_0: entered promiscuous mode [ 1745.022751][T29038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.041157][T29038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.058535][T29038] bridge_slave_1: entered allmulticast mode [ 1745.097505][T29038] bridge_slave_1: entered promiscuous mode [ 1745.289206][T12996] Bluetooth: hci11: command tx timeout [ 1745.448342][T12996] Bluetooth: hci12: command tx timeout [ 1745.477483][T29038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.619781][T29038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1745.837305][T29038] team0: Port device team_slave_0 added [ 1745.861478][T29038] team0: Port device team_slave_1 added [ 1746.124816][T29013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.169357][T12996] Bluetooth: hci10: command tx timeout [ 1746.304037][T29038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.332195][T29038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1746.478352][T29038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.847530][T29013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.957705][T29038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.000484][T29038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.149369][T29038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.263988][T28986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1747.369387][T12996] Bluetooth: hci11: command tx timeout [ 1747.412824][T29013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.540678][T12996] Bluetooth: hci12: command tx timeout [ 1747.581853][T28986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1747.804336][T29013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.884979][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.892232][T17977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.957270][T29038] hsr_slave_0: entered promiscuous mode [ 1747.982104][T29038] hsr_slave_1: entered promiscuous mode [ 1748.010894][T29038] debugfs: 'hsr0' already exists in 'hsr' [ 1748.016713][T29038] Cannot create hsr debugfs directory [ 1748.075589][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.082779][T17977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.681404][T29013] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1748.792882][T29013] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1748.847567][T29013] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1748.941701][T29013] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1749.435333][T29038] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.562387][T29038] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.611304][T12996] Bluetooth: hci12: command tx timeout [ 1749.659089][T28986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.742879][T29038] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.842918][T29038] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.965971][T29013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.045662][T28986] veth0_vlan: entered promiscuous mode [ 1750.101994][T29013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.113876][T28986] veth1_vlan: entered promiscuous mode [ 1750.157177][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.164434][T12845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.196731][T12845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.204015][T12845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.523960][T28986] veth0_macvtap: entered promiscuous mode [ 1750.580125][T28986] veth1_macvtap: entered promiscuous mode [ 1750.609379][T29038] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1750.679651][T29038] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1750.738732][ T30] INFO: task syz.0.4485:27072 blocked for more than 143 seconds. [ 1750.750359][T29038] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1750.771586][ T30] Tainted: G U I L syzkaller #0 [ 1750.778318][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1750.810526][ T30] task:syz.0.4485 state:D stack:25752 pid:27072 tgid:27066 ppid:17818 task_flags:0x400140 flags:0x00080002 [ 1750.862973][ T30] Call Trace: [ 1750.866424][ T30] [ 1750.869378][ T30] __schedule+0xfee/0x60e0 [ 1750.900811][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1750.916117][ T30] ? __pfx___schedule+0x10/0x10 [ 1750.941032][ T30] ? find_held_lock+0x2b/0x80 [ 1750.971757][ T30] ? schedule+0x2bf/0x390 [ 1750.976157][ T30] schedule+0xdd/0x390 [ 1750.990854][ T30] schedule_preempt_disabled+0x13/0x30 [ 1751.001357][ T30] __mutex_lock+0xc9a/0x1b90 [ 1751.006012][ T30] ? expkey_flush+0x18/0x90 [ 1751.010554][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1751.031112][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1751.045040][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1751.060918][ T30] ? __pfx_cache_clean+0x10/0x10 [ 1751.069621][ T30] ? __pfx___might_resched+0x10/0x10 [ 1751.081553][ T30] ? __pfx_expkey_flush+0x10/0x10 [ 1751.092614][ T30] ? expkey_flush+0x18/0x90 [ 1751.101106][ T30] expkey_flush+0x18/0x90 [ 1751.105484][ T30] write_flush.isra.0+0x2af/0x3d0 [ 1751.120485][ T30] ? __pfx_write_flush.isra.0+0x10/0x10 [ 1751.181383][ T30] ? __pfx___might_resched+0x10/0x10 [ 1751.221430][ T30] ? iovec_from_user+0xda/0x140 [ 1751.226371][ T30] ? __pfx_write_flush_procfs+0x10/0x10 [ 1751.271296][ T30] proc_reg_write+0x240/0x330 [ 1751.276190][ T30] ? __pfx_proc_reg_write+0x10/0x10 [ 1751.301467][ T30] vfs_writev+0x5ea/0xe10 [ 1751.305878][ T30] ? rcu_is_watching+0x12/0xc0 [ 1751.310689][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 1751.317055][ T30] ? fdget_pos+0x2aa/0x380 [ 1751.322230][ T30] ? __fget_files+0x21f/0x3d0 [ 1751.326957][ T30] ? do_writev+0x13e/0x340 [ 1751.331945][ T30] do_writev+0x13e/0x340 [ 1751.336955][ T30] ? __pfx_do_writev+0x10/0x10 [ 1751.342156][ T30] do_syscall_64+0x106/0xf80 [ 1751.346776][ T30] ? clear_bhb_loop+0x40/0x90 [ 1751.355997][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.365221][ T30] RIP: 0033:0x7f7d0c19c629 [ 1751.369702][ T30] RSP: 002b:00007f7d0d023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1751.418800][ T30] RAX: ffffffffffffffda RBX: 00007f7d0c416090 RCX: 00007f7d0c19c629 [ 1751.428131][ T30] RDX: 000000000000000a RSI: 00002000000003c0 RDI: 0000000000000005 [ 1751.436664][ T30] RBP: 00007f7d0c232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1751.445850][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.457117][ T30] R13: 00007f7d0c416128 R14: 00007f7d0c416090 R15: 00007fff3af6a9a8 [ 1751.471628][ T30] [ 1751.574082][ T30] INFO: task syz.0.4485:27074 blocked for more than 144 seconds. [ 1751.635160][ T30] Tainted: G U I L syzkaller #0 [ 1751.680211][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1751.703940][ T30] task:syz.0.4485 state:D stack:27464 pid:27074 tgid:27066 ppid:17818 task_flags:0x400140 flags:0x00080002 [ 1751.716472][ T30] Call Trace: [ 1751.719781][ T30] [ 1751.728131][ T30] __schedule+0xfee/0x60e0 [ 1751.733517][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1751.738496][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 1751.748845][ T30] ? look_up_lock_class+0x55/0x120 [ 1751.755318][ T30] ? __pfx___schedule+0x10/0x10 [ 1751.760197][ T30] ? find_held_lock+0x2b/0x80 [ 1751.766962][ T30] ? schedule+0x2bf/0x390 [ 1751.777238][ T30] schedule+0xdd/0x390 [ 1751.781683][ T30] schedule_preempt_disabled+0x13/0x30 [ 1751.787283][ T30] __mutex_lock+0xc9a/0x1b90 [ 1751.794870][ T30] ? expkey_flush+0x18/0x90 [ 1751.799537][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1751.805702][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1751.810972][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1751.816697][ T30] ? __pfx_cache_clean+0x10/0x10 [ 1751.822193][ T30] ? __pfx___might_resched+0x10/0x10 [ 1751.827540][ T30] ? __pfx_expkey_flush+0x10/0x10 [ 1751.833249][ T30] ? expkey_flush+0x18/0x90 [ 1751.837806][ T30] expkey_flush+0x18/0x90 [ 1751.842989][ T30] write_flush.isra.0+0x2af/0x3d0 [ 1751.848054][ T30] ? __pfx_write_flush.isra.0+0x10/0x10 [ 1751.858913][ T30] ? __pfx___might_resched+0x10/0x10 [ 1751.867228][ T30] ? iovec_from_user+0xda/0x140 [ 1751.875854][ T30] ? __pfx_write_flush_procfs+0x10/0x10 [ 1751.881762][ T30] proc_reg_write+0x240/0x330 [ 1751.886481][ T30] ? __pfx_proc_reg_write+0x10/0x10 [ 1751.892629][ T30] vfs_writev+0x5ea/0xe10 [ 1751.897035][ T30] ? rcu_is_watching+0x12/0xc0 [ 1751.904994][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 1751.909895][ T30] ? fdget_pos+0x2aa/0x380 [ 1751.915911][ T30] ? __fget_files+0x21f/0x3d0 [ 1751.920650][ T30] ? do_writev+0x13e/0x340 [ 1751.925647][ T30] do_writev+0x13e/0x340 [ 1751.929934][ T30] ? __pfx_do_writev+0x10/0x10 [ 1751.935777][ T30] do_syscall_64+0x106/0xf80 [ 1751.940406][ T30] ? clear_bhb_loop+0x40/0x90 [ 1751.945457][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.952510][ T30] RIP: 0033:0x7f7d0c19c629 [ 1751.956985][ T30] RSP: 002b:00007f7d0d002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1751.970898][ T30] RAX: ffffffffffffffda RBX: 00007f7d0c416180 RCX: 00007f7d0c19c629 [ 1751.984427][ T30] RDX: 000000000000000a RSI: 0000200000000240 RDI: 0000000000000006 [ 1751.993006][ T30] RBP: 00007f7d0c232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1752.001381][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.010079][ T30] R13: 00007f7d0c416218 R14: 00007f7d0c416180 R15: 00007fff3af6a9a8 [ 1752.022984][ T30] [ 1752.091882][ T30] [ 1752.091882][ T30] Showing all locks held in the system: [ 1752.151646][ T30] 1 lock held by khungtaskd/30: [ 1752.162627][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1752.241706][ T30] 2 locks held by syz.3.4390/26549: [ 1752.246963][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1752.351757][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 1752.403630][ T30] 3 locks held by syz.0.4485/27072: [ 1752.408876][ T30] #0: ffff88807853a478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1752.489571][ T30] #1: ffff888036bca420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 1752.556065][ T30] #2: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 1752.633562][ T30] 3 locks held by syz.0.4485/27074: [ 1752.638826][ T30] #0: ffff8880361649b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1752.742617][ T30] #1: ffff888036bca420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 1752.751595][ T30] #2: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 1752.872151][ T30] 2 locks held by syz.7.4614/27716: [ 1752.892802][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1752.948842][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1752.982074][ T30] 2 locks held by syz-executor/27882: [ 1752.987539][ T30] #0: ffff88807ce700e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1753.004205][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1753.019770][ T30] 2 locks held by syz.8.4657/27921: [ 1753.025541][ T30] #0: ffff888036bf00e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1753.036296][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1753.049678][ T30] 2 locks held by syz.5.4662/27944: [ 1753.056110][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1753.064660][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1753.075025][ T30] 2 locks held by syz-executor/28111: [ 1753.081159][ T30] #0: ffff88805ec400e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1753.092144][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1753.106224][ T30] 2 locks held by syz-executor/28135: [ 1753.111624][ T30] #0: ffff888038c260e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1753.127813][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1753.139352][ T30] 3 locks held by kworker/0:2/28266: [ 1753.144963][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1753.160213][ T30] #1: ffffc90004207d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1753.172638][ T30] #2: ffff88802abfe240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 1753.184210][ T30] 2 locks held by syz.6.4774/28701: [ 1753.189431][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1753.199391][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 1753.218516][ T30] 5 locks held by syz-executor/28986: [ 1753.224366][ T30] #0: ffff88804509cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1753.239809][ T30] #1: ffff88804509c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1753.249910][ T30] #2: ffffffff908a9f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1753.260581][ T30] #3: ffff888061dd62f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 1753.273527][ T30] #4: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1753.284630][ T30] 3 locks held by syz-executor/29013: [ 1753.290031][ T30] #0: ffff8880a2da4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1753.304015][ T30] #1: ffff8880a2da40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1753.317231][ T30] #2: ffffffff908a9f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1753.327736][ T30] 3 locks held by syz-executor/29038: [ 1753.333405][ T30] #0: ffff88805b9c4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1753.348843][ T30] #1: ffff88805b9c40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1753.358887][ T30] #2: ffffffff908a9f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1753.369287][ T30] 3 locks held by syz.4.4822/29161: [ 1753.379099][ T30] #0: ffff88802aa60ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1753.392340][ T30] #1: ffff88802aa600c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1753.403933][ T30] #2: ffffffff908a9f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1753.436183][ T30] [ 1753.448366][ T30] ============================================= [ 1753.448366][ T30] [ 1753.515847][ T30] NMI backtrace for cpu 0 [ 1753.515869][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1753.515908][ T30] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1753.515919][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1753.515933][ T30] Call Trace: [ 1753.515941][ T30] [ 1753.515949][ T30] dump_stack_lvl+0x100/0x190 [ 1753.515989][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1753.516028][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1753.516063][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1753.516102][ T30] sys_info+0x141/0x190 [ 1753.516131][ T30] watchdog+0xd25/0x1050 [ 1753.516161][ T30] ? __pfx_watchdog+0x10/0x10 [ 1753.516184][ T30] ? __kthread_parkme+0x18c/0x230 [ 1753.516213][ T30] ? kthread+0x13a/0x450 [ 1753.516242][ T30] ? __pfx_watchdog+0x10/0x10 [ 1753.516263][ T30] kthread+0x370/0x450 [ 1753.516292][ T30] ? __pfx_kthread+0x10/0x10 [ 1753.516324][ T30] ret_from_fork+0x754/0xd80 [ 1753.516360][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1753.516397][ T30] ? __switch_to+0x7b4/0x1120 [ 1753.516422][ T30] ? __pfx_kthread+0x10/0x10 [ 1753.516454][ T30] ret_from_fork_asm+0x1a/0x30 [ 1753.516492][ T30] [ 1753.859707][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1753.866608][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1753.877522][ T30] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1753.884980][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1753.895137][ T30] Call Trace: [ 1753.898427][ T30] [ 1753.901367][ T30] dump_stack_lvl+0x100/0x190 [ 1753.906121][ T30] vpanic+0x552/0x970 [ 1753.910141][ T30] ? __pfx_vpanic+0x10/0x10 [ 1753.914696][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1753.920902][ T30] panic+0xd1/0xe0 [ 1753.924645][ T30] ? __pfx_panic+0x10/0x10 [ 1753.929177][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1753.935362][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1753.941542][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1753.947743][ T30] ? watchdog.cold+0x198/0x1ca [ 1753.952544][ T30] ? watchdog+0xd35/0x1050 [ 1753.956995][ T30] watchdog.cold+0x1a9/0x1ca [ 1753.961801][ T30] ? __pfx_watchdog+0x10/0x10 [ 1753.966678][ T30] ? __kthread_parkme+0x18c/0x230 [ 1753.971725][ T30] ? kthread+0x13a/0x450 [ 1753.975986][ T30] ? __pfx_watchdog+0x10/0x10 [ 1753.980678][ T30] kthread+0x370/0x450 [ 1753.984767][ T30] ? __pfx_kthread+0x10/0x10 [ 1753.989393][ T30] ret_from_fork+0x754/0xd80 [ 1753.994011][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1753.999151][ T30] ? __switch_to+0x7b4/0x1120 [ 1754.003844][ T30] ? __pfx_kthread+0x10/0x10 [ 1754.008464][ T30] ret_from_fork_asm+0x1a/0x30 [ 1754.013269][ T30] [ 1754.016384][ T30] Kernel Offset: disabled [ 1754.020729][ T30] Rebooting in 86400 seconds..