last executing test programs: 13m44.549435887s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008880) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) madvise$auto(0x0, 0x8, 0x3) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x89f3, 0x24) 13m42.087484581s ago: executing program 3 (id=8): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x84) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x80000001) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x80000000}, 0x4) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/fs/cifs/DebugData\x00', 0x2000, 0x0) socket(0x10, 0x2, 0x0) r3 = socket(0x1, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) madvise$auto(0x6, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dma\x00', 0x20000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/wlan0/disable_policy\x00', 0x101040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/ip6tnl0/statistics/collisions\x00', 0x80000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) 13m26.931207579s ago: executing program 32 (id=8): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x84) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x80000001) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x80000000}, 0x4) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/fs/cifs/DebugData\x00', 0x2000, 0x0) socket(0x10, 0x2, 0x0) r3 = socket(0x1, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) madvise$auto(0x6, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dma\x00', 0x20000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/wlan0/disable_policy\x00', 0x101040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/ip6tnl0/statistics/collisions\x00', 0x80000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m53.98673811s ago: executing program 1 (id=2034): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xffffffffc0403d11, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x8680, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r1, 0x8000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000240)="d981d87ec99f3f23acba3c083d4a8e144d24001c93ffa9c39039fb64f5318f66c7b3de8b9cd2b0726a8293b03b209e935cf5aeaa113a73560127c8f38f1a2a25af818443e737fca0d6ca3037e2dc95f4951fd06c8970c9eb33821a2cf3072b7d27556d2843e5341a45db35e4c6336a7d69a9999695a04ca94cd8fad6872e7a6a7f42d26cc0371e341af85bda23aa710c406095d3356bc0195b2a4e814085b4f55a1262c494cf5d8ae9b4629d734545aa0f034f4d0fbaf1d7b20984a3253927e078a682682c6d3dbd17dea206c18d37459135afdca2ff8f508b4831bef0b021508701", 0xe2) sendfile$auto(0x3, r4, 0x0, 0x400000000006) write$auto_proc_pid_attr_operations_base(r0, &(0x7f0000000340)="e3d75392bdd551a167f2ce5a29", 0xd) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) rt_sigsuspend$auto(0x0, 0x8) 2m52.726593877s ago: executing program 1 (id=2040): mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u51\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f00000002c0)=0x100000040a) 2m38.556203591s ago: executing program 4 (id=2090): mmap$auto(0x0, 0xe, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x9, 0x7c9, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x7, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7ffffffc, 0x80, 0x6, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, [0x8000000000000000, 0x101, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x24, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x7e, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x8000000000, 0xfffffffffffffffe]}, 0x200, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0x1, &(0x7f0000000000)='l2tp\x00', 0x7) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0xb, 0xa505}, 0x800}, 0x7, 0x4008) clone3$auto(0x0, 0x5) io_uring_register$auto_IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000440)="52f7fa4f1c1d1e145f962b2309156401652fdaf225c8a347f7c99697a45c801ed822f893943d3613fb8dd08d609338289ad7a8c0b25ad1c6078ebc32af02f087b2c18faa00b658c9cb16b9fb4ed9a0d277", 0xfff) r3 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) read$auto(r3, 0x0, 0x1f42) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) ioctl$auto_FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x3) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r1) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe102018}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x22}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x2}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4064880}, 0x24040050) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=@token_create={0x212, r4}, 0x7) read$auto(r4, 0x0, 0x20) 2m38.365903656s ago: executing program 4 (id=2092): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x143080, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r0) r1 = epoll_create$auto(0x3) epoll_pwait2$auto(r1, 0x0, 0x9, 0x0, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x3fff, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0xff], {0x9, 0x1, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x5, 0x4000002, 0x2000}, {0x100, 0x1, 0x52, 0x3, 0x1, 0x6, 0x104, 0x8, 0xfffffffe}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) 2m35.888607268s ago: executing program 4 (id=2096): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10007ffe) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0xd, 0x9) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC0D0p\x00', 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x3) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy10/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x22442, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b68, 0x1) write$auto(r1, 0x0, 0x40400) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x240900, 0x0) epoll_pwait$auto(0xffffffffffffffff, 0x0, 0x803, 0xffff1374, 0x0, 0x8) close_range$auto(0xffffffffffffffff, r1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1023, 0x4, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) syz_clone(0x4208080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc2801, 0x0) mmap$auto(0x0, 0x3, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKPG(0xffffffffffffffff, 0x1269, 0x300) 2m35.568294611s ago: executing program 33 (id=2050): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup$auto(0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, &(0x7f0000000100)=0x71, &(0x7f00000000c0)=0xb, 0xb2ae, 0x7ff, 0x7, 0x6, 0x508, 0xfff, 0x2, 0x6, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20240}, 0xc, &(0x7f0000000380)={&(0x7f0000002d00)=ANY=[@ANYBLOB="000000000375e93127089b3f779c9c5a8a844f435d02c326ce94722bff4133b697c7e1c3f4ae7b4be4892aa0dc5c510bf18a343d55efc846150e77dcdccae949ec4fd2b0dac8453a338c238699083473c8eb5048fe8a61232c962469a96a56", @ANYRES16=r3, @ANYBLOB="920629bd7000fedbdf252400000005000800030000000c001700070000000000000018122f806800478008000600", @ANYBLOB="c79fecf88618858e27838798b5343eba865900f4499d4689206af477d24c04216e0f62ed919a0238350dc2086eaf2a21cf67d947d39cee899d1ffcfc4116a6be0ef3f72c7c7f053778622cf325cba0c1625a43f6a8e8bc86981ff832ff182e0ac817f76cfad1dec6779978fd35d9e02aa9f20d83b803902261c19438a353b6174245dfd3b412ec18118134a598cb8c1648a0a47fb3add615b931187cbc6c646bc5cbdd2c087f04edca79a34ce8c06156", @ANYBLOB="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"], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00bbd7", @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf251100000005000f0010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC0\x00', 0x80482, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000017c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xb1\xad\x81X\xad\xdb#\xf1\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xc9\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"K\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xb6\xb6\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x01\x01\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09\x8e)\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1eL\xc1\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xb2\xf4\xb5\xe6\xd0 \xb9\xa7', 0x2000000002) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f00000002c0)=0x100000040a) 2m35.497268582s ago: executing program 4 (id=2099): mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x8, 0x80, 0x9) madvise$auto(0x2, 0xffffffffffff0005, 0x1d) socket(0x29, 0x5, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x2c, 0xa, 0x7) mknod$auto(0x0, 0x1001, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x5, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x2c, 0x940, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000004c0)={0x2, 0x80, 0xffff, 0x80, &(0x7f0000000240), 0xc691, 0x9, 0x80005, @stream_id=0x80007, 0xa004b, 0xc, 0x0}) r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x800, 0x0) read$auto(r1, 0x0, 0xfdef) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x4200, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0xa00006, 0x3ffffe, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) 2m34.393178325s ago: executing program 4 (id=2103): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\x04\xa0\x04|\x03\xcb\x12\xfa\b\x1c\x92T\xc3\xbe\x1e\xe9;l\xe4!\x90SE\xb1\xde\xc4\x10\x8b\xc4;\xc7SB\x99\xd7;lh\x04\xbbd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd9\xdd\xb0\xdfr\xda\v\x84\xa8\xdac2\x99\xcc\xad\x8b\x92\x06\xd2 B6\x1b\x1c\xd82\x85\xad\xff\x9f\xb8\v\xe9\x9d\xee{\a\x93SW\v\xdb\xd7\xfc\x05m1\xd2[c\xf06\x83Y]\xd1\xa8fFKqu\xb7\xe91Q\x82\xe9\x1c\x85_\x93', 0x81) connect$auto(r0, &(0x7f0000000000)=@nl=@unspec, 0xcb03) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{&(0x7f00000002c0), 0x10, &(0x7f00000000c0)={0x0, 0xffff}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x4000801) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x3621) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x6, 0xd82, 0xdf, 0x40000eb3, 0x401, 0xc3f4) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 2m31.283817771s ago: executing program 4 (id=2109): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0x6, 0x2, 0x6, 0x3ff, 0x4, 0xffffffffffffffff}) prctl$auto(0x74a2, 0x5, r0, 0x7fffffff, 0x4) mmap$auto(0x0, 0x4020009, 0x800000db, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x5) sysfs$auto(0xfffff800, 0x2, 0x10000) r2 = fsopen$auto(0x0, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r3, r3, 0x0, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x40}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsopen$auto(0x0, 0x400) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x0, 0x0) epoll_create$auto(0x3671) io_uring_setup$auto(0x1d48, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 2m15.853750333s ago: executing program 34 (id=2109): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0x6, 0x2, 0x6, 0x3ff, 0x4, 0xffffffffffffffff}) prctl$auto(0x74a2, 0x5, r0, 0x7fffffff, 0x4) mmap$auto(0x0, 0x4020009, 0x800000db, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x5) sysfs$auto(0xfffff800, 0x2, 0x10000) r2 = fsopen$auto(0x0, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r3, r3, 0x0, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x40}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsopen$auto(0x0, 0x400) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x0, 0x0) epoll_create$auto(0x3671) io_uring_setup$auto(0x1d48, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 1m40.91882359s ago: executing program 2 (id=2269): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x14) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r1, 0xffffffff, 0x0, 0x5) io_uring_register$auto_IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x2) ppoll$auto(&(0x7f0000000180)={r0, 0x9, 0x200}, 0x200, &(0x7f00000001c0)={0x3, 0x100}, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlock$auto(0xfbca, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002980)=""/4075, 0xfeb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x51) ioctl$auto_SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pppoe\x00', 0x400800, 0x0) 1m38.772305751s ago: executing program 2 (id=2274): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xffffffffc0403d11, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x8680, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r1, 0x8000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000240)="d981d87ec99f3f23acba3c083d4a8e144d24001c93ffa9c39039fb64f5318f66c7b3de8b9cd2b0726a8293b03b209e935cf5aeaa113a73560127c8f38f1a2a25af818443e737fca0d6ca3037e2dc95f4951fd06c8970c9eb33821a2cf3072b7d27556d2843e5341a45db35e4c6336a7d69a9999695a04ca94cd8fad6872e7a6a7f42d26cc0371e341af85bda23aa710c406095d3356bc0195b2a4e814085b4f55a1262c494cf5d8ae9b4629d734545aa0f034f4d0fbaf1d7b20984a3253927e078a682682c6d3dbd17dea206c18d37459135afdca2ff8f508b4831bef0b021508701", 0xe2) sendfile$auto(0x3, r4, 0x0, 0x400000000006) rt_sigsuspend$auto(0x0, 0x8) shutdown$auto(0x200000003, 0x2) 1m37.530928416s ago: executing program 2 (id=2275): socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) msgsnd$auto(0xe, &(0x7f0000000200)={0x2}, 0x7fff, 0xfffffffc) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(r0, &(0x7f00000001c0)=',&,):\xa2\x00', 0x1, 0x3) 1m37.260452731s ago: executing program 2 (id=2276): mmap$auto(0x0, 0xe, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x7, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) sysinfo$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x4) ioctl$auto(0x3, 0xffffffff40088a01, 0x1) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0xb, 0xa505}, 0x800}, 0x7, 0x4008) clone3$auto(0x0, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) ioctl$auto_FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x3) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$auto(r1, 0x0, 0x20) 1m36.725433996s ago: executing program 2 (id=2278): mkdir$auto(0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) r3 = inotify_init1$auto(0x5615) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) read$auto(r0, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x404b03, 0x0) writev$auto(r4, 0x0, 0x6) waitid$auto_P_ALL(0x0, 0x2, &(0x7f00000001c0)={@siginfo_0_0={0x7f, 0xc, 0x0, @_kill={0x0, 0xee00}}}, 0x7, &(0x7f0000000240)={{0x8000000000000001, 0x7}, {0xfffffffffffffffc, 0x5}, 0x7, 0x4, 0xffffffffffffffff, 0x837, 0x9, 0xfffffffffffffffd, 0x0, 0x294, 0x1, 0x3b8, 0x6, 0x6, 0xcf8, 0x66}) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, 0x0) acct$auto(&(0x7f0000000040)='\x00') mmap$auto(0x8, 0x800000000, 0x3, 0xeb1, r3, 0x7fff) unshare$auto(0x40000080) mmap$auto(0x0, 0x202000d, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) 1m33.227229989s ago: executing program 2 (id=2284): socket(0xa, 0x3, 0xff) ioctl$auto(0x3, 0x89e0, 0x91) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r4, 0x0, 0x840003, 0x40000000002e72) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1m33.047419752s ago: executing program 6 (id=2286): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x440, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b62, r1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 1m32.527337731s ago: executing program 6 (id=2290): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) socket(0x23, 0x6, 0x7ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) lsetxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x7, 0x2f) r4 = io_uring_setup$auto(0x1, 0x0) munmap$auto(0x9, 0x9076) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) write$auto_fops_init_pkru_pkeys(r4, 0x0, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 1m30.222548175s ago: executing program 6 (id=2294): mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) msgsnd$auto(0xe, 0x0, 0x7fff, 0xfffffffc) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(r0, &(0x7f00000001c0)=',&,):\xa2\x00', 0x1, 0x3) 1m29.972147893s ago: executing program 6 (id=2295): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (rerun: 64) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) (async) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async) r4 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r4, &(0x7f0000000100)=""/3, 0x3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r5 = socket(0xa, 0x3, 0x3b) (rerun: 64) getsockopt$auto(r5, 0x29, 0x16, 0x0, 0x0) (async) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) (async) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7) (async) write$auto(r6, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async, rerun: 64) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 64) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0xa, 0x0) (async) getcwd$auto(0x0, 0xff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) 1m28.436266042s ago: executing program 6 (id=2298): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) (async) pread64$auto(r0, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) (async) r3 = socket(0x29, 0x5, 0x0) write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) (async) close_range$auto(0x2, 0x8, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) 1m28.272870807s ago: executing program 6 (id=2300): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xffffffffc0403d11, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x8680, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) rt_sigsuspend$auto(0x0, 0x8) shutdown$auto(0x200000003, 0x2) 1m27.098460757s ago: executing program 5 (id=2304): mmap$auto(0x0, 0x2028009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0xff80, @any, 0x3, 0x2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24000013) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) close_range$auto(r0, r1, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002940)=ANY=[@ANYBLOB="14000000", @ANYBLOB="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", @ANYRESOCT=r2, @ANYRES16, @ANYBLOB="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", @ANYRES16=r2, @ANYRESOCT, @ANYRES8, @ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x14000010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0xc0000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) (async) socket(0x11, 0x3, 0x9) ioctl$auto(0xffffffffffffffff, 0x6f41, 0x38) mmap$auto(0x0, 0x5, 0x3, 0xffffffffffff6f3e, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/veth0_to_team/mldv2_unsolicited_report_interval\x00', 0x121000, 0x0) (async) mmap$auto(0x4, 0x2, 0x0, 0xffffffbffffffffc, 0x7, 0x28004) (async) recvmmsg$auto(r2, 0x0, 0xfffe, 0x1, 0x0) write$auto(0x3, 0x0, 0xfdef) (async) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000100), r4) 1m26.688264719s ago: executing program 5 (id=2305): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x14) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r1, 0xffffffff, 0x0, 0x5) io_uring_register$auto_IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x2) ppoll$auto(&(0x7f0000000180)={r0, 0x9, 0x200}, 0x200, &(0x7f00000001c0)={0x3, 0x100}, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlock$auto(0xfbca, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002980)=""/4075, 0xfeb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x51) ioctl$auto_SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pppoe\x00', 0x400800, 0x0) 1m25.318289817s ago: executing program 5 (id=2307): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), r3) sendmsg$auto_OVS_VPORT_CMD_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf2504000000a60004800e1581cff30f40a3296ba72c40d037005108b1148f5596ab940a0766ae1bab4356f52efd0fcc2c569d195a5850968cbbf2698a0564727ff4e836986ff6c8813c9e028870ef6ed836f430eccd2ae04793d43e1080b59e8c6190d5f3af453061ce0d6aa9e80fb2c65cb5bd341df6dbbab9fd8a44052190c125acbf64d4d02ca35e77ea0911079b546c88e962f0655e9016310dc32dd91a7ba62b5c8d30ed9acf5b6258000008000800", @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x10) r5 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'nr0\x00'}) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES64=0x0, @ANYBLOB="00012abd7000901af84a65b64e9a0800070008000000060001004b000000"], 0x24}}, 0x20000000) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) write$auto(r6, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xb) unshare$auto(0x40000080) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r8, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1m23.871821873s ago: executing program 5 (id=2310): mbind$auto(0x6, 0x3, 0xa9, &(0x7f0000000000)=0x8, 0x8000, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x41) write$auto(r1, 0x0, 0x2fb) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="04002bbd7000fedbdf254500000099020e000de61166cbf2de9fdf6de63cf526fa6ae9102cbee02ea35a9ab287a06e1af566fc2c32ab17b54dba8fa0523f53a006946e03830382022f8d9d15e4a81640a0bfd1457111fbbbbf733a627728540ce4968c9613ca72121f90ddb02c57a2db18976b9f5114d98fa4620c20318c48dd492986be8f9d119e04d9a7f34607d496fa881b9f975e66b63f1669df436c011a0aebd5ba35cb500347ac2520e114176a9e33b3980642e390111bf9602c5794399beb9fecbbc65a3062ac69790378a2fa2329aded0ff52b7e9c3b165f5957ac6f502d02c7392a0242cb570c05b0bb9d89e244e25406299dbeaf42a7c273da59641e7015e9f4110a54570ab7c31b7f8c59f1878c962223b6b8c92cde3a510cf908f0fe43dd8f42a79b9305300e551aa944998012c04de9f213c363423c1bcabe24704fedaffc18d38b8225c296e4637da4c77d13b42bdbf5f088d750868721f007a8d779a18b1adc56b3fe7a2dc1473927eb01e9f4afcdfa66ee2e8c867ef95cccf0a3118125b81cc2230ea046ba37a029e9ba5355fc399feedfd0edc35a27708365cbff62a75be264844be70f5f8390ce066e7caa5d4fbb1b78a5b279a0d22559885649db68a0209b1c2eaadfbfe095330c830364ec95c54a281b9606a42c9a9ac64c524ba6d91d0d39a638b7fc95d4e5e4dd970e7e94f0c5f8fdfd83ff725c9819ec4d6248e7780a135050f75e299892971883b3e5bbe071ac74eb318d6186e2a7896f83ce9486084c6712eda54ba81bcf2c05197d9ad8bbbf95dc783dd92dbc07f5855a864e1f6eaca5295713c377cb8f4a560255885b8f92632a71713a416bc69d072d7383b9b879a7f1113b186fb98eb5be8a08570dbbf5926b6169b66e3491d51215b28ffc9ec188e11426ec145133ecd0442c3d6d6a7cb3aff2850ed8a7be58bdd7597e3c00000070009d007167114236107173a316a2d8bead5f38b48f746592049074d061dbac5555ded043ad3df0f3f59bef412fc5fe284fdb6c07bdde5c92419301fe33ca24cf0edd0d79c39422e2ebeaaa0d905c23a2867c23feb0ded1b997ccdacf9838721d1edf9816ddfbcccc8454a42c778a2564011d804c00008018000d801200020040ec421d15edefa9305baa0b5577000005000c00040000000400040005000c00fb00000005000a00400000000c000200010000000000000005000a000b00000048000080050007000a000000050006002900000005000a00070000000c000200ff7f00000000000005000600090000000c00020003000000000000000c000300c6df000000000000cc000080ac000d8011000100e8bcd79c8b50fac9a052eb6fa60000008b000500b45e6f364f0939dbd3d82c109ee102741b530b0453d39e6f09120c31a698b0e83dcca1ed139a119369047efc285f224493458c7115a80bb2e5ffb3cdb74c4e63f41b96eb10dd2496bfb2be70655115a7ecf5c4c794b8d0ec6f5de3266fb7819af1d43f8b145eb41b911c43ca22f65ea11d5895074cc97d19c30119379fd5e0e172d43445d5a1100005000400080000000600050005000000050006000400000005000900030000000400040008007700ff070000d0042a00a8cf02fd3afe1cad1f1450652b5bd8c057b0a0cef723f155b88e5a54bab0bbcd986e793c2cff806c6c06e86c97de3f85631607c5a646dff4980bef5c0cb3552614a56d5188643a435a0df8d7eb4d02c0ec7e438ab147a158c17580078391f517eab3efff568741bc0870698f7fe3ffda6c8f3f5e7093b8375b2e4ad4566aea9a8f28324a51ded7c47c719765320367025ffb615847b0962e258ac5bc08ac58771ac28302f8149cef0809afe46c91290ae0d8ed04e2494b2ae9f22bef50f93cc1b2f708586dacbb426c6cb7f2bff0e7b1dd8c404980a4f0beeb87542dd07e99b929fe7df5b3fed25af336f09f147525e50221ec9133e14efdd2fb76eab1628ad949be99c380fd2f8fc5497c7ed02bd3bafeb8d1ec47c78240baeec4a4cdc88d45e8edec4502423652336c28a37bffa1b961cb61cc715650a9a8f0eb404edbfc74a6c3cfd958f4138ee738cc16fdcd2e68211c5a11e7e863dfe7190efb9ce82ce7d1711f64277ea4a121b205bf5016e8f8ca8ad7c00c3f3a902acd163693ecd75c547b77fb360d1e083125cf9cbfc5105c750b9f81d1053d47fbcc7bd14106dc9412fedd63cd6204a232795e642b11bf65a8c15a34ea36e03ddd1ba3c177d696a70709380f49768ed79cfe9b36a135f9f08e694456bc61c8512d7c4adc897ea2a52142dd56f06d9ab5867f40241a3fdb7de098b5ff8fa4d311e50794a4bba69268b024184b32513ae4051ec5f3047463a410e89479a4f3d163d59bea8ccd6b2b642e7bb42138da3b7f6eda0ec5ef938f5744a79cab9d1c492a24bd93ae1f30a6199a9c88c3a2741429db30dbe185d669c3c497508dc568dcb9f89a6e6ab5dc69d737241a9510049582f4377f395674a88397723f178819d45c307b07c0700ce4816744c604c08caba796"], 0x974}, 0x1, 0x0, 0x0, 0xd0}, 0x4048001) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) r3 = open(0x0, 0x22240, 0x154) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0xdf) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) 1m23.603730478s ago: executing program 5 (id=2311): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/pp_hold\x00', 0x204041, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyb3\x00', 0x6b400, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyd8\x00', 0x480, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x8924, r0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m23.272384078s ago: executing program 5 (id=2313): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe8181, 0x0) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae77, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) setfsgid$auto(0x9) setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff) close_range$auto(r0, r1, 0x6) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x200006) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000340)="846815b9ebbad93ddb77f617598f74b819fb2f9ecee7c276e9567c4f1feed10ac8e9cad64ae0908d67d9822232a0d1f6d5c61f27f7d421e38f09cb6b624ae03d0000002cf523bb5136154da41b9772e69f2792db689e3424694308ec071048fe7dcfb34305b81b8d9f857c33e4464770760fd8117ec7858734c2357fe7691b932c43358c12acaff64a1b094afb", 0x5}, 0x6, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010026bd1056049165e703fe00"/30, @ANYRES64=r0, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r10, 0x1, 0x94d1) 1m17.901005016s ago: executing program 35 (id=2284): socket(0xa, 0x3, 0xff) ioctl$auto(0x3, 0x89e0, 0x91) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r4, 0x0, 0x840003, 0x40000000002e72) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1m13.246020183s ago: executing program 36 (id=2300): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xffffffffc0403d11, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x8680, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) rt_sigsuspend$auto(0x0, 0x8) shutdown$auto(0x200000003, 0x2) 1m8.164516661s ago: executing program 37 (id=2313): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe8181, 0x0) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae77, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) setfsgid$auto(0x9) setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff) close_range$auto(r0, r1, 0x6) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x200006) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000340)="846815b9ebbad93ddb77f617598f74b819fb2f9ecee7c276e9567c4f1feed10ac8e9cad64ae0908d67d9822232a0d1f6d5c61f27f7d421e38f09cb6b624ae03d0000002cf523bb5136154da41b9772e69f2792db689e3424694308ec071048fe7dcfb34305b81b8d9f857c33e4464770760fd8117ec7858734c2357fe7691b932c43358c12acaff64a1b094afb", 0x5}, 0x6, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010026bd1056049165e703fe00"/30, @ANYRES64=r0, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r10, 0x1, 0x94d1) 44.680144938s ago: executing program 8 (id=2396): mmap$auto(0x0, 0x2020009, 0x800006, 0xeb1, 0xfffffffffffffffa, 0xa82a) (async) sysfs$auto(0x2, 0x49, 0x0) (async) r0 = fsopen$auto(0x0, 0x0) fsconfig$auto(r0, 0x1da3, 0x0, 0x0, 0x0) 44.480199754s ago: executing program 8 (id=2397): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0xc0800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62002, 0x0) unshare$auto(0x40000080) getsockopt$auto(0xffffffffffffffff, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x24000050) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(0x0, 0x519343, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x59, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x5) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, r3, 0x20008000) futex$auto(0x0, 0x2, 0x41ff, 0x0, 0x0, 0x6) mlockall$auto(0x7) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r5, &(0x7f0000000040)={0x0, 0x407114}, 0x8) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptys8\x00', 0x400502, 0x0) 42.987625419s ago: executing program 8 (id=2402): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x14) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r1, 0xffffffff, 0x0, 0x5) io_uring_register$auto_IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x2) ppoll$auto(&(0x7f0000000180)={r0, 0x9, 0x200}, 0x200, &(0x7f00000001c0)={0x3, 0x100}, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlock$auto(0xfbca, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002980)=""/4075, 0xfeb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) ioctl$auto_SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pppoe\x00', 0x400800, 0x0) 41.60623483s ago: executing program 8 (id=2404): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) close_range$auto(r1, 0x8, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) sendto$auto(r4, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x64, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)="998399c0") r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$auto(r6, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) shmctl$auto_IPC_STAT(0xfffffff7, 0x2, &(0x7f00000002c0)={{0x666f, 0xee01, 0x0, 0x6, 0x44, 0x101, 0xff}, 0xfffffffc, 0x100000001, 0x2, 0x2, @inferred, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="0f58cd4d79386e454b55abcd37d3426f16bad1789f381bd8c3dd0de791d695c880c877b3cb2a0c54f0a4f3851ffa66897fae0325363f40fb425327b51ceaf066eb2ae13a131c8d1381ca3fdd387b3d5cc656e9", &(0x7f0000000240)="b515ab05b3ecd271c01cf39f938b915de660235e9a393354330e770381b76b051dee30f4f5c98b35b54a877271356ff6b0280c82149dd0958f0a1bda40dd6a0fdd6f80a81dc565068dad16e65fd805cb08499c14c33211cd953d7cc8e9bd118aa72649"}) keyctl$auto(0x1f, 0x1, r7, r8, 0x3ff) mlockall$auto(0x800000000000005) 40.165565988s ago: executing program 8 (id=2408): r0 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r1, 0x2, 0x0) getdents$auto(r1, 0x0, 0x62d4) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='}[,&*}/file0\x00', &(0x7f0000000180)={0x18f542, 0x131, 0x7}, 0x18) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D1\x00', 0x6002, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) fcntl$auto_F_SETPIPE_SZ(r2, 0x407, 0x2) sendfile$auto(r5, r6, 0x0, 0x1000200) socket(0x11, 0x80003, 0x300) recvmmsg$auto(r3, 0x0, 0x1, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) syz_clone3(&(0x7f0000000600)={0x204044000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0xc}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000540)=""/122, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r7}}, 0x58) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) 38.011647572s ago: executing program 8 (id=2415): openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8b72, 0x1000000002, 0x8000) memfd_create$auto(0x0, 0x4) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0xe4d}, 0x8) 34.784838753s ago: executing program 9 (id=2433): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x0) io_uring_setup$auto(0x7, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x91f5}, 0x800000001, &(0x7f0000001080)={&(0x7f0000000140)="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", 0x1ffffffff}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, r1) 33.451691413s ago: executing program 9 (id=2438): mbind$auto(0x6, 0x3, 0xa9, &(0x7f0000000000)=0x8, 0x8000, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x41) write$auto(r1, 0x0, 0x2fb) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x974}, 0x1, 0x0, 0x0, 0xd0}, 0x4048001) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) r3 = open(0x0, 0x22240, 0x154) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0xdf) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) 33.252439656s ago: executing program 9 (id=2439): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) shmctl$auto_SHM_STAT_ANY(0x2, 0xf, &(0x7f00000005c0)={{0x1, 0xee00, 0xee01, 0x8, 0x5d, 0x0, 0xd1}, 0xffff46e6, 0x8, 0x8, 0x8, @raw=0x8, @raw=0x400, 0x7a, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7ff, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r2, 0xda6) msync$auto(0x1ffff002, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) socket(0x21, 0x2, 0x0) 32.08446687s ago: executing program 9 (id=2443): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b62, r1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 31.31785108s ago: executing program 9 (id=2447): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mtd0\x00', 0x68082, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mprotect$auto(0x1000, 0x84a1, 0xfffffffffffffffc) (async, rerun: 64) ioctl$auto(0xc8, 0x801054db, 0xffffffffffffffff) (async, rerun: 64) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0) (async) pkey_free$auto(0x20001) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0xe, 0x0, 0xff, "50cfeeca8e00"}) (async) mmap$auto(0x1, 0x20009, 0x4000000000ff, 0x19, 0x6, 0x8000) (async) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, 0xfdfdffffffffffff) (async) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (rerun: 32) r2 = socket(0x10, 0x2, 0x0) connect$auto(r2, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2100}, 0x6) (async) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r3) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r5, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) (async, rerun: 32) r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x101102, 0x0) (rerun: 32) write$auto_proc_pid_attr_operations_base(r6, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r8, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e40)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0x20000050) (async, rerun: 32) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x80000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r10, &(0x7f0000000080)={0x0, 0x1000}, 0x3) 30.168266505s ago: executing program 9 (id=2451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) (async) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x278, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_LLC_SDP={0x1c1, 0x13, 0x0, 0x1, [@nested={0xcb, 0x8e, 0x0, 0x1, [@generic="11f93aff61e77a5ae3b3ef3af5551e598ae5e65494f91a932cc468f05df2db1c91a9c4e03f05c61c45b2d53bfc90139bab2b3a155705e12ffb898af7219650d35687fac22813c15dbd46c56113a281642d6f00b5195a3a8696e9a783bfc4249d3d4c0c514c8c774e9d8191158af228fc2391d25bf63249a006b2458dbfc69591def0d747f18c9b415d9dec13901217013944a2b80828c6eff48ba7a3978ad5010c2318bee8544453598c", @nested={0x4, 0x10c}, @typed={0x8, 0x109, 0x0, 0x0, @u32=0x6a}, @generic="7be63f2dd056a839b7e2abb24072696a00"]}, @generic="2dc87f830566f00dd8b21ba6d5772e59559a", @generic="b7006902690c640b0e733756cf4c30b810399e8e1a5bfc7986a186a01244b70f12cf08606cb66ca9cb662277781ff05effa2f91432d66a79be0d984cf2f8f4af7f67865cca7929ebe2d4338b60af9a987eba705ad69e597dc4f87f51bdecac051da64e", @typed={0x74, 0xbf, 0x0, 0x0, @binary="86148db5090862bd468db8b431c6f7a66ad8eb3b936802e95d8ad30cd453efe0479d1613c7c5e90f12b902eb6d3b33f12dda6b509d1432a9cad3532caf412c624c98f6003f20bef4f6bfc3a19eb0440b72e17c2bf3a4e2c2bd854717536188d858320992950646156e5fcece62959b9b"}, @nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x5a}]}]}, @NFC_ATTR_SE_APDU={0x6e, 0x19, "4e8d3ca8ac21aed3081fc434f8e67dde5e00709f06c385821b217820a9cf87819f57266822233a98be63a6f556643e6d2505f1fc6e470a65bde7a03e2ee4eb374fd622fce450eb5e849d6e6ad3b4cabac14ede49c3fdcfdb0bb62371f43ea7572a7a6ce37281af53b7c3"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7b0}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x9266}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc6}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}]}, 0x278}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 23.4723473s ago: executing program 7 (id=2477): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4ea02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) (async) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000100)={0x0, 0x3c, "3c472d82985a6d8a7758f94e538f5e778acad8a5ed692781c02d5ac4a9828854d97ff00487cce6da6ccfd50b68fc2cfe005c66bcefe3b415e6fa3540acc68328", "8a426eb5b7e0ea2e2f7039affc57c4e415250f4c31da3226515bf5a54075ef883c5fce5e5e4e312f8f2fbe4f48f89499040ac4691d6e930b6fe46ddcb257e72cfecbaa8ab21f9da75eb1c4a40bd74332", 0x7, 0x6, "e871062511110b20c6d147cea85d544bd0924f21a95f277ca86339e4fbe8f2b0dc5ebadf39b5f87d99d26106811b6645a80701e9dce265626d863317b7bc0e10"}) (async) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000100)={0x0, 0x3c, "3c472d82985a6d8a7758f94e538f5e778acad8a5ed692781c02d5ac4a9828854d97ff00487cce6da6ccfd50b68fc2cfe005c66bcefe3b415e6fa3540acc68328", "8a426eb5b7e0ea2e2f7039affc57c4e415250f4c31da3226515bf5a54075ef883c5fce5e5e4e312f8f2fbe4f48f89499040ac4691d6e930b6fe46ddcb257e72cfecbaa8ab21f9da75eb1c4a40bd74332", 0x7, 0x6, "e871062511110b20c6d147cea85d544bd0924f21a95f277ca86339e4fbe8f2b0dc5ebadf39b5f87d99d26106811b6645a80701e9dce265626d863317b7bc0e10"}) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x2641, 0x0) msync$auto(0x7, 0xfffffffffffffffb, 0xf53) (async) msync$auto(0x7, 0xfffffffffffffffb, 0xf53) write$auto(r4, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000) sendfile$auto(r0, r0, 0x0, 0x3) (async) sendfile$auto(r0, r0, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 22.425572744s ago: executing program 38 (id=2415): openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8b72, 0x1000000002, 0x8000) memfd_create$auto(0x0, 0x4) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0xe4d}, 0x8) 22.097397514s ago: executing program 7 (id=2479): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r1 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) (async, rerun: 32) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r1, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) (async) socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) preadv$auto(r6, &(0x7f0000000b40)={0x0, 0x4}, 0x3, 0x0, 0xe4) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) (async) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) (async) unshare$auto(0x20000080) (async) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x4, 0x210, 0x7fc, 0x400007fb, &(0x7f00000002c0)}) 21.556307761s ago: executing program 7 (id=2481): unshare$auto(0x40000080) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop4\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x3f, 0x2, 0x0, 0x4, 0x4000000000000001) (async) listen$auto(r0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyd2\x00', 0x10002, 0x0) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0), 0xff, 0xfffffffffffffffd) (async) r1 = prctl$auto_PR_SYS_DISPATCH_ON(0x1000, 0x1, 0x0, 0x4, 0x7) (async) mmap$auto(0x0, 0xb, 0x3, 0x9b72, 0x2, 0x6) r2 = socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast1}, 0x6a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x549040, 0x0) prctl$auto(0x3e, 0x2, 0x0, 0x9, 0x0) (async) write$auto(r3, &(0x7f0000000240)='/del/audio1\x00I\x1a.A\"\xf1\x96\xcco\xce\x02\xdf\x12\aWJ\x06\xff\xa5\x92\xa0(\xc4`\x02\x00\x00\x00\xf7w\x02\x0e\xd1\xf7f6\x898\xa9\xb0|\xbd\x95\x82[\x18ha$y\x80TMo\x92\x05Z[m\x8b\x89\xc0)!im\xe1\x00\x00\x00\xc7T\x90r\xa5\x95t\xbb\xf5\x17\b\xb7\xd8\x12[\x05\xfdE_\xfa6\'\x02\xff\xd7q\xcd\xed\x8b\x89\x9c\xc4\x83\xe4\xa9\xa9\x8f\x81\x13\xbb', 0x100000a3d9) (async) set_mempolicy$auto(0x200, &(0x7f00000001c0)=0x8000000000004, 0x5) (async) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) (async) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000080), 0x12, 0x0, 0xc, 0x0, 0x1f, 0xfffffffe}, 0x10001}, 0x5, 0x20000000) setregid$auto(0xffffffffffffffff, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000003c0)={0x1, &(0x7f00000002c0)="1079b9900693ba4cc4bed00d64b5e396489c85184740049540c1a90888afceef12268538ee0e3105e9b530577866f6607f4ed0936b99878c1ada3acd41180c5abdab191395f7dbe21c945dc8751f0b52cf3f534b6d9b9e37a72c840e34852a006124b7539fe03644f84df70db7c9ed4cea2ddc28d3a8f137d6a84bcfc456d6abceeb3d35db845b277056cb003a49b73f0eda159626baeaaca36c08719d43cd8e6ad0dc12e6d215d12a9aaa96fd915e659628ef4a8577ec903a9dd7e10cea3aebc359f150a126bf0e75a251e172e5ff7d"}) setsockopt$auto(r2, 0x6, 0x22, 0x0, 0x6) 20.952782747s ago: executing program 7 (id=2482): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(0xffffffffffffffff, 0x0, 0x80000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)="864a") mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(r1, 0x1, 0x46, 0x0, 0x94) sysfs$auto(0xffffffff, 0x3f, 0xd) madvise$auto(0x10000000000, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x1, 0x2, 0x13, 0xc) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x29, 0x20, 0x0, 0x20) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x440, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b62, r3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) 19.336247673s ago: executing program 7 (id=2485): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x7ffd) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') memfd_create$auto(0x0, 0xf) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x14) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) gettid() (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x18040, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x1004100000a3d8) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) (async) r3 = socket(0xa, 0x1, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0xfff) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 17.588286511s ago: executing program 7 (id=2488): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) (async) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x8001, 0x0, &(0x7f0000000000)=0x222a) 14.736687054s ago: executing program 39 (id=2451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) (async) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x278, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_LLC_SDP={0x1c1, 0x13, 0x0, 0x1, [@nested={0xcb, 0x8e, 0x0, 0x1, [@generic="11f93aff61e77a5ae3b3ef3af5551e598ae5e65494f91a932cc468f05df2db1c91a9c4e03f05c61c45b2d53bfc90139bab2b3a155705e12ffb898af7219650d35687fac22813c15dbd46c56113a281642d6f00b5195a3a8696e9a783bfc4249d3d4c0c514c8c774e9d8191158af228fc2391d25bf63249a006b2458dbfc69591def0d747f18c9b415d9dec13901217013944a2b80828c6eff48ba7a3978ad5010c2318bee8544453598c", @nested={0x4, 0x10c}, @typed={0x8, 0x109, 0x0, 0x0, @u32=0x6a}, @generic="7be63f2dd056a839b7e2abb24072696a00"]}, @generic="2dc87f830566f00dd8b21ba6d5772e59559a", @generic="b7006902690c640b0e733756cf4c30b810399e8e1a5bfc7986a186a01244b70f12cf08606cb66ca9cb662277781ff05effa2f91432d66a79be0d984cf2f8f4af7f67865cca7929ebe2d4338b60af9a987eba705ad69e597dc4f87f51bdecac051da64e", @typed={0x74, 0xbf, 0x0, 0x0, @binary="86148db5090862bd468db8b431c6f7a66ad8eb3b936802e95d8ad30cd453efe0479d1613c7c5e90f12b902eb6d3b33f12dda6b509d1432a9cad3532caf412c624c98f6003f20bef4f6bfc3a19eb0440b72e17c2bf3a4e2c2bd854717536188d858320992950646156e5fcece62959b9b"}, @nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x5a}]}]}, @NFC_ATTR_SE_APDU={0x6e, 0x19, "4e8d3ca8ac21aed3081fc434f8e67dde5e00709f06c385821b217820a9cf87819f57266822233a98be63a6f556643e6d2505f1fc6e470a65bde7a03e2ee4eb374fd622fce450eb5e849d6e6ad3b4cabac14ede49c3fdcfdb0bb62371f43ea7572a7a6ce37281af53b7c3"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7b0}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x9266}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc6}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}]}, 0x278}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 8.501854052s ago: executing program 0 (id=2501): mbind$auto(0x6, 0x3, 0xa9, &(0x7f0000000000)=0x8, 0x8000, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x41) write$auto(r1, 0x0, 0x2fb) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="04002bbd7000fedbdf254500000099020e000de61166cbf2de9fdf6de63cf526fa6ae9102cbee02ea35a9ab287a06e1af566fc2c32ab17b54dba8fa0523f53a006946e03830382022f8d9d15e4a81640a0bfd1457111fbbbbf733a627728540ce4968c9613ca72121f90ddb02c57a2db18976b9f5114d98fa4620c20318c48dd492986be8f9d119e04d9a7f34607d496fa881b9f975e66b63f1669df436c011a0aebd5ba35cb500347ac2520e114176a9e33b3980642e390111bf9602c5794399beb9fecbbc65a3062ac69790378a2fa2329aded0ff52b7e9c3b165f5957ac6f502d02c7392a0242cb570c05b0bb9d89e244e25406299dbeaf42a7c273da59641e7015e9f4110a54570ab7c31b7f8c59f1878c962223b6b8c92cde3a510cf908f0fe43dd8f42a79b9305300e551aa944998012c04de9f213c363423c1bcabe24704fedaffc18d38b8225c296e4637da4c77d13b42bdbf5f088d750868721f007a8d779a18b1adc56b3fe7a2dc1473927eb01e9f4afcdfa66ee2e8c867ef95cccf0a3118125b81cc2230ea046ba37a029e9ba5355fc399feedfd0edc35a27708365cbff62a75be264844be70f5f8390ce066e7caa5d4fbb1b78a5b279a0d22559885649db68a0209b1c2eaadfbfe095330c830364ec95c54a281b9606a42c9a9ac64c524ba6d91d0d39a638b7fc95d4e5e4dd970e7e94f0c5f8fdfd83ff725c9819ec4d6248e7780a135050f75e299892971883b3e5bbe071ac74eb318d6186e2a7896f83ce9486084c6712eda54ba81bcf2c05197d9ad8bbbf95dc783dd92dbc07f5855a864e1f6eaca5295713c377cb8f4a560255885b8f92632a71713a416bc69d072d7383b9b879a7f1113b186fb98eb5be8a08570dbbf5926b6169b66e3491d51215b28ffc9ec188e11426ec145133ecd0442c3d6d6a7cb3aff2850ed8a7be58bdd7597e3c00000070009d007167114236107173a316a2d8bead5f38b48f746592049074d061dbac5555ded043ad3df0f3f59bef412fc5fe284fdb6c07bdde5c92419301fe33ca24cf0edd0d79c39422e2ebeaaa0d905c23a2867c23feb0ded1b997ccdacf9838721d1edf9816ddfbcccc8454a42c778a2564011d804c00008018000d801200020040ec421d15edefa9305baa0b5577000005000c00040000000400040005000c00fb00000005000a00400000000c000200010000000000000005000a000b00000048000080050007000a000000050006002900000005000a00070000000c000200ff7f00000000000005000600090000000c00020003000000000000000c000300c6df000000000000cc000080ac000d8011000100e8bcd79c8b50fac9a052eb6fa60000008b000500b45e6f364f0939dbd3d82c109ee102741b530b0453d39e6f09120c31a698b0e83dcca1ed139a119369047efc285f224493458c7115a80bb2e5ffb3cdb74c4e63f41b96eb10dd2496bfb2be70655115a7ecf5c4c794b8d0ec6f5de3266fb7819af1d43f8b145eb41b911c43ca22f65ea11d5895074cc97d19c30119379fd5e0e172d43445d5a1100005000400080000000600050005000000050006000400000005000900030000000400040008007700ff070000d0042a00a8cf02fd3afe1cad1f1450652b5bd8c057b0a0cef723f155b88e5a54bab0bbcd986e793c2cff806c6c06e86c97de3f85631607c5a646dff4980bef5c0cb3552614a56d5188643a435a0df8d7eb4d02c0ec7e438ab147a158c17580078391f517eab3efff568741bc0870698f7fe3ffda6c8f3f5e7093b8375b2e4ad4566aea9a8f28324a51ded7c47c719765320367025ffb615847b0962e258ac5bc08ac58771ac28302f8149cef0809afe46c91290ae0d8ed04e2494b2ae9f22bef50f93cc1b2f708586dacbb426c6cb7f2bff0e7b1dd8c404980a4f0beeb87542dd07e99b929fe7df5b3fed25af336f09f147525e50221ec9133e14efdd2fb76eab1628ad949be99c380fd2f8fc5497c7ed02bd3bafeb8d1ec47c78240baeec4a4cdc88d45e8edec4502423652336c28a37bffa1b961cb61cc715650a9a8f0eb404edbfc74a6c3cfd958f4138ee738cc16fdcd2e68211c5a11e7e863dfe7190efb9ce82ce7d1711f64277ea4a121b205bf5016e8f8ca8ad7c00c3f3a902acd163693ecd75c547b77fb360d1e083125cf9cbfc5105c750b9f81d1053d47fbcc7bd14106dc9412fedd63cd6204a232795e642b11bf65a8c15a34ea36e03ddd1ba3c177d696a70709380f49768ed79cfe9b36a135f9f08e694456bc61c8512d7c4adc897ea2a52142dd56f06d9ab5867f40241a3fdb7de098b5ff8fa4d311e50794a4bba69268b024184b32513ae4051ec5f3047463a410e89479a4f3d163d59bea8ccd6b2b642e7bb42138da3b7f6eda0ec5ef938f5744a79cab9d1c492a24bd93ae1f30a6199a9c88c3a2741429db30dbe185d669c3c497508dc568dcb9f89a6e6ab5dc69d737241a9510049582f4377f395674a88397723f178819d45c307b07c0700ce4816744c604c08caba796123aae15d2713a735c411e421502b7132182db4f15eb2502e35c27e60b489754f3a4661e44c6c81356898faa6ebbc618b380e1f52029aa1897c1b1bc2cf2e9ad46ab23a577b002364768a9a201aeea06e7d2f1a08ccf8819c1b39535942644c2c5e27cdff18102a1829a2406879bbf404b3c48d073b6f63f649aae132c94db1b95eb0135e5b172419d29fb947d7c23d7300e15ed4035169b194001265f353dd08c8daa7db51c08f16fc434c529992706c208de44894db956c29c4faa70773d61145da8234416a83b872dbca5f172e624521b8c4410afb2815d5ad08bf4f8a20275183e95889768900811625d92455071b8db4c02e3b9907183b7425abf6b07c9581f83bf12c6454dc810375a1035549882528989124618fd4235991255a3e9efdf3780a97e7d0d425cf4440f4aeb30b162ef404e4b2b973933bbb00e4e0fdc781e72d1f7de19f434f058cdf0f6bc1db7c47d3e0f7cd4057dae439eb6c10adf10d68392b6b1e84593b843859a72db22113d962483bb8693007fe668870a2ace389eaf685a8fd85eb89a9885e5f46a71f7be5763d7cc8cb97c79ad7272235519217267b04be631c47fdf70fc63eeb163ba1a6917291f5b3e4acec5b5a25fdf1fa746e7221e20062e520cc12cf47d815d44f6b8194fb5acc7cd53d3600ddfd67705e9461f00a8b4c09a16d7ffc45d58cd3dec01e5aac1edc5e344294a3d9911b32b807ecadf923bfe380d2e545fa4ea8fc55d063eb4652b61e2d58cb3ac6f3a11857363d85ff3d50ab04d"], 0x974}, 0x1, 0x0, 0x0, 0xd0}, 0x4048001) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) r3 = open(0x0, 0x22240, 0x154) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0xdf) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) 8.196861208s ago: executing program 0 (id=2502): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x14) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r1, 0xffffffff, 0x0, 0x5) io_uring_register$auto_IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x2) ppoll$auto(&(0x7f0000000180)={r0, 0x9, 0x200}, 0x200, &(0x7f00000001c0)={0x3, 0x100}, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlock$auto(0xfbca, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002980)=""/4075, 0xfeb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) ioctl$auto_SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pppoe\x00', 0x400800, 0x0) 6.458635511s ago: executing program 0 (id=2503): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) r0 = socket(0x11, 0x80003, 0x300) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000006426d417e7c25fb09408658fa8cc02c82343a189c0b99babd96f9a15acba1457207dce0e475cd0eb905b54af9da805f0b9730d00cc0c91f87b6f1b859ee4c8e651422c86290d41a329121864a8a183e6ab0cc52854a8a81f557732d3e4b7a950b9548740dc5385f1eef6ebdbfeb320be986f6e3409664a1065bc0ba9b675d163883cf58a940af2cf9f0e2836", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff741f26f506}, 0x0) mlockall$auto(0x7) io_uring_setup$auto(0x9, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x3}, 0x3) r5 = getsockopt$auto_SO_PEERPIDFD(r1, 0x1ff, 0x4d, &(0x7f0000000000)='/dev/virtual_nci\x00', &(0x7f0000000040)=0x1) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r1, r5, 0x0) 5.861250422s ago: executing program 3 (id=2478): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x14) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socket(0xa, 0x2, 0x73) ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(0xffffffffffffffff, 0x40044102, &(0x7f0000000280)=0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r1, 0xffffffff, 0x0, 0x5) io_uring_register$auto_IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x2) ppoll$auto(&(0x7f0000000180)={r0, 0x9, 0x200}, 0x200, &(0x7f00000001c0)={0x3, 0x100}, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlock$auto(0xfbca, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002980)=""/4075, 0xfeb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000140)={{@inferred, 0xfffffffd, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x43, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) ioctl$auto_SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) 5.753473394s ago: executing program 0 (id=2504): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_GET_FILTER(0xffffffffffffffff, 0x200, 0x1a, &(0x7f0000000080)=']i@@[\x00', &(0x7f00000000c0)=0x2) mmap$auto(0x0, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='1\xadk\xf8\x02\x00\x00\x00\x00\x00\x00\x00\f\x03', 0x7f) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000e2, 0x40000000000eb1, 0x401, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x4000000000009}, 0x7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) setitimer$auto(0x1, &(0x7f0000000000)={{0x802, 0x1000007f}, {0x800100004, 0x3}}, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x40}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x45}, @NL80211_ATTR_MLO_LINKS={0x10, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) setitimer$auto(0x9, &(0x7f0000000140)={{0x3, 0x1}, {0xfffffffffffffffc, 0x8}}, &(0x7f0000000180)={{0x7, 0x230d}, {0x5, 0x148}}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0)="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", 0x6c8, &(0x7f00000012c0)={0x0, 0x3}, 0x9, &(0x7f0000001300)="482a874b65633079386472e0b428b04510966e62503eaec1779ed700559aa2368c170439f5b461a3b2fbfeb16f5835041dd6edeb8909f1a0151f8e14a4e723ac4616b7454b", 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x2, 0xfa, 0xfffffffffffffffa, 0x8000) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/user_power_level\x00', 0x80000, 0x0) 3.692430694s ago: executing program 0 (id=2505): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0xf, 0x6, 0x7) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfcd5) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) (async) mmap$auto(0xfffffffffffffffe, 0x20009, 0x200000005, 0xeb1, 0x401, 0x8000) (async) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) r2 = io_uring_setup$auto(0x2, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) socketpair$auto(0x0, 0x1, 0x8, 0x0) (async) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) (async) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x10001, 0x800401, 0xffffffffffffffff, 0x5, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x0, 0xb, 0x8, 0x3, r2}, 0x10) 3.136282613s ago: executing program 0 (id=2506): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x3f, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x2, &(0x7f0000000080)='+\x00\xc04\x95\x96XD\x11T\x11\xac@\xb9\'\xa8\x99\xf6\x99\xad\xa2w\xd55\xea|-&\v\xa9\xc5\xb1\xc6\n\xb0{\xe8', &(0x7f0000000100), 0xee01) r1 = bpf$auto_BPF_BTF_LOAD(0x12, 0x0, 0x9) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r2, 0x0, 0x840003, 0x2e6c) r3 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000002200)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="020127bd700000a001f1a83e3d6a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x7f0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) acct$auto(&(0x7f0000000040)='/dev/binderfs/features/extended_error\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop5\x00', 0x68b81, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto_userio_fops_userio(0xffffffffffffffff, &(0x7f0000001200)="3d6c98e358c5e5045943365682aea98b21117c70706c5c01d2eca7e759df7a4b9b80c28fb2c5d519226beafce7fb65036f33b40c8c9d9db7e883ce74ffc72083fc3a8f2b170a2ce654fd2c722486f1dc52f505cb70e8e6a94eebf89c31fb2b7b95ddd9d10f0210c9271c9419abdad4d724b46a128fef748fe093014aad815d5b95c0fb5fcc54c272403c654968c233b8df18d3ab7cb698cae090843df334fd4382182fb7499d52532621a1a98ef4cd99fad2e2155228c591295c3d91ed4fcbf0c1a9356a01734b4cbdb60c5774e3d5a58dc6a171f949c0f18ec9dd40a339a9143d5b6e1e36128cb996f4a37f30251bba825bf59d627d516d0fcc37ac27dcbbaf065e09dfbc8802f3da990e10d3a270e6fed4c7f9b0968c335b6a3b65541fc7005bd274a90c4b7f9f116d769d190fc0b5265db032876a6a6824884cf33cc4e0a92ef106ea74eb00a8224097cf173266024934ea4e1de4771fc610551ccf72997e027526d73f71a5dea5c170070db60aad2988b2b145b3855a3054785f3d117cb6b44a7adde29617767283e221c4e81db4dd4272204f8f7a5cac4f0db7e0eb7ff8af760962e30a2ab1e3100c6c72cd6804e6007c499163f6033b609e1ec499ff13cbfd5bd977fc2a55f8529a485c91a23e2e76dc82529e2206182ee85ba4eb6d689e63b350d06fdc2ae26c0d4623c600a8e6f0e746419731a365f26918594ad653b42dd853562828bb6b25554aa45eb0ac016dbcd06a9d0491241720bdca1cd933c44953f20aed732cadc915ea81f34fe23092d0817fb9d97fb4e23b600d9c02f79cdc3c46a3ca0a6ebcb9323d8b28cd1ed27d5e202220d7cb09972b6e341fa7a36fe118421303e9d162fc66d8ca78fdbb907ee597439b7277ca4ca9c9e68801a62eeb1864771bcca7c61b505f5ba314ecea6856077a804e00fa41f7e1e9e56c1aee6d6d8a2a7c76cf5ad8c1323dd2c7d2edb541794acab3799cdcad3e679e49fee2bfd28b4ca22d1d20d07a4af9997023c83510eac9eb8c0ae8fa9d47cab9ed38ff2ad6a8d6151063427e77511ed7a34d80720f2f07693abcba67aa017a200a82c116a731e393ea57c5079cf80d27e4d02697432b7c1cba5218a9b6429a6f4f715636d7bd44b6eac248306f94a19fc267fa65bb4d3bcbdf01f58b0ab9242a088c3e9fb006930b736f7358626c8528568452917a9ec3f538193bf4665a1947d7d47cdc5d1ba92413b16518a8ff10a405a67737dbc9d99f36443b9e62bbf79279598d0428f2e3c33b84e541eac2d9a63d2803de1ea0cee183f02f130e8d243b4c43ddf052cbf27a28704092100f144fe7b54ed8bb8a6fa29c3cdfb0f591a4d651ca47148d81eaf0a8593b0de3baf4724c72879471173fd1fd5d719830b75b764f256e4312f381e162ff8dcb1c6230e76ecb7a724a26385172bdb35035583c9dd053c489d4f239311a1dccc7d31dcee324f1833e603994d99726b8632660910c3ab0ce8171ba27a672b3a5b3f113d43dae7ee832b92a5b67bc02f0318b137f0f0760caadb58cbc18f5c16e03d12d8024d3ef7c25e5f19ec5aed962dc70bcb75b7b0bb22be5d0c7ecb0a33f903f0ab9c9f3d84139adc8b8adb637c985d6721bead8c9efcb2ae5b64ccbe30e5189e3af4775aaeb5e86a7acbc42f06621a1f75edb9ed9044025c16bd95040aa62519ab5f25a1fc13c1175ebca4532086c00452ebcf35797671bce8d5973ff394688bf0aa291e1482dabd11d5c6872a5e4d7ca43f6187a5e9ff8e8320b78c378c2f88b5a7062398dc44a8d73cfe15d4185ac05479c015c38e8fc75a3ae21cc957583722a0370bd0805021fbcedabb7f97a063bbb18e107b155caacdbc2f7b7f733ae1ff9023003e6df6c3ba6b4b15aae42fabbcdc275ada8bfdb90406ccaff806882a9eb235d88d2d9dcbdf5f6d5b02819044c4e8aa794062457c885881d73e0fed47ee39b2ca2a3f65761ed813fc94cf6d3d97a083b490f19f6f17ea270fe6838197711dd51d32fab1966b0954dc16e190aad0eb7d3b3499b6519b21f2cb548c98d271fb55ff16b7edfe8b6a3f28b3510bc6be18dc6d6fb1e58ba99ff7cab4ab16b11ea33636b8f7230f46ec49eae9d9c02805283fb1fe6711f8e9459e04db490a6b071811e1c597c3fc7cab6fca8d7874f1cc7a7b3402ae0903d079b4022ef5194c1552f525035f3726c173feb007c8a0628497ccdb8d19687ed0f6447e6c4dd34fbad088a699b226d097ed81f694f28eb0a9648279e46f8d2ed1c09b43f25caa42ba33b8df01ff3e613e2b2297e50b5c0bf47bb762112a7cb16ef1014a278fc36d32f737b2ad3665deca11cafd6d7065e668b1e4bfa2414b17f075f35e47c3e09a8162887247cc84352583ba5612ff44c9986193d1c80e537d57ea657bbc440478ad1e2a750d92e8d03df61f88e92b98545829bc1121d504fa6d56746321b741b7534d5650810a8e7106850364530202387fbc3fd5237b958e7413aa8ac00267fb1c7c82de67e6c18cb4bd649476e5687058b0f5a235c7e3eaaa01af7a70b2821050f21c6757d3b557c084dcd498ef097c37e4886e9b851c200c58a3f2547054a11cada5d16e57d67a44a77d7edca9ca878f2c682e808940ba014f79c982b48b3457bf881b563908646bcfe67f5c4d2d0ebc7a598c6d81c6889c2037fbef3d327ebc3b7797f2615c688049ac70e1c7e37f2eb117a2d809d1339ae99d4a60986265769bb2132da904f5733b9b9e32677f9d76a8cd630e4575983be233b25c9b29e37bce4a210f55da22dcc53567fd4c98c95157977ad7530f6128bfcd5d98d673868e1ae3e640874b13d2714309328ef4e967e701f7521069a66b3d94f9f7e4a9735654d962dfd501f097d8efc17c60ad48e699b7c7682e386cbeb778c9210fc7da6baeb01c6a23b67f44e93a52cb7c8930392d5f8c193d5f6ef7b84f818fafa0282f7e1b3155ce84631c46339dcc149859d94c6fa4488050bfbfd2bc58b7d714d19f911e2db65485cd556119f74207b647bed2f39ac95f3ce8ee1fd2056475994251b1af5ceb94b8880c9ad04fb49fafb716791704a16ad02d5ec4b808ceb517ae5fa757a1550eda69111cd0224cef490bca0905a672bac7e6c61e7f8dfadcba29d12f87df523ca6a3c36e8a28bdb8971e5f33305b4b7c174913de0f6ce7b0b9cbc0891a34a14d21d982f3bd2addfebcdc3862da96279b9f3b99c5cf9add2319765bf06959b3e6559f3a1583a7e93cae31e4fa269171335259dafd44ac1570d94a67010ec55a40fe6662de3051e4c9641ff427bfe1e16f2e13c5b95c6c1a1d33ec8d8f7dd086a7ae55f3fb2ca29381e82fd45f434eaceb4d0876b6d10390341fb4d65c2ad79b0a0d156d2477234e20476d92954343e59a3f3fdf04eb8ab9d4280739db3a4b6e8ea70d6dcaf46af47de1c126ea103ae1f7c4c4e0b08d34c01930bc64bc4a755c77d524d4dc4394b2893c96cab7d5e83aa5b8dbb89ae662e6c823a0bb52245bdf8b1f33a6ac8ddbdb17eb76a42abbe56128c532d3fb5a7965f0275359d6cb32cca7d4a782c04ee124db3fd87cd82be23e7270bcb3103e1dc330543367fa85f84f3c911267256401f25cc0802f2953679f297e91817dd7d03313102a003f2b35f75b562f2f105541f8ae4a2aa1fe7bd61869b22726202bc928684fe22ae80e00692c82f09518c28eeb0f06abd39f76dfe0f05e099388e514873d054e74bdc22323bedbd4d166884d644d7d065e9e1392f5c376bbcce5fda83305fab30c42a1ad77ac1984190957b7073304512499675378cded9ec5ad5c840aa496113f322b7609666ad11b244e495958730a08c46082f5bd3794f781350b6bc76adc37d8e58c4cb0631e4cc282286a9d1fd273beecedab1c63fd5388b1f241646a3d284387978a29b0c1ddb44b1f0905b73dcc60db7c9dacd5336c4ad91da63c798f8fd48980e108db91d993427b0d0c4c2e3c7da0f8a307135720e6b36edebc8691bfa708b5a445dd31f00b969588da216f5d308a66a21e9479fd3e7d3cf2a26a0ab3bc232d234a33451ad35b09c7e5348854f58e25ac08681cc664a3afb20485529c3ce93ab6469f882f1720de41356efa38ab5f43567608b6d216029dbe4d97d4075d537de3f439d98a0d47e261a725fedacc24931ca5cfdf4d657571c43b2f91e0a269fdfb2723d199e25fe005f2c47a608280d861466ee197ec37ee8d691d596623abfb9d02c2a4b97eb4732bb334fd717b2cdb268be03213285d4bfc82a459bdadfa5b6c5229d1b847e3b66033358127488e699f4eee91725ae90b2849c22bfa16e637e472c1aa1fafdf8ba6e2d3443755bcb426a9e4942ccff6394320ad077060d97073b24aca03aec28e86ba232abc6b9c69de6988b13d4a84fc85b02d7b461873471e86b6273a4c1fa218228ae6d2ef9e619f9406f65558f11e3a2c28ac72dafdcd623d1adf423a66a5fc7294a48bef94886434d810f5f6f763e1515f7f2963d1569eac9537d727680b3bf86839c283337be7961b5009b5d6704aa19950e6d8dc9dcf9fa654f81ff45070dad6f33167725afe4930b75a7ef6d71d1b31492832a5a4874d2b40481029ac2bfa6f6be779c691cf13ce9f8ab716f779166641302328a4773000094b7adf548f00e3d8e314f1731959e0ef8f04cbfe6af64464c342be87cffa1ff9c5c0943263ab53dae06a99ebe52c07c92b44ab4b5301cf0b2d1ce2097499c82166bee860d6530320b66d4e849ce7bf9e42c5a103f2e0f75b7e340316839f2b566578598e024cfdf9ec218510e3e3ca22620369c5ee81a21abb6c608f7a7b35d089a7d40e2a864a652a13d390d475943bc5f59945527304444b84a538ce4176c82c9c9c804e12c0acbfb3da83652326926644645aad95f32be5f5b056b62adb363364bf9e558f29ee56650e789627bc7cc9abbfa654f63d73201a9238918dd15fde8b5d480c8c1579e48775fc1a9ff40d565aade7e9c3ce76c93ae7aa95f8fd589cc299789eaf05311d64b6355a371f4d6eb0eca39faea2c47b5d02fc9a3d3b7ac1def4d1e12f70b4e7442b1fde3eeba7e5fdbf21ab70f4ba0e8c6636eeb7c0c137efb7d6fe87ff308659f8188564cbdb59b3fae4f37aacb0ceb0b8bad6b6b967d6267c013728622e93fc9da2557230ada15e8381d7d468f800c2597983b59dd9d2419f00b8b1c5e960782097295f0f62a08fd1172ed78dcac5f39457431f4fa7ea88842fff85adb0bfe7ee839246f2a402a19912407b9e16c522fae91a2b4a50ee85e67c8d388cd60b74574ffabd11309f3482f9ca7e3bacc9443260b5a0f6fea72041bc18f9aab962b4a2f66d699ec756c5ff3ea96bfb3eddc5de04a8bfc7cb24ce55d9d041fd9109fca6cf30a158f71e6332d42a27ffec19ea0275d4f09c076d63116d8e7691d42bfdb7f145dae495f9c8b601fd2278a8e79ce8a25d097f23b80f99db1c1aecdc23c52e255aad475b785ed730ed54d93f53befe6f48856e1756390889f5d7539fd5c023d204c7a6387ca224d7078b9d357152846dac756bf66e4580e72d2baf5962aaae4ea58b7eb92e8d8ce20277cce30652719520e180662198e0b77a31f844281488314ef2ad826d8b8c7700f6e12be4c2fe7212cd9d582c6c3f9b5f3e657a385a33eecce44dbc64484bc50e3f4338427bf3d1cb309d9ae86332ad8004d355c0acd506e649ecbcf44065a43f1d4df63e07fd6147d431bb63e3463d517a08aae2a8594337df422e1f9918f37fd36dd396ba536cea1be78c6bce01986354164651186298a", 0x1000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000000400)={{0xfffffffd, 0x0, 0xee00, 0x6, 0x7, 0x10001, 0x9}, 0xfffffbff, 0x7, 0x9, 0xb, @raw=0x68, @raw=0x5, 0x8, 0x0, &(0x7f0000000240), &(0x7f0000000340)}) keyctl$auto(0xb087, 0x0, 0x0, r5, 0x6) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x6}, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r7 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r7, 0x29, 0x48, 0x0, 0x10000110) sysfs$auto(0x2, 0x100000000000011, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) fsopen$auto(0x0, 0x1) prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) 2.457881141s ago: executing program 40 (id=2488): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) (async) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x8001, 0x0, &(0x7f0000000000)=0x222a) 443.055134ms ago: executing program 1 (id=2495): madvise$auto(0x0, 0x4081, 0xe) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$auto(0x7, 0x1000, r0, 0x1, 0x0) mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x80000000) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) r2 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000000)=0x8) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c01, 0x0) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000040)="0969f6da7656c34763381aa404d0474363b65ffb3b06385d917066e66e6fff5e9ac3f30c48ed31b28bf0a99d6035c96c7d4f2c41c67cde72f501150fa9e525c36b33bc", 0x2) open(&(0x7f0000000100)='./file0\x00', 0x434ec0, 0xff) r4 = socket(0xa, 0x1, 0x84) r5 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r5) sendmsg$auto_NL80211_CMD_DEL_PMK(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x80d4}, 0x1) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, r5, 0x300000000000) socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x80802, 0x80000000) socket(0x2b, 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/midi2\x00', 0x541841, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/snd_aloop.0/sound/card1/number\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000300)=""/6, 0x6) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) 0s ago: executing program 3 (id=2508): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x440, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff7, 0x16, r1, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@ethernet={0x1, @remote}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000000)='veth1\x00', 0x20000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x1b) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b62, r0) kernel console output (not intermixed with test programs): field: 1 [ 806.490322][T16684] tpg crop: (0,0)/320x240 [ 806.517718][T16684] tpg compose: (0,0)/320x240 [ 806.548003][T16684] tpg colorspace: 8 [ 806.554323][T10307] Bluetooth: hci5: command tx timeout [ 806.601859][T16684] tpg transfer function: 0/0 [ 806.650332][T16684] tpg Y'CbCr encoding: 0/0 [ 806.705373][T16684] tpg quantization: 0/0 [ 806.740678][T16684] tpg RGB range: 0/2 [ 806.776246][T16684] vivid-007: ================== END STATUS ================== [ 807.572982][T16707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'. [ 807.715215][T16707] bond0: entered promiscuous mode [ 807.738439][T16707] bond_slave_0: entered promiscuous mode [ 807.763918][T12812] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u11:32: bg 2: bad block bitmap checksum [ 807.787134][T16707] bond_slave_1: entered promiscuous mode [ 807.860656][T12812] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 10 with max blocks 2 with error 74 [ 807.961147][T12812] EXT4-fs (sda1): This should not happen!! Data will be lost [ 807.961147][T12812] [ 808.101307][T16537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.614684][T16667] Process accounting paused [ 808.848615][T16729] random: crng reseeded on system resumption [ 809.128969][T16725] futex_wake_op: syz.0.2191 tries to shift op by -2048; fix this program [ 809.160042][T16725] futex_wake_op: syz.0.2191 tries to shift op by -2048; fix this program [ 809.198548][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.205726][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.217053][T16730] 0x000000000001-0x000000020000 : "" [ 809.279797][T16730] ftl_cs: FTL header corrupt! [ 809.410218][T16737] ERROR: Out of memory at tomoyo_memory_ok. [ 809.557858][T16537] veth0_vlan: entered promiscuous mode [ 809.594596][T16537] veth1_vlan: entered promiscuous mode [ 809.663473][T16537] veth0_macvtap: entered promiscuous mode [ 809.678872][T16537] veth1_macvtap: entered promiscuous mode [ 809.723913][T16537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.974665][T16537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.100449][T12812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.142856][T12812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.178436][T12812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.233200][T12812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.948895][T12812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.996821][T12812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.102185][T16758] __vm_enough_memory: pid: 16758, comm: syz.0.2199, bytes: 4398046457856 not enough memory for the allocation [ 811.167943][T12798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.222325][T12798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.611656][T16773] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 811.618186][T16773] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 811.692527][T16775] FAULT_INJECTION: forcing a failure. [ 811.692527][T16775] name fail_futex, interval 1, probability 0, space 0, times 0 [ 811.774228][T16775] CPU: 0 UID: 0 PID: 16775 Comm: syz.5.2202 Tainted: G U L syzkaller #0 PREEMPT(full) [ 811.774271][T16775] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 811.774282][T16775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.774298][T16775] Call Trace: [ 811.774306][T16775] [ 811.774315][T16775] dump_stack_lvl+0x100/0x190 [ 811.774348][T16775] should_fail_ex.cold+0x5/0xa [ 811.774380][T16775] get_futex_key+0x1d2/0x1510 [ 811.774425][T16775] ? __pfx_get_futex_key+0x10/0x10 [ 811.774463][T16775] ? futex_hash+0x2ad/0x370 [ 811.774503][T16775] ? __lock_acquire+0x4a5/0x2630 [ 811.774547][T16775] futex_wake+0xea/0x530 [ 811.774588][T16775] ? __pfx_futex_wake+0x10/0x10 [ 811.774623][T16775] ? __fget_files+0x215/0x3d0 [ 811.774660][T16775] do_futex+0x32b/0x350 [ 811.774686][T16775] ? __pfx_do_futex+0x10/0x10 [ 811.774714][T16775] ? fdget+0x18b/0x210 [ 811.774741][T16775] ? __sys_sendmsg+0x18f/0x220 [ 811.774772][T16775] __x64_sys_futex+0x34f/0x4d0 [ 811.774801][T16775] ? __pfx___x64_sys_futex+0x10/0x10 [ 811.774832][T16775] ? rcu_is_watching+0x12/0xc0 [ 811.774863][T16775] do_syscall_64+0x115/0x840 [ 811.774899][T16775] ? clear_bhb_loop+0x40/0x90 [ 811.774929][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.774954][T16775] RIP: 0033:0x7fe19619ce59 [ 811.774974][T16775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.774997][T16775] RSP: 002b:00007fe1970580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 811.775020][T16775] RAX: ffffffffffffffda RBX: 00007fe196415fa8 RCX: 00007fe19619ce59 [ 811.775036][T16775] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe196415fac [ 811.775050][T16775] RBP: 00007fe196415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 811.775067][T16775] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 811.775082][T16775] R13: 00007fe196416038 R14: 00007ffd03133310 R15: 00007ffd031333f8 [ 811.775112][T16775] [ 812.434920][T16787] ubi0: attaching mtd0 [ 812.465741][T16787] ubi0: scanning is finished [ 812.486952][T16785] openvswitch: netlink: Flow actions attr not present in new flow. [ 812.500508][T16787] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 812.667924][T16791] ERROR: Out of memory at tomoyo_memory_ok. [ 812.748953][T16792] ERROR: Out of memory at tomoyo_memory_ok. [ 812.995904][T16787] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 813.571563][T16814] random: crng reseeded on system resumption [ 815.146654][T16841] ERROR: Out of memory at tomoyo_memory_ok. [ 815.869418][T16863] FAULT_INJECTION: forcing a failure. [ 815.869418][T16863] name fail_futex, interval 1, probability 0, space 0, times 0 [ 815.939813][T16863] CPU: 0 UID: 0 PID: 16863 Comm: syz.5.2220 Tainted: G U L syzkaller #0 PREEMPT(full) [ 815.939854][T16863] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 815.939863][T16863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.939878][T16863] Call Trace: [ 815.939886][T16863] [ 815.939895][T16863] dump_stack_lvl+0x100/0x190 [ 815.939925][T16863] should_fail_ex.cold+0x5/0xa [ 815.939957][T16863] get_futex_key+0x1d2/0x1510 [ 815.940001][T16863] ? __pfx_get_futex_key+0x10/0x10 [ 815.940038][T16863] ? futex_hash+0x2ad/0x370 [ 815.940079][T16863] ? __lock_acquire+0x4a5/0x2630 [ 815.940123][T16863] futex_wake+0xea/0x530 [ 815.940155][T16863] ? __pfx_futex_wake+0x10/0x10 [ 815.940191][T16863] ? __fget_files+0x215/0x3d0 [ 815.940227][T16863] do_futex+0x32b/0x350 [ 815.940252][T16863] ? __pfx_do_futex+0x10/0x10 [ 815.940276][T16863] ? fdget+0x18b/0x210 [ 815.940311][T16863] ? __sys_sendmsg+0x18f/0x220 [ 815.940340][T16863] __x64_sys_futex+0x34f/0x4d0 [ 815.940369][T16863] ? __pfx___x64_sys_futex+0x10/0x10 [ 815.940400][T16863] ? rcu_is_watching+0x12/0xc0 [ 815.940432][T16863] do_syscall_64+0x115/0x840 [ 815.940466][T16863] ? clear_bhb_loop+0x40/0x90 [ 815.940495][T16863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.940520][T16863] RIP: 0033:0x7fe19619ce59 [ 815.940539][T16863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.940565][T16863] RSP: 002b:00007fe1970580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 815.940587][T16863] RAX: ffffffffffffffda RBX: 00007fe196415fa8 RCX: 00007fe19619ce59 [ 815.940603][T16863] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe196415fac [ 815.940618][T16863] RBP: 00007fe196415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 815.940633][T16863] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 815.940647][T16863] R13: 00007fe196416038 R14: 00007ffd03133310 R15: 00007ffd031333f8 [ 815.940677][T16863] [ 816.192080][T16865] ubi0: attaching mtd0 [ 816.197851][T16865] ubi0: scanning is finished [ 816.202553][T16865] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 816.285216][T16872] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 816.434281][T16880] ERROR: Out of memory at tomoyo_memory_ok. [ 817.149591][T16865] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 818.647281][T16911] ERROR: Out of memory at tomoyo_memory_ok. [ 818.690985][T16918] ERROR: Out of memory at tomoyo_memory_ok. [ 819.492498][T16944] FAULT_INJECTION: forcing a failure. [ 819.492498][T16944] name fail_futex, interval 1, probability 0, space 0, times 0 [ 819.554116][T16944] CPU: 0 UID: 0 PID: 16944 Comm: syz.2.2237 Tainted: G U L syzkaller #0 PREEMPT(full) [ 819.554158][T16944] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 819.554167][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 819.554182][T16944] Call Trace: [ 819.554190][T16944] [ 819.554200][T16944] dump_stack_lvl+0x100/0x190 [ 819.554231][T16944] should_fail_ex.cold+0x5/0xa [ 819.554262][T16944] get_futex_key+0x1d2/0x1510 [ 819.554306][T16944] ? __pfx_get_futex_key+0x10/0x10 [ 819.554345][T16944] ? __fget_files+0x215/0x3d0 [ 819.554373][T16944] ? __fget_files+0x215/0x3d0 [ 819.554408][T16944] futex_wake+0xea/0x530 [ 819.554440][T16944] ? __pfx_futex_wake+0x10/0x10 [ 819.554470][T16944] ? __sys_sendmmsg+0x367/0x430 [ 819.554499][T16944] ? __pfx___sys_sendmmsg+0x10/0x10 [ 819.554529][T16944] do_futex+0x32b/0x350 [ 819.554555][T16944] ? __pfx_do_futex+0x10/0x10 [ 819.554579][T16944] ? __pfx___might_resched+0x10/0x10 [ 819.554612][T16944] __x64_sys_futex+0x34f/0x4d0 [ 819.554641][T16944] ? __pfx___x64_sys_futex+0x10/0x10 [ 819.554665][T16944] ? exit_to_user_mode_loop+0xf3/0x670 [ 819.554710][T16944] ? rcu_is_watching+0x12/0xc0 [ 819.554742][T16944] do_syscall_64+0x115/0x840 [ 819.554777][T16944] ? clear_bhb_loop+0x40/0x90 [ 819.554813][T16944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.554838][T16944] RIP: 0033:0x7f24ad59ce59 [ 819.554858][T16944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.554881][T16944] RSP: 002b:00007f24ae39e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 819.554904][T16944] RAX: ffffffffffffffda RBX: 00007f24ad815fa8 RCX: 00007f24ad59ce59 [ 819.554920][T16944] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f24ad815fac [ 819.554935][T16944] RBP: 00007f24ad815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 819.554949][T16944] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 819.554971][T16944] R13: 00007f24ad816038 R14: 00007ffcf759c110 R15: 00007ffcf759c1f8 [ 819.555002][T16944] [ 819.768491][T16944] ubi0: attaching mtd0 [ 819.774106][T16944] ubi0: scanning is finished [ 819.779554][T16944] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 820.230913][T16959] FAULT_INJECTION: forcing a failure. [ 820.230913][T16959] name fail_futex, interval 1, probability 0, space 0, times 0 [ 820.230955][T16959] CPU: 0 UID: 0 PID: 16959 Comm: syz.6.2238 Tainted: G U L syzkaller #0 PREEMPT(full) [ 820.230991][T16959] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 820.231000][T16959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.231015][T16959] Call Trace: [ 820.231022][T16959] [ 820.231031][T16959] dump_stack_lvl+0x100/0x190 [ 820.231060][T16959] should_fail_ex.cold+0x5/0xa [ 820.231091][T16959] get_futex_key+0x1d2/0x1510 [ 820.231143][T16959] ? __pfx_get_futex_key+0x10/0x10 [ 820.231180][T16959] ? __might_fault+0xc5/0x140 [ 820.231230][T16959] futex_wake+0xea/0x530 [ 820.231262][T16959] ? __pfx_futex_wake+0x10/0x10 [ 820.231292][T16959] ? __pfx_sock_do_ioctl+0x10/0x10 [ 820.231332][T16959] do_futex+0x32b/0x350 [ 820.231358][T16959] ? __pfx_do_futex+0x10/0x10 [ 820.231383][T16959] ? sock_ioctl+0x2dc/0x6b0 [ 820.231421][T16959] __x64_sys_futex+0x34f/0x4d0 [ 820.231449][T16959] ? __fget_files+0x21f/0x3d0 [ 820.231477][T16959] ? __pfx___x64_sys_futex+0x10/0x10 [ 820.231508][T16959] ? rcu_is_watching+0x12/0xc0 [ 820.231540][T16959] do_syscall_64+0x115/0x840 [ 820.231577][T16959] ? clear_bhb_loop+0x40/0x90 [ 820.231607][T16959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.231631][T16959] RIP: 0033:0x7f5dcfb9ce59 [ 820.231651][T16959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.231675][T16959] RSP: 002b:00007f5dd0a060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 820.231698][T16959] RAX: ffffffffffffffda RBX: 00007f5dcfe15fa8 RCX: 00007f5dcfb9ce59 [ 820.231714][T16959] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5dcfe15fac [ 820.231728][T16959] RBP: 00007f5dcfe15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 820.231742][T16959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.231757][T16959] R13: 00007f5dcfe16038 R14: 00007ffc27556290 R15: 00007ffc27556378 [ 820.231786][T16959] [ 820.274465][T16944] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 820.284168][T16945] ubi0: attaching mtd0 [ 820.286610][T16961] ERROR: Out of memory at tomoyo_memory_ok. [ 820.304601][T16945] ubi0: scanning is finished [ 820.304648][T16945] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 820.766539][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2239'. [ 821.239774][T16945] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 821.638564][T16976] nbd: must specify at least one socket [ 822.099250][T16984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 822.122632][T16984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 822.131210][T16984] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 822.146722][T16984] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 822.173517][T16984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 822.575686][T16973] overlayfs: missing 'lowerdir' [ 824.245675][T10307] Bluetooth: hci6: command tx timeout [ 824.678459][T17016] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 824.686638][T17016] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 824.752711][T17016] FAULT_INJECTION: forcing a failure. [ 824.752711][T17016] name failslab, interval 1, probability 0, space 0, times 0 [ 824.803845][T17016] CPU: 0 UID: 0 PID: 17016 Comm: syz.6.2249 Tainted: G U L syzkaller #0 PREEMPT(full) [ 824.803887][T17016] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 824.803897][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 824.803912][T17016] Call Trace: [ 824.803920][T17016] [ 824.803929][T17016] dump_stack_lvl+0x100/0x190 [ 824.803960][T17016] should_fail_ex.cold+0x5/0xa [ 824.803992][T17016] should_failslab+0xc2/0x120 [ 824.804024][T17016] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 824.804063][T17016] ? fuse_request_alloc+0x22/0x200 [ 824.804111][T17016] fuse_request_alloc+0x22/0x200 [ 824.804151][T17016] fuse_get_req+0x8b9/0x1210 [ 824.804181][T17016] ? __pfx_fuse_get_req+0x10/0x10 [ 824.804219][T17016] fuse_simple_background+0x44e/0x8c0 [ 824.804244][T17016] ? kasan_save_track+0x14/0x30 [ 824.804272][T17016] cuse_channel_open+0x561/0x7f0 [ 824.804308][T17016] ? __pfx_cuse_channel_open+0x10/0x10 [ 824.804345][T17016] misc_open+0x26d/0x450 [ 824.804372][T17016] ? __pfx_misc_open+0x10/0x10 [ 824.804397][T17016] chrdev_open+0x234/0x6a0 [ 824.804428][T17016] ? __pfx_apparmor_file_open+0x10/0x10 [ 824.804457][T17016] ? __pfx_chrdev_open+0x10/0x10 [ 824.804490][T17016] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 824.804530][T17016] do_dentry_open+0x6ab/0x14d0 [ 824.804560][T17016] ? __pfx_chrdev_open+0x10/0x10 [ 824.804597][T17016] vfs_open+0x82/0x3f0 [ 824.804636][T17016] path_openat+0x208c/0x31a0 [ 824.804695][T17016] ? __pfx_path_openat+0x10/0x10 [ 824.804760][T17016] do_file_open+0x20e/0x430 [ 824.804794][T17016] ? __pfx_do_file_open+0x10/0x10 [ 824.804848][T17016] ? alloc_fd+0x476/0x790 [ 824.804881][T17016] ? do_getname+0x191/0x390 [ 824.804920][T17016] do_sys_openat2+0x10d/0x1e0 [ 824.804959][T17016] ? __pfx_do_sys_openat2+0x10/0x10 [ 824.805007][T17016] __x64_sys_openat+0x12d/0x210 [ 824.805047][T17016] ? __pfx___x64_sys_openat+0x10/0x10 [ 824.805091][T17016] ? rcu_is_watching+0x12/0xc0 [ 824.805123][T17016] do_syscall_64+0x115/0x840 [ 824.805157][T17016] ? clear_bhb_loop+0x40/0x90 [ 824.805187][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.805212][T17016] RIP: 0033:0x7f5dcfb9ce59 [ 824.805233][T17016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.805257][T17016] RSP: 002b:00007f5dd0a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 824.805280][T17016] RAX: ffffffffffffffda RBX: 00007f5dcfe15fa0 RCX: 00007f5dcfb9ce59 [ 824.805296][T17016] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 824.805311][T17016] RBP: 00007f5dcfc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 824.805325][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.805339][T17016] R13: 00007f5dcfe16038 R14: 00007f5dcfe15fa0 R15: 00007ffc27556378 [ 824.805370][T17016] [ 826.321398][T10307] Bluetooth: hci6: command tx timeout [ 826.339861][T16981] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.375934][T16981] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.410531][T16981] bridge_slave_0: entered allmulticast mode [ 826.469442][T16981] bridge_slave_0: entered promiscuous mode [ 826.529238][T16981] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.569653][T16981] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.593284][T16981] bridge_slave_1: entered allmulticast mode [ 826.632624][T16981] bridge_slave_1: entered promiscuous mode [ 826.912430][T16981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.029055][T17046] can: request_module (can-proto-5) failed. [ 827.118904][T16981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.589578][T16981] team0: Port device team_slave_0 added [ 827.777706][T17065] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 827.784230][T17065] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 827.818869][T17065] FAULT_INJECTION: forcing a failure. [ 827.818869][T17065] name failslab, interval 1, probability 0, space 0, times 0 [ 827.850003][T17065] CPU: 0 UID: 0 PID: 17065 Comm: syz.2.2257 Tainted: G U L syzkaller #0 PREEMPT(full) [ 827.850045][T17065] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 827.850054][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 827.850069][T17065] Call Trace: [ 827.850077][T17065] [ 827.850086][T17065] dump_stack_lvl+0x100/0x190 [ 827.850116][T17065] should_fail_ex.cold+0x5/0xa [ 827.850148][T17065] should_failslab+0xc2/0x120 [ 827.850178][T17065] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 827.850264][T17065] ? fuse_request_alloc+0x22/0x200 [ 827.850311][T17065] fuse_request_alloc+0x22/0x200 [ 827.850351][T17065] fuse_get_req+0x8b9/0x1210 [ 827.850381][T17065] ? __pfx_fuse_get_req+0x10/0x10 [ 827.850420][T17065] fuse_simple_background+0x44e/0x8c0 [ 827.850444][T17065] ? kasan_save_track+0x14/0x30 [ 827.850471][T17065] cuse_channel_open+0x561/0x7f0 [ 827.850507][T17065] ? __pfx_cuse_channel_open+0x10/0x10 [ 827.850544][T17065] misc_open+0x26d/0x450 [ 827.850570][T17065] ? __pfx_misc_open+0x10/0x10 [ 827.850594][T17065] chrdev_open+0x234/0x6a0 [ 827.850625][T17065] ? __pfx_apparmor_file_open+0x10/0x10 [ 827.850660][T17065] ? __pfx_chrdev_open+0x10/0x10 [ 827.850693][T17065] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 827.850735][T17065] do_dentry_open+0x6ab/0x14d0 [ 827.850765][T17065] ? __pfx_chrdev_open+0x10/0x10 [ 827.850802][T17065] vfs_open+0x82/0x3f0 [ 827.850842][T17065] path_openat+0x208c/0x31a0 [ 827.850883][T17065] ? __pfx_path_openat+0x10/0x10 [ 827.850925][T17065] do_file_open+0x20e/0x430 [ 827.850958][T17065] ? __pfx_do_file_open+0x10/0x10 [ 827.851010][T17065] ? alloc_fd+0x476/0x790 [ 827.851043][T17065] ? do_getname+0x191/0x390 [ 827.851082][T17065] do_sys_openat2+0x10d/0x1e0 [ 827.851119][T17065] ? __pfx_do_sys_openat2+0x10/0x10 [ 827.851168][T17065] __x64_sys_openat+0x12d/0x210 [ 827.851207][T17065] ? __pfx___x64_sys_openat+0x10/0x10 [ 827.851251][T17065] ? rcu_is_watching+0x12/0xc0 [ 827.851284][T17065] do_syscall_64+0x115/0x840 [ 827.851318][T17065] ? clear_bhb_loop+0x40/0x90 [ 827.851348][T17065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.851372][T17065] RIP: 0033:0x7f24ad59ce59 [ 827.851392][T17065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.851416][T17065] RSP: 002b:00007f24ae39e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 827.851440][T17065] RAX: ffffffffffffffda RBX: 00007f24ad815fa0 RCX: 00007f24ad59ce59 [ 827.851456][T17065] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 827.851471][T17065] RBP: 00007f24ad632d6f R08: 0000000000000000 R09: 0000000000000000 [ 827.851486][T17065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.851501][T17065] R13: 00007f24ad816038 R14: 00007f24ad815fa0 R15: 00007ffcf759c1f8 [ 827.851532][T17065] [ 828.432147][T10307] Bluetooth: hci6: command tx timeout [ 828.440397][T16981] team0: Port device team_slave_1 added [ 828.467298][T16981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.474455][T16981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.513708][T16981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.669651][T16981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.677718][T16981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.773115][T16981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.056396][T16981] hsr_slave_0: entered promiscuous mode [ 829.087709][T16981] hsr_slave_1: entered promiscuous mode [ 829.127320][T16981] debugfs: 'hsr0' already exists in 'hsr' [ 829.159625][T16981] Cannot create hsr debugfs directory [ 830.012100][T17090] FAULT_INJECTION: forcing a failure. [ 830.012100][T17090] name fail_futex, interval 1, probability 0, space 0, times 0 [ 830.060185][T17090] CPU: 0 UID: 0 PID: 17090 Comm: syz.5.2262 Tainted: G U L syzkaller #0 PREEMPT(full) [ 830.060227][T17090] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 830.060237][T17090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 830.060252][T17090] Call Trace: [ 830.060259][T17090] [ 830.060268][T17090] dump_stack_lvl+0x100/0x190 [ 830.060298][T17090] should_fail_ex.cold+0x5/0xa [ 830.060330][T17090] get_futex_key+0x1d2/0x1510 [ 830.060374][T17090] ? __pfx_get_futex_key+0x10/0x10 [ 830.060418][T17090] ? futex_hash+0x2ad/0x370 [ 830.060459][T17090] ? __lock_acquire+0x4a5/0x2630 [ 830.060503][T17090] futex_wake+0xea/0x530 [ 830.060536][T17090] ? __pfx_futex_wake+0x10/0x10 [ 830.060570][T17090] ? __fget_files+0x215/0x3d0 [ 830.060605][T17090] do_futex+0x32b/0x350 [ 830.060631][T17090] ? __pfx_do_futex+0x10/0x10 [ 830.060655][T17090] ? fdget+0x18b/0x210 [ 830.060683][T17090] ? __sys_sendmsg+0x18f/0x220 [ 830.060711][T17090] __x64_sys_futex+0x34f/0x4d0 [ 830.060740][T17090] ? __pfx___x64_sys_futex+0x10/0x10 [ 830.060771][T17090] ? rcu_is_watching+0x12/0xc0 [ 830.060803][T17090] do_syscall_64+0x115/0x840 [ 830.060838][T17090] ? clear_bhb_loop+0x40/0x90 [ 830.060868][T17090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.060895][T17090] RIP: 0033:0x7fe19619ce59 [ 830.060916][T17090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.060939][T17090] RSP: 002b:00007fe1970580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 830.060966][T17090] RAX: ffffffffffffffda RBX: 00007fe196415fa8 RCX: 00007fe19619ce59 [ 830.060982][T17090] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe196415fac [ 830.060997][T17090] RBP: 00007fe196415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 830.061011][T17090] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 830.061025][T17090] R13: 00007fe196416038 R14: 00007ffd03133310 R15: 00007ffd031333f8 [ 830.061055][T17090] [ 830.267332][T17091] ubi0: attaching mtd0 [ 830.273076][T17091] ubi0: scanning is finished [ 830.277747][T17091] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 830.504291][T10307] Bluetooth: hci6: command tx timeout [ 830.677336][T17095] netlink: 'syz.2.2263': attribute type 12 has an invalid length. [ 830.776057][T17096] ERROR: Out of memory at tomoyo_memory_ok. [ 830.857179][T17091] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 830.869565][T17095] ERROR: Out of memory at tomoyo_memory_ok. [ 831.381241][T16981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.787742][T17103] size and base must be multiples of 4 kiB [ 831.820821][T17103] CPU: 0 UID: 0 PID: 17103 Comm: syz.2.2265 Tainted: G U L syzkaller #0 PREEMPT(full) [ 831.820863][T17103] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 831.820873][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 831.820888][T17103] Call Trace: [ 831.820896][T17103] [ 831.820904][T17103] dump_stack_lvl+0x100/0x190 [ 831.820935][T17103] mtrr_del.cold+0x72/0x85 [ 831.820962][T17103] mtrr_ioctl+0xbc8/0xcf0 [ 831.821004][T17103] ? __pfx_mtrr_ioctl+0x10/0x10 [ 831.821061][T17103] ? __pfx_mtrr_ioctl+0x10/0x10 [ 831.821100][T17103] proc_reg_unlocked_ioctl+0x229/0x320 [ 831.821131][T17103] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 831.821163][T17103] __x64_sys_ioctl+0x18e/0x210 [ 831.821191][T17103] do_syscall_64+0x115/0x840 [ 831.821225][T17103] ? clear_bhb_loop+0x40/0x90 [ 831.821254][T17103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.821279][T17103] RIP: 0033:0x7f24ad59ce59 [ 831.821305][T17103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.821329][T17103] RSP: 002b:00007f24ae39e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.821352][T17103] RAX: ffffffffffffffda RBX: 00007f24ad815fa0 RCX: 00007f24ad59ce59 [ 831.821368][T17103] RDX: 0000000000000000 RSI: 00000000400c4d04 RDI: 0000000000000000 [ 831.821384][T17103] RBP: 00007f24ad632d6f R08: 0000000000000000 R09: 0000000000000000 [ 831.821399][T17103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.821413][T17103] R13: 00007f24ad816038 R14: 00007f24ad815fa0 R15: 00007ffcf759c1f8 [ 831.821444][T17103] [ 832.166792][T10307] Bluetooth: hci2: unexpected subevent 0x12 length: 123 > 5 [ 832.409443][T16981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.437324][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 832.613439][T16981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.171513][T17126] FAULT_INJECTION: forcing a failure. [ 833.171513][T17126] name fail_futex, interval 1, probability 0, space 0, times 0 [ 833.251760][T17126] CPU: 0 UID: 0 PID: 17126 Comm: syz.5.2271 Tainted: G U L syzkaller #0 PREEMPT(full) [ 833.251801][T17126] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 833.251810][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 833.251825][T17126] Call Trace: [ 833.251833][T17126] [ 833.251842][T17126] dump_stack_lvl+0x100/0x190 [ 833.251872][T17126] should_fail_ex.cold+0x5/0xa [ 833.251903][T17126] get_futex_key+0x1d2/0x1510 [ 833.251946][T17126] ? __pfx_get_futex_key+0x10/0x10 [ 833.251984][T17126] ? futex_hash+0x2ad/0x370 [ 833.252024][T17126] ? __lock_acquire+0x4a5/0x2630 [ 833.252068][T17126] futex_wake+0xea/0x530 [ 833.252100][T17126] ? __pfx_futex_wake+0x10/0x10 [ 833.252133][T17126] ? __fget_files+0x215/0x3d0 [ 833.252169][T17126] do_futex+0x32b/0x350 [ 833.252194][T17126] ? __pfx_do_futex+0x10/0x10 [ 833.252219][T17126] ? fdget+0x18b/0x210 [ 833.252294][T17126] ? __sys_sendmsg+0x18f/0x220 [ 833.252322][T17126] __x64_sys_futex+0x34f/0x4d0 [ 833.252360][T17126] ? __pfx___x64_sys_futex+0x10/0x10 [ 833.252390][T17126] ? rcu_is_watching+0x12/0xc0 [ 833.252422][T17126] do_syscall_64+0x115/0x840 [ 833.252457][T17126] ? clear_bhb_loop+0x40/0x90 [ 833.252489][T17126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.252514][T17126] RIP: 0033:0x7fe19619ce59 [ 833.252533][T17126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.252557][T17126] RSP: 002b:00007fe1970580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 833.252579][T17126] RAX: ffffffffffffffda RBX: 00007fe196415fa8 RCX: 00007fe19619ce59 [ 833.252595][T17126] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe196415fac [ 833.252610][T17126] RBP: 00007fe196415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 833.252625][T17126] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 833.252640][T17126] R13: 00007fe196416038 R14: 00007ffd03133310 R15: 00007ffd031333f8 [ 833.252670][T17126] [ 833.511811][T16981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 833.522995][T17126] ubi0: attaching mtd0 [ 833.529329][T17126] ubi0: scanning is finished [ 833.534244][T17126] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 833.961223][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.972627][T16981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 834.007982][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.044031][T16981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 834.082537][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.136608][T16981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 834.179244][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.188043][T17126] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 834.649212][T16981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.717099][T16981] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.786546][T12819] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.793791][T12819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.871978][T12819] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.879213][T12819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.671162][T17143] Process accounting resumed [ 836.133730][T17162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2276'. [ 836.182021][T17162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.211519][T17145] Process accounting resumed [ 836.265160][T17162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.734015][T17173] ubi0: attaching mtd0 [ 836.801562][T17173] ubi0: scanning is finished [ 836.869047][T17173] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 836.950885][T16981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.128579][T17173] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 837.237252][T17173] random: crng reseeded on system resumption [ 837.471536][T16981] veth0_vlan: entered promiscuous mode [ 837.685276][T17195] ERROR: Out of memory at tomoyo_memory_ok. [ 838.276233][T17201] FAULT_INJECTION: forcing a failure. [ 838.276233][T17201] name fail_futex, interval 1, probability 0, space 0, times 0 [ 838.301601][T16981] veth1_vlan: entered promiscuous mode [ 838.313818][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.5.2281 Tainted: G U L syzkaller #0 PREEMPT(full) [ 838.313859][T17201] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 838.313868][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.313883][T17201] Call Trace: [ 838.313891][T17201] [ 838.313900][T17201] dump_stack_lvl+0x100/0x190 [ 838.313930][T17201] should_fail_ex.cold+0x5/0xa [ 838.313961][T17201] get_futex_key+0x1d2/0x1510 [ 838.314089][T17201] ? __pfx_get_futex_key+0x10/0x10 [ 838.314141][T17201] ? futex_hash+0x2ad/0x370 [ 838.314185][T17201] ? __lock_acquire+0x4a5/0x2630 [ 838.314228][T17201] futex_wake+0xea/0x530 [ 838.314261][T17201] ? __pfx_futex_wake+0x10/0x10 [ 838.314295][T17201] ? __fget_files+0x215/0x3d0 [ 838.314335][T17201] do_futex+0x32b/0x350 [ 838.314361][T17201] ? __pfx_do_futex+0x10/0x10 [ 838.314386][T17201] ? fdget+0x18b/0x210 [ 838.314413][T17201] ? __sys_sendmsg+0x18f/0x220 [ 838.314441][T17201] __x64_sys_futex+0x34f/0x4d0 [ 838.314481][T17201] ? __pfx___x64_sys_futex+0x10/0x10 [ 838.314518][T17201] ? rcu_is_watching+0x12/0xc0 [ 838.314551][T17201] do_syscall_64+0x115/0x840 [ 838.314586][T17201] ? clear_bhb_loop+0x40/0x90 [ 838.314617][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.314642][T17201] RIP: 0033:0x7fe19619ce59 [ 838.314664][T17201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.314688][T17201] RSP: 002b:00007fe1970580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 838.314711][T17201] RAX: ffffffffffffffda RBX: 00007fe196415fa8 RCX: 00007fe19619ce59 [ 838.314727][T17201] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe196415fac [ 838.314743][T17201] RBP: 00007fe196415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 838.314758][T17201] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 838.314773][T17201] R13: 00007fe196416038 R14: 00007ffd03133310 R15: 00007ffd031333f8 [ 838.314804][T17201] [ 838.521090][T17202] ubi0: attaching mtd0 [ 838.527841][T17202] ubi0: scanning is finished [ 838.532538][T17202] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 838.560011][T16981] veth0_macvtap: entered promiscuous mode [ 838.569919][T16981] veth1_macvtap: entered promiscuous mode [ 838.587283][T16981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.598098][T16981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.938535][T17202] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 839.075370][T12798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.087954][T12798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.145927][T12798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.265552][T17205] FAULT_INJECTION: forcing a failure. [ 839.265552][T17205] name failslab, interval 1, probability 0, space 0, times 0 [ 839.323108][T17205] CPU: 0 UID: 0 PID: 17205 Comm: syz.5.2282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 839.323150][T17205] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 839.323159][T17205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 839.323173][T17205] Call Trace: [ 839.323181][T17205] [ 839.323190][T17205] dump_stack_lvl+0x100/0x190 [ 839.323220][T17205] should_fail_ex.cold+0x5/0xa [ 839.323254][T17205] should_failslab+0xc2/0x120 [ 839.323284][T17205] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 839.323323][T17205] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 839.323368][T17205] alloc_empty_file_noaccount+0x2b/0xd0 [ 839.323408][T17205] alloc_file_pseudo_noaccount+0x13a/0x230 [ 839.323449][T17205] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 839.323492][T17205] ? iput+0x3a/0x40 [ 839.323538][T17205] bdev_file_open_by_dev+0x13a/0x210 [ 839.323656][T17205] blkdev_bszset+0x170/0x240 [ 839.323737][T17205] ? __pfx_blkdev_bszset+0x10/0x10 [ 839.323776][T17205] ? find_held_lock+0x2b/0x80 [ 839.323806][T17205] ? __fget_files+0x215/0x3d0 [ 839.323833][T17205] ? hook_file_ioctl_common+0x149/0x410 [ 839.323882][T17205] blkdev_ioctl+0x513/0x6f0 [ 839.323921][T17205] ? __pfx_blkdev_ioctl+0x10/0x10 [ 839.323964][T17205] ? __pfx_blkdev_ioctl+0x10/0x10 [ 839.324004][T17205] __x64_sys_ioctl+0x18e/0x210 [ 839.324030][T17205] do_syscall_64+0x115/0x840 [ 839.324065][T17205] ? clear_bhb_loop+0x40/0x90 [ 839.324096][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.324121][T17205] RIP: 0033:0x7fe19619ce59 [ 839.324141][T17205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.324165][T17205] RSP: 002b:00007fe197058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.324189][T17205] RAX: ffffffffffffffda RBX: 00007fe196415fa0 RCX: 00007fe19619ce59 [ 839.324205][T17205] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000002 [ 839.324220][T17205] RBP: 00007fe196232d6f R08: 0000000000000000 R09: 0000000000000000 [ 839.324235][T17205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.324250][T17205] R13: 00007fe196416038 R14: 00007fe196415fa0 R15: 00007ffd031333f8 [ 839.324281][T17205] [ 839.641615][T12798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.743331][T12798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.752628][T12798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.762370][T12798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.771213][T12798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.218013][T17213] netlink: 202 bytes leftover after parsing attributes in process `syz.5.2285'. [ 840.554550][T17225] random: crng reseeded on system resumption [ 842.546992][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 842.864963][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2289'. [ 845.230860][T17284] ERROR: Out of memory at tomoyo_memory_ok. [ 845.811992][T17293] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2302'. [ 846.762062][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2305'. [ 847.074085][T17289] Process accounting resumed [ 848.069448][T17316] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2307'. [ 848.896581][T17325] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 849.788910][T17330] can0: slcan on pty238. [ 849.856197][T17330] can0 (unregistered): slcan off pty238. [ 851.037579][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 852.866334][T17377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.290698][T16984] Bluetooth: hci6: unexpected event 0x3c length: 124 > 7 [ 854.402522][T16984] Bluetooth: hci6: unexpected event 0x30 length: 10 > 3 [ 854.961970][T17404] FAULT_INJECTION: forcing a failure. [ 854.961970][T17404] name failslab, interval 1, probability 0, space 0, times 0 [ 855.058449][T17404] CPU: 0 UID: 0 PID: 17404 Comm: syz.0.2324 Tainted: G U L syzkaller #0 PREEMPT(full) [ 855.058489][T17404] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 855.058498][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 855.058511][T17404] Call Trace: [ 855.058518][T17404] [ 855.058527][T17404] dump_stack_lvl+0x100/0x190 [ 855.058557][T17404] should_fail_ex.cold+0x5/0xa [ 855.058586][T17404] ? tomoyo_encode2+0xfb/0x3c0 [ 855.058619][T17404] should_failslab+0xc2/0x120 [ 855.058648][T17404] __kmalloc_noprof+0xe0/0x850 [ 855.058678][T17404] tomoyo_encode2+0xfb/0x3c0 [ 855.058715][T17404] tomoyo_encode+0x29/0x50 [ 855.058747][T17404] tomoyo_realpath_from_path+0x18c/0x690 [ 855.058788][T17404] tomoyo_path_number_perm+0x23c/0x580 [ 855.058817][T17404] ? tomoyo_path_number_perm+0x22e/0x580 [ 855.058870][T17404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 855.058932][T17404] ? find_held_lock+0x2b/0x80 [ 855.058975][T17404] ? __fget_files+0x215/0x3d0 [ 855.059002][T17404] ? hook_file_ioctl_common+0x149/0x410 [ 855.059031][T17404] ? __fget_files+0x215/0x3d0 [ 855.059062][T17404] ? __fget_files+0x21f/0x3d0 [ 855.059094][T17404] security_file_ioctl+0xd3/0x230 [ 855.059130][T17404] __x64_sys_ioctl+0xb7/0x210 [ 855.059155][T17404] do_syscall_64+0x115/0x840 [ 855.059188][T17404] ? clear_bhb_loop+0x40/0x90 [ 855.059217][T17404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.059241][T17404] RIP: 0033:0x7f166e59ce59 [ 855.059260][T17404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.059282][T17404] RSP: 002b:00007f166f4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.059305][T17404] RAX: ffffffffffffffda RBX: 00007f166e815fa0 RCX: 00007f166e59ce59 [ 855.059320][T17404] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000004 [ 855.059336][T17404] RBP: 00007f166f4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 855.059351][T17404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.059364][T17404] R13: 00007f166e816038 R14: 00007f166e815fa0 R15: 00007fffe371f528 [ 855.059395][T17404] [ 855.060203][T17404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 855.774522][T10307] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 855.792398][T10307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 855.801693][T10307] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 855.817198][T10307] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 855.824808][T10307] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 856.058709][T17411] FAULT_INJECTION: forcing a failure. [ 856.058709][T17411] name failslab, interval 1, probability 0, space 0, times 0 [ 856.096486][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.0.2326 Tainted: G U L syzkaller #0 PREEMPT(full) [ 856.096527][T17411] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 856.096537][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 856.096551][T17411] Call Trace: [ 856.096559][T17411] [ 856.096568][T17411] dump_stack_lvl+0x100/0x190 [ 856.096598][T17411] should_fail_ex.cold+0x5/0xa [ 856.096630][T17411] should_failslab+0xc2/0x120 [ 856.096660][T17411] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 856.096700][T17411] ? mas_preallocate+0x1105/0x14a0 [ 856.096730][T17411] mas_preallocate+0x1105/0x14a0 [ 856.096758][T17411] ? __pfx_mas_preallocate+0x10/0x10 [ 856.096789][T17411] ? vm_area_alloc+0x1f/0x160 [ 856.096826][T17411] ? lockdep_init_map_type+0x5c/0x250 [ 856.096870][T17411] __mmap_region+0x124a/0x2dd0 [ 856.096922][T17411] ? __pfx___mmap_region+0x10/0x10 [ 856.096962][T17411] ? __lock_acquire+0x4a5/0x2630 [ 856.097022][T17411] ? __lock_acquire+0x4a5/0x2630 [ 856.097061][T17411] ? do_raw_spin_unlock+0x145/0x1e0 [ 856.097088][T17411] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 856.097134][T17411] ? find_held_lock+0x2b/0x80 [ 856.097164][T17411] ? rcu_is_watching+0x12/0xc0 [ 856.097205][T17411] ? rcu_is_watching+0x12/0xc0 [ 856.097232][T17411] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 856.097264][T17411] ? lockdep_hardirqs_on+0x78/0x100 [ 856.097343][T17411] mmap_region+0x35d/0x620 [ 856.097366][T17411] ? rcu_is_watching+0x12/0xc0 [ 856.097393][T17411] ? __pfx_mmap_region+0x10/0x10 [ 856.097419][T17411] ? cap_mmap_addr+0x4b/0x120 [ 856.097443][T17411] ? bpf_lsm_mmap_addr+0x9/0x30 [ 856.097465][T17411] ? security_mmap_addr+0x71/0x1e0 [ 856.097499][T17411] ? __get_unmapped_area+0x255/0x3e0 [ 856.097533][T17411] do_mmap+0xc63/0x12f0 [ 856.097568][T17411] ? __pfx_do_mmap+0x10/0x10 [ 856.097598][T17411] ? __pfx_down_write_killable+0x10/0x10 [ 856.097643][T17411] vm_mmap_pgoff+0x29e/0x470 [ 856.097680][T17411] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 856.097713][T17411] ? do_futex+0x192/0x350 [ 856.097738][T17411] ? __pfx_do_futex+0x10/0x10 [ 856.097768][T17411] ksys_mmap_pgoff+0xe4/0x610 [ 856.097798][T17411] ? __x64_sys_futex+0x358/0x4d0 [ 856.097824][T17411] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 856.097853][T17411] ? xfd_validate_state+0x129/0x190 [ 856.097883][T17411] __x64_sys_mmap+0x125/0x190 [ 856.097917][T17411] do_syscall_64+0x115/0x840 [ 856.097951][T17411] ? clear_bhb_loop+0x40/0x90 [ 856.097982][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.098007][T17411] RIP: 0033:0x7f166e59ce59 [ 856.098027][T17411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.098052][T17411] RSP: 002b:00007f166f4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 856.098075][T17411] RAX: ffffffffffffffda RBX: 00007f166e815fa0 RCX: 00007f166e59ce59 [ 856.098091][T17411] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 856.098106][T17411] RBP: 00007f166e632d6f R08: 0000000000000401 R09: 0000000000008000 [ 856.098121][T17411] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 856.098135][T17411] R13: 00007f166e816038 R14: 00007f166e815fa0 R15: 00007fffe371f528 [ 856.098166][T17411] [ 856.101109][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 857.082325][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 857.364057][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.382257][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.402220][T17406] bridge_slave_0: entered allmulticast mode [ 857.417579][T17406] bridge_slave_0: entered promiscuous mode [ 857.439054][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.455024][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.471986][T17406] bridge_slave_1: entered allmulticast mode [ 857.499211][T17406] bridge_slave_1: entered promiscuous mode [ 857.592235][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.625187][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.713612][T17406] team0: Port device team_slave_0 added [ 857.729618][T17406] team0: Port device team_slave_1 added [ 857.801920][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.816986][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.857089][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.875685][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.894964][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.936931][T10307] Bluetooth: hci7: command tx timeout [ 857.961551][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.101102][T17406] hsr_slave_0: entered promiscuous mode [ 858.118234][T17406] hsr_slave_1: entered promiscuous mode [ 858.134784][T17406] debugfs: 'hsr0' already exists in 'hsr' [ 858.146830][T17406] Cannot create hsr debugfs directory [ 858.743701][T17406] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 858.756660][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 858.769035][T17406] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 858.779239][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 858.788728][T17406] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 858.801798][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 858.812197][T17406] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 858.825387][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 858.944167][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.975629][T17406] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.002310][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.009543][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.036667][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.043914][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.520547][T17451] FAULT_INJECTION: forcing a failure. [ 859.520547][T17451] name failslab, interval 1, probability 0, space 0, times 0 [ 859.555421][T17451] CPU: 0 UID: 0 PID: 17451 Comm: syz.0.2330 Tainted: G U L syzkaller #0 PREEMPT(full) [ 859.555463][T17451] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 859.555472][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 859.555487][T17451] Call Trace: [ 859.555494][T17451] [ 859.555503][T17451] dump_stack_lvl+0x100/0x190 [ 859.555533][T17451] should_fail_ex.cold+0x5/0xa [ 859.555565][T17451] should_failslab+0xc2/0x120 [ 859.555595][T17451] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 859.555634][T17451] ? fuse_request_alloc+0x22/0x200 [ 859.555681][T17451] fuse_request_alloc+0x22/0x200 [ 859.555721][T17451] fuse_get_req+0x8b9/0x1210 [ 859.555758][T17451] ? __pfx_fuse_get_req+0x10/0x10 [ 859.555797][T17451] fuse_simple_background+0x44e/0x8c0 [ 859.555821][T17451] ? kasan_save_track+0x14/0x30 [ 859.555848][T17451] cuse_channel_open+0x561/0x7f0 [ 859.555885][T17451] ? __pfx_cuse_channel_open+0x10/0x10 [ 859.555923][T17451] misc_open+0x26d/0x450 [ 859.555949][T17451] ? __pfx_misc_open+0x10/0x10 [ 859.555973][T17451] chrdev_open+0x234/0x6a0 [ 859.556004][T17451] ? __pfx_apparmor_file_open+0x10/0x10 [ 859.556031][T17451] ? __pfx_chrdev_open+0x10/0x10 [ 859.556064][T17451] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 859.556103][T17451] do_dentry_open+0x6ab/0x14d0 [ 859.556133][T17451] ? __pfx_chrdev_open+0x10/0x10 [ 859.556171][T17451] vfs_open+0x82/0x3f0 [ 859.556214][T17451] path_openat+0x208c/0x31a0 [ 859.556255][T17451] ? __pfx_path_openat+0x10/0x10 [ 859.556297][T17451] do_file_open+0x20e/0x430 [ 859.556330][T17451] ? __pfx_do_file_open+0x10/0x10 [ 859.556382][T17451] ? alloc_fd+0x476/0x790 [ 859.556414][T17451] ? do_getname+0x191/0x390 [ 859.556453][T17451] do_sys_openat2+0x10d/0x1e0 [ 859.556491][T17451] ? __pfx_do_sys_openat2+0x10/0x10 [ 859.556540][T17451] __x64_sys_openat+0x12d/0x210 [ 859.556580][T17451] ? __pfx___x64_sys_openat+0x10/0x10 [ 859.556623][T17451] ? rcu_is_watching+0x12/0xc0 [ 859.556655][T17451] do_syscall_64+0x115/0x840 [ 859.556689][T17451] ? clear_bhb_loop+0x40/0x90 [ 859.556718][T17451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.556744][T17451] RIP: 0033:0x7f166e59ce59 [ 859.556769][T17451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.556793][T17451] RSP: 002b:00007f166f4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 859.556817][T17451] RAX: ffffffffffffffda RBX: 00007f166e815fa0 RCX: 00007f166e59ce59 [ 859.556832][T17451] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 859.556848][T17451] RBP: 00007f166e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 859.556863][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.556877][T17451] R13: 00007f166e816038 R14: 00007f166e815fa0 R15: 00007fffe371f528 [ 859.556908][T17451] [ 860.021741][T10307] Bluetooth: hci7: command tx timeout [ 860.128532][T16984] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 860.147935][T16984] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 860.170674][T16984] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 860.184434][T16984] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 860.193460][T16984] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 860.726515][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.816679][T17406] veth0_vlan: entered promiscuous mode [ 861.866852][T17406] veth1_vlan: entered promiscuous mode [ 861.993170][T17406] veth0_macvtap: entered promiscuous mode [ 862.040247][T17406] veth1_macvtap: entered promiscuous mode [ 862.099460][T10307] Bluetooth: hci7: command tx timeout [ 862.170124][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.212917][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.259056][T10307] Bluetooth: hci8: command tx timeout [ 862.288242][T12798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.343038][T12798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.386969][T12798] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.410174][T12798] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.430658][T17455] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.448122][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.466659][T17455] bridge_slave_0: entered allmulticast mode [ 862.480352][T17455] bridge_slave_0: entered promiscuous mode [ 862.502427][T17455] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.519738][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.538283][T17455] bridge_slave_1: entered allmulticast mode [ 862.561318][T17455] bridge_slave_1: entered promiscuous mode [ 862.605227][T17498] FAULT_INJECTION: forcing a failure. [ 862.605227][T17498] name fail_futex, interval 1, probability 0, space 0, times 0 [ 862.634738][T17498] CPU: 0 UID: 0 PID: 17498 Comm: syz.0.2335 Tainted: G U L syzkaller #0 PREEMPT(full) [ 862.634781][T17498] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 862.634790][T17498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 862.634804][T17498] Call Trace: [ 862.634812][T17498] [ 862.634824][T17498] dump_stack_lvl+0x100/0x190 [ 862.634854][T17498] should_fail_ex.cold+0x5/0xa [ 862.634885][T17498] get_futex_key+0x1d2/0x1510 [ 862.634929][T17498] ? __pfx_get_futex_key+0x10/0x10 [ 862.634967][T17498] ? futex_hash+0x2ad/0x370 [ 862.635008][T17498] ? __lock_acquire+0x4a5/0x2630 [ 862.635051][T17498] futex_wake+0xea/0x530 [ 862.635083][T17498] ? __pfx_futex_wake+0x10/0x10 [ 862.635117][T17498] ? __fget_files+0x215/0x3d0 [ 862.635153][T17498] do_futex+0x32b/0x350 [ 862.635178][T17498] ? __pfx_do_futex+0x10/0x10 [ 862.635202][T17498] ? fdget+0x18b/0x210 [ 862.635230][T17498] ? __sys_sendmsg+0x18f/0x220 [ 862.635258][T17498] __x64_sys_futex+0x34f/0x4d0 [ 862.635287][T17498] ? __pfx___x64_sys_futex+0x10/0x10 [ 862.635318][T17498] ? rcu_is_watching+0x12/0xc0 [ 862.635350][T17498] do_syscall_64+0x115/0x840 [ 862.635385][T17498] ? clear_bhb_loop+0x40/0x90 [ 862.635415][T17498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.635439][T17498] RIP: 0033:0x7f166e59ce59 [ 862.635459][T17498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.635483][T17498] RSP: 002b:00007f166f4ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 862.635505][T17498] RAX: ffffffffffffffda RBX: 00007f166e815fa8 RCX: 00007f166e59ce59 [ 862.635521][T17498] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f166e815fac [ 862.635536][T17498] RBP: 00007f166e815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 862.635550][T17498] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 862.635565][T17498] R13: 00007f166e816038 R14: 00007fffe371f440 R15: 00007fffe371f528 [ 862.635603][T17498] [ 863.238632][T17455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.262143][T17455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.482926][T17455] team0: Port device team_slave_0 added [ 863.537315][T17455] team0: Port device team_slave_1 added [ 863.701196][T17455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.724746][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.808047][T17455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.841599][ T8711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.850747][ T8711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.864829][T17455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.896846][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.955006][T17455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.120938][T17455] hsr_slave_0: entered promiscuous mode [ 864.143600][T17455] hsr_slave_1: entered promiscuous mode [ 864.154871][T17455] debugfs: 'hsr0' already exists in 'hsr' [ 864.169439][T17455] Cannot create hsr debugfs directory [ 864.191190][T10307] Bluetooth: hci7: command tx timeout [ 864.215327][T12812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.234019][T12812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.340887][T10307] Bluetooth: hci8: command tx timeout [ 864.632427][T17518] ERROR: Out of memory at tomoyo_memory_ok. [ 864.679658][T17515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2338'. [ 865.671305][T17455] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 865.696947][T16984] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 865.719306][T16984] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 865.728479][T16984] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 865.749991][T16984] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 865.761626][T16984] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 865.882199][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.918963][T17455] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 865.983487][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.030729][T17455] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 866.064470][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.106507][T17455] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 866.161895][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.421027][T16984] Bluetooth: hci8: command tx timeout [ 866.600218][T17559] FAULT_INJECTION: forcing a failure. [ 866.600218][T17559] name fail_futex, interval 1, probability 0, space 0, times 0 [ 866.632127][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.668509][T17559] CPU: 0 UID: 0 PID: 17559 Comm: syz.7.2346 Tainted: G U L syzkaller #0 PREEMPT(full) [ 866.668550][T17559] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 866.668559][T17559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 866.668574][T17559] Call Trace: [ 866.668581][T17559] [ 866.668590][T17559] dump_stack_lvl+0x100/0x190 [ 866.668620][T17559] should_fail_ex.cold+0x5/0xa [ 866.668651][T17559] get_futex_key+0x1d2/0x1510 [ 866.668695][T17559] ? __pfx_get_futex_key+0x10/0x10 [ 866.668733][T17559] ? futex_hash+0x2ad/0x370 [ 866.668773][T17559] ? __lock_acquire+0x4a5/0x2630 [ 866.668817][T17559] futex_wake+0xea/0x530 [ 866.668849][T17559] ? __pfx_futex_wake+0x10/0x10 [ 866.668882][T17559] ? __fget_files+0x215/0x3d0 [ 866.668918][T17559] do_futex+0x32b/0x350 [ 866.668943][T17559] ? __pfx_do_futex+0x10/0x10 [ 866.668968][T17559] ? fdget+0x18b/0x210 [ 866.668995][T17559] ? __sys_sendmsg+0x18f/0x220 [ 866.669023][T17559] __x64_sys_futex+0x34f/0x4d0 [ 866.669053][T17559] ? __pfx___x64_sys_futex+0x10/0x10 [ 866.669084][T17559] ? rcu_is_watching+0x12/0xc0 [ 866.669115][T17559] do_syscall_64+0x115/0x840 [ 866.669161][T17559] ? clear_bhb_loop+0x40/0x90 [ 866.669197][T17559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.669228][T17559] RIP: 0033:0x7f3c8f19ce59 [ 866.669247][T17559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.669271][T17559] RSP: 002b:00007f3c8ffde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 866.669294][T17559] RAX: ffffffffffffffda RBX: 00007f3c8f415fa8 RCX: 00007f3c8f19ce59 [ 866.669310][T17559] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c8f415fac [ 866.669325][T17559] RBP: 00007f3c8f415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 866.669339][T17559] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 866.669355][T17559] R13: 00007f3c8f416038 R14: 00007ffe285d0d10 R15: 00007ffe285d0df8 [ 866.669386][T17559] [ 866.881549][T17455] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.924447][T17455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 866.934950][T17455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.177385][T12819] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.186359][T12819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.242396][T12819] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.249582][T12819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.774779][T17570] ERROR: Out of memory at tomoyo_memory_ok. [ 867.862198][T16984] Bluetooth: hci9: command tx timeout [ 868.502901][T16984] Bluetooth: hci8: command tx timeout [ 868.726391][T17455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.960270][T17529] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.004779][T17529] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.049739][T17529] bridge_slave_0: entered allmulticast mode [ 869.078557][T17529] bridge_slave_0: entered promiscuous mode [ 869.111533][T17529] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.139396][T17529] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.167447][T17529] bridge_slave_1: entered allmulticast mode [ 869.205811][T17529] bridge_slave_1: entered promiscuous mode [ 869.396610][T17529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.439787][T17529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.565795][T17529] team0: Port device team_slave_0 added [ 869.598052][T17529] team0: Port device team_slave_1 added [ 869.726601][T17529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.759129][T17529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.871410][T17529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.912108][T17529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.932534][T17529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.978269][T16984] Bluetooth: hci9: command tx timeout [ 870.004094][T17529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.169320][T17529] hsr_slave_0: entered promiscuous mode [ 870.186235][T17529] hsr_slave_1: entered promiscuous mode [ 870.211250][T17529] debugfs: 'hsr0' already exists in 'hsr' [ 870.224232][T17529] Cannot create hsr debugfs directory [ 870.542211][T17455] veth0_vlan: entered promiscuous mode [ 870.667149][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.674043][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.776952][T17455] veth1_vlan: entered promiscuous mode [ 871.476820][T17455] veth0_macvtap: entered promiscuous mode [ 871.571589][T17455] veth1_macvtap: entered promiscuous mode [ 871.614245][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2353'. [ 871.703146][T17455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.725675][T17529] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 871.801144][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.848254][T17455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.881230][T17529] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 871.911445][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.966048][T17529] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 872.004434][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 872.027422][T16984] Bluetooth: hci9: command tx timeout [ 872.040188][T11481] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.072654][T11481] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.121365][T17529] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 872.153130][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.200700][T11481] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.251702][T11481] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.733645][T11481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.792278][T11481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.918119][T12806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.931645][T17529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.945339][T12806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.198495][T17529] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.392937][T12806] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.400186][T12806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.523166][T12806] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.530415][T12806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.105798][T16984] Bluetooth: hci9: command tx timeout [ 875.743848][T17667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2359'. [ 875.863194][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2359'. [ 875.939347][T17678] ERROR: Out of memory at tomoyo_memory_ok. [ 876.053483][T17670] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2359: iget: checksum invalid [ 876.129914][T17670] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 876.183843][T17670] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2359: iget: checksum invalid [ 876.268849][T17670] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 876.340968][T17670] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2359: iget: checksum invalid [ 876.400362][T17529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.409935][T17670] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 876.472314][T17670] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2359: iget: checksum invalid [ 876.538854][T17670] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 876.602959][T17670] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 876.664458][T17670] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 877.530687][T17696] FAULT_INJECTION: forcing a failure. [ 877.530687][T17696] name fail_futex, interval 1, probability 0, space 0, times 0 [ 877.615314][T17670] Process accounting paused [ 877.636864][T17696] CPU: 0 UID: 0 PID: 17696 Comm: syz.8.2364 Tainted: G U L syzkaller #0 PREEMPT(full) [ 877.636907][T17696] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 877.636917][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 877.636931][T17696] Call Trace: [ 877.636939][T17696] [ 877.636949][T17696] dump_stack_lvl+0x100/0x190 [ 877.636979][T17696] should_fail_ex.cold+0x5/0xa [ 877.637007][T17696] ? __css_rstat_updated+0x1ce/0x5a0 [ 877.637049][T17696] get_futex_key+0x1d2/0x1510 [ 877.637093][T17696] ? __pfx_get_futex_key+0x10/0x10 [ 877.637131][T17696] ? find_held_lock+0x2b/0x80 [ 877.637161][T17696] ? trace_ignore_this_task+0x56/0x100 [ 877.637194][T17696] ? trace_ignore_this_task+0x56/0x100 [ 877.637233][T17696] futex_wait_setup+0x83/0x510 [ 877.637272][T17696] __futex_wait+0x19f/0x300 [ 877.637306][T17696] ? __pfx___futex_wait+0x10/0x10 [ 877.637336][T17696] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 877.637374][T17696] ? __pfx_futex_wake_mark+0x10/0x10 [ 877.637411][T17696] ? find_held_lock+0x2b/0x80 [ 877.637441][T17696] ? futex_wake+0x456/0x530 [ 877.637477][T17696] futex_wait+0xe6/0x370 [ 877.637509][T17696] ? __pfx_futex_wait+0x10/0x10 [ 877.637555][T17696] do_futex+0x1ef/0x350 [ 877.637581][T17696] ? __pfx_do_futex+0x10/0x10 [ 877.637606][T17696] ? __pfx___might_resched+0x10/0x10 [ 877.637632][T17696] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 877.637771][T17696] ? _raw_spin_unlock_irq+0x23/0x50 [ 877.637807][T17696] __x64_sys_futex+0x34f/0x4d0 [ 877.637837][T17696] ? __pfx___x64_sys_futex+0x10/0x10 [ 877.637863][T17696] ? exit_to_user_mode_loop+0xf3/0x670 [ 877.637903][T17696] ? rcu_is_watching+0x12/0xc0 [ 877.637930][T17696] ? exit_to_user_mode_loop+0xf3/0x670 [ 877.637972][T17696] ? rcu_is_watching+0x12/0xc0 [ 877.638004][T17696] do_syscall_64+0x115/0x840 [ 877.638038][T17696] ? clear_bhb_loop+0x40/0x90 [ 877.638069][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.638094][T17696] RIP: 0033:0x7fcd3139ce59 [ 877.638115][T17696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.638143][T17696] RSP: 002b:00007fcd3232e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 877.638167][T17696] RAX: ffffffffffffffda RBX: 00007fcd31615fa8 RCX: 00007fcd3139ce59 [ 877.638184][T17696] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcd31615fa8 [ 877.638200][T17696] RBP: 00007fcd31615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 877.638215][T17696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.638230][T17696] R13: 00007fcd31616038 R14: 00007ffccb930d50 R15: 00007ffccb930e38 [ 877.638262][T17696] [ 878.019794][T17699] ERROR: Out of memory at tomoyo_memory_ok. [ 878.162694][T17529] veth0_vlan: entered promiscuous mode [ 878.175655][T17529] veth1_vlan: entered promiscuous mode [ 878.199422][T17529] veth0_macvtap: entered promiscuous mode [ 878.209274][T17529] veth1_macvtap: entered promiscuous mode [ 878.225854][T17529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.237403][T17529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.450615][T12798] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.450730][T12798] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.450790][T12798] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.450831][T12798] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.024584][T12806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.024609][T12806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.165875][T12806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.194771][T12806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.626358][T17726] FAULT_INJECTION: forcing a failure. [ 879.626358][T17726] name failslab, interval 1, probability 0, space 0, times 0 [ 879.682038][T17726] CPU: 0 UID: 0 PID: 17726 Comm: syz.9.2339 Tainted: G U L syzkaller #0 PREEMPT(full) [ 879.682081][T17726] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 879.682091][T17726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 879.682106][T17726] Call Trace: [ 879.682115][T17726] [ 879.682124][T17726] dump_stack_lvl+0x100/0x190 [ 879.682154][T17726] should_fail_ex.cold+0x5/0xa [ 879.682186][T17726] should_failslab+0xc2/0x120 [ 879.682218][T17726] __kmalloc_cache_noprof+0x7a/0x6f0 [ 879.682259][T17726] ? fuse_dev_alloc+0xc4/0x2c0 [ 879.682300][T17726] fuse_dev_alloc+0xc4/0x2c0 [ 879.682336][T17726] fuse_dev_alloc_install+0x13/0x40 [ 879.682373][T17726] cuse_channel_open+0x100/0x7f0 [ 879.682409][T17726] ? __pfx_cuse_channel_open+0x10/0x10 [ 879.682447][T17726] misc_open+0x26d/0x450 [ 879.682474][T17726] ? __pfx_misc_open+0x10/0x10 [ 879.682498][T17726] chrdev_open+0x234/0x6a0 [ 879.682530][T17726] ? __pfx_apparmor_file_open+0x10/0x10 [ 879.682559][T17726] ? __pfx_chrdev_open+0x10/0x10 [ 879.682592][T17726] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 879.682640][T17726] do_dentry_open+0x6ab/0x14d0 [ 879.682670][T17726] ? __pfx_chrdev_open+0x10/0x10 [ 879.682709][T17726] vfs_open+0x82/0x3f0 [ 879.682749][T17726] path_openat+0x208c/0x31a0 [ 879.682790][T17726] ? __pfx_path_openat+0x10/0x10 [ 879.682833][T17726] do_file_open+0x20e/0x430 [ 879.682866][T17726] ? __pfx_do_file_open+0x10/0x10 [ 879.682919][T17726] ? alloc_fd+0x476/0x790 [ 879.682952][T17726] ? do_getname+0x191/0x390 [ 879.682991][T17726] do_sys_openat2+0x10d/0x1e0 [ 879.683030][T17726] ? __pfx_do_sys_openat2+0x10/0x10 [ 879.683079][T17726] __x64_sys_openat+0x12d/0x210 [ 879.683119][T17726] ? __pfx___x64_sys_openat+0x10/0x10 [ 879.683164][T17726] ? rcu_is_watching+0x12/0xc0 [ 879.683196][T17726] do_syscall_64+0x115/0x840 [ 879.683232][T17726] ? clear_bhb_loop+0x40/0x90 [ 879.683262][T17726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.683287][T17726] RIP: 0033:0x7fab36b9ce59 [ 879.683308][T17726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.683332][T17726] RSP: 002b:00007fab37ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 879.683356][T17726] RAX: ffffffffffffffda RBX: 00007fab36e15fa0 RCX: 00007fab36b9ce59 [ 879.683373][T17726] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 879.683388][T17726] RBP: 00007fab36c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 879.683404][T17726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.683419][T17726] R13: 00007fab36e16038 R14: 00007fab36e15fa0 R15: 00007ffc59764188 [ 879.683450][T17726] [ 880.114542][T17728] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2369'. [ 880.506060][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2370'. [ 883.113308][T17760] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 884.104114][T17776] FAULT_INJECTION: forcing a failure. [ 884.104114][T17776] name fail_futex, interval 1, probability 0, space 0, times 0 [ 884.181961][T17776] CPU: 0 UID: 0 PID: 17776 Comm: syz.9.2381 Tainted: G U L syzkaller #0 PREEMPT(full) [ 884.182004][T17776] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 884.182014][T17776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.182030][T17776] Call Trace: [ 884.182038][T17776] [ 884.182047][T17776] dump_stack_lvl+0x100/0x190 [ 884.182077][T17776] should_fail_ex.cold+0x5/0xa [ 884.182109][T17776] get_futex_key+0x1d2/0x1510 [ 884.182154][T17776] ? __pfx_get_futex_key+0x10/0x10 [ 884.182204][T17776] futex_wait_setup+0x83/0x510 [ 884.182244][T17776] __futex_wait+0x19f/0x300 [ 884.182278][T17776] ? __pfx___futex_wait+0x10/0x10 [ 884.182309][T17776] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.182351][T17776] ? __pfx_futex_wake_mark+0x10/0x10 [ 884.182386][T17776] ? futex_hash+0x2ad/0x370 [ 884.182435][T17776] ? futex_hash+0x141/0x370 [ 884.182478][T17776] futex_wait+0xe6/0x370 [ 884.182509][T17776] ? __pfx_futex_wait+0x10/0x10 [ 884.182547][T17776] ? __fget_files+0x215/0x3d0 [ 884.182583][T17776] do_futex+0x1ef/0x350 [ 884.182609][T17776] ? __pfx_do_futex+0x10/0x10 [ 884.182634][T17776] ? fdget+0x18b/0x210 [ 884.182663][T17776] ? __sys_sendmsg+0x18f/0x220 [ 884.182691][T17776] __x64_sys_futex+0x34f/0x4d0 [ 884.182727][T17776] ? __pfx___x64_sys_futex+0x10/0x10 [ 884.182761][T17776] ? rcu_is_watching+0x12/0xc0 [ 884.182800][T17776] do_syscall_64+0x115/0x840 [ 884.182841][T17776] ? clear_bhb_loop+0x40/0x90 [ 884.182871][T17776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.182896][T17776] RIP: 0033:0x7fab36b9ce59 [ 884.182916][T17776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.182940][T17776] RSP: 002b:00007fab37ae80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 884.182965][T17776] RAX: ffffffffffffffda RBX: 00007fab36e15fa8 RCX: 00007fab36b9ce59 [ 884.182981][T17776] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fab36e15fa8 [ 884.182997][T17776] RBP: 00007fab36e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 884.183012][T17776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.183027][T17776] R13: 00007fab36e16038 R14: 00007ffc597640a0 R15: 00007ffc59764188 [ 884.183058][T17776] [ 884.786299][T17773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 884.843022][T17773] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 884.886902][T17773] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 884.930073][T17773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 884.960073][T17773] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 885.017559][T17773] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 885.035860][T17773] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 885.055992][T17773] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 885.073126][T17773] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 885.093539][T17773] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 885.105847][T17773] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 885.113582][T17773] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 885.122655][T17773] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 885.133036][T17773] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 885.162981][T17773] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 885.189496][T17773] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 885.207241][T17773] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 885.274589][T17773] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 885.295099][T17773] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 885.305834][T17773] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 885.339743][T17773] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 886.565334][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 886.846567][T16984] Bluetooth: hci0: command 0x0c1a tx timeout [ 886.978008][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2389'. [ 886.991290][T10307] Bluetooth: hci3: command 0x2016 tx timeout [ 886.997937][T16984] Bluetooth: hci4: command 0x0c1a tx timeout [ 887.071163][T16984] Bluetooth: hci5: command 0x0c1a tx timeout [ 887.077380][T10307] Bluetooth: hci2: command 0x0c1a tx timeout [ 887.151175][T16984] Bluetooth: hci7: command 0x0c1a tx timeout [ 887.157306][T10307] Bluetooth: hci6: command 0x0c1a tx timeout [ 887.229072][T17827] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 887.240549][T16984] Bluetooth: hci8: command 0x0c1a tx timeout [ 887.315295][T10307] Bluetooth: hci9: command 0x0c1a tx timeout [ 888.018542][T17837] FAULT_INJECTION: forcing a failure. [ 888.018542][T17837] name failslab, interval 1, probability 0, space 0, times 0 [ 888.105042][T17837] CPU: 0 UID: 0 PID: 17837 Comm: syz.0.2393 Tainted: G U L syzkaller #0 PREEMPT(full) [ 888.105084][T17837] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 888.105112][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 888.105127][T17837] Call Trace: [ 888.105138][T17837] [ 888.105148][T17837] dump_stack_lvl+0x100/0x190 [ 888.105180][T17837] should_fail_ex.cold+0x5/0xa [ 888.105212][T17837] should_failslab+0xc2/0x120 [ 888.105243][T17837] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 888.105285][T17837] ? fuse_request_alloc+0x22/0x200 [ 888.105333][T17837] fuse_request_alloc+0x22/0x200 [ 888.105375][T17837] fuse_get_req+0x8b9/0x1210 [ 888.105406][T17837] ? __pfx_fuse_get_req+0x10/0x10 [ 888.105444][T17837] fuse_simple_background+0x44e/0x8c0 [ 888.105469][T17837] ? kasan_save_track+0x14/0x30 [ 888.105497][T17837] cuse_channel_open+0x561/0x7f0 [ 888.105533][T17837] ? __pfx_cuse_channel_open+0x10/0x10 [ 888.105573][T17837] misc_open+0x26d/0x450 [ 888.105599][T17837] ? __pfx_misc_open+0x10/0x10 [ 888.105624][T17837] chrdev_open+0x234/0x6a0 [ 888.105656][T17837] ? __pfx_apparmor_file_open+0x10/0x10 [ 888.105684][T17837] ? __pfx_chrdev_open+0x10/0x10 [ 888.105717][T17837] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 888.105757][T17837] do_dentry_open+0x6ab/0x14d0 [ 888.105787][T17837] ? __pfx_chrdev_open+0x10/0x10 [ 888.105831][T17837] vfs_open+0x82/0x3f0 [ 888.105872][T17837] path_openat+0x208c/0x31a0 [ 888.105915][T17837] ? __pfx_path_openat+0x10/0x10 [ 888.105958][T17837] do_file_open+0x20e/0x430 [ 888.105992][T17837] ? __pfx_do_file_open+0x10/0x10 [ 888.106045][T17837] ? alloc_fd+0x476/0x790 [ 888.106085][T17837] ? do_getname+0x191/0x390 [ 888.106125][T17837] do_sys_openat2+0x10d/0x1e0 [ 888.106164][T17837] ? __pfx_do_sys_openat2+0x10/0x10 [ 888.106214][T17837] __x64_sys_openat+0x12d/0x210 [ 888.106255][T17837] ? __pfx___x64_sys_openat+0x10/0x10 [ 888.106300][T17837] ? rcu_is_watching+0x12/0xc0 [ 888.106333][T17837] do_syscall_64+0x115/0x840 [ 888.106368][T17837] ? clear_bhb_loop+0x40/0x90 [ 888.106398][T17837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.106424][T17837] RIP: 0033:0x7f166e59ce59 [ 888.106445][T17837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.106470][T17837] RSP: 002b:00007f166f4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.106494][T17837] RAX: ffffffffffffffda RBX: 00007f166e815fa0 RCX: 00007f166e59ce59 [ 888.106511][T17837] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 888.106527][T17837] RBP: 00007f166e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 888.106543][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.106558][T17837] R13: 00007f166e816038 R14: 00007f166e815fa0 R15: 00007fffe371f528 [ 888.106590][T17837] [ 888.618954][T17844] sysfs_service_op_store: Client not running :-5: [ 889.155874][T16984] Bluetooth: hci5: command 0x0c1a tx timeout [ 889.162142][T16984] Bluetooth: hci2: command 0x0c1a tx timeout [ 889.246493][T10307] Bluetooth: hci7: command 0x0c1a tx timeout [ 889.256147][T16984] Bluetooth: hci6: command 0x0c1a tx timeout [ 889.315032][T10307] Bluetooth: hci8: command 0x0c1a tx timeout [ 889.392234][T10307] Bluetooth: hci9: command 0x0c1a tx timeout [ 890.809484][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2402'. [ 891.235702][T10307] Bluetooth: hci2: command 0x0c1a tx timeout [ 891.241812][T16984] Bluetooth: hci5: command 0x0c1a tx timeout [ 891.313957][T10307] Bluetooth: hci7: command 0x0c1a tx timeout [ 891.320298][T16984] Bluetooth: hci6: command 0x0c1a tx timeout [ 891.395418][T10307] Bluetooth: hci8: command 0x0c1a tx timeout [ 891.474345][T10307] Bluetooth: hci9: command 0x0c1a tx timeout [ 892.601872][T17904] FAULT_INJECTION: forcing a failure. [ 892.601872][T17904] name failslab, interval 1, probability 0, space 0, times 0 [ 892.710202][T17904] CPU: 0 UID: 0 PID: 17904 Comm: syz.9.2406 Tainted: G U L syzkaller #0 PREEMPT(full) [ 892.710249][T17904] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 892.710262][T17904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 892.710278][T17904] Call Trace: [ 892.710287][T17904] [ 892.710297][T17904] dump_stack_lvl+0x100/0x190 [ 892.710328][T17904] should_fail_ex.cold+0x5/0xa [ 892.710361][T17904] should_failslab+0xc2/0x120 [ 892.710391][T17904] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 892.710432][T17904] ? fuse_request_alloc+0x22/0x200 [ 892.710480][T17904] fuse_request_alloc+0x22/0x200 [ 892.710520][T17904] fuse_get_req+0x8b9/0x1210 [ 892.710551][T17904] ? __pfx_fuse_get_req+0x10/0x10 [ 892.710590][T17904] fuse_simple_background+0x44e/0x8c0 [ 892.710615][T17904] ? kasan_save_track+0x14/0x30 [ 892.710643][T17904] cuse_channel_open+0x561/0x7f0 [ 892.710680][T17904] ? __pfx_cuse_channel_open+0x10/0x10 [ 892.710717][T17904] misc_open+0x26d/0x450 [ 892.710744][T17904] ? __pfx_misc_open+0x10/0x10 [ 892.710769][T17904] chrdev_open+0x234/0x6a0 [ 892.710801][T17904] ? __pfx_apparmor_file_open+0x10/0x10 [ 892.710829][T17904] ? __pfx_chrdev_open+0x10/0x10 [ 892.710956][T17904] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 892.710998][T17904] do_dentry_open+0x6ab/0x14d0 [ 892.711037][T17904] ? __pfx_chrdev_open+0x10/0x10 [ 892.711076][T17904] vfs_open+0x82/0x3f0 [ 892.711116][T17904] path_openat+0x208c/0x31a0 [ 892.711158][T17904] ? __pfx_path_openat+0x10/0x10 [ 892.711204][T17904] do_file_open+0x20e/0x430 [ 892.711238][T17904] ? __pfx_do_file_open+0x10/0x10 [ 892.711291][T17904] ? alloc_fd+0x476/0x790 [ 892.711325][T17904] ? do_getname+0x191/0x390 [ 892.711365][T17904] do_sys_openat2+0x10d/0x1e0 [ 892.711415][T17904] ? __pfx_do_sys_openat2+0x10/0x10 [ 892.711469][T17904] __x64_sys_openat+0x12d/0x210 [ 892.711511][T17904] ? __pfx___x64_sys_openat+0x10/0x10 [ 892.711556][T17904] ? rcu_is_watching+0x12/0xc0 [ 892.711590][T17904] do_syscall_64+0x115/0x840 [ 892.711625][T17904] ? clear_bhb_loop+0x40/0x90 [ 892.711656][T17904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.711682][T17904] RIP: 0033:0x7fab36b9ce59 [ 892.711704][T17904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.711732][T17904] RSP: 002b:00007fab37ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 892.711756][T17904] RAX: ffffffffffffffda RBX: 00007fab36e15fa0 RCX: 00007fab36b9ce59 [ 892.711773][T17904] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 892.711789][T17904] RBP: 00007fab36c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 892.711804][T17904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.711819][T17904] R13: 00007fab36e16038 R14: 00007fab36e15fa0 R15: 00007ffc59764188 [ 892.711851][T17904] [ 893.135434][T17912] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2408'. [ 893.955774][T17930] FAULT_INJECTION: forcing a failure. [ 893.955774][T17930] name fail_futex, interval 1, probability 0, space 0, times 0 [ 894.072853][T17930] CPU: 0 UID: 0 PID: 17930 Comm: syz.9.2411 Tainted: G U L syzkaller #0 PREEMPT(full) [ 894.072896][T17930] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 894.072906][T17930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 894.072921][T17930] Call Trace: [ 894.072930][T17930] [ 894.072941][T17930] dump_stack_lvl+0x100/0x190 [ 894.072972][T17930] should_fail_ex.cold+0x5/0xa [ 894.073003][T17930] get_futex_key+0x1d2/0x1510 [ 894.073048][T17930] ? __pfx_get_futex_key+0x10/0x10 [ 894.073087][T17930] ? futex_hash+0x2ad/0x370 [ 894.073128][T17930] ? __lock_acquire+0x4a5/0x2630 [ 894.073173][T17930] futex_wake+0xea/0x530 [ 894.073207][T17930] ? __pfx_futex_wake+0x10/0x10 [ 894.073240][T17930] ? __fget_files+0x215/0x3d0 [ 894.073277][T17930] do_futex+0x32b/0x350 [ 894.073304][T17930] ? __pfx_do_futex+0x10/0x10 [ 894.073329][T17930] ? fdget+0x18b/0x210 [ 894.073358][T17930] ? __sys_sendmsg+0x18f/0x220 [ 894.073386][T17930] __x64_sys_futex+0x34f/0x4d0 [ 894.073416][T17930] ? __pfx___x64_sys_futex+0x10/0x10 [ 894.073447][T17930] ? rcu_is_watching+0x12/0xc0 [ 894.073480][T17930] do_syscall_64+0x115/0x840 [ 894.073515][T17930] ? clear_bhb_loop+0x40/0x90 [ 894.073549][T17930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.073575][T17930] RIP: 0033:0x7fab36b9ce59 [ 894.073596][T17930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.073620][T17930] RSP: 002b:00007fab37ae80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 894.073644][T17930] RAX: ffffffffffffffda RBX: 00007fab36e15fa8 RCX: 00007fab36b9ce59 [ 894.073660][T17930] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fab36e15fac [ 894.073676][T17930] RBP: 00007fab36e15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 894.073692][T17930] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 894.073707][T17930] R13: 00007fab36e16038 R14: 00007ffc597640a0 R15: 00007ffc59764188 [ 894.073738][T17930] [ 894.856987][T17940] random: crng reseeded on system resumption [ 894.864525][T17938] netlink: 'syz.0.2413': attribute type 2 has an invalid length. [ 895.374731][T17948] ERROR: Out of memory at tomoyo_memory_ok. [ 895.803898][T17960] ERROR: Out of memory at tomoyo_memory_ok. [ 896.358334][T17978] FAULT_INJECTION: forcing a failure. [ 896.358334][T17978] name fail_futex, interval 1, probability 0, space 0, times 0 [ 896.401894][T17978] CPU: 0 UID: 0 PID: 17978 Comm: syz.9.2421 Tainted: G U L syzkaller #0 PREEMPT(full) [ 896.401936][T17978] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 896.401947][T17978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 896.401962][T17978] Call Trace: [ 896.401973][T17978] [ 896.401984][T17978] dump_stack_lvl+0x100/0x190 [ 896.402015][T17978] should_fail_ex.cold+0x5/0xa [ 896.402047][T17978] get_futex_key+0x1d2/0x1510 [ 896.402091][T17978] ? __pfx_get_futex_key+0x10/0x10 [ 896.402129][T17978] ? futex_hash+0x2ad/0x370 [ 896.402170][T17978] ? __lock_acquire+0x4a5/0x2630 [ 896.402215][T17978] futex_wake+0xea/0x530 [ 896.402248][T17978] ? __pfx_futex_wake+0x10/0x10 [ 896.402282][T17978] ? __fget_files+0x215/0x3d0 [ 896.402318][T17978] do_futex+0x32b/0x350 [ 896.402344][T17978] ? __pfx_do_futex+0x10/0x10 [ 896.402369][T17978] ? fdget+0x18b/0x210 [ 896.402397][T17978] ? __sys_sendmsg+0x18f/0x220 [ 896.402426][T17978] __x64_sys_futex+0x34f/0x4d0 [ 896.402456][T17978] ? __pfx___x64_sys_futex+0x10/0x10 [ 896.402488][T17978] ? rcu_is_watching+0x12/0xc0 [ 896.402523][T17978] do_syscall_64+0x115/0x840 [ 896.402558][T17978] ? clear_bhb_loop+0x40/0x90 [ 896.402588][T17978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.402614][T17978] RIP: 0033:0x7fab36b9ce59 [ 896.402634][T17978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.402668][T17978] RSP: 002b:00007fab37ae80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 896.402692][T17978] RAX: ffffffffffffffda RBX: 00007fab36e15fa8 RCX: 00007fab36b9ce59 [ 896.402709][T17978] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fab36e15fac [ 896.402725][T17978] RBP: 00007fab36e15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 896.402740][T17978] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 896.402756][T17978] R13: 00007fab36e16038 R14: 00007ffc597640a0 R15: 00007ffc59764188 [ 896.402788][T17978] [ 897.160908][T17978] ERROR: Out of memory at tomoyo_memory_ok. [ 897.495177][T18009] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2427'. [ 897.818141][T18014] ERROR: Out of memory at tomoyo_memory_ok. [ 897.936737][T18017] QAT: Invalid ioctl 8 [ 898.607987][T18032] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2434'. [ 898.998685][T18039] FAULT_INJECTION: forcing a failure. [ 898.998685][T18039] name failslab, interval 1, probability 0, space 0, times 0 [ 899.026462][T18039] CPU: 0 UID: 0 PID: 18039 Comm: syz.0.2436 Tainted: G U L syzkaller #0 PREEMPT(full) [ 899.026512][T18039] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 899.026522][T18039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 899.026544][T18039] Call Trace: [ 899.026553][T18039] [ 899.026563][T18039] dump_stack_lvl+0x100/0x190 [ 899.026594][T18039] should_fail_ex.cold+0x5/0xa [ 899.026626][T18039] should_failslab+0xc2/0x120 [ 899.026659][T18039] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 899.026706][T18039] ? fuse_request_alloc+0x22/0x200 [ 899.026752][T18039] fuse_request_alloc+0x22/0x200 [ 899.026794][T18039] fuse_get_req+0x8b9/0x1210 [ 899.026824][T18039] ? __pfx_fuse_get_req+0x10/0x10 [ 899.026863][T18039] fuse_simple_background+0x44e/0x8c0 [ 899.026888][T18039] ? kasan_save_track+0x14/0x30 [ 899.026916][T18039] cuse_channel_open+0x561/0x7f0 [ 899.026953][T18039] ? __pfx_cuse_channel_open+0x10/0x10 [ 899.026991][T18039] misc_open+0x26d/0x450 [ 899.027017][T18039] ? __pfx_misc_open+0x10/0x10 [ 899.027043][T18039] chrdev_open+0x234/0x6a0 [ 899.027075][T18039] ? __pfx_apparmor_file_open+0x10/0x10 [ 899.027103][T18039] ? __pfx_chrdev_open+0x10/0x10 [ 899.027136][T18039] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 899.027177][T18039] do_dentry_open+0x6ab/0x14d0 [ 899.027206][T18039] ? __pfx_chrdev_open+0x10/0x10 [ 899.027244][T18039] vfs_open+0x82/0x3f0 [ 899.027285][T18039] path_openat+0x208c/0x31a0 [ 899.027327][T18039] ? __pfx_path_openat+0x10/0x10 [ 899.027369][T18039] do_file_open+0x20e/0x430 [ 899.027403][T18039] ? __pfx_do_file_open+0x10/0x10 [ 899.027456][T18039] ? alloc_fd+0x476/0x790 [ 899.027489][T18039] ? do_getname+0x191/0x390 [ 899.027529][T18039] do_sys_openat2+0x10d/0x1e0 [ 899.027573][T18039] ? __pfx_do_sys_openat2+0x10/0x10 [ 899.027624][T18039] __x64_sys_openat+0x12d/0x210 [ 899.027665][T18039] ? __pfx___x64_sys_openat+0x10/0x10 [ 899.027711][T18039] ? rcu_is_watching+0x12/0xc0 [ 899.027744][T18039] do_syscall_64+0x115/0x840 [ 899.027780][T18039] ? clear_bhb_loop+0x40/0x90 [ 899.027810][T18039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.027836][T18039] RIP: 0033:0x7f166e59ce59 [ 899.027856][T18039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.027881][T18039] RSP: 002b:00007f166f4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 899.027905][T18039] RAX: ffffffffffffffda RBX: 00007f166e815fa0 RCX: 00007f166e59ce59 [ 899.027923][T18039] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 899.027939][T18039] RBP: 00007f166e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 899.027955][T18039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.027970][T18039] R13: 00007f166e816038 R14: 00007f166e815fa0 R15: 00007fffe371f528 [ 899.028001][T18039] [ 900.461359][T18059] ERROR: Out of memory at tomoyo_memory_ok. [ 903.672185][T18118] zswap: compressor Z(u not available [ 904.785174][T18138] FAULT_INJECTION: forcing a failure. [ 904.785174][T18138] name failslab, interval 1, probability 0, space 0, times 0 [ 904.853384][T18138] CPU: 0 UID: 0 PID: 18138 Comm: syz.7.2459 Tainted: G U L syzkaller #0 PREEMPT(full) [ 904.853427][T18138] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 904.853437][T18138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 904.853452][T18138] Call Trace: [ 904.853461][T18138] [ 904.853471][T18138] dump_stack_lvl+0x100/0x190 [ 904.853502][T18138] should_fail_ex.cold+0x5/0xa [ 904.853533][T18138] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 904.853569][T18138] should_failslab+0xc2/0x120 [ 904.853600][T18138] __kmalloc_noprof+0xe0/0x850 [ 904.853623][T18138] ? trace_kmalloc+0xe3/0x110 [ 904.853657][T18138] kernfs_fop_write_iter+0x26a/0x5f0 [ 904.853698][T18138] iter_file_splice_write+0x830/0x10a0 [ 904.853748][T18138] ? __pfx_iter_file_splice_write+0x10/0x10 [ 904.853787][T18138] ? __pfx_copy_splice_read+0x10/0x10 [ 904.853834][T18138] ? __pfx_iter_file_splice_write+0x10/0x10 [ 904.853869][T18138] direct_splice_actor+0x192/0x6c0 [ 904.853904][T18138] splice_direct_to_actor+0x345/0xa30 [ 904.853939][T18138] ? __pfx_direct_splice_actor+0x10/0x10 [ 904.853976][T18138] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 904.854018][T18138] do_splice_direct+0x174/0x240 [ 904.854052][T18138] ? __pfx_do_splice_direct+0x10/0x10 [ 904.854085][T18138] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 904.854121][T18138] ? rw_verify_area+0xce/0x6d0 [ 904.854149][T18138] do_sendfile+0xadc/0xe20 [ 904.854182][T18138] ? __pfx_do_sendfile+0x10/0x10 [ 904.854216][T18138] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 904.854265][T18138] __x64_sys_sendfile64+0x1d8/0x220 [ 904.854299][T18138] ? exit_to_user_mode_loop+0xf3/0x670 [ 904.854341][T18138] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 904.854379][T18138] ? rcu_is_watching+0x12/0xc0 [ 904.854416][T18138] do_syscall_64+0x115/0x840 [ 904.854452][T18138] ? clear_bhb_loop+0x40/0x90 [ 904.854484][T18138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.854510][T18138] RIP: 0033:0x7f3c8f19ce59 [ 904.854530][T18138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.854556][T18138] RSP: 002b:00007f3c8ffbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 904.854579][T18138] RAX: ffffffffffffffda RBX: 00007f3c8f416090 RCX: 00007f3c8f19ce59 [ 904.854596][T18138] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 904.854610][T18138] RBP: 00007f3c8f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 904.854626][T18138] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000000 [ 904.854641][T18138] R13: 00007f3c8f416128 R14: 00007f3c8f416090 R15: 00007ffe285d0df8 [ 904.854672][T18138] [ 905.429134][T18145] FAULT_INJECTION: forcing a failure. [ 905.429134][T18145] name fail_futex, interval 1, probability 0, space 0, times 0 [ 905.454674][T18145] CPU: 0 UID: 0 PID: 18145 Comm: syz.0.2460 Tainted: G U L syzkaller #0 PREEMPT(full) [ 905.454720][T18145] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 905.454730][T18145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 905.454745][T18145] Call Trace: [ 905.454754][T18145] [ 905.454763][T18145] dump_stack_lvl+0x100/0x190 [ 905.454794][T18145] should_fail_ex.cold+0x5/0xa [ 905.454826][T18145] get_futex_key+0x1d2/0x1510 [ 905.454871][T18145] ? __pfx_get_futex_key+0x10/0x10 [ 905.454914][T18145] ? __lock_acquire+0x4a5/0x2630 [ 905.454958][T18145] futex_wake+0xea/0x530 [ 905.454992][T18145] ? __pfx_futex_wake+0x10/0x10 [ 905.455026][T18145] ? __fget_files+0x215/0x3d0 [ 905.455063][T18145] do_futex+0x32b/0x350 [ 905.455089][T18145] ? __pfx_do_futex+0x10/0x10 [ 905.455115][T18145] ? fdget+0x18b/0x210 [ 905.455143][T18145] ? __sys_sendmsg+0x18f/0x220 [ 905.455172][T18145] __x64_sys_futex+0x34f/0x4d0 [ 905.455209][T18145] ? __pfx___x64_sys_futex+0x10/0x10 [ 905.455242][T18145] ? rcu_is_watching+0x12/0xc0 [ 905.455275][T18145] do_syscall_64+0x115/0x840 [ 905.455310][T18145] ? clear_bhb_loop+0x40/0x90 [ 905.455341][T18145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.455367][T18145] RIP: 0033:0x7f166e59ce59 [ 905.455388][T18145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.455413][T18145] RSP: 002b:00007f166f4ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 905.455437][T18145] RAX: ffffffffffffffda RBX: 00007f166e815fa8 RCX: 00007f166e59ce59 [ 905.455453][T18145] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f166e815fac [ 905.455469][T18145] RBP: 00007f166e815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 905.455484][T18145] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 905.455499][T18145] R13: 00007f166e816038 R14: 00007fffe371f440 R15: 00007fffe371f528 [ 905.455534][T18145] [ 906.766187][T18161] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 8 with max blocks 3 with error 117 [ 906.784343][T18161] EXT4-fs (sda1): This should not happen!! Data will be lost [ 906.784343][T18161] [ 907.496378][T18190] futex_wake_op: syz.7.2469 tries to shift op by -2048; fix this program [ 907.935251][T18200] FAULT_INJECTION: forcing a failure. [ 907.935251][T18200] name failslab, interval 1, probability 0, space 0, times 0 [ 907.981149][T18200] CPU: 0 UID: 0 PID: 18200 Comm: syz.7.2470 Tainted: G U L syzkaller #0 PREEMPT(full) [ 907.981193][T18200] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 907.981202][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.981217][T18200] Call Trace: [ 907.981226][T18200] [ 907.981236][T18200] dump_stack_lvl+0x100/0x190 [ 907.981267][T18200] should_fail_ex.cold+0x5/0xa [ 907.981298][T18200] should_failslab+0xc2/0x120 [ 907.981330][T18200] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 907.981374][T18200] ? fuse_request_alloc+0x22/0x200 [ 907.981422][T18200] fuse_request_alloc+0x22/0x200 [ 907.981463][T18200] fuse_get_req+0x8b9/0x1210 [ 907.981494][T18200] ? __pfx_fuse_get_req+0x10/0x10 [ 907.981540][T18200] fuse_simple_background+0x44e/0x8c0 [ 907.981565][T18200] ? kasan_save_track+0x14/0x30 [ 907.981594][T18200] cuse_channel_open+0x561/0x7f0 [ 907.981632][T18200] ? __pfx_cuse_channel_open+0x10/0x10 [ 907.981669][T18200] misc_open+0x26d/0x450 [ 907.981703][T18200] ? __pfx_misc_open+0x10/0x10 [ 907.981727][T18200] chrdev_open+0x234/0x6a0 [ 907.981759][T18200] ? __pfx_apparmor_file_open+0x10/0x10 [ 907.981788][T18200] ? __pfx_chrdev_open+0x10/0x10 [ 907.981821][T18200] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 907.981861][T18200] do_dentry_open+0x6ab/0x14d0 [ 907.981891][T18200] ? __pfx_chrdev_open+0x10/0x10 [ 907.981929][T18200] vfs_open+0x82/0x3f0 [ 907.981969][T18200] path_openat+0x208c/0x31a0 [ 907.982010][T18200] ? __pfx_path_openat+0x10/0x10 [ 907.982053][T18200] do_file_open+0x20e/0x430 [ 907.982086][T18200] ? __pfx_do_file_open+0x10/0x10 [ 907.982139][T18200] ? alloc_fd+0x476/0x790 [ 907.982172][T18200] ? do_getname+0x191/0x390 [ 907.982211][T18200] do_sys_openat2+0x10d/0x1e0 [ 907.982250][T18200] ? __pfx_do_sys_openat2+0x10/0x10 [ 907.982299][T18200] __x64_sys_openat+0x12d/0x210 [ 907.982339][T18200] ? __pfx___x64_sys_openat+0x10/0x10 [ 907.982384][T18200] ? rcu_is_watching+0x12/0xc0 [ 907.982417][T18200] do_syscall_64+0x115/0x840 [ 907.982458][T18200] ? clear_bhb_loop+0x40/0x90 [ 907.982490][T18200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.982522][T18200] RIP: 0033:0x7f3c8f19ce59 [ 907.982543][T18200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.982567][T18200] RSP: 002b:00007f3c8ffde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 907.982591][T18200] RAX: ffffffffffffffda RBX: 00007f3c8f415fa0 RCX: 00007f3c8f19ce59 [ 907.982608][T18200] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 907.982625][T18200] RBP: 00007f3c8f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 907.982640][T18200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.982656][T18200] R13: 00007f3c8f416038 R14: 00007f3c8f415fa0 R15: 00007ffe285d0df8 [ 907.982688][T18200] [ 908.378002][T18198] Process accounting resumed [ 908.549302][T18207] futex_wake_op: syz.0.2471 tries to shift op by -2048; fix this program [ 909.655341][T18218] ERROR: Out of memory at tomoyo_memory_ok. [ 909.801265][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'. [ 911.391463][T16984] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 911.413277][T16984] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 911.425501][T16984] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 911.445776][T16984] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 911.459463][T16984] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 913.484574][T16984] Bluetooth: hci10: command tx timeout [ 914.397329][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.436716][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.478203][T18237] bridge_slave_0: entered allmulticast mode [ 914.520266][T18237] bridge_slave_0: entered promiscuous mode [ 914.566747][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.598911][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.632799][T18237] bridge_slave_1: entered allmulticast mode [ 914.669419][T18292] ERROR: Out of memory at tomoyo_memory_ok. [ 914.680501][T18237] bridge_slave_1: entered promiscuous mode [ 914.865850][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.952268][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.147872][T18237] team0: Port device team_slave_0 added [ 915.189464][T18237] team0: Port device team_slave_1 added [ 915.304453][T18283] kexec: Could not allocate control_code_buffer [ 915.325750][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.348176][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.399069][T18299] ERROR: Out of memory at tomoyo_memory_ok. [ 915.420244][T18298] ERROR: Out of memory at tomoyo_memory_ok. [ 915.442292][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.500102][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.533399][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.571767][T16984] Bluetooth: hci10: command tx timeout [ 915.650580][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.903025][T18237] hsr_slave_0: entered promiscuous mode [ 915.934820][T18237] hsr_slave_1: entered promiscuous mode [ 915.958305][T18237] debugfs: 'hsr0' already exists in 'hsr' [ 915.984016][T18237] Cannot create hsr debugfs directory [ 916.941219][T18313] netlink: 'syz.0.2490': attribute type 1 has an invalid length. [ 917.646595][T16984] Bluetooth: hci10: command tx timeout [ 918.802362][T18237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 919.027163][T18237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.100150][T10307] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 919.120732][T18237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 919.128081][T10307] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 919.137900][T10307] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 919.163192][T10307] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 919.175971][T10307] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 919.291495][T18237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.333494][T18237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 919.400698][T18237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 919.435444][T18237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 919.494027][T18237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 919.727594][T10307] Bluetooth: hci10: command tx timeout [ 920.014260][T18237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.083180][T18237] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.131538][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.138769][T12812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.193865][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.201109][T12812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.250619][T10307] Bluetooth: hci11: command tx timeout [ 922.126678][T18350] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.170919][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.204515][T18350] bridge_slave_0: entered allmulticast mode [ 922.240931][T18350] bridge_slave_0: entered promiscuous mode [ 922.285738][T18350] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.324441][T18350] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.366127][T18350] bridge_slave_1: entered allmulticast mode [ 922.379493][T18383] Process accounting resumed [ 922.430682][T18350] bridge_slave_1: entered promiscuous mode [ 922.565240][T18417] FAULT_INJECTION: forcing a failure. [ 922.565240][T18417] name failslab, interval 1, probability 0, space 0, times 0 [ 922.617372][T18350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.656557][T18417] CPU: 0 UID: 0 PID: 18417 Comm: syz.0.2498 Tainted: G U L syzkaller #0 PREEMPT(full) [ 922.656599][T18417] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 922.656609][T18417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 922.656626][T18417] Call Trace: [ 922.656634][T18417] [ 922.656643][T18417] dump_stack_lvl+0x100/0x190 [ 922.656675][T18417] should_fail_ex.cold+0x5/0xa [ 922.656707][T18417] should_failslab+0xc2/0x120 [ 922.656738][T18417] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 922.656779][T18417] ? fuse_request_alloc+0x22/0x200 [ 922.656826][T18417] fuse_request_alloc+0x22/0x200 [ 922.656867][T18417] fuse_get_req+0x8b9/0x1210 [ 922.656897][T18417] ? __pfx_fuse_get_req+0x10/0x10 [ 922.656936][T18417] fuse_simple_background+0x44e/0x8c0 [ 922.656961][T18417] ? kasan_save_track+0x14/0x30 [ 922.656988][T18417] cuse_channel_open+0x561/0x7f0 [ 922.657025][T18417] ? __pfx_cuse_channel_open+0x10/0x10 [ 922.657062][T18417] misc_open+0x26d/0x450 [ 922.657088][T18417] ? __pfx_misc_open+0x10/0x10 [ 922.657113][T18417] chrdev_open+0x234/0x6a0 [ 922.657148][T18417] ? __pfx_apparmor_file_open+0x10/0x10 [ 922.657177][T18417] ? __pfx_chrdev_open+0x10/0x10 [ 922.657210][T18417] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 922.657250][T18417] do_dentry_open+0x6ab/0x14d0 [ 922.657280][T18417] ? __pfx_chrdev_open+0x10/0x10 [ 922.657325][T18417] vfs_open+0x82/0x3f0 [ 922.657366][T18417] path_openat+0x208c/0x31a0 [ 922.657408][T18417] ? __pfx_path_openat+0x10/0x10 [ 922.657452][T18417] do_file_open+0x20e/0x430 [ 922.657486][T18417] ? __pfx_do_file_open+0x10/0x10 [ 922.657539][T18417] ? alloc_fd+0x476/0x790 [ 922.657576][T18417] ? do_getname+0x191/0x390 [ 922.657616][T18417] do_sys_openat2+0x10d/0x1e0 [ 922.657655][T18417] ? __pfx_do_sys_openat2+0x10/0x10 [ 922.657704][T18417] __x64_sys_openat+0x12d/0x210 [ 922.657744][T18417] ? __pfx___x64_sys_openat+0x10/0x10 [ 922.657789][T18417] ? rcu_is_watching+0x12/0xc0 [ 922.657822][T18417] do_syscall_64+0x115/0x840 [ 922.657857][T18417] ? clear_bhb_loop+0x40/0x90 [ 922.657888][T18417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.657913][T18417] RIP: 0033:0x7f166e59ce59 [ 922.657933][T18417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.657958][T18417] RSP: 002b:00007f166f4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 922.657982][T18417] RAX: ffffffffffffffda RBX: 00007f166e815fa0 RCX: 00007f166e59ce59 [ 922.657998][T18417] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 922.658015][T18417] RBP: 00007f166e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 922.658055][T18417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.658070][T18417] R13: 00007f166e816038 R14: 00007f166e815fa0 R15: 00007fffe371f528 [ 922.658102][T18417] [ 922.975701][T18350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.008027][T18350] team0: Port device team_slave_0 added [ 923.017085][T18350] team0: Port device team_slave_1 added [ 923.045454][T18350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.054917][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.081441][T18350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.093956][T18350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.100999][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.127051][T18350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.179624][T18350] hsr_slave_0: entered promiscuous mode [ 923.186217][T18350] hsr_slave_1: entered promiscuous mode [ 923.192506][T18350] debugfs: 'hsr0' already exists in 'hsr' [ 923.198364][T18350] Cannot create hsr debugfs directory [ 923.365599][T10307] Bluetooth: hci11: command tx timeout [ 923.436432][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.533553][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2499'. [ 923.796672][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2499'. [ 923.846410][T18429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2499'. [ 924.076035][T18350] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.163586][T18237] veth0_vlan: entered promiscuous mode [ 924.223809][T18237] veth1_vlan: entered promiscuous mode [ 924.364399][T18350] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.775345][T18350] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.918500][T18237] veth0_macvtap: entered promiscuous mode [ 925.011965][T18350] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.074520][T18237] veth1_macvtap: entered promiscuous mode [ 925.179161][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.262183][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.325259][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 925.365461][T12798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.419521][T10307] Bluetooth: hci11: command tx timeout [ 925.452905][T12798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.485207][T12798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.531878][T12798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.562999][T11479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.604092][T11479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.755119][T18350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 926.804838][T18350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 926.833436][T18350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 926.869829][T18350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 926.897290][ T8711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.912550][T18350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 926.929380][ T8711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.972934][T18350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.002704][T18350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 927.102114][T18350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.499047][T10307] Bluetooth: hci11: command tx timeout [ 927.546981][T18350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.650216][T18350] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.695805][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 927.729881][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.737158][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.820116][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.827389][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.421213][T18497] FAULT_INJECTION: forcing a failure. [ 928.421213][T18497] name failslab, interval 1, probability 0, space 0, times 0 [ 928.486672][T18497] CPU: 0 UID: 0 PID: 18497 Comm: syz.0.2504 Tainted: G U L syzkaller #0 PREEMPT(full) [ 928.486716][T18497] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 928.486726][T18497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 928.486741][T18497] Call Trace: [ 928.486750][T18497] [ 928.486759][T18497] dump_stack_lvl+0x100/0x190 [ 928.486793][T18497] should_fail_ex.cold+0x5/0xa [ 928.486827][T18497] should_failslab+0xc2/0x120 [ 928.486859][T18497] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 928.486900][T18497] ? alloc_empty_file+0x5b/0x1c0 [ 928.486944][T18497] alloc_empty_file+0x5b/0x1c0 [ 928.486989][T18497] alloc_file_pseudo+0x13a/0x230 [ 928.487029][T18497] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 928.487076][T18497] __shmem_file_setup+0x205/0x460 [ 928.487115][T18497] ? __pfx___shmem_file_setup+0x10/0x10 [ 928.487153][T18497] ? vm_area_alloc+0x1f/0x160 [ 928.487193][T18497] shmem_zero_setup+0x96/0x1b0 [ 928.487221][T18497] __mmap_region+0x2509/0x2dd0 [ 928.487265][T18497] ? __pfx___mmap_region+0x10/0x10 [ 928.487310][T18497] ? rcu_is_watching+0x12/0xc0 [ 928.487340][T18497] ? trace_pelt_se_tp+0x13b/0x190 [ 928.487392][T18497] ? __lock_acquire+0x4a5/0x2630 [ 928.487433][T18497] ? do_raw_spin_unlock+0x145/0x1e0 [ 928.487462][T18497] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 928.487508][T18497] ? find_held_lock+0x2b/0x80 [ 928.487541][T18497] ? rcu_is_watching+0x12/0xc0 [ 928.487591][T18497] ? rcu_is_watching+0x12/0xc0 [ 928.487620][T18497] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 928.487653][T18497] ? lockdep_hardirqs_on+0x78/0x100 [ 928.487733][T18497] mmap_region+0x35d/0x620 [ 928.487758][T18497] ? rcu_is_watching+0x12/0xc0 [ 928.487786][T18497] ? __pfx_mmap_region+0x10/0x10 [ 928.487813][T18497] ? cap_mmap_addr+0x4b/0x120 [ 928.487838][T18497] ? bpf_lsm_mmap_addr+0x9/0x30 [ 928.487861][T18497] ? security_mmap_addr+0x71/0x1e0 [ 928.487894][T18497] ? __get_unmapped_area+0x255/0x3e0 [ 928.487928][T18497] do_mmap+0xc63/0x12f0 [ 928.487964][T18497] ? __pfx_do_mmap+0x10/0x10 [ 928.488004][T18497] ? __pfx_down_write_killable+0x10/0x10 [ 928.488053][T18497] vm_mmap_pgoff+0x29e/0x470 [ 928.488091][T18497] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 928.488125][T18497] ? do_futex+0x192/0x350 [ 928.488151][T18497] ? __pfx_do_futex+0x10/0x10 [ 928.488174][T18497] ? __pfx_do_sys_openat2+0x10/0x10 [ 928.488218][T18497] ksys_mmap_pgoff+0xe4/0x610 [ 928.488249][T18497] ? __x64_sys_futex+0x358/0x4d0 [ 928.488275][T18497] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 928.488305][T18497] ? xfd_validate_state+0x129/0x190 [ 928.488336][T18497] __x64_sys_mmap+0x125/0x190 [ 928.488366][T18497] do_syscall_64+0x115/0x840 [ 928.488400][T18497] ? clear_bhb_loop+0x40/0x90 [ 928.488431][T18497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.488456][T18497] RIP: 0033:0x7f166e59ce59 [ 928.488477][T18497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.488502][T18497] RSP: 002b:00007f166f4ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 928.488526][T18497] RAX: ffffffffffffffda RBX: 00007f166e816090 RCX: 00007f166e59ce59 [ 928.488543][T18497] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 928.488558][T18497] RBP: 00007f166e632d6f R08: fffffffffffffffa R09: 0000000000008000 [ 928.488574][T18497] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 928.488589][T18497] R13: 00007f166e816128 R14: 00007f166e816090 R15: 00007fffe371f528 [ 928.488619][T18497] [ 930.586739][T18350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.750816][T18518] FAULT_INJECTION: forcing a failure. [ 930.750816][T18518] name failslab, interval 1, probability 0, space 0, times 0 [ 930.805145][T18350] veth0_vlan: entered promiscuous mode [ 930.825587][T18518] CPU: 0 UID: 0 PID: 18518 Comm: syz.0.2506 Tainted: G U L syzkaller #0 PREEMPT(full) [ 930.825630][T18518] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 930.825640][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 930.825656][T18518] Call Trace: [ 930.825664][T18518] [ 930.825675][T18518] dump_stack_lvl+0x100/0x190 [ 930.825705][T18518] should_fail_ex.cold+0x5/0xa [ 930.825737][T18518] should_failslab+0xc2/0x120 [ 930.825767][T18518] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 930.825807][T18518] ? security_inode_alloc+0x3b/0x2c0 [ 930.825844][T18518] ? lockdep_init_map_type+0x5c/0x250 [ 930.825891][T18518] security_inode_alloc+0x3b/0x2c0 [ 930.825920][T18518] inode_init_always_gfp+0xc77/0xfb0 [ 930.825957][T18518] alloc_inode+0x8e/0x250 [ 930.825996][T18518] sock_alloc+0x44/0x280 [ 930.826024][T18518] ? security_socket_create+0x7f/0x250 [ 930.826052][T18518] __sock_create+0xc2/0x860 [ 930.826091][T18518] __sys_socket+0x14d/0x260 [ 930.826127][T18518] ? __pfx___sys_socket+0x10/0x10 [ 930.826171][T18518] __x64_sys_socket+0x72/0xb0 [ 930.826205][T18518] ? lockdep_hardirqs_on+0x78/0x100 [ 930.826241][T18518] do_syscall_64+0x115/0x840 [ 930.826278][T18518] ? clear_bhb_loop+0x40/0x90 [ 930.826308][T18518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.826334][T18518] RIP: 0033:0x7f166e59ce59 [ 930.826354][T18518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.826378][T18518] RSP: 002b:00007f166f4ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 930.826402][T18518] RAX: ffffffffffffffda RBX: 00007f166e816180 RCX: 00007f166e59ce59 [ 930.826418][T18518] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 930.826433][T18518] RBP: 00007f166e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 930.826448][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.826462][T18518] R13: 00007f166e816218 R14: 00007f166e816180 R15: 00007fffe371f528 [ 930.826493][T18518] [ 930.826534][T18518] socket: no more sockets [ 931.086217][T18350] veth1_vlan: entered promiscuous mode [ 931.220576][T18350] veth0_macvtap: entered promiscuous mode [ 931.274170][T18350] veth1_macvtap: entered promiscuous mode [ 931.327172][T18350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.389670][T18350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.536150][T12812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.563427][T12812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.579875][T16984] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 931.606866][T16984] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 931.638421][T12812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.657811][T16984] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 931.691828][T12812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.776142][T16984] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 931.861602][T16984] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 932.049853][T12819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.104095][T12819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.155364][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.161720][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.358961][T12806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.393849][T12806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.005607][T18541] ERROR: Out of memory at tomoyo_memory_ok. [ 933.420056][ T30] INFO: task syz.4.2109:16303 blocked for more than 142 seconds. [ 933.449713][ T30] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 933.523597][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 933.617593][ T30] task:syz.4.2109 state:D stack:27272 pid:16303 tgid:16302 ppid:6058 task_flags:0x400140 flags:0x00080002 [ 933.791356][ T30] Call Trace: [ 933.845991][ T30] [ 933.887545][ T30] __schedule+0x1295/0x67a0 [ 933.957440][ T30] ? __pfx___schedule+0x10/0x10 [ 933.974693][T16984] Bluetooth: hci12: command tx timeout [ 934.020725][ T30] ? find_held_lock+0x2b/0x80 [ 934.067628][ T30] ? schedule+0x2bf/0x390 [ 934.100770][ T30] schedule+0xdd/0x390 [ 934.122817][ T30] schedule_preempt_disabled+0x13/0x30 [ 934.156603][ T30] __mutex_lock+0xced/0x1b10 [ 934.173747][ T30] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 934.201493][ T30] ? __nla_validate_parse+0x1e7/0x28b0 [ 934.229751][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 934.257610][ T30] ? net_generic+0xea/0x2a0 [ 934.277262][ T30] ? net_generic+0xea/0x2a0 [ 934.294927][ T30] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 934.321495][ T30] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 934.342550][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 934.360916][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 934.391455][ T30] ? genl_get_cmd+0x3e7/0x760 [ 934.412225][ T30] ? bpf_lsm_capable+0x9/0x10 [ 934.440105][ T30] ? security_capable+0x80/0x260 [ 934.454042][ T30] genl_rcv_msg+0x560/0x800 [ 934.479450][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.494776][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 934.509464][ T30] netlink_rcv_skb+0x159/0x420 [ 934.544333][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.552997][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.569212][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 934.584125][ T30] genl_rcv+0x28/0x40 [ 934.596530][ T30] netlink_unicast+0x585/0x850 [ 934.605049][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 934.632084][ T30] netlink_sendmsg+0x8b0/0xda0 [ 934.646600][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.665558][ T30] ? __import_iovec+0x1d2/0x640 [ 934.673205][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 934.683986][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 934.701311][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.714916][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.725093][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 934.744940][ T30] ___sys_sendmsg+0x190/0x1e0 [ 934.756820][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.768659][ T30] __sys_sendmsg+0x170/0x220 [ 934.784942][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.795115][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 934.808429][ T30] ? rcu_is_watching+0x12/0xc0 [ 934.819611][ T30] do_syscall_64+0x115/0x840 [ 934.832252][ T30] ? clear_bhb_loop+0x40/0x90 [ 934.846685][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.862277][ T30] RIP: 0033:0x7f70e859ce59 [ 934.874167][ T30] RSP: 002b:00007f70e9523028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.892839][ T30] RAX: ffffffffffffffda RBX: 00007f70e8815fa0 RCX: 00007f70e859ce59 [ 934.914054][ T30] RDX: 0000000020000014 RSI: 0000200000000b80 RDI: 0000000000000005 [ 934.927920][ T30] RBP: 00007f70e8632d6f R08: 0000000000000000 R09: 0000000000000000 [ 934.955235][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.974014][ T30] R13: 00007f70e8816038 R14: 00007f70e8815fa0 R15: 00007fff0cf90a48 [ 934.985996][ T30] [ 935.130967][ T30] [ 935.130967][ T30] Showing all locks held in the system: [ 935.194918][ T30] 1 lock held by khungtaskd/30: [ 935.248230][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 935.315180][ T30] 2 locks held by getty/5389: [ 935.361161][ T30] #0: ffff88803849e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 935.430825][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 935.519049][ T30] 4 locks held by kworker/0:6/5785: [ 935.554366][ T30] 2 locks held by syz.0.168/6934: [ 935.605501][ T30] #0: ffff8880355720d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 935.693937][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 935.788328][ T30] 5 locks held by kworker/u11:11/11479: [ 935.818629][ T30] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 935.906852][ T30] #1: ffffc9000206fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 935.994389][ T30] #2: ffffffff905ed8c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 936.051016][ T30] #3: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 936.063257][T16984] Bluetooth: hci12: command tx timeout [ 936.128488][ T30] #4: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 936.192114][ T30] 2 locks held by syz.1.2050/15997: [ 936.222352][ T30] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 936.254513][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 936.315633][ T30] 2 locks held by syz.4.2109/16303: [ 936.328619][ T30] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 936.360302][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 936.396617][ T30] 2 locks held by syz-executor/16537: [ 936.413744][ T30] #0: ffff88807e6a80d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 936.451309][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 936.482311][ T30] 1 lock held by syz-executor/16981: [ 936.495778][ T30] #0: ffff88808bef0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 936.517107][ T30] 2 locks held by syz.2.2284/17210: [ 936.528177][ T30] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 936.552408][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 936.581986][ T30] 2 locks held by syz.2.2284/17228: [ 936.594665][ T30] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 936.622176][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 936.646639][ T30] 2 locks held by syz.5.2313/17339: [ 936.651927][ T30] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 936.671215][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c1/0x820 [ 936.705876][ T30] 2 locks held by syz.5.2313/17341: [ 936.715186][ T30] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 936.732390][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 936.754435][ T30] 2 locks held by syz-executor/17406: [ 936.768273][ T30] #0: ffff88807f94e0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 936.817321][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 936.829439][ T30] 2 locks held by syz-executor/17455: [ 936.842903][ T30] #0: ffff88807abba0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 936.868339][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 936.895064][ T30] 3 locks held by kworker/0:9/17634: [ 936.911104][ T30] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 936.936339][ T30] #1: ffffc9000587fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 936.956404][ T30] #2: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 936.976959][ T30] 2 locks held by syz.9.2451/18111: [ 936.993432][ T30] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 937.012836][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 937.036048][ T30] 1 lock held by syz-executor/18350: [ 937.047630][ T30] #0: ffff888091be4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 937.067725][ T30] 1 lock held by syz-executor/18522: [ 937.084841][ T30] #0: ffff8880262c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 937.119309][ T30] 1 lock held by syz.3.2508/18551: [ 937.148645][ T30] #0: ffff88808a77cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 937.176621][ T30] 2 locks held by rm/18583: [ 937.325396][ T30] [ 937.340274][ T30] ============================================= [ 937.340274][ T30] [ 937.402044][ T30] NMI backtrace for cpu 0 [ 937.402068][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 937.402104][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 937.402113][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.402127][ T30] Call Trace: [ 937.402135][ T30] [ 937.402144][ T30] dump_stack_lvl+0x100/0x190 [ 937.402174][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 937.402203][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 937.402229][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 937.402260][ T30] sys_info+0x141/0x190 [ 937.402343][ T30] watchdog+0xcb1/0x1030 [ 937.402382][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 937.402421][ T30] ? __pfx_watchdog+0x10/0x10 [ 937.402455][ T30] ? __kthread_parkme+0x18c/0x230 [ 937.402489][ T30] ? kthread+0x13a/0x450 [ 937.402523][ T30] ? __pfx_watchdog+0x10/0x10 [ 937.402558][ T30] kthread+0x370/0x450 [ 937.402592][ T30] ? __pfx_kthread+0x10/0x10 [ 937.402630][ T30] ret_from_fork+0x72b/0xd50 [ 937.402655][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 937.402682][ T30] ? __switch_to+0x800/0x1100 [ 937.402713][ T30] ? __switch_to_asm+0x39/0x70 [ 937.402743][ T30] ? __pfx_kthread+0x10/0x10 [ 937.402780][ T30] ret_from_fork_asm+0x1a/0x30 [ 937.402824][ T30] [ 937.961976][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 937.968882][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 937.979604][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 937.984806][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.994876][ T30] Call Trace: [ 937.998185][ T30] [ 938.001128][ T30] dump_stack_lvl+0x100/0x190 [ 938.005825][ T30] vpanic+0x552/0x970 [ 938.009823][ T30] ? __pfx_vpanic+0x10/0x10 [ 938.014368][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 938.020545][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 938.026718][ T30] panic+0xd1/0xe0 [ 938.030471][ T30] ? __pfx_panic+0x10/0x10 [ 938.034907][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 938.041077][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 938.047247][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 938.053421][ T30] ? watchdog.cold+0x1ec/0x234 [ 938.058220][ T30] ? watchdog+0xcc1/0x1030 [ 938.062676][ T30] watchdog.cold+0x1fd/0x234 [ 938.067289][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 938.073145][ T30] ? __pfx_watchdog+0x10/0x10 [ 938.077855][ T30] ? __kthread_parkme+0x18c/0x230 [ 938.082904][ T30] ? kthread+0x13a/0x450 [ 938.087174][ T30] ? __pfx_watchdog+0x10/0x10 [ 938.091870][ T30] kthread+0x370/0x450 [ 938.095988][ T30] ? __pfx_kthread+0x10/0x10 [ 938.100626][ T30] ret_from_fork+0x72b/0xd50 [ 938.105233][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 938.110363][ T30] ? __switch_to+0x800/0x1100 [ 938.115065][ T30] ? __switch_to_asm+0x39/0x70 [ 938.119859][ T30] ? __pfx_kthread+0x10/0x10 [ 938.124486][ T30] ret_from_fork_asm+0x1a/0x30 [ 938.129285][ T30] [ 938.132402][ T30] Kernel Offset: disabled [ 938.136740][ T30] Rebooting in 86400 seconds..