last executing test programs: 2m35.710642904s ago: executing program 2 (id=743): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) write$auto(r0, &(0x7f0000000080)='\x00\x00L\xa4\x15\x04#\x96x\x7f\xe05y\xa8\xf1\x81_8:\xef\x82.\x04T\xb5\x81\xa9r\xd5\\\xfc\xb1\xc2\xfe+H\xd8\x14\x93s\x02\x12\x9cyw\x10\x18\"\x8b\x87\x87\x19D\xc3\x1d\x96\x9f0\xfb\xb2\x8b\xff\xe6\x95\xfbSr\x15P\xfa\xd5\x84\xac6\x1b\x1f1\x82\xa5\xe0\x8b;;~\xa2\xf6\xd3%\r\x17/\xfc9\xe9~\t\xf3\x18mm\x932Y1\x1c+}\xadp\'\xd4\xefW', 0x7) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4105, 0x1009) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf25010012ea03000180072e01"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = socket(0x25, 0x1, 0x0) sendto$auto(r4, 0x0, 0x0, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x3) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000200)='/dev/usbmon37\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r5, 0x0, 0x0) 2m35.026390375s ago: executing program 2 (id=746): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) keyctl$auto_KEYCTL_UPDATE(0x2, 0xffffffffffffffff, 0x6, 0x1, 0x100000000) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1200"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x4004) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x4c4882, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="01002cbd7000fbf469235200000008000300", @ANYRES32=0xffffffffffffffff], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="0c0000000000000008251c74ae0044000180080001003b9af63df33ee7a267ba8ceed37bb9e4993277c8b3701e41db4d517815295075346ad6e8f77e427bf7ee4da16bf0d2f67736e0a605908f363a12abdd93ce983daf72b4ca388323462355e3b828c41b282ae513d8a514bab80e40d9737927fc8cd5632dfed508f5afdf7b0b01ba5cf4e36a", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="08000300f9ffffff08000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRESDEC, @ANYBLOB="580001801400026c616e310000000000000000000000000000000000048a8926ce57b5f60000b53794e3f9235854e81697ff8153ee5fbc865b74c283950e6ae309955fa8229ef8e8824be397270012e234720fb03f54f81f71cb7802b81aa531eeb29fb8f330925d227edc0e2ef047907fb00ca1f3aaa2f6343350c479c43b9214eb42bfb8000000000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300710f000008000300bd770000080003000f00000008000300dd040000080003000400000008000300080000008400018014000200766c616e3000000000000000000000001400020070696d367265670000000000000000000800030007000000140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000a000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e310000000000000000740001801400020076657468305f6d6163767461700000001400020070696d7265670000000000000000000008000100", @ANYRES64=r1, @ANYBLOB="08000100", @ANYRESHEX=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300747800001400020073797a6b616c6c6572300000000000001400020073797a5f74756e0000000000000000003c00018008000300ffffffff0800030001000000140002007465616d5f736c6176655f3100000000140002006e657464657673696d3000000000000028000180140002006d616373656330000000000000000000080003000400000008000300ffffff7f340001801400020067656e657665310000000000000000000800030002000000140002006d6163766c616e3100000000000000002800018008000100", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="f9ee877921300322a272448626b73f72c4cd33ea1737235d540feca9335a55933cb21ec22ab8aa4b1ee58696648a6261c9c3e158f0e9daf8e11123a317aa00f14b3abfdb3dde9d8bb25ea23598b4b9e234c52125a60ab0d2e1a337088eb7505e6c9748a10069e3d264c25dbc658f663d7c6ef41afab10d2e", @ANYBLOB="14000200687372300000000000000000000000007800018008000300000000001400020073797a5f74756e0000000000fdc62f0000000008f322ac3b489a20b3b8dff3a852f7960ded1d725c392594b69880210003000200000014000200697036746e6c3000000000000000000009e0ad4e", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000140002007465616d5f736c6176655f3000000000080003000100000008000100", @ANYRES64, @ANYBLOB], 0x318}, 0x1, 0x0, 0x0, 0x4840}, 0x8840) r4 = socket(0x10, 0x2, 0x0) connect$auto(r4, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2100}, 0x6) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r5) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r7, &(0x7f0000000600)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x8000000b8c5) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0xffffffffffffffff}) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1fc, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x1dd, 0xa, 0x0, 0x1, [@generic="8d6ad65618cf55f26dc0cfb00fc57931f57222e9543b8eba923a2f740a56e55236b43d402d8fde454b9265db295c455cfa8c38909b6dce991035bb5eeaade9dc42f057cf68584c0d3e9a68c9830b28c7bdf0b10cea99ef40cd3a6630c798afc5269f55d2509a6c35d24fab155ef924cd15216419d3199478a7b32c3ec32004fe27d0fcd6be72666dc193eba7c92d31b422056388cc574ad1c1809d74ad283c81bf01cf127c4bb96e8963d1c82e2d702f1863b212e0860117363ca8d87d3442ebd3ec4e46c17e62a08bdf8c8a232964491db35651dac2b8e4e534c1fa21", @nested={0xda, 0x96, 0x0, 0x1, [@generic="b598c6b3524c4e6b5533635545ce8d1714f34a5c4287fad98ab03f2a5d2ab31e55cf61521b84139f2c0b6ce46b3542f37271e37c4b42c81857b3c081bb05a19b57dc062363efd15d7a445969617197188a2ff605fa77ab49e747788c665c512733e7f216048e15711afa6b668ed8a5744a67324ee1f7dfdab1a16ea8df3a02cc4acf22c8bc9e7ad3ebadbe06e294f3bc7bf39806049616c3b1a044002c42a0051821a7f0bc134a0269cacf93f2facee1aecc055f7014bdde711667ac649874a9c4ddd5fafbac558595ed6445533452fd1e5c7fa53de3"]}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=r3}, @nested={0xf, 0x86, 0x0, 0x1, [@generic="7b3e448edc3701e705dff7"]}, @typed={0x8, 0x144, 0x0, 0x0, @u32=0x8}]}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xffff4e21}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x30048891}, 0x4002) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x5, 0x1, 0x1, 0xffff) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0xe7, 0x1, 0x0, 0x2) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x3ff, 0x200, 0x80000000, 0x8) shmctl$auto(0x54, 0x252, &(0x7f0000001500)={{0x8, 0xffffffffffffffff, 0xee01, 0x80000000, 0x9, 0x7fff, 0x6}, 0x2, 0x9, 0xc, 0x8, @raw=0xd, @inferred=r3, 0x4, 0x0, &(0x7f0000000440)="0a4d700d9ea71cf1ff6bf6e2924f5c2cd9646f46e5ca3a0e94da58c876973cbf230f982dea831fb2160a875e27271091b25274ad6677804b738d1c3dcb038d4820241106f4ca3b0d7e5e29e3f1a249d37ce418e6d07574b52562d1886d2f881fc892e155abd37c703c4314a763b3134eb52cfe41aeef9f259e9720f758f196cb59b39dd1f9", &(0x7f0000000500)="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"}) fsconfig$auto_FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="1796886b98dc7ace2223524553d941e32b0d9c92aa727c24eabfb5dfbf69254dc971de9f62b130436c03457ec379bfaeba1668263ada4ad7cfc0187fd37e323b4e7f8a67bf25098fab8cfd57afefc0fbff130ba70573d8b371851fc1a818644a34d9a2e534846f27beafeb02405cc519e0d9643922e3e3cedcba0a", r4) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x100000000, 0x3, 0x9f, 0x9) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x200000002, 0xfffffffffffffff7, 0x3, 0x0) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x400, 0x80000000, 0x3, 0x5) r5 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000001580)="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") write$auto_sg_fops_sg(r5, &(0x7f0000001680)="107fb3896fdbb9f26df163adcbe28bf546368a52b77b1012e257841d7baf29334756c70c08cb4e4b4cd9606dd8fe1da82d4a49ae25332336c10653aca37ffc38dd95fa92d2bbd0a1ec18dab7e63cfaf55f2fb97282def7a86c704422d601a1bb37b2ac2b8d6e030ea9da542463808c8a356e74dffd328878419599932f5abb8e551957b898f997397b3b227bc66b778e432b89c3b0f971defd7d33d301f358cf58f2afb853813eb3f3bbedeea092e1d24842e9a687465bff448b03c5fc3bc593bfa880b7f496d81609a3843f1920a73ef04f3ae4e2f01623f725d7ecc6fc404f476bc5b8385735628d971b3424089f97784770fdec4b5875", 0xf8) ioctl$auto_MON_IOCQ_URB_LEN(r5, 0x9201, 0x0) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x0, 0xa1, 0x10000, 0x311) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x10, 0x1, 0x7fff, 0x59) open_tree$auto(r5, &(0x7f0000001780)='./file0\x00', 0x8) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x8, 0x93, 0x800, 0x3) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/self/mem\x00', 0xc801, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000001800)={0x9, 0x0, 0xfffffffd, 0x6, 0x9, 0x4, 0x40, 0x4654, 0x70ba}) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0x0, 0x80, 0x5, 0x8) sendmsg$auto_NETDEV_CMD_NAPI_SET(r5, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NETDEV_A_NAPI_IRQ_SUSPEND_TIMEOUT={0xc, 0x7, 0x3ff}, @NETDEV_A_NAPI_DEFER_HARD_IRQS={0x8, 0x5, 0x8}, @NETDEV_A_NAPI_IRQ_SUSPEND_TIMEOUT={0xc, 0x7, 0x8}, @NETDEV_A_NAPI_GRO_FLUSH_TIMEOUT={0xc, 0x6, 0x9}, @NETDEV_A_NAPI_GRO_FLUSH_TIMEOUT={0xc, 0x6, 0x6}, @NETDEV_A_NAPI_GRO_FLUSH_TIMEOUT={0xc, 0x6, 0xcf}, @NETDEV_A_NAPI_IRQ_SUSPEND_TIMEOUT={0xc, 0x7, 0xfffffffffffffffd}, @NETDEV_A_NAPI_DEFER_HARD_IRQS={0x8, 0x5, 0x9df}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x40801) 2m22.989433976s ago: executing program 32 (id=731): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0050000", @ANYRES16=r4, @ANYBLOB="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"], 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 2m22.800441383s ago: executing program 1 (id=786): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\v\f\t\x00\x00\x00\x00\x00\x00\x00\xac.X_|\xc8R\x99!\xd2\x14\xff\xa7\xe4&#sn\x91p\xe6\x1e\x00\x1f8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\xce\xef\xd8!\x8e\xcf\xcd\xb3\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'I\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x06n\xb1\xcb\x1f\xbe\x1f\t\xfe\xaa\xb4\xa9{\xd8\xbez\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\xbc\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87M\x80X\x1ak7g\xff\x04\xb6R\xa5X\x02\xcaG\x96?9\xf1\t\x005\x8d7B\xd8$\xf7\xc6\xdb[\"p\xf4\x11\n\xcb\xfd\x1e', 0x52, 0x5228) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7ffffff9, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r4) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67be, 0x7ff) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x8, 0xfffffffffffffff7, 0x7, 0xffffffff, r1, 0x66) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fbdbdf250700000004000380080043800400038004000280"], 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) chroot$auto(&(0x7f0000000180)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00') 2m22.446769984s ago: executing program 1 (id=787): sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fc4f50f78df281039dd157c877ac6e2fc7dbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437023f69a5777674284501bd4661e84d7eeab5f94717d98d0624"], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x6, 0x193, 0x0, 0x22, [0x1, 0x5, 0x7, 0x5, 0xf, 0xffffffffffffff19]}) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0xfffffffffffffff7}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0x8}, @BATADV_ATTR_TQ={0x5, 0x19, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x400480a0}, 0x4040) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) 2m17.071213111s ago: executing program 33 (id=754): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtd0\x00', 0x28082, 0x0) setrlimit$auto(0x2, &(0x7f0000000040)={0x0, 0x20000000000006}) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, &(0x7f0000000100)={@_si_pad}, 0x4) r1 = socket(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe981, 0x9, 0x12, 0x401, 0x8000) setgroups$auto(0xa1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r2) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000021, 0x400, 0xfffffffffffffffc}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400007f", @ANYRES16=r7, @ANYBLOB="11032cbd700001dcdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_TIMEOUT_REASON={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2040040}, 0x4044010) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) r9 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_UBI_IOCATT(r9, 0x40186f40, &(0x7f0000000040)={0xc8, 0x0, 0x0, 0x5, 0x81, 0xa}) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000540), 0x20000000105}, 0x4) 2m7.219707119s ago: executing program 34 (id=787): sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fc4f50f78df281039dd157c877ac6e2fc7dbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437023f69a5777674284501bd4661e84d7eeab5f94717d98d0624"], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x6, 0x193, 0x0, 0x22, [0x1, 0x5, 0x7, 0x5, 0xf, 0xffffffffffffff19]}) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0xfffffffffffffff7}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0x8}, @BATADV_ATTR_TQ={0x5, 0x19, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x400480a0}, 0x4040) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) 1m57.073351843s ago: executing program 4 (id=854): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b62, r0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r0) close_range$auto(0x2, 0x8, 0x0) r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r3, 0x0, 0x10, 0xccbd5d) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) unshare$auto(0x40000080) unshare$auto(0x6) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000500)=@link_detach, 0x1) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_EVIOCGMASK(r5, 0x80104592, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/tracing_on\x00', 0x80, 0x0) 1m56.285300341s ago: executing program 4 (id=855): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0x99) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio1\x00', 0x101001, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x2400004c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560f, r2) 1m55.779456659s ago: executing program 4 (id=857): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80040, 0x0) socket(0x1a, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) setrlimit$auto(0x9, &(0x7f0000000100)={0x40, 0x3}) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x602280, 0x0) socketpair$auto(0x3, 0x1, 0x8, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 1m55.22188877s ago: executing program 4 (id=861): unshare$auto(0x40000080) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mmap$auto(0xffdff7fffffffa35, 0x2020004, 0xffff, 0x1c, r0, 0xffffffff) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0x0, 0x6) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/free_buffer\x00', 0x20103, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) mmap$auto(0x1, 0x2020009, 0x2, 0xeb0, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x801, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) timer_delete$auto(0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) fanotify_init$auto(0x5, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1085, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 1m53.857077315s ago: executing program 4 (id=864): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, r0, 0x52) r1 = io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) r5 = socket(0x6, 0x2, 0x6) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) getsockname$auto(r5, 0x0, 0x0) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x1, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_BIND_RX(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES64=r2, @ANYRESDEC, @ANYRESOCT=r3, @ANYRES64=r10, @ANYRES64=r8, @ANYBLOB="04495ccbd71220140fb67417000280"], 0x28}, 0x1, 0x0, 0x0, 0x24044094}, 0x4001000) io_uring_setup$auto(0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_m5602/parameters/dump_sensor\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r11, &(0x7f0000001700)=""/4082, 0xff2) 1m52.858390368s ago: executing program 4 (id=869): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x5) sysfs$auto(0xfffff800, 0x2, 0x10000) r0 = fsopen$auto(0x0, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x40}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r4 = fsopen$auto(0x0, 0x400) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x0, 0x0) epoll_create$auto(0x3671) io_uring_setup$auto(0x1d48, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) 1m37.631455001s ago: executing program 35 (id=869): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x5) sysfs$auto(0xfffff800, 0x2, 0x10000) r0 = fsopen$auto(0x0, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x40}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r4 = fsopen$auto(0x0, 0x400) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x0, 0x0) epoll_create$auto(0x3671) io_uring_setup$auto(0x1d48, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) 1m0.000118773s ago: executing program 5 (id=1045): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x5b, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x80001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x11, 0xa, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) r5 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x102, 0x7, r5, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES8=r1, @ANYRES32=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) sendfile$auto(r2, r0, 0x0, 0x404000000005) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r6, 0x5101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) close_range$auto(0x2, r6, 0x0) socket(0x2, 0x3, 0x6) r7 = socket(0x2, 0x1, 0x0) bind$auto(r7, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0xb}, 0x800008}, 0x5, 0x20000000) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r8, 0x0, 0x400000000006) 58.834511062s ago: executing program 5 (id=1050): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.0/usb10/10-0:1.0/usb10-port3/quirks\x00', 0x313e879bef676301, 0x0) syncfs$auto(r0) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000240)={[0x200000000000000, 0x400, 0x4002008d, 0x2, 0x2, 0x7, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4, 0x9, 0x80000001, 0x9, 0x2, 0x6]}, 0x0) wait4$auto(r2, 0x0, 0x80000001, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ppoll$auto(&(0x7f0000000000)={r3, 0x6, 0x6}, 0x6, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f00000000c0)={0x6}, 0x8) setsockopt$auto(0xffffffffffffffff, 0x3ffffff, 0x8001, 0x0, 0x8) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0xffffffff, 0x1, 0xffffffffffffffff, 0x4, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) r4 = socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) recvfrom$auto(r4, 0x0, 0xe230, 0x5, 0x0, 0x0) write$auto(0x3, 0x0, 0x5c8) 57.756354947s ago: executing program 5 (id=1055): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_sg_fops_sg(r0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x200000000, 0x40009, 0xe1, 0x9b72, 0x7, 0x27fff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x200, 0x0) r3 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0x65, 0x9, 0x0, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r5) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002fc0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xe3, 0x2, 0x0, 0x1, [@typed={0x74, 0x137, 0x0, 0x0, @binary="37c1826c57312f94bec20a7bea8e6bc81a577ec9e95fbea7afe251f6b64934ff4d2993b892295cdbe2cd761a0a51ecc21bbde8f65f9008e31c3e88b684ff859d895f100e404ad5edf1c24189280a83f03ade0bb8d4b2d859365901ad6b60c24eb3c25b6d6205c727a297c5718dde0142"}, @generic="0b3eeaf7e3fa3d86e4014669f72693fa88860dea73e65bc118e9c20ad486fdea2f5d5ccc6f857a869651fed3602b37234369e64cad9e33cf0867c61cf2e31e7e9dfc8b3fe0bde8483c3b71ee28f3734aaabc905eb1e32311e3a1ace5c8396cfb6ff9cd7c57124b91d09b17"]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00', 0x17) 56.52201452s ago: executing program 5 (id=1057): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) close$auto(0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r0, 0x0, 0x6, 0x40008) open(0x0, 0x0, 0x408) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd9/queue/iosched/read_expire\x00', 0x206a1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="2d37b8", 0x3) r2 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) ioctl$auto_TIOCGETD2(r2, 0x5424, &(0x7f00000000c0)="d4a922f9527adb91296b350d81ecdfb47013e5694596e86bb9c0bb7da0917bfc96089f6854e37ed1ae3d3f23db4bdb7a5e3f3f5e531ccb63187d1fae2221451bdc45f8b13bf9d33a0a7267fd9d3470b1732f5aae1fd2a1dc3955df05616ec65ffe0b64262dc223a5eba8") waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240)={{0xc4d, 0xffffffffffffff37}, {0x34, 0x5}, 0x5, 0x4, 0x8000, 0x7, 0x4, 0x1, 0x100000000f, 0x6, 0xf, 0x7f, 0x6, 0x5e97, 0xd, 0x5}) migrate_pages$auto(0x0, 0x8, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x3f, 0x7fff, 0x5, 0x80000000007, 0x1, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x304) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af03, 0x0) write$auto(r4, &(0x7f0000000180)='/dev/vhost-net\x00', 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r4, 0x4008af30, 0x0) 56.135485753s ago: executing program 5 (id=1060): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7ffffff9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x80000000, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), r0) sendmsg$auto_NBD_CMD_CONNECT(r0, 0x0, 0x4040000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x18) msync$auto(0x0, 0x2000000005, 0x6) 54.999448161s ago: executing program 5 (id=1062): mmap$auto(0xffffffffffffffff, 0x4020009, 0x6, 0x7ffffffc, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0x6, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x16, 0x5, 0x100000001, 0x8, 0x9, 0x8000, 0x1, 0x7ff, 0x0, 0x101, 0x6, 0xfffffffffffffffe, 0x80000001]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r0, 0x6, 0x1ff, 0x5) 54.634141735s ago: executing program 6 (id=1065): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x6) r1 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r1, 0x29, 0xd1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r2, 0x2) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_CHANNEL={0x47, 0x8, 0x1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x21}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xc6}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0xfffffffd}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048050}, 0x80) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab8) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) io_cancel$auto(0x101, 0x0, 0x0) (async) keyctl$auto(0x200000000000020, 0x0, 0x5, 0x5, 0x8) flock$auto(r4, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) read$auto_tracing_saved_tgids_fops_trace(r0, &(0x7f0000000200)=""/84, 0x54) 54.210395594s ago: executing program 6 (id=1068): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) fsconfig$auto_HIDEPID_INVISIBLE(r0, 0x2, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)="2205361ec13311b9c144d16e1fa564640d06e6618755389d334eb167603755e74ffd5db1bdd6183e8c5eb65512bbf2492a09680f577c4f6d61349031a9ce9a8d1fff0add91941c3e346efe7d9e08aa9c9e2fea8012d70f1e6d838b547549470e8cf54ab5c6d1", 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x8) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$auto_F_GETFD(r0, 0x1, 0x6) r2 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0x10000eb1, r0, 0xf) socket(0xa, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close$auto(r2) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) io_uring_register$auto(r2, 0x8, 0x0, 0x0) epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) capset$auto(&(0x7f0000000180)={0x7, 0xffffffffffffffff}, &(0x7f0000000240)={0xa7, 0x9, 0x9}) r5 = setfsuid$auto(0xee00) setreuid$auto(r5, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x7, &(0x7f0000000280)={@siginfo_0_0={0x0, 0x0, 0x6, @_kill={r4, r5}}}) madvise$auto(0x801, 0x4f46, 0x6) 53.387274475s ago: executing program 6 (id=1070): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000240), r1) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="01002b79ff06fcdbdf250b000000080002000900fb"], 0x1c}, 0x1, 0x0, 0x0, 0x28040005}, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 52.043854967s ago: executing program 6 (id=1074): close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x400, 0x2000000000002) r0 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14abb2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(r1, 0x5423, r0) r2 = gettid() ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xfd, 0x1}, 0x3, &(0x7f0000000080)={0x6, 0x6}, 0x0, 0x8) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x0) tkill$auto(r2, 0x7) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x74, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@typed={0x12, 0x32, 0x0, 0x0, @str='/dev/pts/ptmx\x00'}]}, @NL802154_ATTR_WPAN_PHY_CAPS={0x20, 0x18, 0x0, 0x1, [@typed={0x12, 0x11d, 0x0, 0x0, @str='/dev/pts/ptmx\x00'}, @typed={0x8, 0x111, 0x0, 0x0, @uid}]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0xee}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x80}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4743, 0x117) 51.616482098s ago: executing program 6 (id=1076): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000000)=0xfffffffffffffffc) (async) socket(0x11, 0x80003, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 64) r2 = socket(0x10, 0x2, 0x4) close_range$auto(r2, 0x8, 0x0) (async) r3 = socket(0x10, 0x2, 0xc) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2000, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) (async, rerun: 64) r4 = semctl$auto(0x8000, 0x81, 0x7fff, 0xfffffffffffffffb) (async, rerun: 64) r5 = getpgrp(0xffffffffffffffff) r6 = semctl$auto_GETPID(0xfffffffd, 0x80000000, 0xb, 0xcb8) (async) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f00000014c0)={"4c8fd278d6dd9758b2f7244ef1e36a1ed8c86d05a5d614ba66d612ee040c9169", 0x0, 0x7, 0x8001, 0x2, 0x2, 0xffffffffffffffff}) syz_clone3(&(0x7f0000001580)={0x11000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x20}, &(0x7f0000000100)=""/49, 0x31, &(0x7f00000004c0)=""/4096, &(0x7f0000001540)=[r4, r5, r6, r7], 0x4, {r1}}, 0x58) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f00000003c0)="6c41fc", 0x3) (async, rerun: 32) mmap$auto(0x0, 0x420009, 0x4000000000df, 0xeb1, 0x401, 0x7fff) (async, rerun: 32) mlock$auto(0x800, 0x85fc) (async, rerun: 64) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (rerun: 64) 51.159084008s ago: executing program 6 (id=1077): mmap$auto(0x0, 0x20009, 0x101, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '#'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r4, 0x8000) r5 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci4/force_wakeup\x00', 0x880, 0x0) read$auto(r5, &(0x7f0000000100)='ip6gre0\x00', 0x4) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)=@info={0xffffffffffffffff, 0x7, 0x80}, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) capget$auto(&(0x7f0000000040)={0x7, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), r7) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r8, &(0x7f0000000240)={0x0, 0x5}, 0xa) 41.241986804s ago: executing program 7 (id=1094): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xa, 0x2000d, 0x8000000000000001, 0xda, r1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x50040, 0x0) ioctl$auto_OSS_ALSAEMULVER(r3, 0x40086602, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400044, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) mbind$auto(0xffffffffffffff00, 0xff, 0x9, 0x0, 0x3, 0x7) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x800, 0x0) migrate_pages$auto(0x0, 0x299d, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x156d) read$auto(0xffffffffffffffff, 0x0, 0xf2a) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, 0x0, 0x0) getpid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() open(&(0x7f0000000000)='./file0\x00', 0x64242, 0xe1d2b27bdc14ab84) 40.223743416s ago: executing program 7 (id=1096): r0 = dup$auto(0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) symlink$auto(&(0x7f0000000080)='\xe6\'\xd4\v{T+\xac', &(0x7f0000000000)='\'--[[\x14+\\\x00') readlink$auto(&(0x7f0000000040)='\'--[[\x14+\\\x00', &(0x7f0000000140)='\x00', 0x8) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) sendfile$auto(0x1, r1, 0x0, 0x40000000c07) socket(0xa, 0x1, 0x84) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) membarrier$auto_MEMBARRIER_CMD_GLOBAL_EXPEDITED(0x2, 0x0, 0x5eed86c8) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948b, 0x0, 0x8, 0x400000006, 0x100000000003, 0xc, 0x9, 0x3, 0x9, 0x400005, 0x5]}, 0x0) fcntl$auto(0xffffffffffffffff, 0x80000001, 0xa553) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) execve$auto(0x0, &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xc0}) quotactl_fd$auto(0xffffffffffffffff, 0x200, 0x0, 0x0) 39.377085361s ago: executing program 36 (id=1062): mmap$auto(0xffffffffffffffff, 0x4020009, 0x6, 0x7ffffffc, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0x6, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x16, 0x5, 0x100000001, 0x8, 0x9, 0x8000, 0x1, 0x7ff, 0x0, 0x101, 0x6, 0xfffffffffffffffe, 0x80000001]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r0, 0x6, 0x1ff, 0x5) 39.25440287s ago: executing program 7 (id=1099): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r0) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) unshare$auto(0x40000080) unshare$auto(0x6) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000500)=@link_detach, 0x1) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_EVIOCGMASK(r4, 0x80104592, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/tracing_on\x00', 0x80, 0x0) 38.692074663s ago: executing program 7 (id=1100): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r0) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) unshare$auto(0x40000080) unshare$auto(0x6) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000500)=@link_detach, 0x1) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_EVIOCGMASK(r4, 0x80104592, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/tracing_on\x00', 0x80, 0x0) 38.135367406s ago: executing program 7 (id=1102): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={r0, @new_prog_fd, 0x2c}, 0x92) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(0x3, 0x2, 0x4) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) r1 = getpid() r2 = socket(0x2, 0x80002, 0x73) getsockopt$auto(r2, 0x0, 0x3, 0x0, &(0x7f0000000080)=0x3ff) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x0, 0x5, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000140)={{0xac0, 0x7, 0x1ff, 0xffffffff, 0x80000001}, 0x8, 0x3, "942d166bb3ebc406fb2b734c084f20cac15e984c682fe180555e9172d04dd48f621e39c824491391e9498ddce9bed535099543d7d035572378781372a7aad63a", "386722f79ec0deb7c3137afc382b7f818f15429f3167d239b395e82774bb762d242a122a22c2d903020aab884c65e4e6ec505df49d2a407c50b114cd0a18285ad7b64a630b762e3df5bc51e9f9bb020a", 0x6, 0x7, 0x40, 0x2, 0x7, "889b26096a11331c2febb158228a48873f35d96d726ebeaa225e17c2881b4f6c"}) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) 37.071363339s ago: executing program 7 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}]}, 0x20}}, 0x0) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x20002, "0600000000000000"}, 0x2) 36.108419346s ago: executing program 37 (id=1077): mmap$auto(0x0, 0x20009, 0x101, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '#'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r4, 0x8000) r5 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci4/force_wakeup\x00', 0x880, 0x0) read$auto(r5, &(0x7f0000000100)='ip6gre0\x00', 0x4) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)=@info={0xffffffffffffffff, 0x7, 0x80}, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) capget$auto(&(0x7f0000000040)={0x7, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), r7) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r8, &(0x7f0000000240)={0x0, 0x5}, 0xa) 28.274410129s ago: executing program 8 (id=1117): socket(0x15, 0x5, 0x0) socket(0xa, 0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x1, 0x0, 0x800) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40000403c6f2b, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x7fff, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x0, 0x3, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 27.9429405s ago: executing program 8 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38150000", @ANYRES16=r1, @ANYBLOB="013f27bd7000fedbdf25010000000400018016150280b642871b3ae3ad4083b2b3edf238426d841f7105a89068e208ed15c4ff2637248feacc6a398dc80863719a5cfef1c26ed7a3cab11ba1dc141180040071800e003e004082ffc31dbaec5263a3000004001880bb131d800800ab00060000004000f4800c00340001000000000000000800c600", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1538}, 0x1, 0x0, 0x0, 0x4104}, 0x20044050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = io_uring_setup$auto(0xa, 0x0) r4 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x202, 0x10001, 0x8, r3, [], {0x6, 0x6, 0x8c48, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x52, 0x1, 0x1, 0x40, 0x76c4, 0x80008, 0x5}}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)=@link_update={r4, @new_map_fd=r3, 0x10001, @old_map_fd=r0}, 0x1) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x27fffffffffc, 0x63, 0x0, 0x0, 0x0, 0x8, 0x4, 0x80000008040000a, 0x3, 0x7, 0xc, 0xffffffff80000000, 0x800000000000b, 0x2, 0x240000100103}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r5 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xd77, &(0x7f00000002c0)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x5, 0x0) readv$auto(r2, &(0x7f0000000240)={&(0x7f0000000140), 0x9}, 0xa34) 27.369250842s ago: executing program 8 (id=1121): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, "87c9d8c65f90dfab5e037a"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}}, 0x24048080) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0xb}, 0x800008}, 0x5, 0x20000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) 26.03967286s ago: executing program 8 (id=1123): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) connect$auto(0x3, 0x0, 0x6) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = socket(0x23, 0x80000, 0x6) getsockopt$auto(r4, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x4) 24.621973829s ago: executing program 8 (id=1128): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='UF\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf251b00000005001000c20000000600110000080000080003005d0000000d0002002f6465762f6662300000000005000f000900000005000a0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/default_smp_affinity\x00', 0xaa102, 0x0) write$auto(r2, 0x0, 0x7ef) connect$auto(0x3, 0x0, 0x50) unshare$auto(0x40000080) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x8001, 0x0) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x8000, 0x0) write$auto_fb_fops_fb_chrdev(r4, 0x0, 0x0) 22.220153238s ago: executing program 8 (id=1131): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000f4", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0050000", @ANYRES16=r4, @ANYBLOB="000227bd7000fddbdf25060000009c0001804d000100fc15acd5b771c79fd2dc24b9d144105fd8f3e20dcb22de4c4853856eb9668c8aa532417747ccac3df1a5e8e896ac9cc0f973cad1119d4a9a7fe8ee5fa3e8fdf13a531925e6a2fe04e5000000060002002f000000120002002f6465762f7074732f70746d78000000120002002f6465762f7074732f70746d780000000500020000000000100002007b292e5c5b2b7d2e5e252300ec0201809a000100c7ec2daa063026cd8b252681c161f79f91de0c16e7f4066726e2374b52943a027c3a1867bfb8d94af9df2f3cfc158f558e9c8291795004628f9bedd861a793c874b98d92af22a60137f2d87e6be5a473390405fda8ad10bb054012a623d334f53c40b6042a0a86013f1b853e7b8251ef9e8ea4d7aa820cc9ebabacba3797a4d0dcdc2fa9974f6a32fa54e8c8f1b9c06fbe54341a6a0a000073000100022b63a0beaef5e711a69f58da0b0ba16c2cdec2901fa0903e81f727c9234bd005d315fa14814294ff4d42899b5470d94a068f00937c9ac5642a3d135c35a121265009375db3ee3f8992cc3d0e22471b9afc3ba6d9312afadb59a9d5b2f9b6e361cfc8cb7be89af5a981f8bc3e3fd300c9000100f1f3573092dd1ae7c30486a21bd1e05dee12228a1fb21172271ca3185b80145b2a03c93387732f5b0a0ba83e30bd9e9152b92d5f29c9deb5e9678fdae648a67b7885162119f151fc40583ae5f654acfafee902e46e63d3f4f66fa2ad398d7f05c12302adefe750872c5781ebac68177231cffad9e697dcd71a472ff82fb9eb5f198ac6703ebaa6d35ffedfe2c9a4834faf2c26b6e359430c81c92a44fcd24d89656e54dac31a26aa34625daa406419729d34465d887d0dd49edabd98a4a5f11ecd5387a55f000000120002002f6465762f7074732f70746d780000000600010035010000d80001007d6dce6342ae29454a9adb498b4007e034e466357b249439d512f7cd94fcefd8df59e266b5991c6cdf6dfa95c7475653fbfc652100e413759a20b6d8eb7bb15c7a579969ca8ef2b9383b1fac751baf1e55134c4072a31d69ef8861eea0e2da4137d451d55e89ba10ced204e786ad7ed6b713c06a7d1092a9238b4647e77c7623c1199bdd95e68b0615d0f6ead589b52b41c136e73b0aba1d28e3bb8739e030b66954977b01f6b4f5c2494bdd492778c5f3a9d78bf72da4edab39e8163ff198abde69c4863ddd8854add4d4c69f5e831f28ecfd78090002002d2f402b000000000a000200233a752d2a0000000c0001800700020021280000e001018060000100407ba2664b1381a01044f70c4435c91393eff55d1f3ba9e42df760c91b5f01dfbb3c1f629cc72d4603f4219461ae3aff4bf4ec48b1537ea0a7a3a12842e0f8c1cdebe9843ef63aef1088e74cd54763cbe10ac453db902599a41aa1d90d0002002f6465762f6b766d00000000f6000100045cce43018600541d2362cf3f7aaa64356dbef2d59e299ff0a9fb47b0d1cf591db6fc9734bde65c6b2fb695eb3b5fa884551992496e23227214bcfe11df54cd8f203172a62903cd53d9673c31f0e6c460193337dc71579142379a9355f3c1d5258bf8f7d0b242168745b14b8699b25d894814a33478124dc66146288300b151410e27d59b5814e72891b6657f883453dbf1fc55bd63dfd30a2fcb13ddce7d897b6c7f8d65cb72071f5ba14d9aae712ce1755e6aa9797c279b11fcc9fbfaf84189d3e97f976ee6a63ee0718b0bbc5ae6dc52d7a69697af8cee1b64411d2ec04c04ea51cb6e8d7bd30b582bf16572dba0248b00005f000100987507b32cbaea08ff59b3be4651c2000c1b44fa18e84eab130441e2b89ca7b62c099f142cbad243ce00fcb0ac0dd9484c66c4ab6605e51b9a8f5a19002346484a0c1190d6230fb17de3dfd3a217402709f8c13bd5c9f215380c300013000200212d242529182e3a2f5b7d5c2d8b000028000180120002002f6465762f7074732f70746d780000000e0002005b2e29287d2e2d2f7d000000"], 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 21.853451401s ago: executing program 38 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}]}, 0x20}}, 0x0) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x20002, "0600000000000000"}, 0x2) 7.321575815s ago: executing program 3 (id=1157): openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000040), 0x4501, 0x0) r0 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000080)=0xcc0) ioctl$auto_TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=0x690481f1) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9EF\xd3\xfc\xe7\b/o\x1c\xeagjF4#x\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d', &(0x7f0000000200), 0x5) r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x3, 0xfdd) ioctl$auto_BTRFS_IOC_DEVICES_READY(r1, 0x90009427, &(0x7f00000004c0)={@inferred=r2, "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"}) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r3, &(0x7f0000000480)="4a0200070000000000899e3cfd62ced2adc245ecf38f0000000000000000000000000000e80ae6712f1736f1f6f1db5c", 0x30) 7.311285279s ago: executing program 0 (id=1165): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/irq/3/node\x00', 0x189c40, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c2078027e0dc0023af10e9bfa1babfa20a974ca9a20370a", 0x19) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r1 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) read$auto_long_retry_limit_ops_(r1, 0x0, 0x0) lseek$auto(0x3, 0x2, 0x4) r2 = socket(0x27, 0x80000, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) write$auto(r3, &(0x7f0000000340)=',,2.15.4 ]\x98\x0f7V\xd4l\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x11\xcd\xcdf\x15\r\x19\xc3\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) r4 = socket(0x8, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8955, 0x0) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9bff29bd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d3daa4eea8a4c661d22579a25d9423ba845e63e4dfe7a102c3d215cbca355f461df3c1025962c2b3e55c414f5ddf82359b2ce666f9cb206f92bc1f902b23c36128bf83c58b143d52968a872a0c2fdab9b11188b452513ef2fd395b7f0f63710e2e61d8ba633dc04cfd902d192e3d700e7297302c6154840c6a09e2d0e90e", @ANYRES16=r5, @ANYBLOB="02002abd7000fbdbdf250100000008000b00e000000114000200fc0000000000"], 0x30}}, 0x40004) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r7, 0x401070cd, 0x5) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r2) 7.008398694s ago: executing program 39 (id=1131): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000f4", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0050000", @ANYRES16=r4, @ANYBLOB="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"], 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 6.995852444s ago: executing program 3 (id=1159): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x3, 0x3, 0x1, 0x1ffe0, 0x7f, 0x7, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xaf, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x10001, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x5, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x400000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefd0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"57f475c61457e99f769f5235b668e09caf9941b9b26b2fb80cf70643d6ff9594", 0x3ff, 0x23, 0xc130, 0xd5e9, 0x401}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket(0xa, 0x2, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0xc4142, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000040)={@_si_pad}, 0x20f5, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x8000000000000001, 0x1, 0x3, 0x1, 0x501, 0xfff, 0x3, 0x3, 0x3, 0xc, 0xfffffffffffffffb}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x4, 0x2, 0xb, 0x2}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) 6.974828675s ago: executing program 9 (id=1160): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x141041, 0x0) write$auto(r1, &(0x7f0000001340)='\x04\"\x8e U\x00\x00\x00\xb8\n08\xc6\xb05>ha9\x89|e\x00\x00\x00\xa8%\xdc~kD\xa1\x1b\xc3\xe4\xc7\x89\x0e\xd4\x88\xac\x95\xacS\xe9$\xe7*\xcd\x8b\x9b\xd0o\xc7\xd8\xf7\x8a@%\x1d\xf8b\x14[H\xa2` \xb2\xef\xd7\xac\xfak\xb7\x02\x00}\xbcv\xfc\xe6\xbf\x14\x82jO\xde\xda\xda\x929\xd3\x04\xd0\xa2\xa0\xa6\xcb\x86\x15\xac\xcc\xf8\xa2\x01Z\x83`\xa1d\xedj8\x1e\xcc\x0fD\xa4\xe3\xa5\xba\xf9\xbe\x85\f\xbbrY\xb9\xc77\xd9d\xb5\x16\xc1\xe9\xe5\xc8X_\xefPG\x86=\x17>3\xb2\xdd\xbd\xa9\xe4R\x9c\xb0j[\"\f\xfb\tNz\xf4X]\xb90\x1c\xc3\x91jd\xe9\xb9\x87I\x19\xe4\x16\xa4\xad\xdcJ\xe4\x00\xd03/\x13,3\x87K\xd0J\xbb\xb9B\xff\xd9\xf1\xed\x04\xeb\x8d\x92\xa7-\x91\x8ai\xc6j\xeb\x90#1\x1d\xfd\xa3\xfeO\xcc\xe0\xe5\x1d\x8e\xedd\f,\t\xd8\x10Ho.z4\'\xe2\xad`\x94\xa6\xa2\xb2\xd6zMB\xf5\xcd\r7MO\x8f\xbc7%\xf1\xbbxB\xb4q\xa0\xe1-\x1c\xa2\xeb\xc0C\x04\x00\xfcG\xb6\x1e\x82\xaao\x1a\xa7\xbdw\x8b\xe6\bI\xfc\xa1\a\"\xe6\xc7z\xac\xe6\xce\xe34\x16\x9bdp\xb9\x02R\b\x83\x95\xde\x93\x12hP\xcbr6F\x84\xa7sf\xea\x8a\x1aee\xa4\xd0~\x00IC\xefT\xdc_G=]\xa3\xcb\xe0\x9f\n\xc5%\xe8PT\x87\xa4\xf3?0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080f4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x27) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a401, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x5, 0x63, 0x0, 0x0, 0x0, 0x49, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xfffffffffffffffe, 0x2, 0x19, 0x2000000000d, 0x7}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) getpid() 4.765743344s ago: executing program 0 (id=1163): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xb, 0xa, 0x300) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x3, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x71ffffd) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2a, 0x2, 0x1) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/igmp\x00', 0x1050c0, 0x0) pread64$auto(r0, 0x0, 0xad5, 0x8000000004000fd) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendfile$auto(0x1, r2, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x400008, 0x2, 0x2000000009b72, 0xffffffffffffffff, 0x1fff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) epoll_create$auto(0x2) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000040)={0x221020700, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 4.205844319s ago: executing program 3 (id=1164): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x5ba6, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x200004020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13002cbd7000dddbdf251700000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x1, 0x9, 0xc98c20c, 0x3e, 0x93f, 0x1fee5, 0x3, 0x200006, 0x2, 0x202, 0x5, 0x8008, 0x4, 0xb0, 0x9, 0x1, 0x3, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x1, 0x7fffff7f, 0x3ff, 0xfffffffffffffffe, 0x9, 0x0, 0x2d26, 0x9, 0x2, 0x0, 0x9, 0x4, 0x8f0, 0x4, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x80000000000000, 0x9, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff, 0x10, 0x4, 0x2000000000000000, 0xd, 0xc, 0x0, 0x8, 0x0, 0x0, 0x400, 0xfffffffffffffff9]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x3, 0x1) mbind$auto(0x5, 0xd, 0x7, &(0x7f0000000100)=0x5, 0x44c, 0xff) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r4, 0x80044dfb, &(0x7f0000000080)="177862cefab215dc88ca7b435eb021e3b4f6ef126b903f13cff64bc1b0064f25214da3db9298f06c79ff47f1c7b8fe5647ab744168f9bacaf0db0021da9527cc5cf955058dd909c12ebd64e644af672acf380b8e9852f987dee2cc62f928cd723d83fce53e4cf79f4be19c8d85918c900ab287c7b866ca9cf78521") r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000003c0), r2) sendmsg$auto_IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r6, @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x0) r7 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x169a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r7, &(0x7f00000005c0)='Y', 0x1) ioctl$auto(0x3, 0xae41, r5) 3.805338605s ago: executing program 9 (id=1166): unshare$auto(0x40000080) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mmap$auto(0xffdff7fffffffa35, 0x2020004, 0xffff, 0x1c, r0, 0xffffffff) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0x0, 0x6) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/free_buffer\x00', 0x20103, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) mmap$auto(0x1, 0x2020009, 0x2, 0xeb0, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x801, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) timer_delete$auto(0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) fanotify_init$auto(0x5, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1085, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 2.805266758s ago: executing program 0 (id=1167): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0) prctl$auto_PR_SET_TIMERSLACK(0x1d, 0x0, 0x3, 0x0, 0xfa) r0 = socket(0x23, 0x80805, 0x0) listen$auto(r0, 0x4) r1 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, 0x0, 0x91) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x14c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x12e, 0x75, 0x0, 0x1, [@typed={0x14, 0x158, 0x0, 0x0, @ipv6=@private0}, @generic="dc20f92d7c77a73a85a95d671c0c9d95064257eb885dfd0c6dc11fee01367b5e734f2efb99838076c59e9027d1d84412286616569b2de1f5ab49fbaa9ba0f3ab4e55cc0d2b31426fb12a47a0849382c04baf128c2551ca9c40b502c56730ad00e10554b994bd261b8727143529453b35dc0fa6025415f9a3554720878246f9cdb93ce05038606e39a85670df10169194b75491cc6a07f6aad6078f82d2ef752a556d12ba4d4a", @nested={0x5d, 0xc4, 0x0, 0x1, [@nested={0x4, 0x94}, @nested={0x4, 0x43}, @generic="e244db8bcd19cbda3c5f44734a7a02352ebbeccbab8b09b00ad9b1566906595c02fd056e79f9ee22ddc8ad9fa19881838f73a0719ba13a53df274b88828ff0eba47ad38ad8d4da4c51c15ef52cb8219390"]}, @nested={0x8, 0x60, 0x0, 0x1, [@nested={0x4, 0xa8}]}, @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@remote}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x42880}, 0x40000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) poll$auto(&(0x7f0000000000)={r0, 0x1963, 0x81}, 0x5, 0x10001) socket(0x25, 0x1, 0x2) r5 = syz_clone(0x20008000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0x8, 0xd, 0x6, @_rt={r5, 0x0, @sival_int=0x9}}}) capset$auto(&(0x7f0000000040)={0x800, r5}, &(0x7f0000000080)={0x8, 0x5, 0xf2}) 2.805094269s ago: executing program 3 (id=1168): r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="142c007ce22db95a1e9206f91ac00000686ea5156d4cf702b18bc9b65750c186c791bb175d06a67662daf15559252aa50b12d280603236a12f9752a7525077e875db5adef5ba321d5c09a96451e2df90437da6087551e34431987e2a9d5ac5625b3aa33fe2d80e7c77ea5878aeba272a38254e75b63fc5e693bcbf201b0ffcf1d860ca4f028d1c845f0940ccaef5beef6530f79299d95f4bf3794c7afab3f4c673236e7decaf6975", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) sendfile$auto(r3, r3, 0x0, 0x43) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0xa, 0x3, 0x3b) landlock_create_ruleset$auto(0x0, 0x800, 0x80002) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x9) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000004c0), r4) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4000081) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x4, 0x0, 0x7f) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x20, 0x100, 0x7f, 0x101, 0xfff, 0x2000}, {0x100, 0x1, 0x0, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) io_uring_register$auto_IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000280)="ebdcfff6924e84e898ca4ee36a8549d642ba108a930f66fef7655f924ae7d4103ea4c0d9308bd916caa23f9aad04316e94afb8c953fe18de4e9d85a215bb79eceda3640e726b16b46e52e67a4e958d6f66bbe66d7a4129763b4f7cb24e59ce1f7e40f125fe15f5d0c830dc28b687d8b0e28bf883922e11964944173dbffdea9a1f1927ddf6c55fec38e605c7c0f3f32acc1ef85de2da14d16d0b6302a966902795f030ef3b", 0x5) madvise$auto(0x0, 0x2003f0, 0x15) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x200, 0x4}, 0x0) 2.518417497s ago: executing program 9 (id=1169): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000240), r1) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x28040005}, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 1.445788434s ago: executing program 3 (id=1170): r0 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0x4, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c) close_range$auto(r0, r0, 0xffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dmmidi2\x00', 0x200201, 0x0) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r3, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) pread64$auto(r2, 0x0, 0xffffff7f, 0x8000000000009) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x5, 0x0, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/eql/statistics/tx_carrier_errors\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/45, 0x2d) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0xdd}) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, 0x0, 0x10080, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="2000340083fe1775855bc29daa17a6a9436da2edcaf3344ea069692806004f010000000008002600d0050000080035010700000004001e01"], 0x2ec}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) fchdir$auto(r6) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000280)=@batch={0x8000000000000001, 0x7, 0x6, 0x3ff, 0x8001, r1, 0x3ff}, 0x8) io_uring_setup$auto(0x5, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/kpagecgroup\x00', 0x20000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x24040004) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 1.036088511s ago: executing program 9 (id=1171): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x54) writev$auto(0xffffffffffffffff, 0x0, 0x3) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x40802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0xaa340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/43, 0x2b) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x600347, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r3 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xcb000, 0x9, 0xfffffff7, 0x41, 0x65b, 0x1ffde, 0x7, 0x3, 0x2, 0x7, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x1, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x200, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x200080, 0x41) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) read$auto(r3, 0x0, 0x3) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x20, 0x400108, 0x2, 0x14, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(0xffffffffffffffff, 0xf777, 0x7ffffffa, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) statmount$auto(0x0, &(0x7f0000000380)={0x40a, 0x1, 0x44f, 0x9, 0x1, 0x1007181, 0x5, 0x807, 0x400000007, 0x7, 0x10001, 0x26, 0x4, 0x200000000001, 0x6, 0x3, 0x500000000000000, 0x0, 0x30, 0xfffffffffffffffe, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x80084, 0x3, 0x0, 0xc6, 0x0, 0x0, [0x12d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc]}, 0x9, 0xd) 614.258931ms ago: executing program 3 (id=1172): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0050000", @ANYRES16=r4, @ANYBLOB="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"], 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 609.594598ms ago: executing program 0 (id=1173): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0x99) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x2400004c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x55, 0x9, r2, 0x0) unshare$auto(0x40000080) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x560f, r4) 349.949953ms ago: executing program 9 (id=1174): madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_ptr=0x0, @inferred, 0x2, @_sigev_thread={0x0, 0x0}}) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x7, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 0s ago: executing program 0 (id=1175): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\v\f\t\x00\x00\x00\x00\x00\x00\x00\xac.X_|\xc8R\x99!\xd2\x14\xff\xa7\xe4&#sn\x91p\xe6\x1e\x00\x1f8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\xce\xef\xd8!\x8e\xcf\xcd\xb3\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'I\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x06n\xb1\xcb\x1f\xbe\x1f\t\xfe\xaa\xb4\xa9{\xd8\xbez\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\xbc\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87M\x80X\x1ak7g\xff\x04\xb6R\xa5X\x02\xcaG\x96?9\xf1\t\x005\x8d7B\xd8$\xf7\xc6\xdb[\"p\xf4\x11\n\xcb\xfd\x1e', 0x52, 0x5228) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7ffffff9, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r4) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67be, 0x7ff) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x8, 0xfffffffffffffff7, 0x7, 0xffffffff, r1, 0x66) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fbdbdf250700000004000380080043800400038004000280"], 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) chroot$auto(&(0x7f0000000180)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00') kernel console output (not intermixed with test programs): 74300][ T7475] ? do_raw_spin_unlock+0x145/0x1e0 [ 169.574329][ T7475] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 169.574368][ T7475] ? trace_hrtimer_start+0x79/0x230 [ 169.574389][ T7475] ? hrtimer_start_range_ns+0x860/0x1a50 [ 169.574414][ T7475] ? __lock_acquire+0x4a5/0x2630 [ 169.574442][ T7475] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 169.574469][ T7475] blkdev_direct_IO+0xc76/0x1fb0 [ 169.574501][ T7475] ? find_held_lock+0x2b/0x80 [ 169.574523][ T7475] ? aa_file_perm+0x7e4/0x14d0 [ 169.574549][ T7475] ? aa_file_perm+0x7e4/0x14d0 [ 169.574577][ T7475] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 169.574605][ T7475] ? aa_file_perm+0x7f3/0x14d0 [ 169.574633][ T7475] ? filemap_check_errors+0xa9/0x150 [ 169.574656][ T7475] ? filemap_write_and_wait_range.part.0+0x60/0x110 [ 169.574688][ T7475] blkdev_read_iter+0x225/0x4f0 [ 169.574720][ T7475] do_iter_readv_writev+0x60d/0x920 [ 169.574741][ T7475] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 169.574764][ T7475] ? bpf_lsm_file_permission+0x9/0x10 [ 169.574780][ T7475] ? security_file_permission+0x76/0x210 [ 169.574805][ T7475] ? rw_verify_area+0xce/0x6d0 [ 169.574825][ T7475] vfs_readv+0x4d3/0x8d0 [ 169.574849][ T7475] ? __pfx_vfs_readv+0x10/0x10 [ 169.574883][ T7475] ? __fget_files+0x21f/0x3d0 [ 169.574910][ T7475] ? do_readv+0x13e/0x340 [ 169.574927][ T7475] do_readv+0x13e/0x340 [ 169.574946][ T7475] ? __pfx_do_readv+0x10/0x10 [ 169.574965][ T7475] ? exit_to_user_mode_loop+0xf3/0x670 [ 169.574997][ T7475] __x64_sys_preadv2+0x11f/0x160 [ 169.575022][ T7475] do_syscall_64+0x115/0x840 [ 169.575046][ T7475] ? clear_bhb_loop+0x40/0x90 [ 169.575068][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.575087][ T7475] RIP: 0033:0x7f7ee139ce59 [ 169.575104][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.575120][ T7475] RSP: 002b:00007f7ee22ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 169.575139][ T7475] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139ce59 [ 169.575150][ T7475] RDX: 0000000000000006 RSI: 0000200000000380 RDI: 0000000000000002 [ 169.575160][ T7475] RBP: 00007f7ee1432d6f R08: 0008000000000000 R09: 0000000000000007 [ 169.575170][ T7475] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 169.575181][ T7475] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffe9c45c638 [ 169.575203][ T7475] [ 170.189530][ T6520] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.917002][ T7697] syz.1.343 (7697): /proc/7694/oom_adj is deprecated, please use /proc/7694/oom_score_adj instead. [ 174.156275][ T7697] FAULT_INJECTION: forcing a failure. [ 174.156275][ T7697] name failslab, interval 1, probability 0, space 0, times 0 [ 174.181380][ T7697] CPU: 0 UID: 0 PID: 7697 Comm: syz.1.343 Not tainted syzkaller #0 PREEMPT(full) [ 174.181419][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.181436][ T7697] Call Trace: [ 174.181446][ T7697] [ 174.181457][ T7697] dump_stack_lvl+0x100/0x190 [ 174.181511][ T7697] should_fail_ex.cold+0x5/0xa [ 174.181546][ T7697] ? fib_default_rule_add+0x4f/0x420 [ 174.181582][ T7697] should_failslab+0xc2/0x120 [ 174.181617][ T7697] __kmalloc_noprof+0xe0/0x850 [ 174.181654][ T7697] fib_default_rule_add+0x4f/0x420 [ 174.181681][ T7697] fib4_rules_init+0xa6/0x1c0 [ 174.181700][ T7697] fib_net_init+0x1dc/0x3f0 [ 174.181723][ T7697] ? is_module_address+0x69/0xf0 [ 174.181740][ T7697] ? __pfx_fib_net_init+0x10/0x10 [ 174.181764][ T7697] ? timer_init_key+0x155/0x330 [ 174.181796][ T7697] ? devinet_init_net+0x56c/0x8d0 [ 174.181824][ T7697] ? __pfx_fib_net_init+0x10/0x10 [ 174.181847][ T7697] ops_init+0x1e2/0x5f0 [ 174.181869][ T7697] setup_net+0x118/0x3a0 [ 174.181890][ T7697] ? __pfx_setup_net+0x10/0x10 [ 174.181910][ T7697] ? mutex_init_lockdep+0xf1/0x120 [ 174.181933][ T7697] copy_net_ns+0x46f/0x7c0 [ 174.181958][ T7697] create_new_namespaces+0x3ea/0xac0 [ 174.181986][ T7697] unshare_nsproxy_namespaces+0xf2/0x220 [ 174.182011][ T7697] ksys_unshare+0x438/0xab0 [ 174.182039][ T7697] ? __pfx_ksys_unshare+0x10/0x10 [ 174.182073][ T7697] __x64_sys_unshare+0x31/0x40 [ 174.182098][ T7697] do_syscall_64+0x115/0x840 [ 174.182124][ T7697] ? clear_bhb_loop+0x40/0x90 [ 174.182145][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.182164][ T7697] RIP: 0033:0x7f623d39ce59 [ 174.182180][ T7697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.182196][ T7697] RSP: 002b:00007f623e1a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 174.182214][ T7697] RAX: ffffffffffffffda RBX: 00007f623d615fa0 RCX: 00007f623d39ce59 [ 174.182226][ T7697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 174.182237][ T7697] RBP: 00007f623d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 174.182247][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.182258][ T7697] R13: 00007f623d616038 R14: 00007f623d615fa0 R15: 00007ffd79f7c588 [ 174.182289][ T7697] [ 175.330685][ T7761] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input6 [ 176.101842][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 178.332762][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 178.786533][ T8014] vivid-009: ================= START STATUS ================= [ 178.817912][ T8014] vivid-009: RDS Tx I/O Mode: Controls [ 178.845466][ T8014] vivid-009: RDS Program ID: 32904 [ 178.866881][ T8014] vivid-009: RDS Program Type: 3 [ 178.885619][ T8014] vivid-009: RDS PS Name: VIVID-TX [ 178.903007][ T8014] vivid-009: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 178.946425][ T8014] vivid-009: RDS Stereo: true [ 178.960190][ T8014] vivid-009: RDS Artificial Head: false [ 178.984778][ T8014] vivid-009: RDS Compressed: false [ 179.001598][ T8014] vivid-009: RDS Dynamic PTY: false [ 179.031234][ T8014] vivid-009: RDS Traffic Announcement: false [ 179.057268][ T8014] vivid-009: RDS Traffic Program: true [ 179.063162][ T8014] vivid-009: RDS Music: true [ 179.078735][ T8014] vivid-009: ================== END STATUS ================== [ 180.641210][ T8066] netlink: 'syz.1.372': attribute type 3 has an invalid length. [ 180.683593][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 180.724518][ T8066] capability: warning: `syz.1.372' uses 32-bit capabilities (legacy support in use) [ 180.904944][ T8050] FAULT_INJECTION: forcing a failure. [ 180.904944][ T8050] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.962386][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.0.366 Not tainted syzkaller #0 PREEMPT(full) [ 180.962426][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.962443][ T8050] Call Trace: [ 180.962453][ T8050] [ 180.962465][ T8050] dump_stack_lvl+0x100/0x190 [ 180.962521][ T8050] should_fail_ex.cold+0x5/0xa [ 180.962561][ T8050] _copy_from_user+0x2e/0xd0 [ 180.962606][ T8050] restore_sigcontext+0xcd/0x6a0 [ 180.962661][ T8050] ? __pfx_restore_sigcontext+0x10/0x10 [ 180.962733][ T8050] ? __pfx_restore_altstack+0x10/0x10 [ 180.962794][ T8050] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.962833][ T8050] ? lockdep_hardirqs_on+0x78/0x100 [ 180.962883][ T8050] __do_sys_rt_sigreturn+0x229/0x2c0 [ 180.962934][ T8050] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 180.962979][ T8050] ? exit_to_user_mode_loop+0xf3/0x670 [ 180.963032][ T8050] ? rcu_is_watching+0x12/0xc0 [ 180.963073][ T8050] do_syscall_64+0x115/0x840 [ 180.963115][ T8050] ? clear_bhb_loop+0x40/0x90 [ 180.963152][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.963183][ T8050] RIP: 0033:0x7f7ee133e1d9 [ 180.963209][ T8050] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 180.963237][ T8050] RSP: 002b:00007f7ee2298a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 180.963266][ T8050] RAX: ffffffffffffffda RBX: 00007f7ee1616090 RCX: 00007f7ee133e1d9 [ 180.963286][ T8050] RDX: 00007f7ee2298a80 RSI: 00007f7ee2298bb0 RDI: 0000000000000011 [ 180.963304][ T8050] RBP: 00007f7ee1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 180.963321][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.963338][ T8050] R13: 00007f7ee1616128 R14: 00007f7ee1616090 R15: 00007ffe9c45c638 [ 180.963379][ T8050] [ 184.391775][ T8203] blktrace: Concurrent blktraces are not allowed on sg0 [ 187.229020][ T5632] Bluetooth: hci1: unexpected event 0x10 length: 124 > 1 [ 187.231139][ T5643] Bluetooth: hci1: hardware error 0x00 [ 188.751840][ T8385] ubi0: attaching mtd0 [ 188.880042][ T8385] ubi0: scanning is finished [ 188.902662][ T8385] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 189.370148][ T8385] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 189.412928][ T5643] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 191.290096][ T8345] Process accounting paused [ 193.219586][ T8631] futex_wake_op: syz.3.404 tries to shift op by -2048; fix this program [ 194.530934][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548371][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.876715][ T8709] binder: BINDER_SET_CONTEXT_MGR already set [ 194.907163][ T8709] binder: 8708:8709 ioctl 40046207 0 returned -16 [ 197.965749][ T8829] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 197.965749][ T8829] program syz.1.422 not setting count and/or reply_len properly [ 199.678545][ T30] audit: type=1800 audit(1780044970.448:3): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.430" name=22050820 dev="tmpfs" ino=561 res=0 errno=0 [ 200.839112][ T8895] kexec: Could not allocate control_code_buffer [ 203.054820][ T9075] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 203.054820][ T9075] program syz.0.441 not setting count and/or reply_len properly [ 205.582997][ T9197] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 205.582997][ T9197] program syz.0.451 not setting count and/or reply_len properly [ 206.857994][ T9129] Bluetooth: hci3: command 0x0406 tx timeout [ 206.864941][ T9128] Bluetooth: hci0: command 0x0406 tx timeout [ 206.874271][ T9129] Bluetooth: hci2: command 0x0406 tx timeout [ 207.949247][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 213.131063][ T9571] blktrace: Concurrent blktraces are not allowed on sg0 [ 214.721319][ T9627] netlink: 334 bytes leftover after parsing attributes in process `syz.1.498'. [ 214.832527][ T30] audit: type=1800 audit(1780044985.598:4): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.491" name="lu_gp_id" dev="configfs" ino=19222 res=0 errno=0 [ 215.001356][ T9647] sg_write: data in/out 262108/1 bytes for SCSI command 0xbf-- guessing data in; [ 215.001356][ T9647] program syz.1.492 not setting count and/or reply_len properly [ 217.680177][ T9852] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 217.680177][ T9852] program syz.0.504 not setting count and/or reply_len properly [ 222.904106][T10157] Process accounting resumed [ 224.029948][T10394] FAULT_INJECTION: forcing a failure. [ 224.029948][T10394] name failslab, interval 1, probability 0, space 0, times 0 [ 224.066764][T10394] CPU: 1 UID: 0 PID: 10394 Comm: syz.1.524 Not tainted syzkaller #0 PREEMPT(full) [ 224.066803][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.066814][T10394] Call Trace: [ 224.066821][T10394] [ 224.066828][T10394] dump_stack_lvl+0x100/0x190 [ 224.066863][T10394] should_fail_ex.cold+0x5/0xa [ 224.066887][T10394] should_failslab+0xc2/0x120 [ 224.066909][T10394] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 224.066938][T10394] ? vm_area_dup+0x27/0x8e0 [ 224.066962][T10394] ? is_bpf_text_address+0x8a/0x1a0 [ 224.066986][T10394] ? is_bpf_text_address+0x8a/0x1a0 [ 224.067013][T10394] vm_area_dup+0x27/0x8e0 [ 224.067041][T10394] __split_vma+0x18c/0xda0 [ 224.067068][T10394] ? unwind_get_return_address+0x59/0xa0 [ 224.067097][T10394] ? arch_stack_walk+0xa6/0xf0 [ 224.067130][T10394] ? __pfx___split_vma+0x10/0x10 [ 224.067170][T10394] ? stack_trace_save+0x8e/0xc0 [ 224.067199][T10394] vma_modify+0x12ad/0x25c0 [ 224.067227][T10394] ? __pfx_kasan_save_stack+0x1/0x10 [ 224.067252][T10394] ? __pfx_vma_modify+0x10/0x10 [ 224.067276][T10394] ? lock_acquire+0x1b1/0x370 [ 224.067305][T10394] ? find_held_lock+0x2b/0x80 [ 224.067326][T10394] ? clockevents_program_event+0x23e/0x820 [ 224.067346][T10394] ? clockevents_program_event+0x23e/0x820 [ 224.067376][T10394] vma_modify_flags+0x257/0x3d0 [ 224.067405][T10394] ? __pfx_vma_modify_flags+0x10/0x10 [ 224.067433][T10394] ? debug_object_activate+0x331/0x490 [ 224.067467][T10394] ? timerqueue_linked_add+0x260/0x430 [ 224.067490][T10394] madvise_update_vma+0x21c/0xce0 [ 224.067516][T10394] ? __pfx_madvise_update_vma+0x10/0x10 [ 224.067554][T10394] madvise_vma_behavior+0x2a3/0x2240 [ 224.067581][T10394] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 224.067620][T10394] ? find_vma_prev+0xd8/0x150 [ 224.067641][T10394] ? futex_unqueue+0x133/0x2c0 [ 224.067658][T10394] ? __pfx_find_vma_prev+0x10/0x10 [ 224.067686][T10394] ? __futex_wait+0x256/0x300 [ 224.067713][T10394] madvise_walk_vmas+0x2fe/0xa90 [ 224.067742][T10394] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 224.067774][T10394] madvise_do_behavior+0x1ea/0x510 [ 224.067800][T10394] ? __pfx_madvise_do_behavior+0x10/0x10 [ 224.067832][T10394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.067862][T10394] do_madvise+0x195/0x240 [ 224.067886][T10394] ? __pfx_do_madvise+0x10/0x10 [ 224.067909][T10394] ? do_futex+0x192/0x350 [ 224.067931][T10394] ? __fget_files+0x21f/0x3d0 [ 224.067967][T10394] __x64_sys_madvise+0xa9/0x110 [ 224.067990][T10394] ? lockdep_hardirqs_on+0x78/0x100 [ 224.068016][T10394] do_syscall_64+0x115/0x840 [ 224.068041][T10394] ? clear_bhb_loop+0x40/0x90 [ 224.068062][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.068081][T10394] RIP: 0033:0x7f623d39ce59 [ 224.068100][T10394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.068117][T10394] RSP: 002b:00007f623e187028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 224.068139][T10394] RAX: ffffffffffffffda RBX: 00007f623d616090 RCX: 00007f623d39ce59 [ 224.068150][T10394] RDX: 000000000000000a RSI: 0000000000000008 RDI: 000000110c230000 [ 224.068161][T10394] RBP: 00007f623d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 224.068171][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.068181][T10394] R13: 00007f623d616128 R14: 00007f623d616090 R15: 00007ffd79f7c588 [ 224.068204][T10394] [ 224.532698][T10409] netlink: 246 bytes leftover after parsing attributes in process `syz.2.526'. [ 226.993472][T10514] FAULT_INJECTION: forcing a failure. [ 226.993472][T10514] name failslab, interval 1, probability 0, space 0, times 0 [ 227.049412][T10514] CPU: 1 UID: 0 PID: 10514 Comm: syz.1.535 Not tainted syzkaller #0 PREEMPT(full) [ 227.049439][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.049449][T10514] Call Trace: [ 227.049456][T10514] [ 227.049464][T10514] dump_stack_lvl+0x100/0x190 [ 227.049500][T10514] should_fail_ex.cold+0x5/0xa [ 227.049523][T10514] should_failslab+0xc2/0x120 [ 227.049545][T10514] __kmalloc_cache_noprof+0x7a/0x6f0 [ 227.049572][T10514] ? snd_seq_timer_new+0x42/0x190 [ 227.049595][T10514] snd_seq_timer_new+0x42/0x190 [ 227.049615][T10514] snd_seq_queue_alloc+0x177/0x540 [ 227.049646][T10514] snd_seq_ioctl_create_queue+0xa9/0x370 [ 227.049668][T10514] call_seq_client_ctl+0xa3/0x130 [ 227.049691][T10514] snd_seq_kernel_client_ctl+0x77/0xd0 [ 227.049715][T10514] alloc_seq_queue+0xdb/0x180 [ 227.049737][T10514] ? __pfx_alloc_seq_queue+0x10/0x10 [ 227.049773][T10514] ? find_held_lock+0x2b/0x80 [ 227.049801][T10514] ? mark_held_locks+0x40/0x70 [ 227.049831][T10514] snd_seq_oss_open+0x2b2/0xa10 [ 227.049859][T10514] odev_open+0x6f/0x90 [ 227.049879][T10514] ? __pfx_odev_open+0x10/0x10 [ 227.049899][T10514] soundcore_open+0x2e3/0x5a0 [ 227.049927][T10514] ? __pfx_soundcore_open+0x10/0x10 [ 227.049949][T10514] chrdev_open+0x234/0x6a0 [ 227.049971][T10514] ? __pfx_apparmor_file_open+0x10/0x10 [ 227.049991][T10514] ? __pfx_chrdev_open+0x10/0x10 [ 227.050015][T10514] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 227.050044][T10514] do_dentry_open+0x6ab/0x14d0 [ 227.050065][T10514] ? __pfx_chrdev_open+0x10/0x10 [ 227.050093][T10514] vfs_open+0x82/0x3f0 [ 227.050121][T10514] path_openat+0x208c/0x31a0 [ 227.050152][T10514] ? __pfx_path_openat+0x10/0x10 [ 227.050183][T10514] do_file_open+0x20e/0x430 [ 227.050207][T10514] ? __pfx_do_file_open+0x10/0x10 [ 227.050246][T10514] ? alloc_fd+0x476/0x790 [ 227.050270][T10514] ? do_getname+0x191/0x390 [ 227.050298][T10514] do_sys_openat2+0x10d/0x1e0 [ 227.050326][T10514] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.050361][T10514] __x64_sys_openat+0x12d/0x210 [ 227.050389][T10514] ? __pfx___x64_sys_openat+0x10/0x10 [ 227.050423][T10514] ? exit_to_user_mode_loop+0xf3/0x670 [ 227.050455][T10514] ? rcu_is_watching+0x12/0xc0 [ 227.050483][T10514] do_syscall_64+0x115/0x840 [ 227.050520][T10514] ? clear_bhb_loop+0x40/0x90 [ 227.050555][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.050582][T10514] RIP: 0033:0x7f623d39ce59 [ 227.050598][T10514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.050615][T10514] RSP: 002b:00007f623e1a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.050633][T10514] RAX: ffffffffffffffda RBX: 00007f623d615fa0 RCX: 00007f623d39ce59 [ 227.050644][T10514] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 227.050655][T10514] RBP: 00007f623d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 227.050665][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.050675][T10514] R13: 00007f623d616038 R14: 00007f623d615fa0 R15: 00007ffd79f7c588 [ 227.050697][T10514] [ 228.730486][T10597] hub 1-0:1.0: USB hub found [ 228.752728][T10597] hub 1-0:1.0: 1 port detected [ 228.763482][T10597] FAULT_INJECTION: forcing a failure. [ 228.763482][T10597] name failslab, interval 1, probability 0, space 0, times 0 [ 228.777336][T10597] CPU: 1 UID: 0 PID: 10597 Comm: syz.1.539 Not tainted syzkaller #0 PREEMPT(full) [ 228.777375][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.777390][T10597] Call Trace: [ 228.777399][T10597] [ 228.777411][T10597] dump_stack_lvl+0x100/0x190 [ 228.777462][T10597] should_fail_ex.cold+0x5/0xa [ 228.777498][T10597] should_failslab+0xc2/0x120 [ 228.777531][T10597] __kmalloc_cache_noprof+0x7a/0x6f0 [ 228.777568][T10597] ? device_add+0xd3a/0x1950 [ 228.777598][T10597] ? __pfx___debug_object_init+0x10/0x10 [ 228.777631][T10597] ? do_raw_spin_lock+0x128/0x260 [ 228.777667][T10597] device_add+0xd3a/0x1950 [ 228.777696][T10597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.777732][T10597] ? lockdep_init_map_type+0x5c/0x250 [ 228.777759][T10597] ? __pfx_device_add+0x10/0x10 [ 228.777787][T10597] ? lockdep_init_map_type+0x5c/0x250 [ 228.777815][T10597] ? __init_waitqueue_head+0xca/0x150 [ 228.777858][T10597] usb_hub_create_port_device+0x3c6/0xe60 [ 228.777915][T10597] hub_probe.cold+0x2974/0x2ed5 [ 228.777959][T10597] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.777991][T10597] ? __pfx_hub_probe+0x10/0x10 [ 228.778027][T10597] ? _raw_spin_lock_irqsave+0x52/0x60 [ 228.778071][T10597] ? mark_held_locks+0x40/0x70 [ 228.778112][T10597] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 228.778152][T10597] usb_probe_interface+0x303/0x8f0 [ 228.778194][T10597] ? __pfx_usb_probe_interface+0x10/0x10 [ 228.778231][T10597] really_probe+0x241/0xa60 [ 228.778278][T10597] __driver_probe_device+0x22e/0x480 [ 228.778323][T10597] driver_probe_device+0x4c/0x1b0 [ 228.778367][T10597] __device_attach_driver+0x1df/0x340 [ 228.778412][T10597] ? __pfx___device_attach_driver+0x10/0x10 [ 228.778454][T10597] bus_for_each_drv+0x159/0x1e0 [ 228.778491][T10597] ? __pfx_bus_for_each_drv+0x10/0x10 [ 228.778527][T10597] ? lockdep_hardirqs_on+0x78/0x100 [ 228.778563][T10597] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 228.778604][T10597] __device_attach+0x1e4/0x4d0 [ 228.778631][T10597] ? __pfx___device_attach+0x10/0x10 [ 228.778675][T10597] ? do_raw_spin_unlock+0x145/0x1e0 [ 228.778715][T10597] device_initial_probe+0xaf/0xd0 [ 228.778743][T10597] bus_probe_device+0x64/0x160 [ 228.778786][T10597] device_add+0x1210/0x1950 [ 228.778821][T10597] ? __pfx_device_add+0x10/0x10 [ 228.778853][T10597] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 228.778912][T10597] usb_set_configuration+0xd97/0x1c60 [ 228.778974][T10597] bConfigurationValue_store+0x103/0x180 [ 228.779011][T10597] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 228.779046][T10597] ? find_held_lock+0x2b/0x80 [ 228.779078][T10597] ? sysfs_file_kobj+0xe4/0x290 [ 228.779121][T10597] ? sysfs_file_kobj+0xe4/0x290 [ 228.779167][T10597] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 228.779200][T10597] dev_attr_store+0x58/0x80 [ 228.779232][T10597] ? __pfx_dev_attr_store+0x10/0x10 [ 228.779261][T10597] sysfs_kf_write+0xf2/0x150 [ 228.779292][T10597] kernfs_fop_write_iter+0x3e0/0x5f0 [ 228.779332][T10597] ? __pfx_sysfs_kf_write+0x10/0x10 [ 228.779383][T10597] iter_file_splice_write+0x830/0x10a0 [ 228.779445][T10597] ? __pfx_iter_file_splice_write+0x10/0x10 [ 228.779491][T10597] ? __pfx_copy_splice_read+0x10/0x10 [ 228.779552][T10597] ? __pfx_iter_file_splice_write+0x10/0x10 [ 228.779595][T10597] direct_splice_actor+0x192/0x6c0 [ 228.779639][T10597] splice_direct_to_actor+0x345/0xa30 [ 228.779683][T10597] ? __pfx_direct_splice_actor+0x10/0x10 [ 228.779728][T10597] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 228.779786][T10597] do_splice_direct+0x174/0x240 [ 228.779827][T10597] ? __pfx_do_splice_direct+0x10/0x10 [ 228.779867][T10597] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 228.779920][T10597] ? rw_verify_area+0xce/0x6d0 [ 228.779952][T10597] do_sendfile+0xadc/0xe20 [ 228.779994][T10597] ? __pfx_do_sendfile+0x10/0x10 [ 228.780032][T10597] ? __x64_sys_futex+0x34f/0x4d0 [ 228.780059][T10597] ? __x64_sys_futex+0x358/0x4d0 [ 228.780095][T10597] __x64_sys_sendfile64+0x1d8/0x220 [ 228.780139][T10597] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 228.780182][T10597] ? rcu_is_watching+0x12/0xc0 [ 228.780222][T10597] do_syscall_64+0x115/0x840 [ 228.780262][T10597] ? clear_bhb_loop+0x40/0x90 [ 228.780299][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.780329][T10597] RIP: 0033:0x7f623d39ce59 [ 228.780355][T10597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.780382][T10597] RSP: 002b:00007f623b5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 228.780411][T10597] RAX: ffffffffffffffda RBX: 00007f623d616180 RCX: 00007f623d39ce59 [ 228.780429][T10597] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 228.780445][T10597] RBP: 00007f623d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 228.780462][T10597] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 228.780478][T10597] R13: 00007f623d616218 R14: 00007f623d616180 R15: 00007ffd79f7c588 [ 228.780520][T10597] [ 228.780948][T10597] hub 1-0:1.0: couldn't create port1 device. [ 229.285388][T10597] hub 1-0:1.0: config failed, out of memory (err -12) [ 234.033825][T10969] netlink: 342 bytes leftover after parsing attributes in process `syz.1.561'. [ 234.077818][T10970] netlink: 342 bytes leftover after parsing attributes in process `syz.1.561'. [ 234.490181][T10981] ovs_: entered promiscuous mode [ 234.571696][T10988] futex_wake_op: syz.1.564 tries to shift op by -1; fix this program [ 234.799711][T10995] hub 1-0:1.0: USB hub found [ 234.824022][T10995] hub 1-0:1.0: 1 port detected [ 235.449832][ T30] audit: type=1326 audit(1780045006.218:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.3.566" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b3c19ce59 code=0x0 [ 235.977864][T11067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.570'. [ 236.539173][ T8686] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 236.539316][T11063] vivid-008: ================= START STATUS ================= [ 236.627337][T11063] vivid-008: ================== END STATUS ================== [ 238.610738][ T8686] Bluetooth: hci0: command 0x0406 tx timeout [ 239.024074][T11298] FAULT_INJECTION: forcing a failure. [ 239.024074][T11298] name failslab, interval 1, probability 0, space 0, times 0 [ 239.061353][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.0.581 Not tainted syzkaller #0 PREEMPT(full) [ 239.061393][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.061409][T11298] Call Trace: [ 239.061419][T11298] [ 239.061429][T11298] dump_stack_lvl+0x100/0x190 [ 239.061481][T11298] should_fail_ex.cold+0x5/0xa [ 239.061512][T11298] should_failslab+0xc2/0x120 [ 239.061541][T11298] __kmalloc_cache_noprof+0x7a/0x6f0 [ 239.061579][T11298] ? snd_seq_timer_new+0x42/0x190 [ 239.061610][T11298] snd_seq_timer_new+0x42/0x190 [ 239.061639][T11298] snd_seq_queue_alloc+0x177/0x540 [ 239.061688][T11298] snd_seq_ioctl_create_queue+0xa9/0x370 [ 239.061725][T11298] call_seq_client_ctl+0xa3/0x130 [ 239.061763][T11298] snd_seq_kernel_client_ctl+0x77/0xd0 [ 239.061801][T11298] alloc_seq_queue+0xdb/0x180 [ 239.061840][T11298] ? __pfx_alloc_seq_queue+0x10/0x10 [ 239.061895][T11298] ? find_held_lock+0x2b/0x80 [ 239.061932][T11298] ? mark_held_locks+0x40/0x70 [ 239.061973][T11298] snd_seq_oss_open+0x2b2/0xa10 [ 239.062010][T11298] odev_open+0x6f/0x90 [ 239.062036][T11298] ? __pfx_odev_open+0x10/0x10 [ 239.062063][T11298] soundcore_open+0x2e3/0x5a0 [ 239.062095][T11298] ? __pfx_soundcore_open+0x10/0x10 [ 239.062124][T11298] chrdev_open+0x234/0x6a0 [ 239.062154][T11298] ? __pfx_apparmor_file_open+0x10/0x10 [ 239.062180][T11298] ? __pfx_chrdev_open+0x10/0x10 [ 239.062211][T11298] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 239.062249][T11298] do_dentry_open+0x6ab/0x14d0 [ 239.062277][T11298] ? __pfx_chrdev_open+0x10/0x10 [ 239.062322][T11298] vfs_open+0x82/0x3f0 [ 239.062361][T11298] path_openat+0x208c/0x31a0 [ 239.062402][T11298] ? __pfx_path_openat+0x10/0x10 [ 239.062445][T11298] do_file_open+0x20e/0x430 [ 239.062477][T11298] ? __pfx_do_file_open+0x10/0x10 [ 239.062531][T11298] ? alloc_fd+0x476/0x790 [ 239.062564][T11298] ? do_getname+0x191/0x390 [ 239.062603][T11298] do_sys_openat2+0x10d/0x1e0 [ 239.062642][T11298] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.062691][T11298] __x64_sys_openat+0x12d/0x210 [ 239.062728][T11298] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.062763][T11298] ? exit_to_user_mode_loop+0xf3/0x670 [ 239.062807][T11298] ? rcu_is_watching+0x12/0xc0 [ 239.062841][T11298] do_syscall_64+0x115/0x840 [ 239.062877][T11298] ? clear_bhb_loop+0x40/0x90 [ 239.062907][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.062932][T11298] RIP: 0033:0x7f7ee139ce59 [ 239.062953][T11298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.062975][T11298] RSP: 002b:00007f7ee22ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.062999][T11298] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139ce59 [ 239.063014][T11298] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 239.063028][T11298] RBP: 00007f7ee1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 239.063041][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.063054][T11298] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffe9c45c638 [ 239.063087][T11298] [ 240.686872][ T9127] Bluetooth: hci0: command 0x0406 tx timeout [ 240.738110][T11431] futex_wake_op: syz.3.590 tries to shift op by -2048; fix this program [ 240.770749][T11431] futex_wake_op: syz.3.590 tries to shift op by -2048; fix this program [ 241.707207][T11525] zswap: compressor û not available [ 241.749209][T11521] block2mtd: illegal erase size [ 242.666096][T11602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.599'. [ 242.708578][T11600] netlink: 186 bytes leftover after parsing attributes in process `syz.2.598'. [ 242.742729][T11600] netlink: 186 bytes leftover after parsing attributes in process `syz.2.598'. [ 242.954283][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 243.475898][ T30] audit: type=1800 audit(1780045014.238:6): pid=11654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.607" name="file0" dev="tmpfs" ino=921 res=0 errno=0 [ 243.527327][T11638] vivid-007: ================= START STATUS ================= [ 243.584698][T11638] vivid-007: Generate PTS: true [ 243.634415][T11638] vivid-007: Generate SCR: true [ 243.688402][T11638] tpg source WxH: 320x240 (Y'CbCr) [ 243.728239][T11638] tpg field: 1 [ 243.743092][T11638] tpg crop: (0,0)/320x240 [ 243.776363][T11638] tpg compose: (0,0)/320x240 [ 243.833607][T11638] tpg colorspace: 8 [ 243.863327][T11638] tpg transfer function: 0/0 [ 243.886526][T11638] tpg Y'CbCr encoding: 0/0 [ 243.900734][T11638] tpg quantization: 0/0 [ 243.923839][T11638] tpg RGB range: 0/2 [ 243.935232][T11638] vivid-007: ================== END STATUS ================== [ 244.281818][T11684] mmap: syz.3.611 (11684): VmData 39559168 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 244.795696][T11689] cougar: G6 mapped to F18 [ 244.891447][T11712] netlink: 25 bytes leftover after parsing attributes in process `syz.3.619'. [ 246.388412][T11792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.628'. [ 248.410971][T11836] kexec: Could not allocate control_code_buffer [ 248.730784][T11915] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.856116][T11919] random: crng reseeded on system resumption [ 249.252810][T11940] netlink: 48 bytes leftover after parsing attributes in process `syz.3.640'. [ 253.006252][T12269] NFSD: Failed to start, no listeners configured. [ 253.450859][T12281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 253.708809][T12030] Process accounting paused [ 253.742168][T12288] netlink: 326 bytes leftover after parsing attributes in process `syz.3.660'. [ 253.837694][T12296] netlink: 'syz.1.662': attribute type 22 has an invalid length. [ 253.864607][T12296] netlink: 330 bytes leftover after parsing attributes in process `syz.1.662'. [ 255.154178][T12377] NFSD: Failed to start, no listeners configured. [ 255.261137][T12351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.716028][T12419] netlink: 334 bytes leftover after parsing attributes in process `syz.2.672'. [ 255.970707][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.978571][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.018013][ T9127] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 256.794511][T12510] ubi0: attaching mtd0 [ 256.806316][T12510] ubi0: scanning is finished [ 256.817378][T12510] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 256.908385][T12514] NFSD: Failed to start, no listeners configured. [ 257.103598][T12510] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 257.114973][T12511] ubi0: attaching mtd0 [ 257.123352][T12511] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 257.570807][T12537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 261.011952][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 261.304094][T12762] netlink: 186 bytes leftover after parsing attributes in process `syz.2.703'. [ 261.741503][T12770] NFSD: Failed to start, no listeners configured. [ 262.302326][ T9127] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 262.680390][T12845] netlink: 'syz.2.708': attribute type 4 has an invalid length. [ 263.953116][T12945] random: crng reseeded on system resumption [ 264.109434][T12945] hub 1-0:1.0: USB hub found [ 264.121822][T12945] hub 1-0:1.0: 1 port detected [ 264.418154][T12946] netlink: 186 bytes leftover after parsing attributes in process `syz.2.714'. [ 266.764855][T13067] netlink: 208 bytes leftover after parsing attributes in process `syz.1.720'. [ 266.789028][T13067] FAULT_INJECTION: forcing a failure. [ 266.789028][T13067] name failslab, interval 1, probability 0, space 0, times 0 [ 266.813067][T13067] CPU: 0 UID: 0 PID: 13067 Comm: syz.1.720 Not tainted syzkaller #0 PREEMPT(full) [ 266.813109][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.813125][T13067] Call Trace: [ 266.813135][T13067] [ 266.813147][T13067] dump_stack_lvl+0x100/0x190 [ 266.813205][T13067] should_fail_ex.cold+0x5/0xa [ 266.813245][T13067] should_failslab+0xc2/0x120 [ 266.813282][T13067] __kmalloc_cache_noprof+0x7a/0x6f0 [ 266.813328][T13067] ? __alloc_workqueue+0x1a0/0x1980 [ 266.813379][T13067] __alloc_workqueue+0x1a0/0x1980 [ 266.813435][T13067] alloc_workqueue_noprof+0xc7/0x130 [ 266.813480][T13067] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 266.813532][T13067] ? trace_kmalloc+0xe3/0x110 [ 266.813567][T13067] ? __kasan_kmalloc+0xaa/0xb0 [ 266.813612][T13067] ieee80211_register_hw+0x2148/0x4570 [ 266.813666][T13067] ? mark_held_locks+0x41/0x70 [ 266.813733][T13067] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 266.813780][T13067] ? __pfx___debug_object_init+0x10/0x10 [ 266.813829][T13067] ? find_held_lock+0x2b/0x80 [ 266.813869][T13067] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.813914][T13067] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 266.813964][T13067] ? __hrtimer_setup+0x208/0x330 [ 266.814001][T13067] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 266.814069][T13067] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 266.814123][T13067] hwsim_new_radio_nl+0xc5f/0x1370 [ 266.814163][T13067] ? rcu_is_watching+0x12/0xc0 [ 266.814200][T13067] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 266.814250][T13067] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 266.814298][T13067] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 266.814355][T13067] genl_family_rcv_msg_doit+0x214/0x300 [ 266.814406][T13067] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 266.814452][T13067] ? genl_get_cmd+0x3e7/0x760 [ 266.814505][T13067] ? bpf_lsm_capable+0x9/0x10 [ 266.814536][T13067] ? security_capable+0x80/0x260 [ 266.814565][T13067] ? ns_capable+0xd2/0xf0 [ 266.814601][T13067] genl_rcv_msg+0x560/0x800 [ 266.814651][T13067] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.814698][T13067] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 266.814762][T13067] netlink_rcv_skb+0x159/0x420 [ 266.814801][T13067] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.814844][T13067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.814902][T13067] ? netlink_deliver_tap+0x1ae/0xcc0 [ 266.814945][T13067] genl_rcv+0x28/0x40 [ 266.814985][T13067] netlink_unicast+0x585/0x850 [ 266.815031][T13067] ? __pfx_netlink_unicast+0x10/0x10 [ 266.815083][T13067] netlink_sendmsg+0x8b0/0xda0 [ 266.815133][T13067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.815169][T13067] ? __import_iovec+0x1d2/0x640 [ 266.815213][T13067] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 266.815251][T13067] ____sys_sendmsg+0x9e1/0xb70 [ 266.815289][T13067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.815333][T13067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.815381][T13067] ? __pfx_futex_wake_mark+0x10/0x10 [ 266.815425][T13067] ___sys_sendmsg+0x190/0x1e0 [ 266.815470][T13067] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.815562][T13067] __sys_sendmsg+0x170/0x220 [ 266.815595][T13067] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.815627][T13067] ? __x64_sys_futex+0x34f/0x4d0 [ 266.815674][T13067] ? rcu_is_watching+0x12/0xc0 [ 266.815724][T13067] do_syscall_64+0x115/0x840 [ 266.815765][T13067] ? clear_bhb_loop+0x40/0x90 [ 266.815804][T13067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.815834][T13067] RIP: 0033:0x7f623d39ce59 [ 266.815860][T13067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.815888][T13067] RSP: 002b:00007f623e1a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.815917][T13067] RAX: ffffffffffffffda RBX: 00007f623d615fa0 RCX: 00007f623d39ce59 [ 266.815935][T13067] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000007 [ 266.815953][T13067] RBP: 00007f623d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 266.815970][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.815987][T13067] R13: 00007f623d616038 R14: 00007f623d615fa0 R15: 00007ffd79f7c588 [ 266.816028][T13067] [ 268.338473][T13137] ubi6: attaching mtd0 [ 268.365141][T13137] ubi6: scanning is finished [ 268.382699][T13137] ubi6 error: ubi_read_volume_table: the layout volume was not found [ 268.652059][T13137] ubi6 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 269.488216][T13197] NFSD: Failed to start, no listeners configured. [ 270.972106][T13300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.737'. [ 271.156117][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 272.041831][ T9127] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 272.069114][T13381] netlink: 11788 bytes leftover after parsing attributes in process `syz.2.743'. [ 272.915410][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 272.944804][T13420] netlink: 330 bytes leftover after parsing attributes in process `syz.0.745'. [ 273.113575][T13420] ›: renamed from sit0 (while UP) [ 273.819322][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 274.198142][T13513] FAULT_INJECTION: forcing a failure. [ 274.198142][T13513] name failslab, interval 1, probability 0, space 0, times 0 [ 274.237124][T13513] CPU: 0 UID: 0 PID: 13513 Comm: syz.1.750 Not tainted syzkaller #0 PREEMPT(full) [ 274.237152][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.237167][T13513] Call Trace: [ 274.237176][T13513] [ 274.237186][T13513] dump_stack_lvl+0x100/0x190 [ 274.237238][T13513] should_fail_ex.cold+0x5/0xa [ 274.237274][T13513] should_failslab+0xc2/0x120 [ 274.237308][T13513] __kmalloc_cache_noprof+0x7a/0x6f0 [ 274.237339][T13513] ? proc_thread_self_get_link+0x1a6/0x210 [ 274.237381][T13513] proc_thread_self_get_link+0x1a6/0x210 [ 274.237417][T13513] pick_link+0xac2/0x13c0 [ 274.237436][T13513] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 274.237460][T13513] step_into_slowpath+0x9ba/0xf90 [ 274.237483][T13513] ? __pfx_step_into_slowpath+0x10/0x10 [ 274.237506][T13513] ? lookup_fast+0x2da/0x600 [ 274.237522][T13513] ? inode_permission+0x374/0x620 [ 274.237552][T13513] link_path_walk+0xf28/0x1cc0 [ 274.237579][T13513] path_openat+0x1be/0x31a0 [ 274.237608][T13513] ? __pfx_path_openat+0x10/0x10 [ 274.237639][T13513] do_file_open+0x20e/0x430 [ 274.237664][T13513] ? __pfx_do_file_open+0x10/0x10 [ 274.237702][T13513] ? alloc_fd+0x476/0x790 [ 274.237725][T13513] ? do_getname+0x191/0x390 [ 274.237754][T13513] do_sys_openat2+0x10d/0x1e0 [ 274.237782][T13513] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.237817][T13513] __x64_sys_openat+0x12d/0x210 [ 274.237854][T13513] ? __pfx___x64_sys_openat+0x10/0x10 [ 274.237880][T13513] ? ksys_write+0x1ac/0x250 [ 274.237904][T13513] ? rcu_is_watching+0x12/0xc0 [ 274.237928][T13513] do_syscall_64+0x115/0x840 [ 274.237952][T13513] ? clear_bhb_loop+0x40/0x90 [ 274.237974][T13513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.237993][T13513] RIP: 0033:0x7f623d39ce59 [ 274.238009][T13513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.238025][T13513] RSP: 002b:00007f623e1a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.238043][T13513] RAX: ffffffffffffffda RBX: 00007f623d615fa0 RCX: 00007f623d39ce59 [ 274.238056][T13513] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 274.238067][T13513] RBP: 00007f623d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 274.238078][T13513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.238088][T13513] R13: 00007f623d616038 R14: 00007f623d615fa0 R15: 00007ffd79f7c588 [ 274.238110][T13513] [ 278.186350][T13643] FAULT_INJECTION: forcing a failure. [ 278.186350][T13643] name fail_futex, interval 1, probability 0, space 0, times 1 [ 278.199299][T13643] CPU: 1 UID: 0 PID: 13643 Comm: syz.1.761 Not tainted syzkaller #0 PREEMPT(full) [ 278.199337][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.199354][T13643] Call Trace: [ 278.199365][T13643] [ 278.199375][T13643] dump_stack_lvl+0x100/0x190 [ 278.199411][T13643] should_fail_ex.cold+0x5/0xa [ 278.199434][T13643] should_fail_futex+0x4c/0x60 [ 278.199463][T13643] futex_lock_pi_atomic+0x12d/0xaf0 [ 278.199485][T13643] ? futex_hash+0x141/0x370 [ 278.199516][T13643] futex_lock_pi+0x245/0x7a0 [ 278.199540][T13643] ? __pfx_futex_lock_pi+0x10/0x10 [ 278.199571][T13643] ? __pfx_try_to_wake_up+0x10/0x10 [ 278.199599][T13643] ? futex_private_hash_put+0x107/0x1c0 [ 278.199631][T13643] ? __pfx_futex_wake_mark+0x10/0x10 [ 278.199658][T13643] ? ksys_write+0x190/0x250 [ 278.199679][T13643] ? ksys_write+0x190/0x250 [ 278.199703][T13643] do_futex+0x18a/0x350 [ 278.199721][T13643] ? __pfx_do_futex+0x10/0x10 [ 278.199745][T13643] __x64_sys_futex+0x34f/0x4d0 [ 278.199767][T13643] ? __pfx___x64_sys_futex+0x10/0x10 [ 278.199784][T13643] ? ksys_write+0x1ac/0x250 [ 278.199818][T13643] ? rcu_is_watching+0x12/0xc0 [ 278.199843][T13643] do_syscall_64+0x115/0x840 [ 278.199868][T13643] ? clear_bhb_loop+0x40/0x90 [ 278.199891][T13643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.199910][T13643] RIP: 0033:0x7f623d39ce59 [ 278.199926][T13643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.199943][T13643] RSP: 002b:00007f623e1a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.199961][T13643] RAX: ffffffffffffffda RBX: 00007f623d615fa0 RCX: 00007f623d39ce59 [ 278.199972][T13643] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 278.199983][T13643] RBP: 00007f623d432d6f R08: 0000000000000000 R09: 000000008000fff5 [ 278.199993][T13643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.200003][T13643] R13: 00007f623d616038 R14: 00007f623d615fa0 R15: 00007ffd79f7c588 [ 278.200024][T13643] [ 281.329525][T13785] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.541387][T13785] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.708294][T13785] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.870581][T13785] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.973183][T13785] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.152521][ T30] audit: type=1800 audit(1780045052.918:7): pid=13838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.774" name="members" dev="configfs" ino=27886 res=0 errno=0 [ 283.795970][T13905] kAFS: unparsable volume name [ 284.298638][T13894] Process accounting resumed [ 285.109638][ T8686] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.137623][ T8686] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.150013][ T8686] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.162427][ T8686] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.174673][ T8686] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.996753][T13992] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.003996][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.011396][T13992] bridge_slave_0: entered allmulticast mode [ 286.019320][T13992] bridge_slave_0: entered promiscuous mode [ 286.027881][T13992] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.035120][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.043707][T13992] bridge_slave_1: entered allmulticast mode [ 286.051323][T13992] bridge_slave_1: entered promiscuous mode [ 286.089145][T13992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.100972][T13992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.143283][T13992] team0: Port device team_slave_0 added [ 286.152350][T13992] team0: Port device team_slave_1 added [ 286.185157][T13992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.192233][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.218727][T13992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.232049][T13992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.239880][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.267705][T13992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.330619][T13992] hsr_slave_0: entered promiscuous mode [ 286.338047][T13992] hsr_slave_1: entered promiscuous mode [ 286.344702][T13992] debugfs: 'hsr0' already exists in 'hsr' [ 286.351948][T13992] Cannot create hsr debugfs directory [ 286.582264][T13992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 286.591902][T13992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.600625][T13992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 286.611701][T13992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.621111][T13992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 286.631478][T13992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.639766][T13992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.649785][T13992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.677417][T13992] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.684686][T13992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.692258][T13992] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.699491][T13992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.761394][T13992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.779469][T13605] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.787347][T13605] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.803045][T13992] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.815440][T13605] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.822651][T13605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.847671][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.854860][ T8684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.234195][T13992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.247697][ T9127] Bluetooth: hci4: command tx timeout [ 287.483873][T13992] veth0_vlan: entered promiscuous mode [ 287.500933][T13992] veth1_vlan: entered promiscuous mode [ 287.534456][T13992] veth0_macvtap: entered promiscuous mode [ 287.544220][T13992] veth1_macvtap: entered promiscuous mode [ 287.563948][T13992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.580489][T13992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.600953][ T8684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.611501][ T8684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.621347][ T8684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.631353][ T8684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.720242][ T8684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.733829][ T8684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.764110][T11994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.772641][T11994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.295824][T14363] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 289.327045][ T9127] Bluetooth: hci4: command tx timeout [ 290.884349][ T8686] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.898617][ T8686] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.918756][ T8686] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.932986][ T8686] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.942464][ T8686] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.409653][ T9127] Bluetooth: hci4: command tx timeout [ 292.964770][T14473] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.972301][T14473] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.980491][T14473] bridge_slave_0: entered allmulticast mode [ 292.989390][T14473] bridge_slave_0: entered promiscuous mode [ 293.008886][ T9127] Bluetooth: hci5: command tx timeout [ 293.077582][T14473] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.084864][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.093537][T14473] bridge_slave_1: entered allmulticast mode [ 293.102007][T14473] bridge_slave_1: entered promiscuous mode [ 293.246892][T14473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.268148][T14473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.345679][T14473] team0: Port device team_slave_0 added [ 293.355607][T14473] team0: Port device team_slave_1 added [ 293.437228][T14473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.446860][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.486953][ T9127] Bluetooth: hci4: command tx timeout [ 293.503487][T14473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.557756][T14473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.578402][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.637143][T14473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.766493][T14473] hsr_slave_0: entered promiscuous mode [ 293.781413][T14473] hsr_slave_1: entered promiscuous mode [ 293.793805][T14473] debugfs: 'hsr0' already exists in 'hsr' [ 293.804814][T14473] Cannot create hsr debugfs directory [ 293.809189][T14774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.803'. [ 294.652711][T14473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.705435][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.734512][T14473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.804187][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.908329][T14473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 294.985922][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.087425][ T9127] Bluetooth: hci5: command tx timeout [ 295.096215][T14473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.140093][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.576318][T14473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.643895][T14473] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.683327][T13605] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.683464][T13605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.717873][T11994] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.717946][T11994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.900946][T14473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.169534][ T9127] Bluetooth: hci5: command tx timeout [ 297.526107][T14473] veth0_vlan: entered promiscuous mode [ 297.549769][T14473] veth1_vlan: entered promiscuous mode [ 297.631200][T14473] veth0_macvtap: entered promiscuous mode [ 297.646491][T14473] veth1_macvtap: entered promiscuous mode [ 297.683712][T14473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.714814][T14473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.751050][T13606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.751135][T13606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.751181][T13606] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.751228][T13606] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.960337][ T8684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.960381][ T8684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.060720][T11994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.060750][T11994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.587804][T15039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.799'. [ 299.246817][ T9127] Bluetooth: hci5: command tx timeout [ 300.757080][ T8686] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.783654][ T8686] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.802030][ T8686] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.818143][ T8686] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.826259][ T8686] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.298416][T15274] [U] 0="­/ [ 301.308185][T15274] [U] [ 301.314183][T15274] [U] EÇeÅQ‰Í@’ [ 301.322180][T15274] [U]  [ 302.927276][ T9127] Bluetooth: hci6: command tx timeout [ 304.211768][T15214] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.235559][T15214] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.259665][T15214] bridge_slave_0: entered allmulticast mode [ 304.307491][T15214] bridge_slave_0: entered promiscuous mode [ 304.339707][T15214] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.356829][T15214] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.367778][T15214] bridge_slave_1: entered allmulticast mode [ 304.395748][T15214] bridge_slave_1: entered promiscuous mode [ 304.499312][T15214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.530010][T15214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.641500][T15214] team0: Port device team_slave_0 added [ 304.652006][T15214] team0: Port device team_slave_1 added [ 304.692159][T15600] openvswitch: netlink: Duplicate key (type 15). [ 304.701044][T15602] openvswitch: netlink: Duplicate key (type 15). [ 304.712502][T15214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.727544][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.777705][T15214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.820279][T15214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.844583][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.901284][T15214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.007387][ T9127] Bluetooth: hci6: command tx timeout [ 305.063360][T15214] hsr_slave_0: entered promiscuous mode [ 305.082746][T15214] hsr_slave_1: entered promiscuous mode [ 305.105691][T15214] debugfs: 'hsr0' already exists in 'hsr' [ 305.124559][T15214] Cannot create hsr debugfs directory [ 305.243614][T15622] netlink: 342 bytes leftover after parsing attributes in process `syz.0.840'. [ 306.211731][T15214] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.237442][T15214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.247562][T15214] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.272516][T15214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.313165][T15214] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.348359][T15214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.360228][T15214] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.380087][T15214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.087013][ T9127] Bluetooth: hci6: command tx timeout [ 307.505561][T15214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.540912][T15214] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.572141][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.579420][ T8684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.691877][T13606] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.699052][T13606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.828116][T15892] sd 0:0:1:0: PR command failed: 1026 [ 307.877716][T15892] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 307.906737][T15892] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 309.167175][ T9127] Bluetooth: hci6: command tx timeout [ 309.321203][T15214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.355930][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.852'. [ 309.368595][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.852'. [ 309.989906][T15214] veth0_vlan: entered promiscuous mode [ 310.019292][T15214] veth1_vlan: entered promiscuous mode [ 310.113953][T15214] veth0_macvtap: entered promiscuous mode [ 310.139687][T15214] veth1_macvtap: entered promiscuous mode [ 310.175226][T15214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.222257][T15214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.258542][T13611] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.279885][T13611] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.299121][T13611] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.321390][T13611] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.501893][ T8698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.534131][ T8698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.700795][T13606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.735780][T13606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.005331][T16002] hub 1-0:1.0: USB hub found [ 311.024716][T16002] hub 1-0:1.0: 1 port detected [ 312.953131][T16115] FAULT_INJECTION: forcing a failure. [ 312.953131][T16115] name failslab, interval 1, probability 0, space 0, times 0 [ 312.976629][T16115] CPU: 1 UID: 0 PID: 16115 Comm: syz.5.862 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.976677][T16115] Tainted: [L]=SOFTLOCKUP [ 312.976687][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.976703][T16115] Call Trace: [ 312.976713][T16115] [ 312.976724][T16115] dump_stack_lvl+0x100/0x190 [ 312.976780][T16115] should_fail_ex.cold+0x5/0xa [ 312.976818][T16115] should_failslab+0xc2/0x120 [ 312.976857][T16115] __kmalloc_cache_noprof+0x7a/0x6f0 [ 312.976901][T16115] ? crtc_crc_open+0x3ba/0x7e0 [ 312.976948][T16115] crtc_crc_open+0x3ba/0x7e0 [ 312.976984][T16115] ? __debugfs_file_get+0x1fc/0x860 [ 312.977026][T16115] ? __pfx_crtc_crc_open+0x10/0x10 [ 312.977065][T16115] ? __pfx_apparmor_file_open+0x10/0x10 [ 312.977097][T16115] ? path_get+0x61/0x80 [ 312.977143][T16115] ? __pfx_crtc_crc_open+0x10/0x10 [ 312.977179][T16115] full_proxy_open_regular+0x1b6/0x370 [ 312.977231][T16115] do_dentry_open+0x6ab/0x14d0 [ 312.977269][T16115] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 312.977324][T16115] vfs_open+0x82/0x3f0 [ 312.977374][T16115] path_openat+0x208c/0x31a0 [ 312.977427][T16115] ? __pfx_path_openat+0x10/0x10 [ 312.977489][T16115] do_file_open+0x20e/0x430 [ 312.977531][T16115] ? __pfx_do_file_open+0x10/0x10 [ 312.977597][T16115] ? alloc_fd+0x476/0x790 [ 312.977636][T16115] ? do_getname+0x191/0x390 [ 312.977683][T16115] do_sys_openat2+0x10d/0x1e0 [ 312.977729][T16115] ? __pfx_do_sys_openat2+0x10/0x10 [ 312.977776][T16115] ? do_raw_spin_lock+0x128/0x260 [ 312.977819][T16115] __x64_sys_openat+0x12d/0x210 [ 312.977866][T16115] ? __pfx___x64_sys_openat+0x10/0x10 [ 312.977919][T16115] ? rcu_is_watching+0x12/0xc0 [ 312.977958][T16115] do_syscall_64+0x115/0x840 [ 312.978002][T16115] ? clear_bhb_loop+0x40/0x90 [ 312.978039][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.978069][T16115] RIP: 0033:0x7f914c39ce59 [ 312.978095][T16115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.978122][T16115] RSP: 002b:00007f914d228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 312.978150][T16115] RAX: ffffffffffffffda RBX: 00007f914c616090 RCX: 00007f914c39ce59 [ 312.978169][T16115] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 312.978187][T16115] RBP: 00007f914c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 312.978204][T16115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.978221][T16115] R13: 00007f914c616128 R14: 00007f914c616090 R15: 00007fffb2653238 [ 312.978261][T16115] [ 314.873263][T16236] FAULT_INJECTION: forcing a failure. [ 314.873263][T16236] name failslab, interval 1, probability 0, space 0, times 0 [ 314.887067][T16236] CPU: 0 UID: 0 PID: 16236 Comm: syz.5.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.887130][T16236] Tainted: [L]=SOFTLOCKUP [ 314.887149][T16236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.887182][T16236] Call Trace: [ 314.887191][T16236] [ 314.887207][T16236] dump_stack_lvl+0x100/0x190 [ 314.887264][T16236] should_fail_ex.cold+0x5/0xa [ 314.887304][T16236] should_failslab+0xc2/0x120 [ 314.887341][T16236] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 314.887388][T16236] ? prepare_creds+0x2c/0x950 [ 314.887426][T16236] prepare_creds+0x2c/0x950 [ 314.887460][T16236] __do_sys_capset+0x270/0x460 [ 314.887494][T16236] ? __pfx___do_sys_capset+0x10/0x10 [ 314.887530][T16236] ? __x64_sys_futex+0x358/0x4d0 [ 314.887574][T16236] ? rcu_is_watching+0x12/0xc0 [ 314.887612][T16236] do_syscall_64+0x115/0x840 [ 314.887654][T16236] ? clear_bhb_loop+0x40/0x90 [ 314.887691][T16236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.887720][T16236] RIP: 0033:0x7f914c39ce59 [ 314.887745][T16236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.887775][T16236] RSP: 002b:00007f914d228028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 314.887803][T16236] RAX: ffffffffffffffda RBX: 00007f914c616090 RCX: 00007f914c39ce59 [ 314.887821][T16236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 314.887838][T16236] RBP: 00007f914c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.887855][T16236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.887871][T16236] R13: 00007f914c616128 R14: 00007f914c616090 R15: 00007fffb2653238 [ 314.887906][T16236] [ 315.403566][T16261] random: crng reseeded on system resumption [ 317.422553][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.432980][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.036060][T16358] netlink: 338 bytes leftover after parsing attributes in process `syz.5.884'. [ 318.054819][T16358] netlink: 338 bytes leftover after parsing attributes in process `syz.5.884'. [ 318.073090][T16358] netlink: 338 bytes leftover after parsing attributes in process `syz.5.884'. [ 318.100351][T16358] netlink: 338 bytes leftover after parsing attributes in process `syz.5.884'. [ 318.170381][T16358] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 318.654679][ T8686] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 318.713416][ T30] audit: type=1806 audit(1780045089.478:8): xattr="." res=0 [ 320.010184][T16406] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 321.843385][T16513] FAULT_INJECTION: forcing a failure. [ 321.843385][T16513] name failslab, interval 1, probability 0, space 0, times 0 [ 321.865849][T16513] CPU: 1 UID: 0 PID: 16513 Comm: syz.5.896 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.865898][T16513] Tainted: [L]=SOFTLOCKUP [ 321.865909][T16513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.865927][T16513] Call Trace: [ 321.865936][T16513] [ 321.865946][T16513] dump_stack_lvl+0x100/0x190 [ 321.866000][T16513] should_fail_ex.cold+0x5/0xa [ 321.866038][T16513] should_failslab+0xc2/0x120 [ 321.866074][T16513] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 321.866119][T16513] ? vm_area_dup+0x27/0x8e0 [ 321.866164][T16513] ? kernel_text_address+0x8d/0x100 [ 321.866198][T16513] vm_area_dup+0x27/0x8e0 [ 321.866240][T16513] __split_vma+0x18c/0xda0 [ 321.866285][T16513] ? __mpol_equal+0xaf/0x340 [ 321.866326][T16513] ? __pfx___split_vma+0x10/0x10 [ 321.866392][T16513] vma_modify+0x12ad/0x25c0 [ 321.866458][T16513] ? __pfx_vma_modify+0x10/0x10 [ 321.866527][T16513] vma_modify_policy+0x238/0x300 [ 321.866574][T16513] ? __pfx_vma_modify_policy+0x10/0x10 [ 321.866619][T16513] ? find_held_lock+0x2b/0x80 [ 321.866684][T16513] mbind_range+0x175/0x550 [ 321.866729][T16513] do_mbind+0x7dc/0xfd0 [ 321.866778][T16513] ? __pfx_do_mbind+0x10/0x10 [ 321.866818][T16513] ? ksys_write+0x190/0x250 [ 321.866870][T16513] ? __pfx_get_nodes+0x10/0x10 [ 321.866912][T16513] kernel_mbind+0x1b7/0x200 [ 321.866952][T16513] ? __pfx_kernel_mbind+0x10/0x10 [ 321.866993][T16513] ? rcu_is_watching+0x12/0xc0 [ 321.867032][T16513] do_syscall_64+0x115/0x840 [ 321.867071][T16513] ? clear_bhb_loop+0x40/0x90 [ 321.867107][T16513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.867137][T16513] RIP: 0033:0x7f914c39ce59 [ 321.867162][T16513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.867188][T16513] RSP: 002b:00007f914d1e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 321.867217][T16513] RAX: ffffffffffffffda RBX: 00007f914c616270 RCX: 00007f914c39ce59 [ 321.867236][T16513] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 321.867253][T16513] RBP: 00007f914c432d6f R08: 0000000000000006 R09: 0000000000000002 [ 321.867269][T16513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.867285][T16513] R13: 00007f914c616308 R14: 00007f914c616270 R15: 00007fffb2653238 [ 321.867322][T16513] [ 325.868854][T16726] netlink: 29 bytes leftover after parsing attributes in process `syz.5.909'. [ 328.664830][T16945] futex_wake_op: syz.6.917 tries to shift op by -2048; fix this program [ 330.251178][ T9127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 330.261807][ T9127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 330.283842][ T9127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 330.295832][ T9127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 330.305772][ T9127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 331.584740][T16989] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.600484][T16989] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.619699][T16989] bridge_slave_0: entered allmulticast mode [ 331.634076][T16989] bridge_slave_0: entered promiscuous mode [ 331.642751][T16989] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.651716][T16989] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.659388][T16989] bridge_slave_1: entered allmulticast mode [ 331.676992][T16989] bridge_slave_1: entered promiscuous mode [ 331.760870][T16989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.781207][T16989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.834212][T16989] team0: Port device team_slave_0 added [ 331.842919][T16989] team0: Port device team_slave_1 added [ 331.896588][T16989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.904558][T16989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.931970][T16989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.946879][T16989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.954065][T16989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.980599][T16989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.046255][T16989] hsr_slave_0: entered promiscuous mode [ 332.060255][T16989] hsr_slave_1: entered promiscuous mode [ 332.075792][T16989] debugfs: 'hsr0' already exists in 'hsr' [ 332.081835][T16989] Cannot create hsr debugfs directory [ 332.368044][ T8686] Bluetooth: hci7: command tx timeout [ 332.694312][ T8686] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 332.724952][T17275] futex_wake_op: syz.0.931 tries to shift op by -2048; fix this program [ 332.759753][T17275] futex_wake_op: syz.0.931 tries to shift op by -2048; fix this program [ 332.855829][ T8686] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 332.866752][ T8686] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 332.881178][T17294] futex_wake_op: syz.0.931 tries to shift op by -2048; fix this program [ 333.026873][T16989] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 333.064225][T16989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.097750][T16989] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 333.125927][T16989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.237320][T16989] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 333.260575][T16989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.359667][T16989] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 333.395532][T16989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.447036][ T8686] Bluetooth: hci7: command tx timeout [ 334.950371][T16989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.022307][T16989] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.064922][T17504] kernel profiling enabled (shift: 3) [ 335.101243][T13605] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.108534][T13605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.177544][T13606] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.184819][T13606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.254248][T16989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.273309][T16989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.527852][ T8686] Bluetooth: hci7: command tx timeout [ 337.996356][T16989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.609063][ T8686] Bluetooth: hci7: command tx timeout [ 338.682058][T17670] random: crng reseeded on system resumption [ 339.358857][T17729] FAULT_INJECTION: forcing a failure. [ 339.358857][T17729] name failslab, interval 1, probability 0, space 0, times 0 [ 339.376747][T17729] CPU: 1 UID: 0 PID: 17729 Comm: syz.0.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.376796][T17729] Tainted: [L]=SOFTLOCKUP [ 339.376806][T17729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 339.376823][T17729] Call Trace: [ 339.376832][T17729] [ 339.376843][T17729] dump_stack_lvl+0x100/0x190 [ 339.376898][T17729] should_fail_ex.cold+0x5/0xa [ 339.376937][T17729] should_failslab+0xc2/0x120 [ 339.376973][T17729] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 339.377020][T17729] ? security_file_alloc+0x34/0x2c0 [ 339.377057][T17729] ? trace_kmem_cache_alloc+0xd5/0x100 [ 339.377099][T17729] security_file_alloc+0x34/0x2c0 [ 339.377139][T17729] init_file+0x95/0x480 [ 339.377181][T17729] alloc_empty_file+0x79/0x1c0 [ 339.377227][T17729] path_openat+0xe8/0x31a0 [ 339.377261][T17729] ? kasan_save_stack+0x3f/0x50 [ 339.377289][T17729] ? kasan_save_stack+0x30/0x50 [ 339.377318][T17729] ? kasan_save_track+0x14/0x30 [ 339.377358][T17729] ? __kasan_slab_alloc+0x89/0x90 [ 339.377390][T17729] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 339.377435][T17729] ? do_getname+0x35/0x390 [ 339.377475][T17729] ? do_sys_openat2+0xc5/0x1e0 [ 339.377519][T17729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.377555][T17729] ? __pfx_path_openat+0x10/0x10 [ 339.377609][T17729] do_file_open+0x20e/0x430 [ 339.377650][T17729] ? __pfx_do_file_open+0x10/0x10 [ 339.377712][T17729] ? alloc_fd+0x476/0x790 [ 339.377752][T17729] ? do_getname+0x191/0x390 [ 339.377794][T17729] do_sys_openat2+0x10d/0x1e0 [ 339.377835][T17729] ? __pfx_do_sys_openat2+0x10/0x10 [ 339.377876][T17729] __x64_sys_openat+0x12d/0x210 [ 339.377905][T17729] ? __pfx___x64_sys_openat+0x10/0x10 [ 339.377936][T17729] ? rcu_is_watching+0x12/0xc0 [ 339.377960][T17729] do_syscall_64+0x115/0x840 [ 339.377985][T17729] ? clear_bhb_loop+0x40/0x90 [ 339.378006][T17729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.378025][T17729] RIP: 0033:0x7f7ee139ce59 [ 339.378042][T17729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.378063][T17729] RSP: 002b:00007f7ee22ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 339.378081][T17729] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139ce59 [ 339.378094][T17729] RDX: 0000000000000000 RSI: 0000200000002200 RDI: ffffffffffffff9c [ 339.378111][T17729] RBP: 00007f7ee1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 339.378128][T17729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.378143][T17729] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffe9c45c638 [ 339.378172][T17729] [ 340.129024][T16989] veth0_vlan: entered promiscuous mode [ 340.185965][T16989] veth1_vlan: entered promiscuous mode [ 340.249021][T16989] veth0_macvtap: entered promiscuous mode [ 340.280268][T16989] veth1_macvtap: entered promiscuous mode [ 340.311198][T16989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.350781][T16989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.377500][ T8698] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.435277][ T8698] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.474747][ T8698] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.489164][ T8698] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.800384][T13606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.825551][T13606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.048858][ T8684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.067875][ T8684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.531845][T17873] FAULT_INJECTION: forcing a failure. [ 342.531845][T17873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.558059][T17873] CPU: 0 UID: 0 PID: 17873 Comm: syz.6.955 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.558104][T17873] Tainted: [L]=SOFTLOCKUP [ 342.558114][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.558130][T17873] Call Trace: [ 342.558140][T17873] [ 342.558150][T17873] dump_stack_lvl+0x100/0x190 [ 342.558205][T17873] should_fail_ex.cold+0x5/0xa [ 342.558236][T17873] ? prepare_alloc_pages+0x16d/0x5f0 [ 342.558277][T17873] should_fail_alloc_page+0xeb/0x140 [ 342.558314][T17873] prepare_alloc_pages+0x1f0/0x5f0 [ 342.558355][T17873] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 342.558408][T17873] ? try_to_migrate_one+0x11a0/0x3020 [ 342.558470][T17873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.558533][T17873] ? reacquire_held_locks+0xce/0x1e0 [ 342.558577][T17873] ? folio_lock_anon_vma_read+0x348/0xe30 [ 342.558623][T17873] ? folio_lock_anon_vma_read+0x348/0xe30 [ 342.558667][T17873] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.558711][T17873] ? policy_nodemask+0xed/0x4f0 [ 342.558748][T17873] alloc_pages_mpol+0x1fb/0x540 [ 342.558784][T17873] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 342.558827][T17873] folio_alloc_mpol_noprof+0x36/0x260 [ 342.558877][T17873] alloc_migration_target_by_mpol+0x2c1/0x650 [ 342.558922][T17873] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 342.558962][T17873] ? __pfx___might_resched+0x10/0x10 [ 342.558993][T17873] ? folio_get_anon_vma+0x16b/0x980 [ 342.559038][T17873] migrate_pages_batch+0x5dc/0x45c0 [ 342.559082][T17873] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 342.559140][T17873] ? __pfx_migrate_pages_batch+0x10/0x10 [ 342.559189][T17873] ? __lock_acquire+0x4a5/0x2630 [ 342.559235][T17873] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 342.559282][T17873] ? generic_exec_single+0xb4/0x460 [ 342.559336][T17873] migrate_pages_sync+0x12c/0x880 [ 342.559376][T17873] ? enqueue_task+0x1d6/0x4f0 [ 342.559413][T17873] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 342.559465][T17873] ? __pfx_migrate_pages_sync+0x10/0x10 [ 342.559506][T17873] ? find_held_lock+0x2b/0x80 [ 342.559545][T17873] ? rcu_is_watching+0x12/0xc0 [ 342.559579][T17873] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.559625][T17873] migrate_pages+0x1aa5/0x2880 [ 342.559668][T17873] ? __pfx_try_to_wake_up+0x10/0x10 [ 342.559704][T17873] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 342.559752][T17873] ? __pfx_migrate_pages+0x10/0x10 [ 342.559790][T17873] ? rwsem_wake.isra.0+0xb8/0x100 [ 342.559820][T17873] ? __pfx_rwsem_wake.isra.0+0x10/0x10 [ 342.559857][T17873] ? find_held_lock+0x2b/0x80 [ 342.559890][T17873] ? do_mbind+0x555/0xfd0 [ 342.559933][T17873] ? up_write+0x28c/0x4f0 [ 342.559965][T17873] do_mbind+0x5a4/0xfd0 [ 342.560015][T17873] ? __pfx_do_mbind+0x10/0x10 [ 342.560052][T17873] ? putname+0xb1/0x110 [ 342.560085][T17873] ? kmem_cache_free+0x127/0x6c0 [ 342.560146][T17873] ? __pfx_get_nodes+0x10/0x10 [ 342.560188][T17873] kernel_mbind+0x1b7/0x200 [ 342.560232][T17873] ? __pfx_kernel_mbind+0x10/0x10 [ 342.560277][T17873] ? rcu_is_watching+0x12/0xc0 [ 342.560315][T17873] do_syscall_64+0x115/0x840 [ 342.560355][T17873] ? clear_bhb_loop+0x40/0x90 [ 342.560392][T17873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.560422][T17873] RIP: 0033:0x7f6fc7b9ce59 [ 342.560448][T17873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.560476][T17873] RSP: 002b:00007f6fc8a13028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 342.560504][T17873] RAX: ffffffffffffffda RBX: 00007f6fc7e16270 RCX: 00007f6fc7b9ce59 [ 342.560523][T17873] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 342.560540][T17873] RBP: 00007f6fc7c32d6f R08: 0000000000000006 R09: 0000000000000002 [ 342.560557][T17873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.560574][T17873] R13: 00007f6fc7e16308 R14: 00007f6fc7e16270 R15: 00007ffd8ecfee88 [ 342.560612][T17873] [ 344.230643][T17976] ubi0: attaching mtd0 [ 344.272801][T17976] ubi0: scanning is finished [ 344.286090][T17976] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 344.496253][T17976] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 345.031414][T17945] Process accounting resumed [ 345.294091][T18032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'. [ 345.326352][T18029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'. [ 345.691714][T18028] ima: policy update failed [ 345.723318][ T30] audit: type=1802 audit(1780045116.488:9): pid=18028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.965" res=0 errno=0 [ 346.194928][T18091] tipc: Started in network mode [ 346.217955][T18091] tipc: Node identity ee00, cluster identity 4711 [ 346.264523][T18091] tipc: Node number set to 60928 [ 347.722071][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 348.732083][T18261] netlink: 16 bytes leftover after parsing attributes in process `syz.7.979'. [ 350.511956][T18454] FAULT_INJECTION: forcing a failure. [ 350.511956][T18454] name failslab, interval 1, probability 0, space 0, times 0 [ 350.546936][T18454] CPU: 0 UID: 0 PID: 18454 Comm: syz.6.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.546982][T18454] Tainted: [L]=SOFTLOCKUP [ 350.546992][T18454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.547008][T18454] Call Trace: [ 350.547018][T18454] [ 350.547028][T18454] dump_stack_lvl+0x100/0x190 [ 350.547078][T18454] should_fail_ex.cold+0x5/0xa [ 350.547114][T18454] should_failslab+0xc2/0x120 [ 350.547148][T18454] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 350.547192][T18454] ? proc_alloc_inode+0x25/0x200 [ 350.547228][T18454] ? __pfx_proc_alloc_inode+0x10/0x10 [ 350.547260][T18454] proc_alloc_inode+0x25/0x200 [ 350.547289][T18454] alloc_inode+0x68/0x250 [ 350.547330][T18454] new_inode+0x22/0x1c0 [ 350.547385][T18454] proc_pid_make_inode+0x22/0x160 [ 350.547418][T18454] proc_ns_dir_lookup+0x25b/0x390 [ 350.547456][T18454] lookup_open.isra.0+0x631/0x11b0 [ 350.547496][T18454] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 350.547553][T18454] ? lookup_fast+0x2da/0x600 [ 350.547585][T18454] path_openat+0xa98/0x31a0 [ 350.547634][T18454] ? __pfx_path_openat+0x10/0x10 [ 350.547685][T18454] do_file_open+0x20e/0x430 [ 350.547726][T18454] ? __pfx_do_file_open+0x10/0x10 [ 350.547775][T18454] ? __pfx_kfree_link+0x10/0x10 [ 350.547815][T18454] ? alloc_fd+0x476/0x790 [ 350.547851][T18454] ? do_getname+0x191/0x390 [ 350.547893][T18454] do_sys_openat2+0x10d/0x1e0 [ 350.547932][T18454] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.547974][T18454] ? __fget_files+0x21f/0x3d0 [ 350.548015][T18454] __x64_sys_openat+0x12d/0x210 [ 350.548056][T18454] ? __pfx___x64_sys_openat+0x10/0x10 [ 350.548103][T18454] ? rcu_is_watching+0x12/0xc0 [ 350.548140][T18454] do_syscall_64+0x115/0x840 [ 350.548178][T18454] ? clear_bhb_loop+0x40/0x90 [ 350.548214][T18454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.548242][T18454] RIP: 0033:0x7f6fc7b9ce59 [ 350.548267][T18454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.548294][T18454] RSP: 002b:00007f6fc8a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.548322][T18454] RAX: ffffffffffffffda RBX: 00007f6fc7e15fa0 RCX: 00007f6fc7b9ce59 [ 350.548342][T18454] RDX: 0000000000020880 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 350.548370][T18454] RBP: 00007f6fc7c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 350.548388][T18454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.548405][T18454] R13: 00007f6fc7e16038 R14: 00007f6fc7e15fa0 R15: 00007ffd8ecfee88 [ 350.548444][T18454] [ 352.517744][ T30] audit: type=1800 audit(1780045123.278:10): pid=18550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.994" name=04 dev="tmpfs" ino=255 res=0 errno=0 [ 352.538166][T18550] sctp: [Deprecated]: syz.6.994 (pid 18550) Use of int in max_burst socket option deprecated. [ 352.538166][T18550] Use struct sctp_assoc_value instead [ 355.387865][T18732] hub 1-0:1.0: USB hub found [ 355.401693][T18732] hub 1-0:1.0: 1 port detected [ 355.661538][T18740] hub 1-0:1.0: USB hub found [ 355.754302][T18740] hub 1-0:1.0: 1 port detected [ 358.603287][T18891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1012'. [ 358.680422][ T30] audit: type=1800 audit(1780045129.448:11): pid=18893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1013" name="dbroot" dev="configfs" ino=38333 res=0 errno=0 [ 359.571810][T18921] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1015'. [ 363.193728][T19174] program syz.6.1029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.732488][T19232] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.870237][T19230] FAULT_INJECTION: forcing a failure. [ 364.870237][T19230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.951140][T19230] CPU: 1 UID: 0 PID: 19230 Comm: syz.6.1036 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.951186][T19230] Tainted: [L]=SOFTLOCKUP [ 364.951196][T19230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 364.951213][T19230] Call Trace: [ 364.951223][T19230] [ 364.951233][T19230] dump_stack_lvl+0x100/0x190 [ 364.951372][T19230] should_fail_ex.cold+0x5/0xa [ 364.951416][T19230] _copy_from_user+0x2e/0xd0 [ 364.951565][T19230] get_timespec64+0x8b/0x1b0 [ 364.951611][T19230] ? __pfx_get_timespec64+0x10/0x10 [ 364.951638][T19230] ? lockdep_hardirqs_on+0x78/0x100 [ 364.951726][T19230] __x64_sys_futex+0x21a/0x4d0 [ 364.951754][T19230] ? __pfx___x64_sys_futex+0x10/0x10 [ 364.951778][T19230] ? rcu_is_watching+0x12/0xc0 [ 364.951815][T19230] do_syscall_64+0x115/0x840 [ 364.951856][T19230] ? clear_bhb_loop+0x40/0x90 [ 364.951887][T19230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.951906][T19230] RIP: 0033:0x7f6fc7b9ce59 [ 364.951922][T19230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.951940][T19230] RSP: 002b:00007ffd8ecfefe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 364.951959][T19230] RAX: ffffffffffffffda RBX: 0000000000059117 RCX: 00007f6fc7b9ce59 [ 364.951976][T19230] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6fc7e1609c [ 364.951991][T19230] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 364.952007][T19230] R10: 00007ffd8ecff0f0 R11: 0000000000000246 R12: 00007ffd8ecff110 [ 364.952024][T19230] R13: 00007f6fc7e1609c R14: 0000000000059149 R15: 00007ffd8ecff0f0 [ 364.952061][T19230] [ 365.611811][T19187] kexec: Could not allocate control_code_buffer [ 369.019775][T19488] can: request_module (can-proto-4) failed. [ 370.069384][T19558] FAULT_INJECTION: forcing a failure. [ 370.069384][T19558] name failslab, interval 1, probability 0, space 0, times 0 [ 370.139066][T19558] CPU: 1 UID: 0 PID: 19558 Comm: syz.5.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.139117][T19558] Tainted: [L]=SOFTLOCKUP [ 370.139129][T19558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.139148][T19558] Call Trace: [ 370.139158][T19558] [ 370.139171][T19558] dump_stack_lvl+0x100/0x190 [ 370.139227][T19558] should_fail_ex.cold+0x5/0xa [ 370.139264][T19558] should_failslab+0xc2/0x120 [ 370.139324][T19558] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 370.139373][T19558] ? sp_alloc+0x27/0x160 [ 370.139431][T19558] sp_alloc+0x27/0x160 [ 370.139475][T19558] mpol_set_shared_policy+0xa5/0x890 [ 370.139528][T19558] ? __pfx_shmem_set_policy+0x10/0x10 [ 370.139566][T19558] mbind_range+0x339/0x550 [ 370.139614][T19558] do_mbind+0x7dc/0xfd0 [ 370.139676][T19558] ? __pfx_do_mbind+0x10/0x10 [ 370.139719][T19558] ? ksys_write+0x190/0x250 [ 370.139776][T19558] ? __pfx_get_nodes+0x10/0x10 [ 370.139820][T19558] kernel_mbind+0x1b7/0x200 [ 370.139874][T19558] ? __pfx_kernel_mbind+0x10/0x10 [ 370.139922][T19558] ? rcu_is_watching+0x12/0xc0 [ 370.139963][T19558] do_syscall_64+0x115/0x840 [ 370.140007][T19558] ? clear_bhb_loop+0x40/0x90 [ 370.140045][T19558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.140077][T19558] RIP: 0033:0x7f914c39ce59 [ 370.140104][T19558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.140131][T19558] RSP: 002b:00007f914d228028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 370.140161][T19558] RAX: ffffffffffffffda RBX: 00007f914c616090 RCX: 00007f914c39ce59 [ 370.140182][T19558] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 370.140200][T19558] RBP: 00007f914c432d6f R08: 0000000000000006 R09: 0000000000000002 [ 370.140218][T19558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.140235][T19558] R13: 00007f914c616128 R14: 00007f914c616090 R15: 00007fffb2653238 [ 370.140279][T19558] [ 370.538781][ T30] audit: type=1800 audit(1780045141.308:12): pid=19580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1055" name="dbroot" dev="configfs" ino=41018 res=0 errno=0 [ 370.718324][T19593] FAULT_INJECTION: forcing a failure. [ 370.718324][T19593] name failslab, interval 1, probability 0, space 0, times 0 [ 370.760167][T19593] CPU: 1 UID: 0 PID: 19593 Comm: syz.0.1056 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.760201][T19593] Tainted: [L]=SOFTLOCKUP [ 370.760208][T19593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.760218][T19593] Call Trace: [ 370.760225][T19593] [ 370.760232][T19593] dump_stack_lvl+0x100/0x190 [ 370.760268][T19593] should_fail_ex.cold+0x5/0xa [ 370.760292][T19593] should_failslab+0xc2/0x120 [ 370.760315][T19593] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 370.760343][T19593] ? alloc_empty_file+0x5b/0x1c0 [ 370.760373][T19593] alloc_empty_file+0x5b/0x1c0 [ 370.760401][T19593] dentry_open+0x46/0xd0 [ 370.760427][T19593] pidfs_alloc_file+0x18f/0x290 [ 370.760588][T19593] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 370.760637][T19593] pidfd_prepare+0x10c/0x1b0 [ 370.760669][T19593] __x64_sys_pidfd_open+0x105/0x1a0 [ 370.760716][T19593] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 370.760748][T19593] ? rcu_is_watching+0x12/0xc0 [ 370.760776][T19593] do_syscall_64+0x115/0x840 [ 370.760802][T19593] ? clear_bhb_loop+0x40/0x90 [ 370.760824][T19593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.760846][T19593] RIP: 0033:0x7f7ee139ce59 [ 370.760868][T19593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.760886][T19593] RSP: 002b:00007f7ee22ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 370.760904][T19593] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139ce59 [ 370.760916][T19593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 370.760926][T19593] RBP: 00007f7ee1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 370.760937][T19593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.760947][T19593] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffe9c45c638 [ 370.760970][T19593] [ 372.908037][T19731] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 378.850452][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858802][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.745657][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1082'. [ 381.035403][T19972] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1083'. [ 381.705448][T19984] i2c i2c-0: new_device: Invalid device name [ 381.925889][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1085'. [ 383.565403][T20054] random: crng reseeded on system resumption [ 385.597893][T19821] Process accounting paused [ 386.154889][T20110] netlink: Invalid conntrack timeout [ 387.543687][T20156] netlink: 146 bytes leftover after parsing attributes in process `syz.7.1096'. [ 388.183476][T20152] kexec: Could not allocate control_code_buffer [ 388.669667][ T9127] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 388.689737][ T9127] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 388.702201][ T9127] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 388.715751][ T9127] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 388.726386][ T9127] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 390.767956][ T9127] Bluetooth: hci8: command tx timeout [ 390.975435][T20170] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.982790][T20170] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.990469][T20170] bridge_slave_0: entered allmulticast mode [ 390.997991][T20170] bridge_slave_0: entered promiscuous mode [ 391.015931][T20170] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.032276][T20170] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.055029][T20170] bridge_slave_1: entered allmulticast mode [ 391.078663][T20170] bridge_slave_1: entered promiscuous mode [ 391.170692][T20170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.184489][T20170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.234825][T20170] team0: Port device team_slave_0 added [ 391.242691][T20170] team0: Port device team_slave_1 added [ 391.278735][T20170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.285703][T20170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.313476][T20170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.328906][T20170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.335913][T20170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.366883][T20170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.457629][T20170] hsr_slave_0: entered promiscuous mode [ 391.464050][T20170] hsr_slave_1: entered promiscuous mode [ 391.478064][T20170] debugfs: 'hsr0' already exists in 'hsr' [ 391.492590][T20170] Cannot create hsr debugfs directory [ 391.861566][T20555] Process accounting resumed [ 392.001372][ T8686] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 392.020289][ T8686] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 392.034363][ T8686] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 392.047525][ T8686] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 392.065637][ T8686] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 392.295691][T20170] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 392.309280][T20170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.317888][T20170] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 392.334885][T20170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.345496][T20170] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 392.357958][T20170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.368856][T20170] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 392.382163][T20170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.574019][T20170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.634363][T20170] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.694414][T13605] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.701686][T13605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.756293][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.763674][ T8698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.854722][ T9127] Bluetooth: hci8: command tx timeout [ 393.520637][T20584] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.528148][T20584] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.535544][T20584] bridge_slave_0: entered allmulticast mode [ 393.544632][T20584] bridge_slave_0: entered promiscuous mode [ 393.554807][T20584] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.563507][T20584] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.571115][T20584] bridge_slave_1: entered allmulticast mode [ 393.579611][T20584] bridge_slave_1: entered promiscuous mode [ 393.624159][T20584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.638270][T20584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.689352][T20584] team0: Port device team_slave_0 added [ 393.701368][T20584] team0: Port device team_slave_1 added [ 393.745501][T20584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.752734][T20584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.780579][T20584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.796371][T20584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.804127][T20584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.830790][T20584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.907749][T20584] hsr_slave_0: entered promiscuous mode [ 393.914853][T20584] hsr_slave_1: entered promiscuous mode [ 393.922286][T20584] debugfs: 'hsr0' already exists in 'hsr' [ 393.928779][T20584] Cannot create hsr debugfs directory [ 394.127829][ T9127] Bluetooth: hci9: command tx timeout [ 394.141557][T20170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.404718][T20584] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.459694][T20584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.496358][T20584] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 394.523473][T20584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.554606][T20584] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 394.583894][T20584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.622135][T20584] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 394.649629][T20584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.790158][T20584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.821623][T20170] veth0_vlan: entered promiscuous mode [ 394.837828][T20584] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.852342][T20170] veth1_vlan: entered promiscuous mode [ 394.864625][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.871945][T13611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.904250][T13614] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.911417][T13614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.930954][ T9127] Bluetooth: hci8: command tx timeout [ 395.013216][T20170] veth0_macvtap: entered promiscuous mode [ 395.031757][T20170] veth1_macvtap: entered promiscuous mode [ 395.056595][T20170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.073780][T20170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.091326][T13598] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.113607][T13598] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.141130][T13598] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.159769][T13598] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.282922][T13611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.333542][T13611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.394772][T13605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.427943][T13605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.909791][T20584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.207051][ T8686] Bluetooth: hci9: command tx timeout [ 396.866014][T20584] veth0_vlan: entered promiscuous mode [ 397.007343][ T9127] Bluetooth: hci8: command tx timeout [ 397.088830][T20584] veth1_vlan: entered promiscuous mode [ 397.607545][T20584] veth0_macvtap: entered promiscuous mode [ 397.646364][T20584] veth1_macvtap: entered promiscuous mode [ 397.753829][T20584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.791053][T20584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.832688][T13598] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.876023][T13598] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.898465][T13598] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.909097][T13598] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.010021][T21087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'. [ 398.099285][T21087] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1116'. [ 398.110110][T21087] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1116'. [ 398.141726][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 398.299720][ T9127] Bluetooth: hci9: command tx timeout [ 398.661700][T13615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.680794][T13615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.723258][ T9127] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 398.725982][T21078] vivid-008: ================= START STATUS ================= [ 398.743882][T21078] vivid-008: ================== END STATUS ================== [ 398.842641][T13605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.869488][T13605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.225267][T21149] netlink: 'syz.9.1105': attribute type 1 has an invalid length. [ 399.457069][T21156] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1117'. [ 399.679228][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 399.907683][T21190] netlink: 186 bytes leftover after parsing attributes in process `syz.8.1119'. [ 399.940458][T21190] netlink: 186 bytes leftover after parsing attributes in process `syz.8.1119'. [ 400.056081][T21194] FAULT_INJECTION: forcing a failure. [ 400.056081][T21194] name failslab, interval 1, probability 0, space 0, times 0 [ 400.071908][T21194] CPU: 0 UID: 0 PID: 21194 Comm: syz.0.1118 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.071958][T21194] Tainted: [L]=SOFTLOCKUP [ 400.071969][T21194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 400.071985][T21194] Call Trace: [ 400.071994][T21194] [ 400.072007][T21194] dump_stack_lvl+0x100/0x190 [ 400.072060][T21194] should_fail_ex.cold+0x5/0xa [ 400.072099][T21194] ? tomoyo_encode2+0xfb/0x3c0 [ 400.072227][T21194] should_failslab+0xc2/0x120 [ 400.072263][T21194] __kmalloc_noprof+0xe0/0x850 [ 400.072291][T21194] ? rcu_is_watching+0x12/0xc0 [ 400.072330][T21194] tomoyo_encode2+0xfb/0x3c0 [ 400.072365][T21194] tomoyo_encode+0x29/0x50 [ 400.072396][T21194] tomoyo_realpath_from_path+0x18c/0x690 [ 400.072448][T21194] tomoyo_check_open_permission+0x2af/0x3c0 [ 400.072486][T21194] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 400.072536][T21194] ? hook_file_open+0x24e/0x7a0 [ 400.072633][T21194] ? path_get+0x61/0x80 [ 400.072675][T21194] tomoyo_file_open+0x6b/0x90 [ 400.072722][T21194] security_file_open+0xb5/0x1e0 [ 400.072779][T21194] do_dentry_open+0x588/0x14d0 [ 400.072823][T21194] vfs_open+0x82/0x3f0 [ 400.072873][T21194] path_openat+0x208c/0x31a0 [ 400.072921][T21194] ? __pfx_path_openat+0x10/0x10 [ 400.072966][T21194] do_file_open+0x20e/0x430 [ 400.073002][T21194] ? __pfx_do_file_open+0x10/0x10 [ 400.073060][T21194] ? alloc_fd+0x476/0x790 [ 400.073094][T21194] ? do_getname+0x191/0x390 [ 400.073144][T21194] do_sys_openat2+0x10d/0x1e0 [ 400.073183][T21194] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.073227][T21194] ? do_raw_spin_lock+0x128/0x260 [ 400.073262][T21194] __x64_sys_openat+0x12d/0x210 [ 400.073300][T21194] ? __pfx___x64_sys_openat+0x10/0x10 [ 400.073345][T21194] ? rcu_is_watching+0x12/0xc0 [ 400.073377][T21194] do_syscall_64+0x115/0x840 [ 400.073413][T21194] ? clear_bhb_loop+0x40/0x90 [ 400.073446][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.073471][T21194] RIP: 0033:0x7f7ee139ce59 [ 400.073494][T21194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.073519][T21194] RSP: 002b:00007f7ee2278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 400.073546][T21194] RAX: ffffffffffffffda RBX: 00007f7ee1616180 RCX: 00007f7ee139ce59 [ 400.073564][T21194] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 400.073581][T21194] RBP: 00007f7ee1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 400.073599][T21194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.073616][T21194] R13: 00007f7ee1616218 R14: 00007f7ee1616180 R15: 00007ffe9c45c638 [ 400.073653][T21194] [ 400.073711][T21194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 400.383841][ T9127] Bluetooth: hci9: command tx timeout [ 400.772282][ T9127] Bluetooth: hci8: command 0x2016 tx timeout [ 402.851843][ T9127] Bluetooth: hci8: command 0x2016 tx timeout [ 405.149008][T21328] kexec: Could not allocate control_code_buffer [ 406.037545][ T9127] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 406.077769][ T9127] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 406.088742][ T9127] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 406.104596][ T9127] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 406.114265][ T9127] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 407.978959][T21515] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.996787][T21515] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.021501][T21515] bridge_slave_0: entered allmulticast mode [ 408.039226][T21515] bridge_slave_0: entered promiscuous mode [ 408.075906][T21515] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.087736][T21515] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.107089][T21515] bridge_slave_1: entered allmulticast mode [ 408.125570][T21515] bridge_slave_1: entered promiscuous mode [ 408.209873][ T9127] Bluetooth: hci10: command tx timeout [ 408.243726][T21751] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 408.280884][T21515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.283800][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1135'. [ 408.309572][T21515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.617658][T21515] team0: Port device team_slave_0 added [ 408.652741][T21515] team0: Port device team_slave_1 added [ 408.775501][T21515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.788391][T21515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.815446][T21515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.924022][T21515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.951154][T21515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.999601][T21515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.009684][T21788] FAULT_INJECTION: forcing a failure. [ 409.009684][T21788] name failslab, interval 1, probability 0, space 0, times 0 [ 409.062380][T21840] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1136'. [ 409.089202][T21788] CPU: 1 UID: 0 PID: 21788 Comm: syz.9.1135 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.089251][T21788] Tainted: [L]=SOFTLOCKUP [ 409.089262][T21788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.089279][T21788] Call Trace: [ 409.089288][T21788] [ 409.089299][T21788] dump_stack_lvl+0x100/0x190 [ 409.089358][T21788] should_fail_ex.cold+0x5/0xa [ 409.089395][T21788] should_failslab+0xc2/0x120 [ 409.089431][T21788] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 409.089481][T21788] ? __alloc_skb+0x140/0x710 [ 409.089606][T21788] __alloc_skb+0x140/0x710 [ 409.089632][T21788] ? __alloc_skb+0x5b7/0x710 [ 409.089659][T21788] ? __pfx___alloc_skb+0x10/0x10 [ 409.089687][T21788] ? __lock_acquire+0x4a5/0x2630 [ 409.089745][T21788] hwsim_mcast_del_radio+0x82/0x230 [ 409.089874][T21788] ? __pfx_hwsim_mcast_del_radio+0x10/0x10 [ 409.089928][T21788] ? __local_bh_enable_ip+0x9e/0x120 [ 409.089971][T21788] mac80211_hwsim_netlink_notify+0x826/0x16c0 [ 409.090053][T21788] ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10 [ 409.090105][T21788] notifier_call_chain+0x99/0x400 [ 409.090159][T21788] blocking_notifier_call_chain+0x69/0xa0 [ 409.090209][T21788] netlink_release+0x167a/0x2030 [ 409.090297][T21788] ? netlink_release+0x1e0/0x2030 [ 409.090338][T21788] ? __pfx_netlink_release+0x10/0x10 [ 409.090383][T21788] ? __pfx_locks_remove_file+0x10/0x10 [ 409.090431][T21788] __sock_release+0xb3/0x260 [ 409.090493][T21788] ? __pfx_sock_close+0x10/0x10 [ 409.090525][T21788] sock_close+0x1c/0x30 [ 409.090553][T21788] __fput+0x3ff/0xb50 [ 409.090605][T21788] task_work_run+0x150/0x240 [ 409.090635][T21788] ? __pfx_task_work_run+0x10/0x10 [ 409.090667][T21788] ? rcu_is_watching+0x12/0xc0 [ 409.090706][T21788] exit_to_user_mode_loop+0x157/0x670 [ 409.090753][T21788] ? rcu_is_watching+0x12/0xc0 [ 409.090790][T21788] do_syscall_64+0x652/0x840 [ 409.090834][T21788] ? clear_bhb_loop+0x40/0x90 [ 409.090869][T21788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.090899][T21788] RIP: 0033:0x7f66ed79ce59 [ 409.090924][T21788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.090952][T21788] RSP: 002b:00007f66ee5c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 409.090980][T21788] RAX: 0000000000000000 RBX: 00007f66eda16180 RCX: 00007f66ed79ce59 [ 409.090999][T21788] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 409.091015][T21788] RBP: 00007f66ed832d6f R08: 0000000000000000 R09: 0000000000000000 [ 409.091042][T21788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.091059][T21788] R13: 00007f66eda16218 R14: 00007f66eda16180 R15: 00007ffc6895e248 [ 409.091099][T21788] [ 409.861563][T21515] hsr_slave_0: entered promiscuous mode [ 409.881719][T21515] hsr_slave_1: entered promiscuous mode [ 409.890216][T21515] debugfs: 'hsr0' already exists in 'hsr' [ 409.896044][T21515] Cannot create hsr debugfs directory [ 410.289827][ T8686] Bluetooth: hci10: command tx timeout [ 411.002663][T21515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.133300][T21515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.281661][T21515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.404867][T21515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.663637][ T8686] Bluetooth: hci4: command 0x0406 tx timeout [ 412.062209][T21515] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.087482][T21515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.104789][T21515] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.117765][T21515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.126340][T21515] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.144266][T21515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.153102][T21515] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 412.165551][T21515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.367539][ T9127] Bluetooth: hci10: command tx timeout [ 412.464493][T21515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.538641][T21515] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.561152][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.568426][T13611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.592599][T13611] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.599777][T13611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.683699][T21515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.804674][T21515] veth0_vlan: entered promiscuous mode [ 414.000389][T21515] veth1_vlan: entered promiscuous mode [ 414.135289][T21515] veth0_macvtap: entered promiscuous mode [ 414.190416][T21515] veth1_macvtap: entered promiscuous mode [ 414.294588][T21515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.311296][T22136] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1149'. [ 414.378533][T21515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.446930][ T9127] Bluetooth: hci10: command tx timeout [ 414.644056][T13611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.711579][T13611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.748996][T13611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.782328][T13611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.020354][T13612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.034798][T13612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.262810][T13615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.289974][T13615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.773646][ T9127] Bluetooth: hci5: command 0x0406 tx timeout [ 418.013517][T22330] process 'syz.9.1151' launched './file0' with NULL argv: empty string added [ 420.445296][T22452] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 420.754640][T22463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 420.781460][T22463] Zero length message leads to an empty skb [ 420.989116][ T9127] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 421.020332][ T9127] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 421.033134][ T9127] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 421.045427][ T9127] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 421.063332][ T9127] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 421.163752][T22465] FAULT_INJECTION: forcing a failure. [ 421.163752][T22465] name failslab, interval 1, probability 0, space 0, times 0 [ 421.206702][T22465] CPU: 1 UID: 0 PID: 22465 Comm: syz.9.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.206752][T22465] Tainted: [L]=SOFTLOCKUP [ 421.206763][T22465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.206782][T22465] Call Trace: [ 421.206791][T22465] [ 421.206803][T22465] dump_stack_lvl+0x100/0x190 [ 421.206861][T22465] should_fail_ex.cold+0x5/0xa [ 421.206901][T22465] should_failslab+0xc2/0x120 [ 421.206941][T22465] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 421.206990][T22465] ? security_inode_alloc+0x3b/0x2c0 [ 421.207023][T22465] ? lockdep_init_map_type+0x5c/0x250 [ 421.207059][T22465] security_inode_alloc+0x3b/0x2c0 [ 421.207093][T22465] inode_init_always_gfp+0xc77/0xfb0 [ 421.207138][T22465] alloc_inode+0x8e/0x250 [ 421.207183][T22465] new_inode+0x22/0x1c0 [ 421.207229][T22465] shmem_get_inode+0x1e3/0xfb0 [ 421.207274][T22465] ? __pfx_shmem_get_inode+0x10/0x10 [ 421.207325][T22465] __shmem_file_setup+0x382/0x460 [ 421.207369][T22465] ? __pfx___shmem_file_setup+0x10/0x10 [ 421.207415][T22465] ? vm_area_alloc+0x1f/0x160 [ 421.207463][T22465] shmem_zero_setup+0x96/0x1b0 [ 421.207498][T22465] __mmap_region+0x2509/0x2dd0 [ 421.207560][T22465] ? __pfx___mmap_region+0x10/0x10 [ 421.207617][T22465] ? lock_acquire+0x1b1/0x370 [ 421.207662][T22465] ? find_held_lock+0x2b/0x80 [ 421.207716][T22465] ? __lock_acquire+0x4a5/0x2630 [ 421.207764][T22465] ? do_raw_spin_unlock+0x145/0x1e0 [ 421.207798][T22465] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 421.207911][T22465] ? find_held_lock+0x2b/0x80 [ 421.207951][T22465] ? rcu_is_watching+0x12/0xc0 [ 421.208004][T22465] ? rcu_is_watching+0x12/0xc0 [ 421.208038][T22465] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 421.208087][T22465] ? lockdep_hardirqs_on+0x78/0x100 [ 421.208189][T22465] mmap_region+0x35d/0x620 [ 421.208222][T22465] ? rcu_is_watching+0x12/0xc0 [ 421.208257][T22465] ? __pfx_mmap_region+0x10/0x10 [ 421.208290][T22465] ? cap_mmap_addr+0x4b/0x120 [ 421.208344][T22465] ? bpf_lsm_mmap_addr+0x9/0x30 [ 421.208386][T22465] ? security_mmap_addr+0x71/0x1e0 [ 421.208426][T22465] ? __get_unmapped_area+0x255/0x3e0 [ 421.208470][T22465] do_mmap+0xc63/0x12f0 [ 421.208526][T22465] ? __pfx_do_mmap+0x10/0x10 [ 421.208563][T22465] ? __pfx_down_write_killable+0x10/0x10 [ 421.208602][T22465] vm_mmap_pgoff+0x29e/0x470 [ 421.208648][T22465] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 421.208693][T22465] ? do_futex+0x192/0x350 [ 421.208726][T22465] ? __pfx_do_futex+0x10/0x10 [ 421.208764][T22465] ksys_mmap_pgoff+0xe4/0x610 [ 421.208802][T22465] ? __x64_sys_futex+0x358/0x4d0 [ 421.208834][T22465] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 421.208869][T22465] ? xfd_validate_state+0x129/0x190 [ 421.208898][T22465] ? ksys_write+0x1ac/0x250 [ 421.208939][T22465] __x64_sys_mmap+0x125/0x190 [ 421.208976][T22465] do_syscall_64+0x115/0x840 [ 421.209018][T22465] ? clear_bhb_loop+0x40/0x90 [ 421.209055][T22465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.209086][T22465] RIP: 0033:0x7f66ed79ce59 [ 421.209114][T22465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.209143][T22465] RSP: 002b:00007f66ee5e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 421.209174][T22465] RAX: ffffffffffffffda RBX: 00007f66eda16090 RCX: 00007f66ed79ce59 [ 421.209194][T22465] RDX: 8000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 421.209211][T22465] RBP: 00007f66ed832d6f R08: ffffffffffffffff R09: 0000000000008000 [ 421.209230][T22465] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 421.209248][T22465] R13: 00007f66eda16128 R14: 00007f66eda16090 R15: 00007ffc6895e248 [ 421.209290][T22465] [ 421.990653][T22454] sd 0:0:1:0: PR command failed: 1026 [ 422.009022][T22454] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 422.036711][T22454] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 422.284630][T22454] Process accounting paused [ 422.682280][T22543] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1162'. [ 423.086914][ T9127] Bluetooth: hci11: command tx timeout [ 423.722864][T22616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1164'. [ 423.900560][T22646] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 424.229577][T22468] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.253323][T22468] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.301983][T22468] bridge_slave_0: entered allmulticast mode [ 424.324169][T22468] bridge_slave_0: entered promiscuous mode [ 424.350247][T22468] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.367590][T22468] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.377134][T22468] bridge_slave_1: entered allmulticast mode [ 424.393319][T22468] bridge_slave_1: entered promiscuous mode [ 424.639581][T22468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.684756][T22468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.779488][T22468] team0: Port device team_slave_0 added [ 424.806718][T22468] team0: Port device team_slave_1 added [ 425.169485][ T8686] Bluetooth: hci11: command tx timeout [ 425.299589][T22468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.323423][T22468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.389607][T22468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.402691][T22468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.411399][T22468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.451345][T22468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.685000][T22468] hsr_slave_0: entered promiscuous mode [ 425.701822][T22468] hsr_slave_1: entered promiscuous mode [ 425.715003][T22468] debugfs: 'hsr0' already exists in 'hsr' [ 425.733537][T22468] Cannot create hsr debugfs directory [ 426.846355][T22468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.878547][T22468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.903084][T22468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.956551][T22468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.977273][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1171'. [ 426.983853][T22468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.008393][ T8686] Bluetooth: hci6: command 0x0406 tx timeout [ 427.067891][T22468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.167443][T22468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.212550][T22468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.246920][ T9127] Bluetooth: hci11: command tx timeout [ 427.747914][T22936] ======================================================= [ 427.747914][T22936] WARNING: The mand mount option has been deprecated and [ 427.747914][T22936] and is ignored by this kernel. Remove the mand [ 427.747914][T22936] option from the mount to silence this warning. [ 427.747914][T22936] ======================================================= [ 428.349223][T22468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.411627][T22468] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.437986][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.445176][T13613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.490323][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.497685][T13613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.767465][ T31] INFO: task syz-executor:5638 blocked for more than 143 seconds. [ 428.806837][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 428.814626][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.824084][ T31] task:syz-executor state:D stack:23656 pid:5638 tgid:5638 ppid:1 task_flags:0x400140 flags:0x00080002 [ 428.840579][ T31] Call Trace: [ 428.845379][ T31] [ 428.850660][ T31] __schedule+0x1295/0x67a0 [ 428.858545][ T31] ? __pfx___schedule+0x10/0x10 [ 428.871691][ T31] ? find_held_lock+0x2b/0x80 [ 428.878419][ T31] ? schedule+0x2bf/0x390 [ 428.891095][ T31] schedule+0xdd/0x390 [ 428.906423][ T31] schedule_preempt_disabled+0x13/0x30 [ 428.922750][ T31] __mutex_lock+0xced/0x1b10 [ 428.953250][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 428.984762][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.023068][ T31] ? net_generic+0xea/0x2a0 [ 429.035552][ T31] ? net_generic+0xea/0x2a0 [ 429.047792][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 429.061545][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 429.074364][ T31] nfsd_umount+0x3b/0x60 [ 429.089090][ T31] deactivate_locked_super+0xc1/0x1b0 [ 429.111367][ T31] deactivate_super+0xe7/0x110 [ 429.122972][ T31] cleanup_mnt+0x21f/0x450 [ 429.145097][ T31] task_work_run+0x150/0x240 [ 429.183190][ T31] ? __pfx_task_work_run+0x10/0x10 [ 429.213034][ T31] ? rcu_is_watching+0x12/0xc0 [ 429.237928][ T31] exit_to_user_mode_loop+0x157/0x670 [ 429.268603][ T31] ? rcu_is_watching+0x12/0xc0 [ 429.288157][ T31] do_syscall_64+0x652/0x840 [ 429.304551][ T31] ? clear_bhb_loop+0x40/0x90 [ 429.327069][ T9127] Bluetooth: hci11: command tx timeout [ 429.336176][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.345717][ T31] RIP: 0033:0x7f623d39e097 [ 429.352286][ T31] RSP: 002b:00007ffd79f7b7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 429.361012][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f623d39e097 [ 429.369966][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd79f7b8b0 [ 429.379166][ T31] RBP: 00007ffd79f7b8b0 R08: 00007ffd79f7c8b0 R09: 00000000ffffffff [ 429.388224][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd79f7c940 [ 429.397885][ T31] R13: 00007f623d4321ca R14: 000000000004595e R15: 00007ffd79f7c980 [ 429.415136][ T31] [ 429.419106][ T31] INFO: task syz.3.731:13230 blocked for more than 144 seconds. [ 429.428039][ T31] Tainted: G L syzkaller #0 [ 429.434795][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.464388][ T31] task:syz.3.731 state:D stack:28136 pid:13230 tgid:13225 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 429.512341][ T31] Call Trace: [ 429.516935][ T31] [ 429.521367][ T31] __schedule+0x1295/0x67a0 [ 429.526682][ T31] ? __pfx___schedule+0x10/0x10 [ 429.533402][ T31] ? find_held_lock+0x2b/0x80 [ 429.540149][ T31] ? schedule+0x2bf/0x390 [ 429.544618][ T31] schedule+0xdd/0x390 [ 429.548955][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.558760][ T31] __mutex_lock+0xced/0x1b10 [ 429.569860][ T31] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 429.576651][ T31] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 429.587621][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.592730][ T31] ? kmalloc_reserve+0xf9/0x350 [ 429.600314][ T31] ? skb_put+0x138/0x180 [ 429.604958][ T31] ? __nlmsg_put+0x152/0x1c0 [ 429.618806][ T31] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 429.624672][ T31] nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 429.631062][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 429.638212][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 429.648737][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 429.656678][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.670623][ T31] ? genl_get_cmd+0x3e7/0x760 [ 429.685607][ T31] ? __dev_queue_xmit+0xa10/0x4950 [ 429.691053][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 429.697370][ T31] genl_rcv_msg+0x560/0x800 [ 429.701935][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.707931][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 429.719665][ T31] netlink_rcv_skb+0x159/0x420 [ 429.724501][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.733729][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.740413][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 429.745910][ T31] genl_rcv+0x28/0x40 [ 429.750232][ T31] netlink_unicast+0x585/0x850 [ 429.755065][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 429.760794][ T31] netlink_sendmsg+0x8b0/0xda0 [ 429.765652][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.771211][ T31] ? __import_iovec+0x1d2/0x640 [ 429.776178][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 429.783785][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 429.791322][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.796877][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.802257][ T31] ? kasan_quarantine_put+0x104/0x240 [ 429.810636][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 429.821304][ T31] ___sys_sendmsg+0x190/0x1e0 [ 429.826063][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.832714][ T31] ? tomoyo_path_number_perm+0x188/0x580 [ 429.839866][ T31] __sys_sendmsg+0x170/0x220 [ 429.844610][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.850042][ T31] ? kcov_ioctl+0x16a/0x720 [ 429.854607][ T31] ? rcu_is_watching+0x12/0xc0 [ 429.859720][ T31] ? kcov_ioctl+0x16a/0x720 [ 429.864362][ T31] ? rcu_is_watching+0x12/0xc0 [ 429.869724][ T31] do_syscall_64+0x115/0x840 [ 429.874365][ T31] ? clear_bhb_loop+0x40/0x90 [ 429.879233][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.885197][ T31] RIP: 0033:0x7f9b3c19ce59 [ 429.893292][ T31] RSP: 002b:00007f9b3d056028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.903867][ T31] RAX: ffffffffffffffda RBX: 00007f9b3c416090 RCX: 00007f9b3c19ce59 [ 429.912111][ T31] RDX: 0000000020010090 RSI: 0000200000000380 RDI: 0000000000000003 [ 429.925482][ T31] RBP: 00007f9b3c232d6f R08: 0000000000000000 R09: 0000000000000000 [ 429.934775][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.943496][ T31] R13: 00007f9b3c416128 R14: 00007f9b3c416090 R15: 00007ffd5ee68398 [ 429.952988][ T31] [ 429.956429][ T31] INFO: task syz.2.754:13561 blocked for more than 144 seconds. [ 429.965128][ T31] Tainted: G L syzkaller #0 [ 429.974957][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.984299][ T31] task:syz.2.754 state:D stack:27528 pid:13561 tgid:13560 ppid:5639 task_flags:0x400140 flags:0x00080002 [ 429.999673][ T31] Call Trace: [ 430.003076][ T31] [ 430.006055][ T31] __schedule+0x1295/0x67a0 [ 430.014468][ T31] ? __pfx___schedule+0x10/0x10 [ 430.029853][ T31] ? find_held_lock+0x2b/0x80 [ 430.034656][ T31] ? schedule+0x2bf/0x390 [ 430.040955][ T31] schedule+0xdd/0x390 [ 430.045134][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.092240][ T31] __mutex_lock+0xced/0x1b10 [ 430.097194][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 430.103186][ T31] ? netlink_unicast+0x585/0x850 [ 430.111032][ T31] ? ____sys_sendmsg+0x9e1/0xb70 [ 430.116076][ T31] ? ___sys_sendmsg+0x190/0x1e0 [ 430.138107][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.148895][ T31] ? __asan_memset+0x23/0x50 [ 430.153599][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 430.159405][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 430.165303][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 430.171205][ T31] ? rcu_is_watching+0x12/0xc0 [ 430.176038][ T31] ? trace_kmalloc+0xe3/0x110 [ 430.181310][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 430.189085][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 430.196108][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 430.204118][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 430.210891][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 430.218820][ T31] ? genl_get_cmd+0x3e7/0x760 [ 430.228638][ T31] ? bpf_lsm_capable+0x9/0x10 [ 430.233397][ T31] ? security_capable+0x80/0x260 [ 430.241755][ T31] genl_rcv_msg+0x560/0x800 [ 430.247483][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.252568][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 430.259713][ T31] netlink_rcv_skb+0x159/0x420 [ 430.264558][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.269756][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.275224][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 430.280758][ T31] genl_rcv+0x28/0x40 [ 430.284808][ T31] netlink_unicast+0x585/0x850 [ 430.293445][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 430.300422][ T31] netlink_sendmsg+0x8b0/0xda0 [ 430.305254][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.311824][ T31] ? __import_iovec+0x1d2/0x640 [ 430.317208][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 430.322918][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 430.334081][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.340130][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.345473][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 430.353029][ T31] ? try_to_wake_up+0x5f6/0x1900 [ 430.358875][ T31] ___sys_sendmsg+0x190/0x1e0 [ 430.363643][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.371224][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 430.377213][ T31] __sys_sendmsg+0x170/0x220 [ 430.382086][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.387425][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 430.392675][ T31] ? rcu_is_watching+0x12/0xc0 [ 430.397688][ T31] do_syscall_64+0x115/0x840 [ 430.402365][ T31] ? clear_bhb_loop+0x40/0x90 [ 430.408449][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.414422][ T31] RIP: 0033:0x7f79bc59ce59 [ 430.419889][ T31] RSP: 002b:00007f79bd470028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.432934][ T31] RAX: ffffffffffffffda RBX: 00007f79bc815fa0 RCX: 00007f79bc59ce59 [ 430.442837][ T31] RDX: 0000000020008050 RSI: 00002000000050c0 RDI: 0000000000000004 [ 430.451981][ T31] RBP: 00007f79bc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 430.462109][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.471204][ T31] R13: 00007f79bc816038 R14: 00007f79bc815fa0 R15: 00007ffd9a9c8438 [ 430.480061][ T31] [ 430.502683][ T31] [ 430.502683][ T31] Showing all locks held in the system: [ 430.591001][ T31] 1 lock held by khungtaskd/31: [ 430.596006][ T31] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 430.606831][ T31] 2 locks held by getty/5388: [ 430.611577][ T31] #0: ffff8880370cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 430.622682][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 430.634718][ T31] 2 locks held by syz-executor/5630: [ 430.640372][ T31] #0: ffff88808699e0d8 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 430.650816][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 430.660550][ T31] 2 locks held by syz-executor/5638: [ 430.665866][ T31] #0: ffff88802a4c20d8 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 430.676504][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 430.686201][ T31] 2 locks held by syz.3.731/13226: [ 430.691401][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.699711][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 430.710193][ T31] 2 locks held by syz.3.731/13230: [ 430.715496][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.723905][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 430.735834][ T31] 2 locks held by syz.2.754/13561: [ 430.741035][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.749357][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 430.759529][ T31] 3 locks held by kworker/u11:8/13598: [ 430.765004][ T31] #0: ffff8880325f7140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 430.776916][ T31] #1: ffffc90005627d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 430.789324][ T31] #2: ffffffff90605c60 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 430.799046][ T31] 5 locks held by kworker/u11:23/13613: [ 430.804588][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 430.815020][ T31] #1: ffffc90006217d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 430.825145][ T31] #2: ffffffff905ecf08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 430.834686][ T31] #3: ffffffff90605c60 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 430.845620][ T31] #4: ffffffff8e7f0f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 430.856370][ T31] 2 locks held by syz-executor/14473: [ 430.861859][ T31] #0: ffff8880460260d8 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 430.872240][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 430.881907][ T31] 2 locks held by syz.4.869/16241: [ 430.887126][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.895396][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 430.905605][ T31] 2 locks held by syz-executor/16989: [ 430.911061][ T31] #0: ffff8880277fe0d8 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 430.921448][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 430.931146][ T31] 3 locks held by syz.6.1077/19881: [ 430.936487][ T31] #0: ffff8880398ac9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 430.947121][ T31] #1: ffff88803982c410 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 430.956136][ T31] #2: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 430.965232][ T31] 2 locks held by syz.8.1131/21508: [ 430.970542][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.979193][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 430.989446][ T31] 1 lock held by syz-executor/22468: [ 430.994773][ T31] #0: ffffffff90605c60 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 431.003919][ T31] 2 locks held by syz.3.1172/22892: [ 431.010145][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.019154][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 431.029611][ T31] 2 locks held by syz.3.1172/22900: [ 431.034852][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.044841][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 431.055140][ T31] 2 locks held by syz.9.1174/22940: [ 431.060537][ T31] #0: ffffffff905ecf08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 431.070127][ T31] #1: ffffffff90605c60 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 431.079495][ T31] [ 431.082244][ T31] ============================================= [ 431.082244][ T31] [ 431.101519][ T31] NMI backtrace for cpu 1 [ 431.101546][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 431.101584][ T31] Tainted: [L]=SOFTLOCKUP [ 431.101594][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.101610][ T31] Call Trace: [ 431.101619][ T31] [ 431.101630][ T31] dump_stack_lvl+0x100/0x190 [ 431.101683][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 431.101716][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.101747][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 431.101785][ T31] sys_info+0x141/0x190 [ 431.101861][ T31] watchdog+0xcb1/0x1030 [ 431.101907][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.101945][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.101984][ T31] ? __kthread_parkme+0x18c/0x230 [ 431.102025][ T31] ? kthread+0x13a/0x450 [ 431.102063][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.102098][ T31] kthread+0x370/0x450 [ 431.102139][ T31] ? __pfx_kthread+0x10/0x10 [ 431.102181][ T31] ret_from_fork+0x72b/0xd50 [ 431.102207][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 431.102227][ T31] ? __switch_to+0x800/0x1100 [ 431.102269][ T31] ? __switch_to_asm+0x39/0x70 [ 431.102292][ T31] ? __pfx_kthread+0x10/0x10 [ 431.102324][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.102357][ T31] [ 431.102364][ T31] Sending NMI from CPU 1 to CPUs 0: [ 431.240383][ C0] NMI backtrace for cpu 0 [ 431.240407][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.240439][ C0] Tainted: [L]=SOFTLOCKUP [ 431.240446][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.240459][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 431.240493][ C0] Code: f5 95 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 df 24 00 fb f4 fc 43 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 431.240514][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 431.240533][ C0] RAX: 000000000022f2d7 RBX: ffffffff8e4955c0 RCX: ffffffff8b86b285 [ 431.240548][ C0] RDX: 0000000000000000 RSI: ffffffff8df19d81 RDI: ffffffff8c1c4380 [ 431.240562][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 431.240575][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 431.240589][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d73250 [ 431.240604][ C0] FS: 0000000000000000(0000) GS:ffff88812438b000(0000) knlGS:0000000000000000 [ 431.240627][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.240642][ C0] CR2: 0000001b31193ff8 CR3: 000000007dad8000 CR4: 00000000003526f0 [ 431.240656][ C0] Call Trace: [ 431.240664][ C0] [ 431.240671][ C0] default_idle+0x9/0x10 [ 431.240690][ C0] default_idle_call+0x6c/0xb0 [ 431.240710][ C0] do_idle+0x464/0x590 [ 431.240758][ C0] ? __pfx_do_idle+0x10/0x10 [ 431.240781][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 431.240813][ C0] cpu_startup_entry+0x4f/0x60 [ 431.240840][ C0] rest_init+0x251/0x260 [ 431.240861][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 431.240943][ C0] start_kernel+0x484/0x490 [ 431.240990][ C0] x86_64_start_reservations+0x24/0x30 [ 431.241012][ C0] x86_64_start_kernel+0x12b/0x130 [ 431.241033][ C0] common_startup_64+0x13e/0x148 [ 431.241068][ C0] [ 431.437861][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 431.444783][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 431.455487][ T31] Tainted: [L]=SOFTLOCKUP [ 431.459876][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.469951][ T31] Call Trace: [ 431.473242][ T31] [ 431.476196][ T31] dump_stack_lvl+0x100/0x190 [ 431.480909][ T31] vpanic+0x552/0x970 [ 431.484998][ T31] ? __pfx_vpanic+0x10/0x10 [ 431.489518][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 431.495707][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 431.502002][ T31] panic+0xd1/0xe0 [ 431.505744][ T31] ? __pfx_panic+0x10/0x10 [ 431.510195][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 431.516370][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 431.522556][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 431.528728][ T31] ? watchdog.cold+0x1ec/0x234 [ 431.533515][ T31] ? watchdog+0xcc1/0x1030 [ 431.538066][ T31] watchdog.cold+0x1fd/0x234 [ 431.542684][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.548512][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.553223][ T31] ? __kthread_parkme+0x18c/0x230 [ 431.558298][ T31] ? kthread+0x13a/0x450 [ 431.562570][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.567270][ T31] kthread+0x370/0x450 [ 431.571366][ T31] ? __pfx_kthread+0x10/0x10 [ 431.575984][ T31] ret_from_fork+0x72b/0xd50 [ 431.580595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 431.585727][ T31] ? __switch_to+0x800/0x1100 [ 431.590515][ T31] ? __switch_to_asm+0x39/0x70 [ 431.595304][ T31] ? __pfx_kthread+0x10/0x10 [ 431.599926][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.604727][ T31] [ 431.608274][ T31] Kernel Offset: disabled [ 431.612599][ T31] Rebooting in 86400 seconds..