last executing test programs: 14m38.291381528s ago: executing program 32 (id=2671): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_PASSPIDFD(r0, 0x1, 0x4c, 0x0, &(0x7f00000014c0)=0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdf3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) pipe2$auto(0x0, 0x80) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) 11m30.240543722s ago: executing program 33 (id=5743): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x3) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) exit$auto(0x41) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, &(0x7f0000000140)="8e", 0x1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r3, &(0x7f0000000480)='\xf7\xff\xff\xff\xff\xff\xff\xff\x00'/19, 0x101000006, 0x4) 10m41.906628421s ago: executing program 34 (id=5917): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pidfd_open$auto(0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) getuid() ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(0xffffffffffffffff, 0x40095505, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x3214c0, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b92, r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck0/bank8\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0x401, 0x8100) r5 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x100, 0x0) r6 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000100), r1) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0x4}, @HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r5}, @HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0x3}, @HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0x936}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) 7m30.747940977s ago: executing program 35 (id=6698): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) landlock_create_ruleset$auto(0x0, 0x9, 0x0) (async) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x505100, 0x0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) sysfs$auto(0x2, 0x1e, 0x0) (async) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) (async) write$auto(0x3, 0x0, 0xfdf3) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) mq_open$auto(&(0x7f0000000040)='%!,\x00', 0x2, 0x4, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x7}) (async) socket(0xa, 0x2, 0x73) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x682, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r2, 0x80044dfb, &(0x7f0000000040)) (async) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4610, 0x0) (async) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r4, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m13.585338737s ago: executing program 2 (id=7061): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone3(&(0x7f0000000440)={0x22840000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), {0x3}, &(0x7f0000000280)=""/175, 0xaf, &(0x7f0000000140)=""/181, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r0}}, 0x58) process_madvise$auto_MADV_DONTFORK(r1, &(0x7f0000000500)={&(0x7f00000004c0)="ac50f8eb9ece2282ed153ab49a0bcadc9f634b4081fb5cc0de05f27bc7af7ca1d710de55068b94984b26fc8d505e1a356661be", 0x8}, 0x0, 0xa, 0x5) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r2, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, 0x0, 0x10) bpf$auto(0x1a, 0x0, 0x92) read$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x40801) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x1c000040) socket(0xa, 0x0, 0x484) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x1, 0x8, 0x2, 0xaba, 0xfffffffffffffffa, 0x7ffe) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0xe0f) socket$nl_generic(0x10, 0x3, 0x10) 6m12.465495896s ago: executing program 2 (id=7065): syz_clone3(&(0x7f00000001c0)={0x80a00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_nanosleep$auto(0x2, 0x3e, &(0x7f0000000000)={0x80802, 0xdab}, 0xfffffffffffffffe) mmap$auto(0x0, 0x40004, 0x4000000000de, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_FREEZE(r0, 0x400c620e, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r2) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f7ff00571a1593a00f032ca881299776cd995edfac482a9c0259ee6f5c57383b67e8b63c2fc95c9e541801c5b7ccfee9210bc4d083f794f18eb12f9195fdbabf2bd628d20e3767d97ed8773c6269beeb1d4d7ebd8cfc5d35f5c3f7b59d26060c4b8b0bb575924fdd8f271da3c54a666119eb28016f", @ANYRES16=r3, @ANYBLOB="010326bd7000fedbdf2501000000"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r2, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="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", 0x4ba) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r5) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010329bd7000fc1fa7fcee36cebca601a1c1cf1a288f32cf161802a3377d2872baac69a20900"/49], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) r7 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) io_uring_register$auto(r7, 0x6, &(0x7f00000006c0)="57e7af2fda7cfb729806b064dfcc432ae0e3db799021cbca28e270592f73c3cd41c32bd26fb17ee452c31ae4c486e917894d5c25fa7ea0d239965ad72b325f6c06c3fa6faa63683b23b1f7a14e21fa89a9375bbafcf2ab7573ffeaacafac9a166df86b3e210085353ac93b2b8cfda78f901cbb30d93d489f0df0cac4b0cfd1a9083532450f1579295c54ab87560f5984f807ab4f00000000", 0x4) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x822, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/ifb0/statistics/rx_nohandler\x00', 0x80000, 0x0) mmap$auto(0x100000000000000, 0xde, 0xdf, 0x9b72, r5, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/geneve0/ioam6_id_wide\x00', 0x1c9082, 0x0) sendfile$auto(r8, 0x3, 0x0, 0x400000000008) read$auto(r8, 0x0, 0x9) 6m10.4893945s ago: executing program 2 (id=7073): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x8001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r0, 0x0, 0x23) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, 0x0, 0x5, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x400) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) shutdown$auto(r1, 0x2) 6m9.93275017s ago: executing program 2 (id=7077): r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/flush\x00', 0x80a02, 0x0) write$auto_aoe_fops_aoechr(r0, 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22340, 0x4) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6m9.536487413s ago: executing program 2 (id=7079): mmap$auto(0x0, 0x4005, 0x7, 0x40eb0, 0x401, 0x300000000000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) setresgid$auto(0xee01, 0x0, 0x0) setresgid$auto(0x0, 0x0, 0x0) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r0, 0x0, 0x18) 6m9.01559531s ago: executing program 2 (id=7081): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x800000000000004, 0x6, 0x40eb1, 0x401, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x7, 0x18, 0xd60, 0x1, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0xd4, 0x1, 0x1007, 0x95, 0xf6c, 0x1ff, 0x5, 0x65f29f6a}, {0x3, 0x8, 0x1, 0x0, 0x100005, 0xfffeffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION2(r1, 0x80044100, &(0x7f0000000100)=0x9) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x800) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="020000", @ANYBLOB="29f7"], 0x14}}, 0x24004814) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket(0xa, 0x3, 0xff) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0xffffffffffffffcd) madvise$auto(0x1ffff000, 0x7, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r2) sendmsg$auto_NL80211_CMD_GET_STATION(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d5f28bd7000fddbdf25110000000c0038800800008004000600"], 0x20}, 0x1, 0x0, 0x0, 0x4001c005}, 0x800) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 5m53.900923761s ago: executing program 36 (id=7081): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x800000000000004, 0x6, 0x40eb1, 0x401, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x7, 0x18, 0xd60, 0x1, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0xd4, 0x1, 0x1007, 0x95, 0xf6c, 0x1ff, 0x5, 0x65f29f6a}, {0x3, 0x8, 0x1, 0x0, 0x100005, 0xfffeffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION2(r1, 0x80044100, &(0x7f0000000100)=0x9) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x800) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="020000", @ANYBLOB="29f7"], 0x14}}, 0x24004814) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket(0xa, 0x3, 0xff) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0xffffffffffffffcd) madvise$auto(0x1ffff000, 0x7, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r2) sendmsg$auto_NL80211_CMD_GET_STATION(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d5f28bd7000fddbdf25110000000c0038800800008004000600"], 0x20}, 0x1, 0x0, 0x0, 0x4001c005}, 0x800) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 3m38.509426371s ago: executing program 3 (id=7610): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) (async) io_uring_setup$auto(0x59, 0x0) (async) getpid() unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) (async) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) (async) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x120, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_HE_OBSS_PD={0x100, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xe2, 0x5, "2979a448e8e39d113bd54358d230a0b114062b0cfa2af6c13b02eac94965f1a95c95d47af6ec30c7f2fed5e37428732298dfb5815e03fdbde4fcfd0236de9afd0d378ed55ca0b250a2dec5d958117a55a2617588a615356a95fc64a08e5b0ede5867d5b8cbd08fe0e352cdde4665d2338cfdf45f7ada9e4eac5512f8291c07e0061b1a9d8a094bb28d1c5f2b244679ba350749a20e6a389b9289ec185329a0474b823f61440e41f0d58685bc52917089791ee3c8c30a633761f154a8a79544b7f662b9753c157d419870392cc002890974ba9b60656eb0eca4eb51faa0ca"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xcb}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000010) (async) fanotify_init$auto(0x65, 0x2) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) (async) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x244, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_ID={0x22, 0x18, "3eed9b1465d94ee937d70efbcdd93f95cb35b0d61936ae811703d63b6d71"}, @NL80211_ATTR_SAR_SPEC={0x1f8, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x11c, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x48}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x200}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffd}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff1e6d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x452}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbb02}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb19}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x20}]}]}, @NL80211_SAR_ATTR_SPECS={0xd8, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x497819ce}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc59b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x18}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc6000000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x20000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}]}]}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x244}, 0x1, 0x0, 0x0, 0x24040081}, 0x40094) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) (async) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) 3m37.755731872s ago: executing program 3 (id=7614): mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) (async) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='\xcd\xd1W\x94\xc0j!XY\x05\xc2\xa5\x8d\xcc&\x89\xaex\x95\xf1%O\x02w\x99\x91\xc7\xcd\x90\x147\xd3\n\xc7\xaa\xb7\x8e', 0x8000, &(0x7f0000000200)="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") 3m37.110870597s ago: executing program 3 (id=7616): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="02002abd7000ffdbdf250200000004000200"], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000100)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x0, 0x7ff, 0x7, 0x9}) (async) close_range$auto(0x2, 0xa, 0x0) (async) r2 = socket(0xa, 0x4, 0x84) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$auto_SO_ATTACH_BPF(r0, 0x100, 0x32, &(0x7f00000003c0)='/sys/kernel/debug/tracing/available_events\x00', 0xb) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r3 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0x99, 0x6) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) r4 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES32=r4, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xffffffff}, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0) pread64$auto(r5, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xcak{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\t\x00\x00\x00\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0xfff, 0x9) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0xf8ac, 0x4, 0x59be}, {0x81, 0x1, 0x9}, {0x4, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x47, 0x1}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r5], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 3m36.401458252s ago: executing program 3 (id=7618): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0x202000a, 0x5, 0x14, 0xffffffffffffffff, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) r2 = socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x519402, 0x0) mmap$auto(0x0, 0xb000, 0xdb, 0x200000000013, r0, 0x1000000000000) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x2, 0x0, 0x1, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) semctl$auto_SETVAL(0x2, 0x5, 0x10, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event\x00', 0x404800, 0x0) sendfile$auto(r2, r1, &(0x7f0000000100)=0x6, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r3, 0x80004509, 0x10000000000402) mmap$auto(0x3000000, 0x100000001, 0x45, 0x14000010, 0xffffffffffffffff, 0xffff) 3m30.73306864s ago: executing program 3 (id=7630): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jfs/loglevel\x00', 0x40080, 0x0) pread64$auto(r0, 0x0, 0x10001, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x6aa01, 0x0) msgctl$auto_IPC_STAT(0x10, 0x2, 0x0) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x400008, 0xdf, 0x9b75, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r3 = getsockopt$auto_SO_PEERPIDFD(r1, 0xe, 0x4d, &(0x7f0000000040)='c\'S\\\x00', &(0x7f0000000080)=0x5) ioctl$auto_EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x9) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x101, 0x2, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) 3m30.249401234s ago: executing program 3 (id=7633): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub3/sw_params\x00', 0x8482, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x103040, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdc01, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) socket(0x25, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x1e3903, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x0, 0x4010, 0xffffffffffffffff, 0x4) socket(0x10, 0x2, 0xc) 3m15.048220563s ago: executing program 37 (id=7633): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub3/sw_params\x00', 0x8482, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x103040, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdc01, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) socket(0x25, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x1e3903, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x0, 0x4010, 0xffffffffffffffff, 0x4) socket(0x10, 0x2, 0xc) 2m31.141267764s ago: executing program 4 (id=7862): r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x480400, 0x0) mmap$auto(0x0, 0xcb15, 0x5, 0xeb1, r0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r0, 0x101, 0x7ff, &(0x7f0000001100)=']\x1a\x00', &(0x7f0000001140)=0x29c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = gettid() ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r2, 0x8) r3 = prctl$auto(0x38, 0xd59a, r2, 0x6, 0x53) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x4000000, 0x0) inotify_rm_watch$auto(r3, 0xd89) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)=""/4096, 0x1000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(r4, 0x1, 0x30, &(0x7f0000000000)=']\x1a\x00', &(0x7f0000000040)=0x5) 2m30.019479998s ago: executing program 4 (id=7867): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) mmap$auto(0xffffffffffffffff, 0x602000a, 0x3, 0x1f, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, r0, 0x0) r1 = socket(0x10, 0x2, 0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00(\x00', @ANYRES32=r0, @ANYRES16=0x0, @ANYRES32=0x9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x80000000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setsockopt$auto_SO_RCVTIMEO_OLD(r3, 0x5, 0x14, 0x0, 0x2faf) writev$auto(r4, &(0x7f0000000200)={0x0, 0xa}, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/pcmC1D0p\x00', 0x60100, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)="fb", 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ocfs2_dlmfs/parameters/capabilities\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000840)=""/41, 0x29) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x100, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m29.625206139s ago: executing program 4 (id=7870): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0p\x00', 0x22440, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x402, 0x100000002000d, 0x5, 0x10000000010, 0xffffffffffffffff, 0x800a) mmap$auto(0x5c, 0x2000d, 0x4000000000df, 0xeb0, 0x401, 0x8000) r0 = getpid() socket(0xa, 0x80000, 0x80) r1 = io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0xf610, 0x2, 0x7f) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0x60102, 0x0) io_uring_setup$auto(0x1000, 0x0) unshare$auto(0x40000080) r3 = socket(0x0, 0x5, 0x49) bpf$auto(0x5, &(0x7f0000001180)=@link_update={r3, @new_prog_fd=r3, 0xf, @old_map_fd=0xffffffffffffffff}, 0x80000007) rseq$auto(0x0, 0x8000, 0x0, 0x6) kexec_load$auto(0x7, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="709bc6c9e3065f04b9f1373c3ffc3684426368a039f3aa960ab8176bf0542ba2368fcc0de90ea2d923fa424a9c5a32666043048c5591dee593e4d0f4e7303491eb4c8c0c70d5d17fef73ac1ae91d4eee119818309008e8a3c6b2b2b228847a3e72f03d8761b5c411aa2ba9b915b008f0225495c7c31d529c8fc07d547a8ef35c0ec3e0291651169c31ffec535b57775f424eaa6ba7b845ab7163bed83cb7f0dc93db8c3e", 0x0, 0x8000, 0x403000}, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0xd, 0xd, 0x0) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, &(0x7f0000000000)={&(0x7f00000000c0)="e8dba26e705740bdd643661c0b551a577d300290a30c728313928a912eefb7d3082d7ceda16b039f720001cccf0cf557c7736293f46fd44cdf27f4d6e928d43efcaca824d638fde32e921f12340088bcf21c5f385fe7ae6b0d565a24a9be5753c96cb4dfd466ad3b2a4d0b146b0d9ca6f21b3fa4ab7e6d5948ead98a7ee7529888f94308b9ee44e40fd3316df288a455f9e18ed7d56034ca89b962fbafc7eb", 0x5}, 0x8, 0x4f, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x4044c1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x29, 0x1b, 0x0, 0x201) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(r1, 0x541d, r2) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) setsockopt$auto(r4, 0xd, 0x7ff, &(0x7f0000000240)='\x00', 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES64=r0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0xc0d1) 2m27.715160826s ago: executing program 4 (id=7877): msync$auto(0x0, 0xe0, 0x6) 2m27.407271289s ago: executing program 4 (id=7878): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x50402, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r2, 0x8308000000000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyz6\x00', 0x501100, 0x0) ioctl$auto_TIOCCONS(r3, 0x541d, &(0x7f0000000340)="ac6873ab0120000067a48bc733ab468e1913ea41f41212e561b99f1b509ec2acc0280eea94b19c35698b91004786dc2171cd08194afd0dc8f2c920cbd62fd36f388ef49f976d640944512f44af62d56fbfa8839a2eea4e7e419da6c9296bd685b60eaa598c16aa67742a7d9a7269156b6997d9294532f245061f3e99f8c23cef5468197dc8a6dc7f50eecd41aab0912960b07f1d67bede920eb0a292f68950ebfe33ff541d1c64ef1430ec4c9a5029db") mmap$auto(0x0, 0x2000c, 0x4000000000e2, 0x19, r1, 0xdba7) socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0xffffffff, 0x63, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x15, 0x5, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth1_to_bridge/accept_local\x00', 0x202, 0x0) sendfile$auto(r5, r6, 0x0, 0x200) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) mmap$auto(0x0, 0x83, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_pid\x00', 0xa0000, 0x0) r8 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) semctl$auto(0x3, 0x2, 0x13, 0x0) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r9, 0x560a, r9) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r8, @ANYRES16=r7, @ANYBLOB="000029bd7100fbdbdf2504000000c3380b080000004445a078"], 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) r10 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0xbd) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) fallocate$auto(r10, 0x0, 0x7, 0x4cbd5d) getdents$auto(r9, 0x0, 0xb) socket(0x10, 0x2, 0x0) 2m27.069608224s ago: executing program 4 (id=7879): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="1f9319c707498de36a6eedfcfaa139bb5f02cf18b4ee56510d38c0f1006a40000000000000003a5503000000d72555ac78fe15300104000952d240f1ee78401b717249a54299405b2ad774f91081f18509f11ef43b533be5783dfe476371cdcb78295a199613c81a002a318d36470fa7efe353d875870baa62acc0b4f96dbe494b87370a", 0x84) write$auto_mousedev_fops_mousedev(0xffffffffffffffff, &(0x7f0000000000)="70ed0010033606e2bf3ac66e702571c51882188c8d2e8ba781da587cf0e0202d17da086d129809d25c36c7f3150ffe9124a0e43f912ea957457ceecfe00a204df4921e4a7b008dcc28329815e9f174a41fb3515e42f6d3cdb4b34db281bc6e2a482c31949489091e864034fccc96be976a0d6dd8e2ec1f8a972137ae772c1adecaca93a511393f59c78ffb69bd11c2900a9ac3ef50ce933b2955ea526f6bbe17d63987eef2264d2c4b62f11c8655e84562c1db94248c5475b59f623507441db972ff1bba196c9483f5543e95ed9d8fd322eb6ab0f3fd217e0aae78d1a96577ec927056d06f98f6", 0xe7) (async) write$auto_mousedev_fops_mousedev(0xffffffffffffffff, &(0x7f0000000000)="70ed0010033606e2bf3ac66e702571c51882188c8d2e8ba781da587cf0e0202d17da086d129809d25c36c7f3150ffe9124a0e43f912ea957457ceecfe00a204df4921e4a7b008dcc28329815e9f174a41fb3515e42f6d3cdb4b34db281bc6e2a482c31949489091e864034fccc96be976a0d6dd8e2ec1f8a972137ae772c1adecaca93a511393f59c78ffb69bd11c2900a9ac3ef50ce933b2955ea526f6bbe17d63987eef2264d2c4b62f11c8655e84562c1db94248c5475b59f623507441db972ff1bba196c9483f5543e95ed9d8fd322eb6ab0f3fd217e0aae78d1a96577ec927056d06f98f6", 0xe7) 2m11.164142228s ago: executing program 38 (id=7879): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="1f9319c707498de36a6eedfcfaa139bb5f02cf18b4ee56510d38c0f1006a40000000000000003a5503000000d72555ac78fe15300104000952d240f1ee78401b717249a54299405b2ad774f91081f18509f11ef43b533be5783dfe476371cdcb78295a199613c81a002a318d36470fa7efe353d875870baa62acc0b4f96dbe494b87370a", 0x84) write$auto_mousedev_fops_mousedev(0xffffffffffffffff, &(0x7f0000000000)="70ed0010033606e2bf3ac66e702571c51882188c8d2e8ba781da587cf0e0202d17da086d129809d25c36c7f3150ffe9124a0e43f912ea957457ceecfe00a204df4921e4a7b008dcc28329815e9f174a41fb3515e42f6d3cdb4b34db281bc6e2a482c31949489091e864034fccc96be976a0d6dd8e2ec1f8a972137ae772c1adecaca93a511393f59c78ffb69bd11c2900a9ac3ef50ce933b2955ea526f6bbe17d63987eef2264d2c4b62f11c8655e84562c1db94248c5475b59f623507441db972ff1bba196c9483f5543e95ed9d8fd322eb6ab0f3fd217e0aae78d1a96577ec927056d06f98f6", 0xe7) (async) write$auto_mousedev_fops_mousedev(0xffffffffffffffff, &(0x7f0000000000)="70ed0010033606e2bf3ac66e702571c51882188c8d2e8ba781da587cf0e0202d17da086d129809d25c36c7f3150ffe9124a0e43f912ea957457ceecfe00a204df4921e4a7b008dcc28329815e9f174a41fb3515e42f6d3cdb4b34db281bc6e2a482c31949489091e864034fccc96be976a0d6dd8e2ec1f8a972137ae772c1adecaca93a511393f59c78ffb69bd11c2900a9ac3ef50ce933b2955ea526f6bbe17d63987eef2264d2c4b62f11c8655e84562c1db94248c5475b59f623507441db972ff1bba196c9483f5543e95ed9d8fd322eb6ab0f3fd217e0aae78d1a96577ec927056d06f98f6", 0xe7) 1m56.236208239s ago: executing program 9 (id=7979): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop3\x00', 0x60742, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0xa, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = epoll_create$auto(0x20009) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) mmap$auto(0x0, 0xc02000b, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1cd200, 0x0) timer_settime$auto(0x0, 0x2, 0x0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub4/info\x00', 0x80a00, 0x0) io_uring_setup$auto(0xff, 0x0) pread64$auto(r3, 0x0, 0x202, 0xfffff000) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') select$auto(0x4, 0x0, &(0x7f0000000080)={[0x2098, 0x80000e9e, 0x10, 0xd, 0xfffffffffffffffb, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x1000000040, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100004005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) socket(0x2d, 0x2, 0x0) 1m55.697735951s ago: executing program 9 (id=7981): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/arp_all_targets\x00', 0x140b02, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) setresuid$auto(0x8, 0x8, 0x0) socket(0x25, 0x5, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55) listen$auto(0x3, 0x81) (async) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x541b, 0x74) sendfile$auto(r0, r0, 0x0, 0x3) (async) sendfile$auto(r0, r0, 0x0, 0x3) 1m55.068268828s ago: executing program 9 (id=7983): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0xd, 0xe, "5256441b633b87bba3"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @u32=0x4f}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) read$auto(0xffffffffffffffff, 0x0, 0x7f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) 1m53.656835796s ago: executing program 9 (id=7991): shmctl$auto_IPC_INFO(0x1ff, 0x3, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r1, 0x4c80, 0x0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_BATADV_CMD_GET_HARDIF(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2617c6405e839940}, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0xc3}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) linkat$auto(r0, 0x0, r0, 0x0, 0x6) rmdir$auto(&(0x7f0000000100)='./cgroup\x00') mmap$auto(0x0, 0x6, 0x2, 0xf3, r1, 0x7ff) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/crash_hotplug\x00', 0x1d7080, 0x0) 1m53.047780427s ago: executing program 9 (id=7993): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) swapon$auto(&(0x7f0000000000)='/dev/ram5\x00', 0x0) lseek$auto(0x3, 0x2, 0x4) fchown$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x3, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) kcmp$auto(0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xffffffffffffffff) prctl$auto(0x39, 0x81, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x4) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x2a, 0x2, 0x6) accept$auto(0x3, 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="ffff26bd870a2946997c2f82c2ffb62af017f6f74c1500650cd168a0b4b4306f5c000000000000", @ANYRES16=r4, @ANYBLOB="00082dbd7000fcdbdf25440000000400d800060066004e240000"], 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x40c0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r1, 0x4188aea7, &(0x7f0000000040)={0xf147}) 1m51.741577214s ago: executing program 9 (id=7997): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/tty/ptya6/power/autosuspend_delay_ms\x00', 0x101040, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) lseek$auto(0x3, 0x2, 0x4) 1m36.614384006s ago: executing program 39 (id=7997): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/tty/ptya6/power/autosuspend_delay_ms\x00', 0x101040, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) lseek$auto(0x3, 0x2, 0x4) 1m18.648516168s ago: executing program 0 (id=8081): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x14) 1m18.172529144s ago: executing program 0 (id=8083): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x2000004008000) r1 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x8140aecc, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0xb) socket(0x18, 0x3, 0x2) socketpair$auto(0xffff644d, 0x4, 0x6, &(0x7f0000000040)=0x2) mmap$auto(0x5, 0x4, 0x970, 0x40eb1, r3, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x2a, 0xdf, 0x411, 0x1000, 0x28000) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event0\x00', 0x80400, 0x0) ioctl$auto_EVIOCSMASK(r7, 0x40104593, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000) 1m17.605727778s ago: executing program 0 (id=8085): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x3, 0x1, 0x17) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(r0, 0x114, 0x1, 0x0, 0x1b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) 1m16.894658667s ago: executing program 0 (id=8088): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1m16.570758497s ago: executing program 0 (id=8089): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x400000, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f00000000c0)="990b78ab56a5a0f10127cc377ec28bcc791125fd1d24ab45394b4523c2adf2eb960b01b67994e63079b5a3a9f3784a3a7549b31e65e4d2a51430b29524f072d0c8a48dc0a366ca711eb5691bae40292ef82404c1ac914b42c73a696b3f1db2254f57c299e7a0f4f1ec7edb13b3515807679f64fcaf1d51d8bd25e0c9f2712ca3f441120ed6c71a975ce7e9018f5e284160fd0480424e5819f26f1e57ef1435d6ef81d567df249426c1821b85d21ede454729cee3ede7743a960909bee43a48d00a0a4de9098ee3010e1d349c0ec33aee1b306c544b15c1a3fa5941b088559852bb", 0x35c2, &(0x7f00000001c0)="fc5e6fe913095e4de0132dfc50df90bdb7972a23d22363ae3133c76196e76a348669c7c69887a61b3a2a28b2047cd0b8d7fb093bc35db59343c6ee2a3e132c4debca6ff9525b6aa84fe257579dca7ff4f388d3bf60d209000000e247f5bbc9d7db7386046732ba0667c7b6f6668f37ff9746877cd24e0d", 0x0, &(0x7f0000000240)="7f85ab1eb802b98da8f93c3223b1a9f942d4f13611473ea8249ea37048080cfd991e23fa3921dd2ce39ac7521d42e24322bfa02340ecfc12d3372efbe676387a8a6bbb29ae03f6c957d378af9bc57dc169c077c8452a794efec8fa86db613b60468614800a71b960ef4672a31933a38ba7deb6e96861c5330775297fa781681866d8dfe2989ed3ca1011a35261381f832abbd7c66bae2a8efcd039702ed4b56a05c927fcc476ede49221f7a16b8eb6c6a7db45f187b26e7dd9328ebeb4a9d798e4ec908d87fe0065cbb92502527ff32b51e80aae66961f8bd7eb574372fb535474a791587f88e028c1306d76813325326903a5ee552010e0", &(0x7f0000000340)=0xabde}) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4021, 0x1, 0x8e051, r0, 0x4000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x400000, 0x0) (async) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f00000000c0)="990b78ab56a5a0f10127cc377ec28bcc791125fd1d24ab45394b4523c2adf2eb960b01b67994e63079b5a3a9f3784a3a7549b31e65e4d2a51430b29524f072d0c8a48dc0a366ca711eb5691bae40292ef82404c1ac914b42c73a696b3f1db2254f57c299e7a0f4f1ec7edb13b3515807679f64fcaf1d51d8bd25e0c9f2712ca3f441120ed6c71a975ce7e9018f5e284160fd0480424e5819f26f1e57ef1435d6ef81d567df249426c1821b85d21ede454729cee3ede7743a960909bee43a48d00a0a4de9098ee3010e1d349c0ec33aee1b306c544b15c1a3fa5941b088559852bb", 0x35c2, &(0x7f00000001c0)="fc5e6fe913095e4de0132dfc50df90bdb7972a23d22363ae3133c76196e76a348669c7c69887a61b3a2a28b2047cd0b8d7fb093bc35db59343c6ee2a3e132c4debca6ff9525b6aa84fe257579dca7ff4f388d3bf60d209000000e247f5bbc9d7db7386046732ba0667c7b6f6668f37ff9746877cd24e0d", 0x0, &(0x7f0000000240)="7f85ab1eb802b98da8f93c3223b1a9f942d4f13611473ea8249ea37048080cfd991e23fa3921dd2ce39ac7521d42e24322bfa02340ecfc12d3372efbe676387a8a6bbb29ae03f6c957d378af9bc57dc169c077c8452a794efec8fa86db613b60468614800a71b960ef4672a31933a38ba7deb6e96861c5330775297fa781681866d8dfe2989ed3ca1011a35261381f832abbd7c66bae2a8efcd039702ed4b56a05c927fcc476ede49221f7a16b8eb6c6a7db45f187b26e7dd9328ebeb4a9d798e4ec908d87fe0065cbb92502527ff32b51e80aae66961f8bd7eb574372fb535474a791587f88e028c1306d76813325326903a5ee552010e0", &(0x7f0000000340)=0xabde}) (async) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4021, 0x1, 0x8e051, r0, 0x4000) (async) 1m16.239552182s ago: executing program 0 (id=8091): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/devices/uprobe/format/retprobe\x00', 0x80, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_nlctrl(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) r2 = open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) set_mempolicy$auto(0x2006, 0x0, 0x4) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async, rerun: 32) ioctl$auto_MEMWRITEOOB64(r2, 0xc0184d15, &(0x7f00000000c0)={0x9, 0x0, 0x8, 0x9}) (rerun: 32) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000d80)="b6", 0x1) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) 1m7.530129004s ago: executing program 1 (id=8124): mmap$auto(0x0, 0xe983, 0xdf, 0xebf, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000080)="fae7d8efec6f4a4180eb1ce08c730fde46514f18417fd94a34e77e63797279f0a4f2d2106f3ba890ddfa5b0db79824ebb8509437c02d94003e2ee3b41642a8e580e09069e6b0afd3aca1ea0b4d2321f7ed948e862f72cc673a005120425b7cd17624c1e0115a53895bcb484850b713a0d532c69308b2cf958502dadf4b337fd5f3ee874a013e93eccf510962ecab", 0x524f) socket(0x2, 0x80000, 0xb) sendmsg$auto(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) mmap$auto(0x2, 0x2020009, 0x401, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x149182, 0x0) read$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mincore$auto(0x1000, 0x8001, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/user\x00') mmap$auto(0x0, 0x2020009, 0x7, 0xeb2, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) madvise$auto(0xa9df, 0x7fffffffffffffff, 0x1) modify_ldt$auto(0x1, 0x0, 0x10) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189082, 0x0) r3 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) lseek$auto(r3, 0x8000, 0x0) close_range$auto(r2, r3, 0x1) write$auto(r2, 0x0, 0x7) pread64$auto(r2, 0x0, 0x3, 0x5) 1m6.094301221s ago: executing program 1 (id=8129): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000040)=':\'*&\x04!\x00', 0x2001, 0x23) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$auto(0x0, 0x402200d, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, 0x0, 0x301, 0x70bd29, 0x25dfdc02, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x5}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25050000000c00010002000000000000000c00010004"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) open(&(0x7f0000000000)='./file0\x00', 0x8200, 0x20) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000000000000000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) sysfs$auto(0x2, 0x100000000000028, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 1m5.721320352s ago: executing program 1 (id=8130): r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) futex$auto(&(0x7f0000000000)=0x4, 0x3, 0x6, &(0x7f0000000140)={0x4, 0x2}, &(0x7f0000000180)=0x2, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/snd_virmidi.0/sound/card2/mixer2/power/runtime_suspended_time\x00', 0x8a500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000280)=""/106, 0x6a) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fab7f5a8", @ANYRES16=r1, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2df500001100df28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c0600010006000000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) read$auto_mon_fops_text_t_mon_text(r2, &(0x7f0000000300)=""/177, 0xb1) 1m5.512968202s ago: executing program 1 (id=8131): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=0x0, @ANYBLOB="0ac54189d6ffffffff111000"], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000080)='\x00', 0x2a) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x4a) 1m4.364413425s ago: executing program 1 (id=8134): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x2a, 0x1, 0xb) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f00000000c0)={@config_section=0x0, 0x81}) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x1, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0xd7cdcf79, 0xfffffffffffffffc, 0x0, 0x220000000000001, 0xfe0000) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) r4 = open_tree_attr$auto(0xffffffffffffffff, 0x0, 0xda45, &(0x7f0000000080)={0xd2, 0x4, 0x800, @raw=0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'pim6reg\x00'}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/conf/veth1_to_batadv/secure_redirects\x00', 0x42c3, 0x0) socket(0x2, 0xa, 0xa) sendmmsg$auto(r4, &(0x7f0000000480)={{&(0x7f00000003c0)="935982b3233990ee360924e37ac3c98667648327a90eeaf27677", 0xff, &(0x7f00000004c0)={0x0, 0x4f}, 0x8, 0x0, 0x4000, 0x3}, 0x5}, 0x9, 0x10000fff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) fsconfig$auto_FSCONFIG_CMD_CREATE(r3, 0x6, &(0x7f0000000500)='&$^\x00', &(0x7f00000002c0), 0xa) socket(0x9, 0x1, 0x1) socket(0x2c, 0x80003, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1112e, 0x6, 0xd, 0x8fd6, 0x948b, 0x9, 0xe, 0x100000000003, 0x3, 0x62, 0x7ffffffe, 0x40000000000007, 0x4, 0x7, 0x3, 0xfffffffffffffffe]}, 0x0) ioctl$auto_XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000180)={0x1, 0x101, 0x5, 0x7, 0xffffffff, 0x1, 0x4, 0xfffffff8, 0x4, 0xc, 0x6, 0x2, "53a65a078cb78243e1b8bc5ec6ba59ab", 0xffff0000, 0x5, 0x10000, 0xf8c4, 0x81, 0x3, 0x9, 0x2, 0x4, 0xcae4, 0x1, 0x0, 0xffffffffffff44c0, 0x1ff, [0x0, 0xfffffffffffffffa, 0xd, 0x0, 0x2, 0x7, 0x7fe0000, 0xca, 0x7, 0x4, 0x3, 0x9, 0x7, 0x2]}) keyctl$auto(0x0, 0xfffffffd, 0x2, 0x0, 0xfffffffffffffbfd) 1m3.278137901s ago: executing program 1 (id=8136): madvise$auto(0x0, 0xffffffffffff0004, 0x14) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000000)='][.\x1f![%\x00', 0x7) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) sysfs$auto(0x2, 0xffff, 0x1) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x3, &(0x7f0000001640)='+\x00', &(0x7f0000001680)="df", 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 1m0.617241693s ago: executing program 40 (id=8091): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/devices/uprobe/format/retprobe\x00', 0x80, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_nlctrl(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) r2 = open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) set_mempolicy$auto(0x2006, 0x0, 0x4) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async, rerun: 32) ioctl$auto_MEMWRITEOOB64(r2, 0xc0184d15, &(0x7f00000000c0)={0x9, 0x0, 0x8, 0x9}) (rerun: 32) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000d80)="b6", 0x1) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) 48.086814536s ago: executing program 41 (id=8136): madvise$auto(0x0, 0xffffffffffff0004, 0x14) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000000)='][.\x1f![%\x00', 0x7) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) sysfs$auto(0x2, 0xffff, 0x1) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x3, &(0x7f0000001640)='+\x00', &(0x7f0000001680)="df", 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 18.056229121s ago: executing program 6 (id=8226): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x7) writev$auto(r0, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) clock_adjtime$auto(0xd2d5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) 16.937543564s ago: executing program 6 (id=8229): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0xb}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0xe9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x800064d1, 0xffffffffffffffff) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x480080, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) open(0x0, 0x0, 0x101) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(r5, 0x40246f4c, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf252c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x400c080) 14.519197844s ago: executing program 6 (id=8237): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) open(0x0, 0x0, 0x508) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram12\x00', 0x14f602, 0x0) msync$auto(0x0, 0xe0, 0x6) close_range$auto(0x2, 0x8, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@sco, 0x8) kexec_load$auto(0x5b50, 0x2, &(0x7f0000000040)={@buf=&(0x7f0000000100)="52245073518c10504bf7a3ab0b9630ef34fac8a512880a73f2a33add66e341ca36418fa428c8f7b67fec81f0347587e9e446", 0x800c000, 0x8, 0x820c000}, 0xe) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) write$auto(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) 13.963756535s ago: executing program 6 (id=8241): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd13\x00', 0x14be02, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0200", @ANYBLOB="29f7"], 0x14}}, 0x24004814) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 13.340097856s ago: executing program 6 (id=8242): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x1f) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x8c53, 0x0, 0x5, 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r1 = prctl$auto(0x80, 0x5, 0xffffffffffffffff, 0x1, 0x400) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r3, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @binary="1d906b2807a58f65"}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x104}, 0x40) capget$auto(&(0x7f0000000080)={0x7, 0x0}, &(0x7f00000000c0)={0x9, 0x829, 0x5}) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c040000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x45c}, 0x1, 0x0, 0x0, 0x2404c054}, 0x8801) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x4d) r6 = bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x2, 0x9, 0x2, 0x6, 0x58bc, r2, 0xaa5, 0x795}, 0x10) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x15, 0x0, 0x0) ioctl$auto_RNDGETENTCNT2(r6, 0x80045200, &(0x7f0000000000)=0x1) 12.808522243s ago: executing program 6 (id=8244): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='T', 0x1) 9.803187632s ago: executing program 8 (id=8254): timerfd_create$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(&(0x7f0000000000)='((\\(\\(:&:\'$\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket(0x10, 0x4, 0xfffffffc) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x402000d, 0xa, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="06000000e83c3dc3327809dc81ef9f55e170", @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8a0) socket(0x10, 0x7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x6102, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x8, 0x100009}, 0x283) ioctl$auto(0xffffffffffffffff, 0x5419, 0x38) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 9.413695921s ago: executing program 8 (id=8255): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) 9.09178988s ago: executing program 8 (id=8257): fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0xffff0000, 0x0, &(0x7f0000000080)="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", 0x1) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, r0}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x3, 0x3a) ioctl$auto(r1, 0x890c, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 8.703334395s ago: executing program 8 (id=8259): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0x5, 0x0) r0 = pipe$auto(0x0) write$auto(0x1, 0x0, 0x80000000) vmsplice$auto(r0, &(0x7f0000000000)={0x0, 0x4000005}, 0xa7d, 0x8) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/sctp/assocs\x00', 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x1a3) pread64$auto(r1, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 7.450445686s ago: executing program 8 (id=8262): ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(0xffffffffffffffff, 0x5386, &(0x7f00000003c0)="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") openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) select$auto(0x4, 0x0, &(0x7f0000000340)={[0x209c, 0x2, 0x7, 0x9, 0x33, 0x100000001, 0xa, 0xf, 0x1, 0x0, 0x3, 0x8000000d59, 0x8, 0x100000ff, 0x3, 0x80080001]}, 0x0, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x200000008000, 0xffffffff) mmap$auto(0x8000, 0x20009, 0x4000000000df, 0x100000000eb2, 0x401, 0x7ffc) epoll_wait$auto(r0, 0x0, 0x401, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x28000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 7.164567178s ago: executing program 7 (id=8263): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x8000, 0x0) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x8000, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket(0x2, 0x3, 0xe8) (async) socket(0x2, 0x3, 0xe8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya3\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6600, 0x0) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) lseek$auto(0x3, 0x8000000000000002, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x801, 0x84) (async) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r1) (async) ioctl$auto(0x3, 0x40106f52, r1) ioctl$auto_FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)="fc7b66e1bfa8f4e7715b27927e643c8bb225050a4a302b2c3f76b3bdee70cc5171e75ad82cc6610abb92993231c2e961401e07c0fd6785f34f20955920e9fef70b0e01b5dabdc2b3f8561d734687bb648f12e49cf8eac82452a2be5110aca9141c4e9fa6f03b2f3d6a00d4e09064ec551db85c50026a") r3 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x2, 0x10001, 0x41e, r3, 0x8000) 6.883116439s ago: executing program 7 (id=8264): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/cpu/events/branch-instructions\x00', 0x22b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pim6reg\x00'}) bind$auto(0x3, &(0x7f0000000040)=@phonet={0x23, 0x9, 0x6, 0x5}, 0x6a) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400284, 0x0) r2 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto_ppp_device_fops_ppp_generic(r2, &(0x7f0000000240)="816aa7e76dbbd19862e0de0ec2763b856484d872c7bd90b6aaff76bb7682c1b62f5e66fbb6ed830e9f10aaa557cff4549acbfce1f94d001ef0cdd15b436374bee89b2f13c98f70731fd4479befefe2b48ff3b8363ef53e071fa65da4defb5a4bd5a7071844b1cb3c045fa3104caf9da6938f9a869a10aa40f1852e300b4ee850cb784e58b751ed6cc0299ce5d62f4d76d0aee5f7d31e6593d2c40a550b60c7806ae24d7433dab5b4556876b4c1400df9498d22fcd513e7b2ec", 0xb9) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) 5.27647456s ago: executing program 5 (id=8266): sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bdad, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd60ffdcdbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000100)={0x5f, 0x8, 0x1, 0x93, 0x800, 0x0}) r4 = clone$auto(0x9, 0x46863d2a, &(0x7f0000000140)=0x9, &(0x7f0000000200)=0x7, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) r9 = setfsuid$auto(0xee01) setresuid$auto(0x0, r9, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000240)={0x1a08, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xe7, 0x2, 0x0, 0x1, [@typed={0x4, 0xb8}, @generic="8f9c7b48b571d43f06fc2d188dd0fd99ce43cf1e6295ae43fba678101c1a6339b7f8f002bb2fe9f05566827e13bfc2e473a0", @generic="0ba1bb3389a9a8854251a658f8cfaea372c1315ac7c7132ee5eedde71c99b1af7bb4a5482a695a6dabbfe5801a28268afb794cf27497bc00e601458506ef4efa52152bb122f1a33c12c5459a37ef46ea9ee301d0b50538f88d4fc57dff71216dd438a00c2ec4a2bd64a3028a35142bf45c565049b0d13b16affc302249b3c669688eec227f24d9f8499a79a3ee15655ea424bb00d9c244ee1c4a9d1596ff26bd39d5023125a65380cec0b07c10"]}, @MACSEC_ATTR_RXSC_CONFIG={0x1380, 0x2, 0x0, 0x1, [@nested={0xcd, 0x2d, 0x0, 0x1, [@nested={0x4, 0x33}, @generic="d7c9380569f003b0c00e18a5c3cbbff8a731a8fad14bb0719629ace06d08cffcf0bc60acf41adb96eeedb529ee4fd93fb7a13b5e5bc9953273ff0ff2873e4910084fad543011505debdfc561beed725faae05aba650ecc15e5980c0b32aca861", @typed={0x8, 0x1e, 0x0, 0x0, @pid=r3}, @generic="64bf8710f7a82230b4048b5b111bbbb7c80fc902fe093c947e5e8813b479725bcd1af7f1ce8d54c0dbe9f3654b221816e3ce76d0112e3337275e016c77f7010040174eec4e6fad7b0fa9631d702495fa7d", @typed={0xc, 0x96, 0x0, 0x0, @u64}]}, @typed={0x4, 0x98}, @nested={0x12a7, 0xb9, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x89}, @generic="63f1ea752cabb33cfebe3070c3b1c04032c19e09bb60212ed56f9e265938eb4338dd28", @nested={0x4, 0x31}, @typed={0x8, 0x31, 0x0, 0x0, @pid=r4}, @generic="cc6055fab527befb9bd207cdcacdeb89938049ad64f71441d3df2fb830a43c84152474cfae831931631f7ad8d40529112e5bb41c3d76d47da3bb2eff1f176d13bb53f593bb6b481d7921c642033d2dfd39f8cd66136a4de0cee8e4e103299fe937b7e13e0aa1f2cc943fd655495ca945ee0037ac5c26d22fce201d318257d04e1f1a658b947dc631555668a837f8dfdd4b251f36b952df2d125762542eddecd14324dbe457500c8081e13744c6f7d0fa073e0ca33fa2d8bf88d17d5b07e5bf0ef46cc981059ea8a48f493b9c0346f5cdf7a8266308d696412dee20487936c8c2332c68fe9aff8fd45e8b4a0b", @generic="b1dc46d388a2077cd701f26ef6f99259886c279eb62ab4a6575818a4c1d3ab1529aab9d2b4a596817961a99e1db363daf7bb3f28aa91ff4a2021fce01999a68a1ab29d51fd4e63a936c600c16e0836706bf88edc397e5a887ad5e9cb4a3d633b48276562c45ae75877b286bb3966c5bc7f61f880dd5dbb8c7d95d3743ff31fe456b24781e33d14dd874bf2c7e90ac2cf041309f8287aea7b930bb7", @generic="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", @generic="6af5c5457e6df8d64c3b02ee7daa68a34fe022da3e4f8dfd54308f6d33ad1d296079e63804e6119ff076e37008712ea841e0fd4708833660d82544a5bf5c947c018012f58453c55d3b1d332463a42ebf735290b69e5c052f9c5ac75b6666ebbae9c88c18cd15dc741e0fa2c80151f05b6a79b07862ee163a5a030e3c9ac600ed489624aa934af5cdd81e35b03dd94343238eff70c3db5484669b9190b3e9e9cb1043418375c9d97962ecc65e22ad3755e80413f57025e395c5e4e8b95ee04c3d0863b67763b9ea702bc80e551ee6f91401e391d49a5c870eff6f737b0649357de7"]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r8}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}, @MACSEC_ATTR_RXSC_CONFIG={0x2f9, 0x2, 0x0, 0x1, [@nested={0xf, 0x24, 0x0, 0x1, [@generic="720ab2c003761cec8364d4"]}, @typed={0x8, 0xac, 0x0, 0x0, @uid=r9}, @generic="a7b49374c57dbff2f45f", @generic="9e013af440fda2bf61f5ca", @nested={0x2c6, 0x39, 0x0, 0x1, [@generic="144f225831bd3d39a3cc0cacb6bbf949b4392ad67acb48fa0126a4eb7d8f18f64275a71320449e71f3d14c8dcd7e850a8fe383288346f4c60bcd338de3ff6e1a06544442f3fc743a687d8ee374da8c29f81297d528bca751461e78bf703e94973ae6da08dcd9e7671b8af4b697034ad06cfae1663f172cf3b6fca14b4dcfaf22320149d94124791ea9edea91b4daf029ae5a9b92baf66036c15f72511228b3fe11ace4560f975906b565707c2ea131c5b04751c3b97d6c7039ff7da56961b4113e9f4454e6e884d1568d4f96f87f142bb9dca9827703b53c2811106b336435e2182677ab46", @generic="2cb978b386039d720efe24ba2e11ab9f492b6b86426fc8e0c011fe1744496c20776458c07817b4e9b2f8ffbf0a194d35204cb24fbf4f8a5ed264ad8c5a786b2fd80e719c6dd2b14905b89fd55b2a6579c349df38aa0d4ad3e9c29d7232a400d4d63c5b8cc821a6270a1da9498d5fa59546cbdd00cb847ec9ed3f97edf115e7c7ba59a1f4f42e17c1d0d6003138852a87b4f57692c14c2bac8fa951b4b5795ca31b3a53b8821cad7ab39461260c60b2b5ff6fa3f6e0fbc7a669c8626b443790011ecd6edea42998638a5954b4d6570e8b06315bd62cf22c8a45f3", @generic="2104a7ac54a5cdb06a9677856606d04d8b1486f7a4868face057b0eb2417c0a5b1bc219568eadab69897c37cf8bcad5c1350be1e74178e11a008285c070876fe87540cc798d1081a9f6ab2ac798485ac072fc0d51d52c7a008f52a1a98711438f861063bf59f36041df264b47ec1043036af72f746657b442265250e837792cabbd25f84614b1a2cea0bec934bb867f2fe9f40c600de79ff4b06bb762c75db06ca984862537794bbc4cd3202171511b83a0fe8ee5f451f830c255a3678e92075d6f61e58018244104656bb8f13d1d5fba93f67704ec837b7f036b3cef7d65422819a1a328e5218d16c24bfb8009e8a27eb89d71f968cdf", @nested={0x4, 0x13c}, @nested={0x4, 0xc9}, @typed={0x4, 0x132}]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x280, 0x2, 0x0, 0x1, [@typed={0x4, 0xfd}, @typed={0x8, 0x154, 0x0, 0x0, @fd=r1}, @nested={0x1b6, 0x111, 0x0, 0x1, [@nested={0x4, 0x72}, @nested={0x4, 0xf4}, @generic="864d24b44a46b434af07c31ae917ed3589174b60d39a3a000a8a2b2907ae4411dc2c6ff9eb7fe2947324333da6a3755a1b8af0e88e89f4cacbfd9162fcb05f1e17a51fc05790b434b9b376eb7ff45400b99515a336e446239f97b0a46f8a246ae8f65ffcb2f135562b13d54d454bdb50ba6738392d525b1a407e2d850479fc7d16a4ccdb91585e1740d0774064b4c717e1e5108e1d9c4f3512ff50ee909f0fb34430c18b800e34fb91a94b979ab6b84573208c8ca93f05235243d6db0f58f7c730f5f706220f4ad9405dd9f44da7a77ca92d17d81736314273", @nested={0x4, 0x55}, @typed={0x4, 0x12c}, @nested={0x4, 0x102}, @generic="a4e2b212eda50145360f58c01bf682b6d0", @generic="602b9d651fd41e83bf9ad40ecbf20226166b32fd7c0247d9861aff032f5044fd0b8b880af07a2ca93b2ef88221b45bf8022df4a7764481170f04df1ff335f7e7606086df4f51258b2378565b3bae354ca854d6aad71e58b5d5a63997612e5cdb40d4565b64ae8b6717011e3ad51bb35265175d47ae8b36947702193d44168245dbdd5f1a8e6c4652472f4d107a345da54ae26982382a1461a7caaff7a2a375e10e8c348f3109936c0d71add69d74a2d09def96c0"]}, @generic="985f387fbe2ebe1345fea737342e16ce42c1af387f30a9835af1fb746df81ae7931e279dd7ce0398e76e188664f5a2e3e27d571a1f733f94fcf652d205efcde5f9b2b5f282a5b04d33cabe044fa0b5e2a0402ab2610f1ffc34a371a68bf13ac582528ed3ab00298101db6ddc52141d3c350527be428a2e4ef1407b9e45ef9ca626868f66f19662d0de9df96712ec853fdd666c18e9422d159436e6126b0ea210ade073860f08e6e255e13503485f6319b716c3d027485b23"]}]}, 0x1a08}}, 0x1) 5.273600964s ago: executing program 7 (id=8267): close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r1, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) (async) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0xa001, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x15, 0x5, 0x0) (async) get_robust_list$auto(0x1, 0x0, 0x0) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSFLAGS(r3, 0x40047459, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) write$auto(r2, &(0x7f00000003c0)='7\x00\\\xa0\x04|\xfe\xca\x12\xfa\b\x1c\xc7k\xff\xfe\x8e\xaf\xeeu~\a\xc0/(d\n\x05\x13EE\xf0\xad\r\xcb\xd3\xa83\xda}v\xcc\xfb\xcdm\x8f\nd\xca+4i{G\x18\x81J\x92\xf7\xc5,H\x88\xf6KRg\xab\xf2<^\xc7\x8fG#z\xdcM\x84\xef)\x18\x91\b \x06\xc8!\x177GA\x84n\x0e\xa3\xa1\xdb\x8aa\xe67\xc15\x04 \x16\xbd\x9d\xa1;>\x99\x8d\x1d\x83>\xf5cE\x06\xe8\xb8\xc1)\x15\xe8\x1a\xef{\xfd\x19\xa6\x84V\x7f\xf5\x9f\xf0\xa4\x1b\xf7\xa5\x91.q\xc21k\n\xca\x91L/{d\xf6#\xd5\xb4\x01\xc2/\xdf\xb4\x89y|\xc7^c,\xf3\x98\x9fo\xaa\xb1\xbf\x92\x9bX\xc8\x8f\x13\x10K+~\xde\x00gib\x8a\xebm\xc1\n\xf4\x8a\x9eQ\xea\xa4\xb4\x16?*$\x1a\b\xa7\x8e\xe7dd[\rWN\xc8<\x8a:\\\x98\xc3yX?\xfd3\x06\xaf\xb10\x11 \x836\xb7\xe1+\xe3|B\xe7\xc6H\fS\xe5Y@\xdfZ\xdf\x9e\xd0\xa6\r\x94\xf6\xe0\xe1\x98v\x8d\x06\xfa\x06$\xf9s\xdb\x9c\xfd\xf5\xa3\xa1\x1a\x96b]}\x86\xc1\x84\xe4\xfc\x17\xe4\xaa\x8dL\x11uO\xd8Y\x17\xc4FK\x8b\x05\xcd\xe2J\xf60oA\x91\xf0\xe6\xd9B7P\xbb\xb6\xf4s\x8cl\x03tJ\xfa;&\xa4\xce\xc0\x9b\xc4w)\x9f~\x8d\xc9S\x8e\xf0+\x14\xaf\xd9]*\xe5L\xc5\x0e\xf1\f j\x8c\n\\#\x8dY\f\xa4\x16\x80\xe1K\xacW\xa8\xcaf\xac\xc0\xd8\xc5S*\xe8\xfd\xc1FK\x878\xce\xea2\x11J\x8aMF\x13W\x9ePL\x91\x17fs}\xfb\xa9\xf3\xbdi\xd27\x9a\xd4\xd6\xb1\b!Z\x1dd6Z\xef\x1dLV\xf7.\xfd\xa3\xe2\xfe\x91\xb2\xf6_\x9b\xf6VC\x04\x8ea\xdcz\x88j\xcbk\xc7\xc4fBE\\\xdf\x1dl\xaa\xb9#LT\xd0\xa8\xa9t\xbf.\xbc;\xfd\x1ffc@\xcb8\xc0\x0fJ\xfc\x8a\xc0\xc0J0WP\xb6ZKSS\x02\x7fW\xd6\xdbip)e7\x8f\xab\xb1,\xf8\x83a\x9aZ\x03o\x95QZp\x97\x16\xc3u\xfe\xe7\xa14\\\\\xa7\xf2\xb1\xd68\x1c\x92<\x1b?7\xa1\xfb\xcbj\xff0cd\x81}\xcc\x88\xb4\xd42B\x84x\xb9c', 0x8001) (async) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x101000, 0x0) ioctl$auto_MEMGETOOBSEL(r4, 0x80c84d0a, 0x0) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r6 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x214000, 0x0) recvfrom$auto(r6, &(0x7f0000000100)="3480e85274a5f5552835104d6e5b39fa48d381f43b4677e9122d43ff4d00aaa86f9b", 0xffff, 0xc, &(0x7f0000000140)=@ethernet={0x306, @local}, &(0x7f0000000180)=0x4) read$auto_proc_pid_maps_operations_internal(r5, &(0x7f0000000480)=""/4083, 0xff3) 4.447305994s ago: executing program 7 (id=8268): setxattrat$auto(0xffffffffffffffff, 0x0, 0x80000001, 0x0, &(0x7f0000000380)={0x10, 0x80000001, 0xc}, 0x57) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r2}, @NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r3}, @NETDEV_A_QUEUE_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xb, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0xe3, 0x10, 0x4, 0x2dde, 0x8, 0xfffffffffffffff9, 0xab, 0x7fa4, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) 4.233374021s ago: executing program 8 (id=8269): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$auto(r1, 0x890b, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) r4 = syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000040), r0) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'geneve0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NET_SHAPER_A_PARENT={0x14, 0x9, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@CIFS_GENL_ATTR_SWN_DOMAIN_NAME={0x8, 0xb, '$%]+'}, @CIFS_GENL_ATTR_SWN_IP={0x84, 0x4, @ax25={{0x3, @null, 0x7}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}}, @CIFS_GENL_ATTR_SWN_NET_NAME_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_DOMAIN_NAME={0x6, 0xb, '%/'}]}, 0xac}, 0x1, 0x0, 0x0, 0x48010}, 0x4c001) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdc01, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) 4.02401953s ago: executing program 5 (id=8270): r0 = bpf$auto(0x0, &(0x7f00000000c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000e, 0x3}, 0x6f4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x230602, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fspick$auto(r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) ioctl$auto(r2, 0x4bfb, 0x9) bpf$auto(0x0, &(0x7f00000000c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000e, 0x3}, 0x6f4) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async) socket(0x18, 0x3, 0x2) (async) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) read$auto(r1, 0x0, 0x20) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x230602, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) fspick$auto(r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) (async) ioctl$auto(r2, 0x4bfb, 0x9) (async) 3.961419663s ago: executing program 7 (id=8271): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) r2 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000100), 0x202300, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000140)={0x80000000, r2}) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) syz_open_procfs$namespace(0x0, 0x0) (async) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r5 = pidfd_open$auto(0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1200c801}, 0x80) (async) bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) setns(r5, 0x60020000) (async) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) (async) io_uring_register$auto_IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)="7e9d3ed4109cce62f810b9a4d03b4e71153328517d5bf8ab396fafc144ef9f248111c8182d8232c89ecd19a063b9e1443eca55128a9cba", 0x5) 3.559280424s ago: executing program 5 (id=8272): r0 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x10001, 0x0, 0x7352, 0x43, 0x800000000006, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x200, 0x6, 0x10003, 0x2, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6, [0x0, 0x0, 0x13c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x43, 0x0) fsopen$auto(0x0, 0x1) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000007500)={0x0, 0x30, &(0x7f00000074c0)={&(0x7f0000001340)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 2.849571726s ago: executing program 5 (id=8273): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), r5) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x9}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40805}, 0x4000000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) (async) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r2) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) mlockall$auto(0x800000000000005) r8 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r8, &(0x7f00000002c0)=""/190, 0xfffffe39) (async) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f0000000000)="140400") 1.219742672s ago: executing program 5 (id=8274): r0 = socket(0x9, 0x80000, 0x0) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1c_\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xee\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000240)={0x81, 0x6, "c1b57301b9869adab1fdd6c995cff9eae7b39be1606e9cd8700875d4795a3db70e9ecfe6623d35bfeda2d7a5fc5728403e88a528bbd781a412be76a28e712d7036bc9b3ff2e2a292e0466d46c0f21fd755fa547193bc8e8ddd6dec206fd170cda4da3bd4dcff826699398f8f684d13f05f5e26732ef41d7a44f3e166724933b201"}, 0x0, 0x1001) setsockopt$auto(r0, 0x29, 0x6, &(0x7f0000000400)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1\x87`\xce\xe5MI\x934e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8c=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5;\xaad\r\x00C\xb42\x01I=\xa3\xabI\xfaP\xc3k\\\xeb\xbf1\xdcHu\xd8P\xab\xfd&b\xff}\x008\x05Q\x1b\xe2\xaaS\x16\x9a9zg\x96(\x8f\xc2<\xce\x94\xa0\xc4\xe1\xa7\xaf\xf9\xcbz\xa8\tG\x0fO\"\xea{\x02\x8c\xc7\x9a#\xfa\x99\xb6W|Ig\x81\xc6\x9bq\x86\x16x\xa5\xd2H+5\b\xea\xb8\xc8\x1c\xe82\x8b\xf9B\x9c\x18\xc0\xf0\x9e\xc8b[\xcb\xdcs\xf6R\xe1Xn\x11\xa6\xd7\xf6\xd6\xf7|\x9fOr\xb2c=2<\xdc\x0e\xfa\xd9\x00&\xb6', 0x10f) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a03, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffff4) rt_sigtimedwait$auto(&(0x7f0000000040)={0x3}, &(0x7f0000000080)={@_si_pad}, &(0x7f0000000100)={0xb0, 0xb}, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700003a) mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) mount_setattr$auto(0x5, 0x0, 0x8000, 0x0, 0x283) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x201, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0x9000000eb1, 0xfffffffffffffffa, 0xfff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getrlimit$auto(0x3, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x20140, 0x2c) ioctl$auto_FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x9) getrlimit$auto(0x3, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x9) write$auto(r1, 0x0, 0xfdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008015}, 0x48004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100008000a00000000000000", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8040) capset$auto(&(0x7f00000003c0)={0x20080522}, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) 235.333393ms ago: executing program 7 (id=8275): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)="958945faa2d6bd219d9e6bd807174c9a9cfc825d6b72fa6199561d3e0de0ae762b613715235b78b52f88aab67ac8ca0dddc1b307000000dd26c14265a992dffb8962012fcf5a6bba2c7ba6ceb9d4fa6d6636ccd7d59ca0127cd66a1214214f85a4163f0ae28bc4d636b5b96f3c8e3aa082ec987d4b7697", 0x1) madvise$auto(0x8000, 0x8, 0x9) madvise$auto(0x8000, 0x87fff, 0xc) 0s ago: executing program 5 (id=8276): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x80805, 0x0) getsockopt$auto(r0, 0xa4, 0x22, 0x0, 0x0) kernel console output (not intermixed with test programs): adv_slave_1 (retrying later): interface not active [ 1365.867987][T31992] hsr_slave_0: entered promiscuous mode [ 1365.892686][T31992] hsr_slave_1: entered promiscuous mode [ 1365.926290][T31992] debugfs: 'hsr0' already exists in 'hsr' [ 1365.935879][T25979] Bluetooth: hci5: command tx timeout [ 1365.972960][T31992] Cannot create hsr debugfs directory [ 1366.847104][T31992] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1366.892947][T31992] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1366.978225][T31992] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1367.011565][T31992] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1367.301365][T31992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.390948][T31992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.485736][T26617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.492890][T26617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.586279][T26617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.593416][T26617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.848998][T32087] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7715'. [ 1367.892924][T32087] vlan1: entered promiscuous mode [ 1367.935870][T32087] vlan1: entered allmulticast mode [ 1367.951666][T32087] veth0_vlan: entered allmulticast mode [ 1368.016456][T25979] Bluetooth: hci5: command tx timeout [ 1368.345397][T31992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.071458][T32112] blktrace: Concurrent blktraces are not allowed on sg0 [ 1369.338341][T31992] veth0_vlan: entered promiscuous mode [ 1369.397538][T31992] veth1_vlan: entered promiscuous mode [ 1369.514277][T31992] veth0_macvtap: entered promiscuous mode [ 1369.611831][T31992] veth1_macvtap: entered promiscuous mode [ 1369.710210][T31992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.783156][T31992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.925610][T26614] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.978230][T26614] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.096574][T25979] Bluetooth: hci5: command tx timeout [ 1370.219998][T26614] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.270522][T26614] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.654523][T26617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.716437][T26617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.829026][T26614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.898626][T26614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.558705][T32169] netlink: 25 bytes leftover after parsing attributes in process `syz.8.7734'. [ 1373.643562][T32174] FAULT_INJECTION: forcing a failure. [ 1373.643562][T32174] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1373.804504][T32174] CPU: 0 UID: 0 PID: 32174 Comm: syz.7.7735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.804536][T32174] Tainted: [L]=SOFTLOCKUP [ 1373.804543][T32174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1373.804555][T32174] Call Trace: [ 1373.804561][T32174] [ 1373.804569][T32174] dump_stack_lvl+0x100/0x190 [ 1373.804604][T32174] should_fail_ex.cold+0x5/0xa [ 1373.804626][T32174] get_futex_key+0x1d2/0x1620 [ 1373.804653][T32174] ? __pfx_get_futex_key+0x10/0x10 [ 1373.804675][T32174] ? futex_hash+0x2c5/0x380 [ 1373.804704][T32174] futex_wake+0xea/0x530 [ 1373.804733][T32174] ? __pfx_futex_wait+0x10/0x10 [ 1373.804762][T32174] ? __pfx_futex_wake+0x10/0x10 [ 1373.804793][T32174] ? apparmor_capable+0x1d7/0x4d0 [ 1373.804820][T32174] do_futex+0x32b/0x350 [ 1373.804845][T32174] ? __pfx_do_futex+0x10/0x10 [ 1373.804871][T32174] ? cap_task_prctl+0x104/0xa50 [ 1373.804890][T32174] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1373.804915][T32174] __x64_sys_futex+0x34f/0x4d0 [ 1373.804943][T32174] ? __pfx___x64_sys_futex+0x10/0x10 [ 1373.804978][T32174] ? __pfx___do_sys_prctl+0x10/0x10 [ 1373.805014][T32174] do_syscall_64+0x106/0xf80 [ 1373.805033][T32174] ? clear_bhb_loop+0x40/0x90 [ 1373.805057][T32174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.805076][T32174] RIP: 0033:0x7f0bdf59c819 [ 1373.805093][T32174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.805112][T32174] RSP: 002b:00007f0be040d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1373.805131][T32174] RAX: ffffffffffffffda RBX: 00007f0bdf816098 RCX: 00007f0bdf59c819 [ 1373.805143][T32174] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0bdf81609c [ 1373.805154][T32174] RBP: 00007f0bdf816090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.805165][T32174] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1373.805176][T32174] R13: 00007f0bdf816128 R14: 00007fff2a0b7cc0 R15: 00007fff2a0b7da8 [ 1373.805199][T32174] [ 1374.344692][T32180] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1374.515422][T32185] netlink: 334 bytes leftover after parsing attributes in process `syz.8.7737'. [ 1376.740051][T32213] MTRR 0 not used [ 1376.787217][T32211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7747'. [ 1376.837242][T32211] mac80211_hwsim hwsim193 wlan1: entered promiscuous mode [ 1376.891839][T32211] mac80211_hwsim hwsim193 wlan1: entered allmulticast mode [ 1376.978059][T32212] FAULT_INJECTION: forcing a failure. [ 1376.978059][T32212] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1377.199645][T32212] CPU: 0 UID: 0 PID: 32212 Comm: syz.8.7746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.199679][T32212] Tainted: [L]=SOFTLOCKUP [ 1377.199686][T32212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1377.199697][T32212] Call Trace: [ 1377.199705][T32212] [ 1377.199712][T32212] dump_stack_lvl+0x100/0x190 [ 1377.199746][T32212] should_fail_ex.cold+0x5/0xa [ 1377.199768][T32212] get_futex_key+0x1d2/0x1620 [ 1377.199814][T32212] ? __pfx_get_futex_key+0x10/0x10 [ 1377.199837][T32212] ? find_held_lock+0x2b/0x80 [ 1377.199855][T32212] ? futex_wake+0x456/0x530 [ 1377.199889][T32212] futex_wake+0xea/0x530 [ 1377.199923][T32212] ? __pfx_futex_wait+0x10/0x10 [ 1377.199952][T32212] ? __pfx_futex_wake+0x10/0x10 [ 1377.199990][T32212] ? apparmor_capable+0x1d7/0x4d0 [ 1377.200017][T32212] do_futex+0x32b/0x350 [ 1377.200042][T32212] ? __pfx_do_futex+0x10/0x10 [ 1377.200067][T32212] ? cap_task_prctl+0x104/0xa50 [ 1377.200088][T32212] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1377.200113][T32212] __x64_sys_futex+0x34f/0x4d0 [ 1377.200142][T32212] ? __pfx___x64_sys_futex+0x10/0x10 [ 1377.200168][T32212] ? __pfx___do_sys_prctl+0x10/0x10 [ 1377.200203][T32212] do_syscall_64+0x106/0xf80 [ 1377.200223][T32212] ? clear_bhb_loop+0x40/0x90 [ 1377.200245][T32212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.200265][T32212] RIP: 0033:0x7f88f979c819 [ 1377.200281][T32212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.200299][T32212] RSP: 002b:00007f88fa6690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1377.200318][T32212] RAX: ffffffffffffffda RBX: 00007f88f9a15fa8 RCX: 00007f88f979c819 [ 1377.200329][T32212] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88f9a15fac [ 1377.200340][T32212] RBP: 00007f88f9a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.200351][T32212] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1377.200363][T32212] R13: 00007f88f9a16038 R14: 00007ffd0eeb8fa0 R15: 00007ffd0eeb9088 [ 1377.200387][T32212] [ 1378.003323][T32227] ksmbd: Unknown IPC event: 14, ignore. [ 1378.189068][T32231] FAULT_INJECTION: forcing a failure. [ 1378.189068][T32231] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.189126][T32231] CPU: 0 UID: 0 PID: 32231 Comm: syz.9.7752 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.189153][T32231] Tainted: [L]=SOFTLOCKUP [ 1378.189160][T32231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1378.189171][T32231] Call Trace: [ 1378.189178][T32231] [ 1378.189186][T32231] dump_stack_lvl+0x100/0x190 [ 1378.189220][T32231] should_fail_ex.cold+0x5/0xa [ 1378.189243][T32231] should_failslab+0xc2/0x120 [ 1378.189264][T32231] __kvmalloc_node_noprof+0xfa/0xa00 [ 1378.189283][T32231] ? seq_read_iter+0x819/0x1270 [ 1378.189320][T32231] seq_read_iter+0x819/0x1270 [ 1378.189360][T32231] kernfs_fop_read_iter+0x46c/0x610 [ 1378.189384][T32231] ? rw_verify_area+0xce/0x6d0 [ 1378.189413][T32231] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1378.189438][T32231] vfs_read+0x825/0xb30 [ 1378.189459][T32231] ? __pfx_vfs_read+0x10/0x10 [ 1378.189492][T32231] ksys_read+0x12a/0x250 [ 1378.189510][T32231] ? __pfx_ksys_read+0x10/0x10 [ 1378.189535][T32231] do_syscall_64+0x106/0xf80 [ 1378.189555][T32231] ? clear_bhb_loop+0x40/0x90 [ 1378.189579][T32231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.189598][T32231] RIP: 0033:0x7fe17bb9c819 [ 1378.189615][T32231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.189634][T32231] RSP: 002b:00007fe17ca50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1378.189652][T32231] RAX: ffffffffffffffda RBX: 00007fe17be15fa0 RCX: 00007fe17bb9c819 [ 1378.189665][T32231] RDX: 0000000000001009 RSI: 0000200000001100 RDI: 0000000000000003 [ 1378.189676][T32231] RBP: 00007fe17ca50090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.189687][T32231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.189698][T32231] R13: 00007fe17be16038 R14: 00007fe17be15fa0 R15: 00007ffda7b23788 [ 1378.189722][T32231] [ 1379.627544][T32248] FAULT_INJECTION: forcing a failure. [ 1379.627544][T32248] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1379.627579][T32248] CPU: 0 UID: 0 PID: 32248 Comm: syz.9.7759 Tainted: G L syzkaller #0 PREEMPT(full) [ 1379.627606][T32248] Tainted: [L]=SOFTLOCKUP [ 1379.627613][T32248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1379.627624][T32248] Call Trace: [ 1379.627631][T32248] [ 1379.627638][T32248] dump_stack_lvl+0x100/0x190 [ 1379.627672][T32248] should_fail_ex.cold+0x5/0xa [ 1379.627700][T32248] get_futex_key+0x1d2/0x1620 [ 1379.627727][T32248] ? __pfx_get_futex_key+0x10/0x10 [ 1379.627749][T32248] ? futex_hash+0x2c5/0x380 [ 1379.627778][T32248] futex_wake+0xea/0x530 [ 1379.627807][T32248] ? __pfx_futex_wait+0x10/0x10 [ 1379.627836][T32248] ? __pfx_futex_wake+0x10/0x10 [ 1379.627877][T32248] ? apparmor_capable+0x1d7/0x4d0 [ 1379.627911][T32248] do_futex+0x32b/0x350 [ 1379.627937][T32248] ? __pfx_do_futex+0x10/0x10 [ 1379.627963][T32248] ? cap_task_prctl+0x104/0xa50 [ 1379.627984][T32248] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1379.628010][T32248] __x64_sys_futex+0x34f/0x4d0 [ 1379.628039][T32248] ? __pfx___x64_sys_futex+0x10/0x10 [ 1379.628067][T32248] ? __pfx___do_sys_prctl+0x10/0x10 [ 1379.628102][T32248] do_syscall_64+0x106/0xf80 [ 1379.628122][T32248] ? clear_bhb_loop+0x40/0x90 [ 1379.628145][T32248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.628164][T32248] RIP: 0033:0x7fe17bb9c819 [ 1379.628180][T32248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.628198][T32248] RSP: 002b:00007fe17ca2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1379.628217][T32248] RAX: ffffffffffffffda RBX: 00007fe17be16098 RCX: 00007fe17bb9c819 [ 1379.628229][T32248] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe17be1609c [ 1379.628240][T32248] RBP: 00007fe17be16090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.628251][T32248] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1379.628263][T32248] R13: 00007fe17be16128 R14: 00007ffda7b236a0 R15: 00007ffda7b23788 [ 1379.628287][T32248] [ 1379.773139][T32253] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7760'. [ 1379.855267][T32255] random: crng reseeded on system resumption [ 1382.449207][T32309] netlink: 2468 bytes leftover after parsing attributes in process `syz.9.7772'. [ 1382.523086][T32312] netlink: 296 bytes leftover after parsing attributes in process `syz.7.7773'. [ 1382.956705][T32319] FAULT_INJECTION: forcing a failure. [ 1382.956705][T32319] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.159296][T32319] CPU: 0 UID: 0 PID: 32319 Comm: syz.7.7775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.159329][T32319] Tainted: [L]=SOFTLOCKUP [ 1383.159336][T32319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1383.159348][T32319] Call Trace: [ 1383.159355][T32319] [ 1383.159362][T32319] dump_stack_lvl+0x100/0x190 [ 1383.159396][T32319] should_fail_ex.cold+0x5/0xa [ 1383.159419][T32319] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1383.159447][T32319] should_failslab+0xc2/0x120 [ 1383.159469][T32319] __kmalloc_noprof+0xe0/0x850 [ 1383.159504][T32319] tomoyo_realpath_from_path+0xb6/0x690 [ 1383.159538][T32319] tomoyo_path_number_perm+0x23c/0x580 [ 1383.159561][T32319] ? tomoyo_path_number_perm+0x22e/0x580 [ 1383.159586][T32319] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1383.159632][T32319] ? find_held_lock+0x2b/0x80 [ 1383.159651][T32319] ? __fget_files+0x215/0x3d0 [ 1383.159669][T32319] ? hook_file_ioctl_common+0x146/0x410 [ 1383.159698][T32319] ? __fget_files+0x21f/0x3d0 [ 1383.159741][T32319] security_file_ioctl+0xd3/0x230 [ 1383.159767][T32319] __x64_sys_ioctl+0xb7/0x210 [ 1383.159798][T32319] do_syscall_64+0x106/0xf80 [ 1383.159817][T32319] ? clear_bhb_loop+0x40/0x90 [ 1383.159840][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.159860][T32319] RIP: 0033:0x7f0bdf59c819 [ 1383.159876][T32319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.159895][T32319] RSP: 002b:00007f0be040d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.159914][T32319] RAX: ffffffffffffffda RBX: 00007f0bdf816090 RCX: 00007f0bdf59c819 [ 1383.159926][T32319] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000005 [ 1383.159937][T32319] RBP: 00007f0be040d090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.159949][T32319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.159960][T32319] R13: 00007f0bdf816128 R14: 00007f0bdf816090 R15: 00007fff2a0b7da8 [ 1383.159983][T32319] [ 1383.441767][T32319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1385.674620][ T30] audit: type=1800 audit(2147484899.665:36): pid=32375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7787" name="dbroot" dev="configfs" ino=166470 res=0 errno=0 [ 1386.723373][T32426] nbd: must specify an index to disconnect [ 1387.225035][T32439] FAULT_INJECTION: forcing a failure. [ 1387.225035][T32439] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1387.374768][T32439] CPU: 0 UID: 0 PID: 32439 Comm: syz.9.7791 Tainted: G L syzkaller #0 PREEMPT(full) [ 1387.374800][T32439] Tainted: [L]=SOFTLOCKUP [ 1387.374807][T32439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1387.374818][T32439] Call Trace: [ 1387.374833][T32439] [ 1387.374841][T32439] dump_stack_lvl+0x100/0x190 [ 1387.374874][T32439] should_fail_ex.cold+0x5/0xa [ 1387.374897][T32439] get_futex_key+0x1d2/0x1620 [ 1387.374924][T32439] ? __pfx_get_futex_key+0x10/0x10 [ 1387.374946][T32439] ? futex_hash+0x2c5/0x380 [ 1387.374975][T32439] futex_wake+0xea/0x530 [ 1387.375005][T32439] ? __pfx_futex_wait+0x10/0x10 [ 1387.375034][T32439] ? __pfx_futex_wake+0x10/0x10 [ 1387.375065][T32439] ? apparmor_capable+0x1d7/0x4d0 [ 1387.375091][T32439] do_futex+0x32b/0x350 [ 1387.375117][T32439] ? __pfx_do_futex+0x10/0x10 [ 1387.375142][T32439] ? cap_task_prctl+0x104/0xa50 [ 1387.375162][T32439] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1387.375186][T32439] __x64_sys_futex+0x34f/0x4d0 [ 1387.375214][T32439] ? __pfx___x64_sys_futex+0x10/0x10 [ 1387.375240][T32439] ? __pfx___do_sys_prctl+0x10/0x10 [ 1387.375276][T32439] do_syscall_64+0x106/0xf80 [ 1387.375296][T32439] ? clear_bhb_loop+0x40/0x90 [ 1387.375319][T32439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.375338][T32439] RIP: 0033:0x7fe17bb9c819 [ 1387.375354][T32439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.375372][T32439] RSP: 002b:00007fe17ca2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1387.375391][T32439] RAX: ffffffffffffffda RBX: 00007fe17be16098 RCX: 00007fe17bb9c819 [ 1387.375402][T32439] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe17be1609c [ 1387.375414][T32439] RBP: 00007fe17be16090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.375425][T32439] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1387.375436][T32439] R13: 00007fe17be16128 R14: 00007ffda7b236a0 R15: 00007ffda7b23788 [ 1387.375460][T32439] [ 1388.319515][T32463] netlink: 326 bytes leftover after parsing attributes in process `syz.4.7796'. [ 1388.350290][T32462] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7798'. [ 1388.531024][T32462] mac80211_hwsim hwsim201 wlan1: entered promiscuous mode [ 1388.645352][T32462] mac80211_hwsim hwsim201 wlan1: entered allmulticast mode [ 1388.931985][ T30] audit: type=1800 audit(2147484902.913:37): pid=32474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7800" name="lu_gp_id" dev="configfs" ino=166880 res=0 errno=0 [ 1389.021368][T32473] random: crng reseeded on system resumption [ 1389.921808][T32482] FAULT_INJECTION: forcing a failure. [ 1389.921808][T32482] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.016691][T32482] CPU: 0 UID: 0 PID: 32482 Comm: syz.9.7802 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.016725][T32482] Tainted: [L]=SOFTLOCKUP [ 1390.016732][T32482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1390.016744][T32482] Call Trace: [ 1390.016751][T32482] [ 1390.016759][T32482] dump_stack_lvl+0x100/0x190 [ 1390.016792][T32482] should_fail_ex.cold+0x5/0xa [ 1390.016814][T32482] ? memcg_list_lru_alloc+0x4ec/0x740 [ 1390.016843][T32482] should_failslab+0xc2/0x120 [ 1390.016865][T32482] __kmalloc_noprof+0xe0/0x850 [ 1390.016903][T32482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.016926][T32482] memcg_list_lru_alloc+0x4ec/0x740 [ 1390.016962][T32482] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1390.016990][T32482] ? rcu_read_unlock+0x17/0x60 [ 1390.017018][T32482] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1390.017050][T32482] __memcg_slab_post_alloc_hook+0x130/0x990 [ 1390.017078][T32482] ? kasan_save_track+0x14/0x30 [ 1390.017098][T32482] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 1390.017128][T32482] ? __d_alloc+0x34/0xa80 [ 1390.017150][T32482] ? security_inode_alloc+0xcf/0x2c0 [ 1390.017174][T32482] __d_alloc+0x34/0xa80 [ 1390.017198][T32482] path_from_stashed+0x427/0x750 [ 1390.017225][T32482] pidfs_alloc_file+0xf8/0x290 [ 1390.017243][T32482] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1390.017267][T32482] pidfd_prepare+0x123/0x200 [ 1390.017292][T32482] __x64_sys_pidfd_open+0x105/0x1a0 [ 1390.017324][T32482] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 1390.017357][T32482] do_syscall_64+0x106/0xf80 [ 1390.017376][T32482] ? clear_bhb_loop+0x40/0x90 [ 1390.017399][T32482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.017418][T32482] RIP: 0033:0x7fe17bb9c819 [ 1390.017434][T32482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.017452][T32482] RSP: 002b:00007fe17ca50028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1390.017471][T32482] RAX: ffffffffffffffda RBX: 00007fe17be15fa0 RCX: 00007fe17bb9c819 [ 1390.017483][T32482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1390.017494][T32482] RBP: 00007fe17bc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1390.017505][T32482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.017517][T32482] R13: 00007fe17be16038 R14: 00007fe17be15fa0 R15: 00007ffda7b23788 [ 1390.017540][T32482] [ 1390.847675][T32488] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7803'. [ 1390.967585][T32488] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7803'. [ 1391.130051][T32488] netlink: 108 bytes leftover after parsing attributes in process `syz.7.7803'. [ 1391.147114][T32506] FAULT_INJECTION: forcing a failure. [ 1391.147114][T32506] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1391.249082][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7803'. [ 1391.289016][T32506] CPU: 0 UID: 0 PID: 32506 Comm: syz.4.7804 Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.289048][T32506] Tainted: [L]=SOFTLOCKUP [ 1391.289055][T32506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1391.289066][T32506] Call Trace: [ 1391.289073][T32506] [ 1391.289081][T32506] dump_stack_lvl+0x100/0x190 [ 1391.289116][T32506] should_fail_ex.cold+0x5/0xa [ 1391.289145][T32506] get_futex_key+0x1d2/0x1620 [ 1391.289171][T32506] ? __pfx_get_futex_key+0x10/0x10 [ 1391.289193][T32506] ? futex_hash+0x2c5/0x380 [ 1391.289222][T32506] futex_wake+0xea/0x530 [ 1391.289251][T32506] ? __pfx_futex_wait+0x10/0x10 [ 1391.289281][T32506] ? __pfx_futex_wake+0x10/0x10 [ 1391.289313][T32506] ? apparmor_capable+0x1d7/0x4d0 [ 1391.289340][T32506] do_futex+0x32b/0x350 [ 1391.289366][T32506] ? __pfx_do_futex+0x10/0x10 [ 1391.289391][T32506] ? cap_task_prctl+0x104/0xa50 [ 1391.289411][T32506] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1391.289436][T32506] __x64_sys_futex+0x34f/0x4d0 [ 1391.289464][T32506] ? __pfx___x64_sys_futex+0x10/0x10 [ 1391.289491][T32506] ? __pfx___do_sys_prctl+0x10/0x10 [ 1391.289527][T32506] do_syscall_64+0x106/0xf80 [ 1391.289547][T32506] ? clear_bhb_loop+0x40/0x90 [ 1391.289570][T32506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.289589][T32506] RIP: 0033:0x7fbcb019c819 [ 1391.289605][T32506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.289624][T32506] RSP: 002b:00007fbcb111e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1391.289642][T32506] RAX: ffffffffffffffda RBX: 00007fbcb0416098 RCX: 00007fbcb019c819 [ 1391.289655][T32506] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbcb041609c [ 1391.289666][T32506] RBP: 00007fbcb0416090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.289677][T32506] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1391.289689][T32506] R13: 00007fbcb0416128 R14: 00007ffd7b39bb40 R15: 00007ffd7b39bc28 [ 1391.289713][T32506] [ 1391.738607][T32488] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7803'. [ 1391.797121][T32488] netlink: 388 bytes leftover after parsing attributes in process `syz.7.7803'. [ 1392.250027][T32505] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7803'. [ 1392.388593][T32505] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7803'. [ 1393.243115][T32531] FAULT_INJECTION: forcing a failure. [ 1393.243115][T32531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.377776][T32531] CPU: 0 UID: 0 PID: 32531 Comm: syz.9.7810 Tainted: G L syzkaller #0 PREEMPT(full) [ 1393.377809][T32531] Tainted: [L]=SOFTLOCKUP [ 1393.377816][T32531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1393.377827][T32531] Call Trace: [ 1393.377834][T32531] [ 1393.377842][T32531] dump_stack_lvl+0x100/0x190 [ 1393.377883][T32531] should_fail_ex.cold+0x5/0xa [ 1393.377906][T32531] _copy_to_user+0x32/0xd0 [ 1393.377933][T32531] simple_read_from_buffer+0xcb/0x170 [ 1393.377967][T32531] proc_fail_nth_read+0x1af/0x230 [ 1393.377992][T32531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.378019][T32531] ? rw_verify_area+0xce/0x6d0 [ 1393.378047][T32531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.378076][T32531] vfs_read+0x1e4/0xb30 [ 1393.378097][T32531] ? __pfx_vfs_read+0x10/0x10 [ 1393.378115][T32531] ? __fget_files+0x215/0x3d0 [ 1393.378139][T32531] ? __fget_files+0x21f/0x3d0 [ 1393.378164][T32531] ksys_read+0x12a/0x250 [ 1393.378182][T32531] ? __pfx_ksys_read+0x10/0x10 [ 1393.378207][T32531] do_syscall_64+0x106/0xf80 [ 1393.378228][T32531] ? clear_bhb_loop+0x40/0x90 [ 1393.378251][T32531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.378271][T32531] RIP: 0033:0x7fe17bb5d04e [ 1393.378287][T32531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1393.378306][T32531] RSP: 002b:00007fe17ca2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1393.378325][T32531] RAX: ffffffffffffffda RBX: 00007fe17ca2f6c0 RCX: 00007fe17bb5d04e [ 1393.378338][T32531] RDX: 000000000000000f RSI: 00007fe17ca2f0a0 RDI: 0000000000000006 [ 1393.378349][T32531] RBP: 00007fe17ca2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.378360][T32531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.378371][T32531] R13: 00007fe17be16128 R14: 00007fe17be16090 R15: 00007ffda7b23788 [ 1393.378395][T32531] [ 1394.003996][T32537] usb usb3: usbfs: process 32537 (syz.8.7814) did not claim interface 0 before use [ 1394.307245][T32543] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:5 is already present [ 1395.689697][ T5912] usb usb40-port2: attempt power cycle [ 1396.288042][T32580] random: crng reseeded on system resumption [ 1396.330363][ T5912] usb usb40-port2: unable to enumerate USB device [ 1396.722509][T32592] __nla_validate_parse: 4 callbacks suppressed [ 1396.722528][T32592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7828'. [ 1400.269973][T32648] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 1400.561354][T32648] pci 0000:00:01.3: PCI INT A: no GSI [ 1400.826130][ T30] audit: type=1800 audit(2147484914.808:38): pid=32664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7848" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1401.979240][T32684] FAULT_INJECTION: forcing a failure. [ 1401.979240][T32684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1402.040997][T32684] CPU: 0 UID: 0 PID: 32684 Comm: syz.9.7854 Tainted: G L syzkaller #0 PREEMPT(full) [ 1402.041038][T32684] Tainted: [L]=SOFTLOCKUP [ 1402.041045][T32684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1402.041056][T32684] Call Trace: [ 1402.041063][T32684] [ 1402.041070][T32684] dump_stack_lvl+0x100/0x190 [ 1402.041105][T32684] should_fail_ex.cold+0x5/0xa [ 1402.041124][T32684] ? prepare_alloc_pages+0x16d/0x5f0 [ 1402.041150][T32684] should_fail_alloc_page+0xeb/0x140 [ 1402.041174][T32684] prepare_alloc_pages+0x1f0/0x5f0 [ 1402.041200][T32684] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1402.041234][T32684] ? stack_trace_save+0x8e/0xc0 [ 1402.041253][T32684] ? __pfx_stack_trace_save+0x10/0x10 [ 1402.041274][T32684] ? stack_depot_save_flags+0x27/0x9d0 [ 1402.041305][T32684] ? kasan_save_stack+0x3f/0x50 [ 1402.041321][T32684] ? kasan_save_stack+0x30/0x50 [ 1402.041337][T32684] ? kasan_save_track+0x14/0x30 [ 1402.041355][T32684] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1402.041385][T32684] ? __handle_mm_fault+0xa9e/0x2b60 [ 1402.041410][T32684] ? handle_mm_fault+0x36d/0xa20 [ 1402.041435][T32684] ? do_user_addr_fault+0x74c/0x12f0 [ 1402.041454][T32684] ? asm_exc_page_fault+0x26/0x30 [ 1402.041477][T32684] ? _copy_from_user+0x98/0xd0 [ 1402.041500][T32684] ? __sys_bpf+0x243/0x4b90 [ 1402.041521][T32684] ? __x64_sys_bpf+0x7b/0xc0 [ 1402.041543][T32684] ? do_syscall_64+0x106/0xf80 [ 1402.041562][T32684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.041593][T32684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1402.041614][T32684] ? policy_nodemask+0xed/0x4f0 [ 1402.041637][T32684] alloc_pages_mpol+0x1fb/0x550 [ 1402.041660][T32684] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1402.041688][T32684] alloc_pages_noprof+0x136/0x390 [ 1402.041711][T32684] pte_alloc_one+0x1c/0x3d0 [ 1402.041734][T32684] do_fault+0x88e/0x18e0 [ 1402.041757][T32684] ? __pmd_alloc+0x3fb/0x950 [ 1402.041783][T32684] __handle_mm_fault+0x1815/0x2b60 [ 1402.041814][T32684] ? mt_find+0x45e/0x8e0 [ 1402.041837][T32684] ? __pfx___handle_mm_fault+0x10/0x10 [ 1402.041863][T32684] ? __pfx_mt_find+0x10/0x10 [ 1402.041896][T32684] ? find_vma+0xbf/0x140 [ 1402.041915][T32684] ? __pfx_find_vma+0x10/0x10 [ 1402.041936][T32684] handle_mm_fault+0x36d/0xa20 [ 1402.041968][T32684] do_user_addr_fault+0x74c/0x12f0 [ 1402.041993][T32684] exc_page_fault+0x6f/0xd0 [ 1402.042019][T32684] asm_exc_page_fault+0x26/0x30 [ 1402.042038][T32684] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1402.042065][T32684] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1402.042083][T32684] RSP: 0018:ffffc9000335fbf8 EFLAGS: 00050216 [ 1402.042099][T32684] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000026 [ 1402.042111][T32684] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000335fd90 [ 1402.042123][T32684] RBP: 0000000000000026 R08: 0000000000000001 R09: fffff5200066bfb6 [ 1402.042134][T32684] R10: ffffc9000335fdb5 R11: 0000000000000000 R12: 0000000000000000 [ 1402.042145][T32684] R13: ffffc9000335fd90 R14: 0000000000000026 R15: ffffc9000335fd90 [ 1402.042168][T32684] _copy_from_user+0x98/0xd0 [ 1402.042194][T32684] __sys_bpf+0x243/0x4b90 [ 1402.042219][T32684] ? __pfx___sys_bpf+0x10/0x10 [ 1402.042240][T32684] ? proc_fail_nth_write+0x9f/0x220 [ 1402.042265][T32684] ? find_held_lock+0x2b/0x80 [ 1402.042289][T32684] ? find_held_lock+0x2b/0x80 [ 1402.042307][T32684] ? ksys_write+0x190/0x250 [ 1402.042331][T32684] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1402.042353][T32684] ? __fget_files+0x215/0x3d0 [ 1402.042384][T32684] ? fput+0x79/0x100 [ 1402.042406][T32684] ? ksys_write+0x1ac/0x250 [ 1402.042424][T32684] ? __pfx_ksys_write+0x10/0x10 [ 1402.042447][T32684] __x64_sys_bpf+0x7b/0xc0 [ 1402.042470][T32684] ? lockdep_hardirqs_on+0x78/0x100 [ 1402.042501][T32684] do_syscall_64+0x106/0xf80 [ 1402.042520][T32684] ? clear_bhb_loop+0x40/0x90 [ 1402.042542][T32684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.042562][T32684] RIP: 0033:0x7fe17bb9c819 [ 1402.042577][T32684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.042595][T32684] RSP: 002b:00007fe17ca50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1402.042612][T32684] RAX: ffffffffffffffda RBX: 00007fe17be15fa0 RCX: 00007fe17bb9c819 [ 1402.042624][T32684] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000012 [ 1402.042635][T32684] RBP: 00007fe17ca50090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.042646][T32684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1402.042665][T32684] R13: 00007fe17be16038 R14: 00007fe17be15fa0 R15: 00007ffda7b23788 [ 1402.042689][T32684] [ 1403.642614][T32695] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7857'. [ 1405.474385][T32709] bridge0: port 3(team0) entered blocking state [ 1405.480840][T32709] bridge0: port 3(team0) entered disabled state [ 1405.642661][T32709] team0: entered allmulticast mode [ 1405.731416][T32709] team_slave_0: entered allmulticast mode [ 1405.803934][T32709] team_slave_1: entered allmulticast mode [ 1405.982867][T32709] team0: entered promiscuous mode [ 1406.045092][T32709] team_slave_0: entered promiscuous mode [ 1406.088551][T32709] team_slave_1: entered promiscuous mode [ 1406.151586][T32709] bridge0: port 3(team0) entered blocking state [ 1406.158091][T32709] bridge0: port 3(team0) entered forwarding state [ 1407.752124][T32766] kexec: Could not allocate control_code_buffer [ 1409.196641][ T332] futex_wake_op: syz.7.7880 tries to shift op by -2048; fix this program [ 1409.242526][ T333] futex_wake_op: syz.7.7880 tries to shift op by -2048; fix this program [ 1409.388687][ T324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1409.437640][ T324] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1409.469713][ T324] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1409.513462][ T324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1409.544532][ T324] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1409.588122][ T324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1409.625921][ T324] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1409.677240][ T324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1409.683243][ T324] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1409.733226][ T324] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1409.776879][ T324] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1409.841691][ T324] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1409.855437][ T346] can: request_module (can-proto-4) failed. [ 1411.240688][T25979] Bluetooth: hci2: command 0x0c1a tx timeout [ 1411.477715][T25979] Bluetooth: hci4: command 0x0406 tx timeout [ 1411.556808][T25979] Bluetooth: hci1: command 0x0406 tx timeout [ 1411.637129][T25979] Bluetooth: hci3: command 0x0406 tx timeout [ 1411.717735][T25979] Bluetooth: hci0: command 0x0406 tx timeout [ 1411.796908][T25979] Bluetooth: hci5: command 0x0c1a tx timeout [ 1413.560634][T25979] Bluetooth: hci4: command 0x0406 tx timeout [ 1413.643806][T25979] Bluetooth: hci1: command 0x0406 tx timeout [ 1413.723573][T25979] Bluetooth: hci3: command 0x0406 tx timeout [ 1413.798348][T25979] Bluetooth: hci0: command 0x0406 tx timeout [ 1413.878285][T25979] Bluetooth: hci5: command 0x0c1a tx timeout [ 1415.959087][T25979] Bluetooth: hci5: command 0x0c1a tx timeout [ 1416.124523][ T447] FAULT_INJECTION: forcing a failure. [ 1416.124523][ T447] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.192726][ T447] CPU: 0 UID: 0 PID: 447 Comm: syz.9.7911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.192758][ T447] Tainted: [L]=SOFTLOCKUP [ 1416.192765][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1416.192776][ T447] Call Trace: [ 1416.192783][ T447] [ 1416.192791][ T447] dump_stack_lvl+0x100/0x190 [ 1416.192825][ T447] should_fail_ex.cold+0x5/0xa [ 1416.192849][ T447] should_failslab+0xc2/0x120 [ 1416.192871][ T447] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1416.192900][ T447] ? security_inode_alloc+0x3b/0x2c0 [ 1416.192921][ T447] ? lockdep_init_map_type+0x5c/0x250 [ 1416.192951][ T447] security_inode_alloc+0x3b/0x2c0 [ 1416.192973][ T447] inode_init_always_gfp+0xced/0x1040 [ 1416.192997][ T447] alloc_inode+0x8e/0x250 [ 1416.193023][ T447] new_inode+0x22/0x1c0 [ 1416.193050][ T447] hugetlbfs_get_inode+0x313/0x750 [ 1416.193075][ T447] hugetlb_file_setup+0x3cc/0x5b0 [ 1416.193100][ T447] newseg+0xabb/0xed0 [ 1416.193130][ T447] ? __pfx_newseg+0x10/0x10 [ 1416.193155][ T447] ? down_write+0x146/0x1f0 [ 1416.193177][ T447] ? ksys_write+0x190/0x250 [ 1416.193195][ T447] ? ksys_write+0x190/0x250 [ 1416.193216][ T447] ipcget+0xee/0xf50 [ 1416.193241][ T447] ? do_futex+0x192/0x350 [ 1416.193266][ T447] ? __pfx_do_futex+0x10/0x10 [ 1416.193294][ T447] ? __pfx_ipcget+0x10/0x10 [ 1416.193321][ T447] ? __x64_sys_futex+0x34f/0x4d0 [ 1416.193346][ T447] ? __x64_sys_futex+0x358/0x4d0 [ 1416.193375][ T447] __x64_sys_shmget+0x13b/0x1b0 [ 1416.193402][ T447] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1416.193441][ T447] do_syscall_64+0x106/0xf80 [ 1416.193460][ T447] ? clear_bhb_loop+0x40/0x90 [ 1416.193482][ T447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.193501][ T447] RIP: 0033:0x7fe17bb9c819 [ 1416.193517][ T447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.193544][ T447] RSP: 002b:00007fe17ca50028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1416.193563][ T447] RAX: ffffffffffffffda RBX: 00007fe17be15fa0 RCX: 00007fe17bb9c819 [ 1416.193575][ T447] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1416.193587][ T447] RBP: 00007fe17bc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1416.193598][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.193609][ T447] R13: 00007fe17be16038 R14: 00007fe17be15fa0 R15: 00007ffda7b23788 [ 1416.193633][ T447] [ 1418.718639][ T491] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1418.759132][ T492] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1419.392904][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7922'. [ 1419.483116][ T501] netlink: 13 bytes leftover after parsing attributes in process `syz.7.7922'. [ 1423.567483][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.582975][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.353277][T26532] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1425.365910][T26532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1425.374903][T26532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1425.383940][T26532] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1425.405416][T26532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1426.205036][ T608] chnl_net:caif_netlink_parms(): no params data found [ 1426.409217][ T619] tipc: Started in network mode [ 1426.438315][ T619] tipc: Node identity ee00, cluster identity 4711 [ 1426.492793][ T619] tipc: Node number set to 60928 [ 1426.559537][ T619] random: crng reseeded on system resumption [ 1426.716383][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.752084][ T608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.793334][ T608] bridge_slave_0: entered allmulticast mode [ 1426.840864][ T608] bridge_slave_0: entered promiscuous mode [ 1426.898507][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.935811][ T608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.965476][ T608] bridge_slave_1: entered allmulticast mode [ 1427.001559][ T608] bridge_slave_1: entered promiscuous mode [ 1427.152601][ T608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.237445][ T608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.452136][ T608] team0: Port device team_slave_0 added [ 1427.485065][T26532] Bluetooth: hci6: command tx timeout [ 1427.537561][ T608] team0: Port device team_slave_1 added [ 1427.697755][ T608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1427.767904][ T608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.965196][ T608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.039161][ T608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.077994][ T608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.205487][ T608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.550216][ T608] hsr_slave_0: entered promiscuous mode [ 1428.588411][ T608] hsr_slave_1: entered promiscuous mode [ 1428.616565][ T608] debugfs: 'hsr0' already exists in 'hsr' [ 1428.642941][ T608] Cannot create hsr debugfs directory [ 1429.350708][ T662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7949'. [ 1429.569307][T26532] Bluetooth: hci6: command tx timeout [ 1431.646906][T26532] Bluetooth: hci6: command tx timeout [ 1432.939265][ T608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1433.520250][ T608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1433.730377][ T608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1433.737434][T26532] Bluetooth: hci6: command tx timeout [ 1433.825619][ T608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1434.509648][ T608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.640992][ T608] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.733781][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.740937][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.835179][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.842419][ T534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.756355][ T756] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7962'. [ 1436.232267][ T608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.541385][ T608] veth0_vlan: entered promiscuous mode [ 1436.615388][ T608] veth1_vlan: entered promiscuous mode [ 1436.860438][ T608] veth0_macvtap: entered promiscuous mode [ 1436.921598][ T608] veth1_macvtap: entered promiscuous mode [ 1437.061117][ T608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.117224][ T608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.170467][ T782] netlink: 342 bytes leftover after parsing attributes in process `syz.8.7968'. [ 1437.206888][ T568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.279679][ T568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.354849][ T568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.417913][ T568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.857004][T26615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.917214][T26615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.101836][ T568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.109691][ T568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.162938][ T803] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7971'. [ 1438.335666][ T806] random: crng reseeded on system resumption [ 1438.804681][ T821] netlink: 342 bytes leftover after parsing attributes in process `syz.8.7973'. [ 1438.917412][ T821] netlink: 342 bytes leftover after parsing attributes in process `syz.8.7973'. [ 1439.787674][ T840] writes to the poll attribute are ignored. [ 1439.887103][ T840] please use driver specific parameters instead. [ 1440.274443][ T854] FAULT_INJECTION: forcing a failure. [ 1440.274443][ T854] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.425799][ T854] CPU: 0 UID: 0 PID: 854 Comm: syz.7.7980 Tainted: G L syzkaller #0 PREEMPT(full) [ 1440.425832][ T854] Tainted: [L]=SOFTLOCKUP [ 1440.425839][ T854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1440.425849][ T854] Call Trace: [ 1440.425856][ T854] [ 1440.425864][ T854] dump_stack_lvl+0x100/0x190 [ 1440.425898][ T854] should_fail_ex.cold+0x5/0xa [ 1440.425920][ T854] ? tomoyo_encode2+0xfb/0x3c0 [ 1440.425946][ T854] should_failslab+0xc2/0x120 [ 1440.425968][ T854] __kmalloc_noprof+0xe0/0x850 [ 1440.425997][ T854] ? d_absolute_path+0x136/0x1b0 [ 1440.426028][ T854] tomoyo_encode2+0xfb/0x3c0 [ 1440.426058][ T854] tomoyo_encode+0x29/0x50 [ 1440.426085][ T854] tomoyo_realpath_from_path+0x18c/0x690 [ 1440.426119][ T854] tomoyo_path_number_perm+0x23c/0x580 [ 1440.426142][ T854] ? tomoyo_path_number_perm+0x22e/0x580 [ 1440.426167][ T854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1440.426213][ T854] ? find_held_lock+0x2b/0x80 [ 1440.426232][ T854] ? __fget_files+0x215/0x3d0 [ 1440.426258][ T854] ? hook_file_ioctl_common+0x146/0x410 [ 1440.426292][ T854] ? __fget_files+0x21f/0x3d0 [ 1440.426315][ T854] security_file_ioctl+0xd3/0x230 [ 1440.426341][ T854] __x64_sys_ioctl+0xb7/0x210 [ 1440.426372][ T854] do_syscall_64+0x106/0xf80 [ 1440.426392][ T854] ? clear_bhb_loop+0x40/0x90 [ 1440.426416][ T854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.426436][ T854] RIP: 0033:0x7f0bdf59c819 [ 1440.426453][ T854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.426472][ T854] RSP: 002b:00007f0be042e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.426493][ T854] RAX: ffffffffffffffda RBX: 00007f0bdf815fa0 RCX: 00007f0bdf59c819 [ 1440.426506][ T854] RDX: 0000000000000000 RSI: 0000000000003b64 RDI: 0000000000000003 [ 1440.426518][ T854] RBP: 00007f0be042e090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.426530][ T854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.426541][ T854] R13: 00007f0bdf816038 R14: 00007f0bdf815fa0 R15: 00007fff2a0b7da8 [ 1440.426565][ T854] [ 1440.426602][ T854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1442.724276][ T900] netlink: 122 bytes leftover after parsing attributes in process `syz.9.7991'. [ 1442.963905][ T906] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1443.363817][ T919] Unable to find swap-space signature [ 1445.125129][ T956] FAULT_INJECTION: forcing a failure. [ 1445.125129][ T956] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.216468][ T956] CPU: 0 UID: 0 PID: 956 Comm: syz.0.8000 Tainted: G L syzkaller #0 PREEMPT(full) [ 1445.216502][ T956] Tainted: [L]=SOFTLOCKUP [ 1445.216508][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1445.216520][ T956] Call Trace: [ 1445.216527][ T956] [ 1445.216535][ T956] dump_stack_lvl+0x100/0x190 [ 1445.216568][ T956] should_fail_ex.cold+0x5/0xa [ 1445.216590][ T956] ? __register_sysctl_table+0xbe4/0x1650 [ 1445.216609][ T956] should_failslab+0xc2/0x120 [ 1445.216631][ T956] __kmalloc_noprof+0xe0/0x850 [ 1445.216670][ T956] __register_sysctl_table+0xbe4/0x1650 [ 1445.216695][ T956] ? __pfx___register_sysctl_table+0x10/0x10 [ 1445.216714][ T956] ? is_module_address+0x69/0xf0 [ 1445.216738][ T956] ? register_net_sysctl_sz+0x222/0x430 [ 1445.216762][ T956] ? __asan_memcpy+0x3c/0x60 [ 1445.216792][ T956] smc_sysctl_net_init+0xbb/0x450 [ 1445.216817][ T956] ? __pfx_smc_net_init+0x10/0x10 [ 1445.216840][ T956] smc_net_init+0x16/0x50 [ 1445.216863][ T956] ops_init+0x1e2/0x5f0 [ 1445.216885][ T956] setup_net+0x118/0x3a0 [ 1445.216905][ T956] ? __pfx_setup_net+0x10/0x10 [ 1445.216923][ T956] ? lockdep_init_map_type+0x5c/0x250 [ 1445.216949][ T956] ? mutex_init_lockep+0x110/0x150 [ 1445.216979][ T956] copy_net_ns+0x46f/0x7c0 [ 1445.217002][ T956] create_new_namespaces+0x3ea/0xac0 [ 1445.217029][ T956] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1445.217053][ T956] ksys_unshare+0x473/0xad0 [ 1445.217079][ T956] ? __pfx_ksys_unshare+0x10/0x10 [ 1445.217111][ T956] __x64_sys_unshare+0x31/0x40 [ 1445.217135][ T956] do_syscall_64+0x106/0xf80 [ 1445.217161][ T956] ? clear_bhb_loop+0x40/0x90 [ 1445.217185][ T956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.217212][ T956] RIP: 0033:0x7fc1f2b9c819 [ 1445.217230][ T956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.217248][ T956] RSP: 002b:00007fc1f398f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1445.217267][ T956] RAX: ffffffffffffffda RBX: 00007fc1f2e15fa0 RCX: 00007fc1f2b9c819 [ 1445.217279][ T956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1445.217290][ T956] RBP: 00007fc1f2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1445.217301][ T956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.217312][ T956] R13: 00007fc1f2e16038 R14: 00007fc1f2e15fa0 R15: 00007ffebd89c118 [ 1445.217336][ T956] [ 1445.217351][ T956] sysctl could not get directory: /net/smc -12 [ 1445.864405][ T967] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8001'. [ 1447.023950][ T982] input: æ÷ as /devices/virtual/input/input32 [ 1448.626835][ T1010] bridge0: port 3(vlan0) entered blocking state [ 1448.634027][ T1010] bridge0: port 3(vlan0) entered disabled state [ 1448.717013][ T1010] vlan0: entered allmulticast mode [ 1448.753894][ T1010] vlan0: entered promiscuous mode [ 1448.790030][ T1010] bridge0: port 3(vlan0) entered blocking state [ 1448.796468][ T1010] bridge0: port 3(vlan0) entered forwarding state [ 1449.026508][ T1010] FAULT_INJECTION: forcing a failure. [ 1449.026508][ T1010] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.091758][ T1010] CPU: 0 UID: 0 PID: 1010 Comm: syz.7.8011 Tainted: G L syzkaller #0 PREEMPT(full) [ 1449.091791][ T1010] Tainted: [L]=SOFTLOCKUP [ 1449.091798][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1449.091810][ T1010] Call Trace: [ 1449.091817][ T1010] [ 1449.091825][ T1010] dump_stack_lvl+0x100/0x190 [ 1449.091860][ T1010] should_fail_ex.cold+0x5/0xa [ 1449.091883][ T1010] should_failslab+0xc2/0x120 [ 1449.091905][ T1010] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1449.091937][ T1010] ? kobject_create_and_add+0x46/0xc0 [ 1449.091968][ T1010] kobject_create_and_add+0x46/0xc0 [ 1449.091994][ T1010] __add_disk+0x6fe/0xe40 [ 1449.092016][ T1010] ? find_held_lock+0x2b/0x80 [ 1449.092038][ T1010] add_disk_fwnode+0x3d4/0x5c0 [ 1449.092062][ T1010] zram_add+0x4d2/0x610 [ 1449.092090][ T1010] ? __pfx_zram_add+0x10/0x10 [ 1449.092133][ T1010] ? find_held_lock+0x2b/0x80 [ 1449.092151][ T1010] ? sysfs_file_kobj+0xe4/0x290 [ 1449.092188][ T1010] ? __pfx_hot_add_show+0x10/0x10 [ 1449.092216][ T1010] hot_add_show+0x21/0x80 [ 1449.092244][ T1010] class_attr_show+0x72/0xa0 [ 1449.092270][ T1010] ? __pfx_class_attr_show+0x10/0x10 [ 1449.092294][ T1010] sysfs_kf_seq_show+0x217/0x3a0 [ 1449.092325][ T1010] seq_read_iter+0x32f/0x1270 [ 1449.092366][ T1010] kernfs_fop_read_iter+0x46c/0x610 [ 1449.092389][ T1010] ? rw_verify_area+0xce/0x6d0 [ 1449.092417][ T1010] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1449.092441][ T1010] vfs_read+0x825/0xb30 [ 1449.092462][ T1010] ? __pfx_vfs_read+0x10/0x10 [ 1449.092496][ T1010] ksys_read+0x12a/0x250 [ 1449.092514][ T1010] ? __pfx_ksys_read+0x10/0x10 [ 1449.092539][ T1010] do_syscall_64+0x106/0xf80 [ 1449.092558][ T1010] ? clear_bhb_loop+0x40/0x90 [ 1449.092582][ T1010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.092601][ T1010] RIP: 0033:0x7f0bdf59c819 [ 1449.092618][ T1010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.092636][ T1010] RSP: 002b:00007f0be042e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1449.092654][ T1010] RAX: ffffffffffffffda RBX: 00007f0bdf815fa0 RCX: 00007f0bdf59c819 [ 1449.092666][ T1010] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 1449.092677][ T1010] RBP: 00007f0bdf632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1449.092688][ T1010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.092699][ T1010] R13: 00007f0bdf816038 R14: 00007f0bdf815fa0 R15: 00007fff2a0b7da8 [ 1449.092724][ T1010] [ 1449.788037][ T1042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8015'. [ 1449.927855][ T1047] random: crng reseeded on system resumption [ 1451.550534][ T30] audit: type=1107 audit(2147503309.504:39): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1451.646787][ T30] audit: type=1107 audit(2147503309.524:40): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1454.371685][ T1133] FAULT_INJECTION: forcing a failure. [ 1454.371685][ T1133] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1454.431299][ T1133] CPU: 0 UID: 0 PID: 1133 Comm: syz.7.8027 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.431333][ T1133] Tainted: [L]=SOFTLOCKUP [ 1454.431340][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1454.431351][ T1133] Call Trace: [ 1454.431358][ T1133] [ 1454.431366][ T1133] dump_stack_lvl+0x100/0x190 [ 1454.431399][ T1133] should_fail_ex.cold+0x5/0xa [ 1454.431422][ T1133] get_futex_key+0x1d2/0x1620 [ 1454.431448][ T1133] ? __pfx_get_futex_key+0x10/0x10 [ 1454.431470][ T1133] ? futex_hash+0x2c5/0x380 [ 1454.431499][ T1133] futex_wake+0xea/0x530 [ 1454.431527][ T1133] ? __pfx_futex_wait+0x10/0x10 [ 1454.431556][ T1133] ? __pfx_futex_wake+0x10/0x10 [ 1454.431586][ T1133] ? apparmor_capable+0x1d7/0x4d0 [ 1454.431613][ T1133] do_futex+0x32b/0x350 [ 1454.431638][ T1133] ? __pfx_do_futex+0x10/0x10 [ 1454.431664][ T1133] ? cap_task_prctl+0x104/0xa50 [ 1454.431683][ T1133] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1454.431708][ T1133] __x64_sys_futex+0x34f/0x4d0 [ 1454.431736][ T1133] ? __pfx___x64_sys_futex+0x10/0x10 [ 1454.431763][ T1133] ? __pfx___do_sys_prctl+0x10/0x10 [ 1454.431797][ T1133] do_syscall_64+0x106/0xf80 [ 1454.431826][ T1133] ? clear_bhb_loop+0x40/0x90 [ 1454.431850][ T1133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.431869][ T1133] RIP: 0033:0x7f0bdf59c819 [ 1454.431885][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.431904][ T1133] RSP: 002b:00007f0be042e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1454.431923][ T1133] RAX: ffffffffffffffda RBX: 00007f0bdf815fa8 RCX: 00007f0bdf59c819 [ 1454.431936][ T1133] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0bdf815fac [ 1454.431948][ T1133] RBP: 00007f0bdf815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1454.431959][ T1133] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1454.431971][ T1133] R13: 00007f0bdf816038 R14: 00007fff2a0b7cc0 R15: 00007fff2a0b7da8 [ 1454.431994][ T1133] [ 1456.260201][ T1166] FAULT_INJECTION: forcing a failure. [ 1456.260201][ T1166] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1456.429207][ T1166] CPU: 0 UID: 0 PID: 1166 Comm: syz.8.8032 Tainted: G L syzkaller #0 PREEMPT(full) [ 1456.429239][ T1166] Tainted: [L]=SOFTLOCKUP [ 1456.429246][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1456.429258][ T1166] Call Trace: [ 1456.429266][ T1166] [ 1456.429274][ T1166] dump_stack_lvl+0x100/0x190 [ 1456.429306][ T1166] should_fail_ex.cold+0x5/0xa [ 1456.429329][ T1166] get_futex_key+0x1d2/0x1620 [ 1456.429355][ T1166] ? __pfx_get_futex_key+0x10/0x10 [ 1456.429384][ T1166] ? futex_hash+0x2c5/0x380 [ 1456.429414][ T1166] futex_wake+0xea/0x530 [ 1456.429443][ T1166] ? __pfx_futex_wait+0x10/0x10 [ 1456.429473][ T1166] ? __pfx_futex_wake+0x10/0x10 [ 1456.429504][ T1166] ? apparmor_capable+0x1d7/0x4d0 [ 1456.429531][ T1166] do_futex+0x32b/0x350 [ 1456.429556][ T1166] ? __pfx_do_futex+0x10/0x10 [ 1456.429582][ T1166] ? cap_task_prctl+0x104/0xa50 [ 1456.429601][ T1166] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1456.429626][ T1166] __x64_sys_futex+0x34f/0x4d0 [ 1456.429655][ T1166] ? __pfx___x64_sys_futex+0x10/0x10 [ 1456.429681][ T1166] ? __pfx___do_sys_prctl+0x10/0x10 [ 1456.429715][ T1166] do_syscall_64+0x106/0xf80 [ 1456.429734][ T1166] ? clear_bhb_loop+0x40/0x90 [ 1456.429756][ T1166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.429775][ T1166] RIP: 0033:0x7f88f979c819 [ 1456.429792][ T1166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.429809][ T1166] RSP: 002b:00007f88fa6480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1456.429828][ T1166] RAX: ffffffffffffffda RBX: 00007f88f9a16098 RCX: 00007f88f979c819 [ 1456.429840][ T1166] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88f9a1609c [ 1456.429851][ T1166] RBP: 00007f88f9a16090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.429862][ T1166] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1456.429874][ T1166] R13: 00007f88f9a16128 R14: 00007ffd0eeb8fa0 R15: 00007ffd0eeb9088 [ 1456.429910][ T1166] [ 1457.350041][ T1183] FAULT_INJECTION: forcing a failure. [ 1457.350041][ T1183] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.451680][ T1183] CPU: 0 UID: 0 PID: 1183 Comm: syz.8.8035 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.451714][ T1183] Tainted: [L]=SOFTLOCKUP [ 1457.451720][ T1183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1457.451731][ T1183] Call Trace: [ 1457.451739][ T1183] [ 1457.451746][ T1183] dump_stack_lvl+0x100/0x190 [ 1457.451781][ T1183] should_fail_ex.cold+0x5/0xa [ 1457.451804][ T1183] should_failslab+0xc2/0x120 [ 1457.451827][ T1183] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1457.451857][ T1183] ? __d_alloc+0x34/0xa80 [ 1457.451883][ T1183] __d_alloc+0x34/0xa80 [ 1457.451907][ T1183] d_alloc+0x4a/0x1e0 [ 1457.451931][ T1183] lookup_one_qstr_excl+0x175/0x250 [ 1457.451959][ T1183] start_dirop+0x59/0xb0 [ 1457.451979][ T1183] simple_start_creating+0xf9/0x110 [ 1457.451998][ T1183] ? __pfx_simple_start_creating+0x10/0x10 [ 1457.452018][ T1183] ? mntput+0x70/0xa0 [ 1457.452034][ T1183] ? simple_pin_fs+0xa3/0x190 [ 1457.452064][ T1183] debugfs_start_creating.part.0+0x82/0x170 [ 1457.452096][ T1183] __debugfs_create_file+0xb3/0x4f0 [ 1457.452121][ T1183] debugfs_create_file_full+0x41/0x60 [ 1457.452146][ T1183] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1457.452174][ T1183] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1457.452219][ T1183] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1457.452237][ T1183] ? alloc_netdev_mqs+0xd7/0x14f0 [ 1457.452257][ T1183] ? lockdep_init_map_type+0x5c/0x250 [ 1457.452286][ T1183] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 1457.452314][ T1183] alloc_netdev_mqs+0x314/0x14f0 [ 1457.452338][ T1183] __ip_tunnel_create+0x398/0x670 [ 1457.452360][ T1183] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1457.452379][ T1183] ? net_generic+0xea/0x2a0 [ 1457.452404][ T1183] ip_tunnel_init_net+0x230/0x780 [ 1457.452436][ T1183] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1457.452468][ T1183] ? __kmalloc_noprof+0x320/0x850 [ 1457.452501][ T1183] ? __pfx_ipgre_init_net+0x10/0x10 [ 1457.452529][ T1183] ops_init+0x1e2/0x5f0 [ 1457.452551][ T1183] setup_net+0x118/0x3a0 [ 1457.452571][ T1183] ? __pfx_setup_net+0x10/0x10 [ 1457.452590][ T1183] ? lockdep_init_map_type+0x5c/0x250 [ 1457.452617][ T1183] ? mutex_init_lockep+0x110/0x150 [ 1457.452647][ T1183] copy_net_ns+0x46f/0x7c0 [ 1457.452671][ T1183] create_new_namespaces+0x3ea/0xac0 [ 1457.452697][ T1183] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1457.452721][ T1183] ksys_unshare+0x473/0xad0 [ 1457.452753][ T1183] ? __pfx_ksys_unshare+0x10/0x10 [ 1457.452786][ T1183] __x64_sys_unshare+0x31/0x40 [ 1457.452810][ T1183] do_syscall_64+0x106/0xf80 [ 1457.452829][ T1183] ? clear_bhb_loop+0x40/0x90 [ 1457.452852][ T1183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.452871][ T1183] RIP: 0033:0x7f88f979c819 [ 1457.452889][ T1183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.452906][ T1183] RSP: 002b:00007f88fa669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1457.452925][ T1183] RAX: ffffffffffffffda RBX: 00007f88f9a15fa0 RCX: 00007f88f979c819 [ 1457.452942][ T1183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1457.452954][ T1183] RBP: 00007f88f9832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1457.452965][ T1183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1457.452976][ T1183] R13: 00007f88f9a16038 R14: 00007f88f9a15fa0 R15: 00007ffd0eeb9088 [ 1457.453000][ T1183] [ 1458.320991][ T1188] blkio.reset_stats is deprecated [ 1459.575933][ T1188] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1459.613258][ T1188] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1459.720895][ T1188] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1460.293898][T25979] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1460.307520][T25979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1460.318283][T25979] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1460.327226][T25979] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1460.345960][T25979] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1461.342683][ T1216] chnl_net:caif_netlink_parms(): no params data found [ 1461.784520][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.791726][ T1216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.842296][ T1216] bridge_slave_0: entered allmulticast mode [ 1461.923167][ T1216] bridge_slave_0: entered promiscuous mode [ 1461.957289][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.012464][ T1216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.050913][ T1216] bridge_slave_1: entered allmulticast mode [ 1462.088901][ T1216] bridge_slave_1: entered promiscuous mode [ 1462.224262][ T1216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.297238][ T1216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.382284][T26532] Bluetooth: hci7: command tx timeout [ 1462.665713][ T1216] team0: Port device team_slave_0 added [ 1462.752566][ T1216] team0: Port device team_slave_1 added [ 1462.915605][ T1263] Setting dangerous option i915.mitigations - tainting kernel [ 1462.961856][ T1263] Bad "i915.mitigations=Î×ÚCmâUQüF\§Þ ", 'Î×ÚCmâUQüF\§Þ' is unknown [ 1463.074778][ T1216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.113832][ T1216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.291310][ T1216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.473374][ T1216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.531152][ T1216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.777083][ T1216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.119974][ T1216] hsr_slave_0: entered promiscuous mode [ 1464.212102][ T1216] hsr_slave_1: entered promiscuous mode [ 1464.212595][ T1216] debugfs: 'hsr0' already exists in 'hsr' [ 1464.212620][ T1216] Cannot create hsr debugfs directory [ 1464.460581][T26532] Bluetooth: hci7: command tx timeout [ 1466.543357][T26532] Bluetooth: hci7: command tx timeout [ 1467.257524][ T1310] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1467.724457][ T1306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1467.773063][ T1306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1467.808512][ T1306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1467.814596][ T1306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1467.890748][ T1306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1467.928628][ T1306] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1467.961177][ T1306] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1468.009163][ T1306] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1468.147756][ T1306] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1468.196551][ T1306] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1468.244417][ T1306] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1468.457908][ T30] audit: type=1800 audit(2147521670.406:41): pid=1327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8059" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1468.502896][ T1306] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1468.632719][ T1216] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1468.724740][ T1216] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1468.948003][ T1216] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1469.070774][ T1216] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1469.107746][T25979] Bluetooth: hci2: command 0x0c1a tx timeout [ 1469.756535][ T1216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.817588][T25979] Bluetooth: hci4: command 0x0406 tx timeout [ 1469.882955][ T1216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.902446][T25979] Bluetooth: hci5: command 0x0c1a tx timeout [ 1469.908761][T26532] Bluetooth: hci0: command 0x0406 tx timeout [ 1469.914817][T26532] Bluetooth: hci3: command 0x0406 tx timeout [ 1469.921332][T25979] Bluetooth: hci1: command 0x0406 tx timeout [ 1469.980745][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.987910][ T569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.996596][ T1369] Bluetooth: hci6: command 0x0c1a tx timeout [ 1470.109311][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.116603][ T538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.217351][ T1369] Bluetooth: hci7: command 0x0c1a tx timeout [ 1470.907706][ T1387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8064'. [ 1471.072257][ T1387] nbd: must specify at least one socket [ 1471.465839][ T1216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.954277][ T1216] veth0_vlan: entered promiscuous mode [ 1472.024360][ T1216] veth1_vlan: entered promiscuous mode [ 1472.057538][ T1369] Bluetooth: hci6: command 0x0c1a tx timeout [ 1472.296345][ T1369] Bluetooth: hci7: command 0x0c1a tx timeout [ 1472.827367][ T1430] random: crng reseeded on system resumption [ 1472.844059][ T1216] veth0_macvtap: entered promiscuous mode [ 1472.908313][ T1216] veth1_macvtap: entered promiscuous mode [ 1473.143407][ T1216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.219811][ T1438] netlink: 122 bytes leftover after parsing attributes in process `syz.0.8072'. [ 1473.397342][ T1216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.470919][ T537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.538046][ T537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.749463][ T537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.808211][ T537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.136936][ T1369] Bluetooth: hci6: command 0x0c1a tx timeout [ 1474.375752][ T1369] Bluetooth: hci7: command 0x0c1a tx timeout [ 1474.441434][ T1445] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8073'. [ 1474.742475][ T538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.826130][ T538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.338121][ T537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.387765][ T537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.765391][ T1537] Loading of unsigned module is rejected [ 1480.179779][ T1577] netlink: 330 bytes leftover after parsing attributes in process `syz.7.8093'. [ 1481.648920][ T1621] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1483.710309][ T1670] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 1485.026649][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.038487][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.796845][ T1707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8114'. [ 1485.868721][ T1707] mac80211_hwsim hwsim208 wlan1: entered promiscuous mode [ 1485.875913][ T1707] mac80211_hwsim hwsim208 wlan1: entered allmulticast mode [ 1486.005550][ T1707] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1487.471747][ T1757] FAULT_INJECTION: forcing a failure. [ 1487.471747][ T1757] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1487.633248][ T1757] CPU: 0 UID: 0 PID: 1757 Comm: syz.8.8122 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1487.633283][ T1757] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1487.633291][ T1757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1487.633302][ T1757] Call Trace: [ 1487.633309][ T1757] [ 1487.633318][ T1757] dump_stack_lvl+0x100/0x190 [ 1487.633351][ T1757] should_fail_ex.cold+0x5/0xa [ 1487.633374][ T1757] get_futex_key+0x1d2/0x1620 [ 1487.633401][ T1757] ? __pfx_get_futex_key+0x10/0x10 [ 1487.633423][ T1757] ? futex_hash+0x2c5/0x380 [ 1487.633453][ T1757] futex_wake+0xea/0x530 [ 1487.633481][ T1757] ? __pfx_futex_wait+0x10/0x10 [ 1487.633511][ T1757] ? __pfx_futex_wake+0x10/0x10 [ 1487.633542][ T1757] ? apparmor_capable+0x1d7/0x4d0 [ 1487.633568][ T1757] do_futex+0x32b/0x350 [ 1487.633593][ T1757] ? __pfx_do_futex+0x10/0x10 [ 1487.633619][ T1757] ? cap_task_prctl+0x104/0xa50 [ 1487.633638][ T1757] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1487.633663][ T1757] __x64_sys_futex+0x34f/0x4d0 [ 1487.633691][ T1757] ? __pfx___x64_sys_futex+0x10/0x10 [ 1487.633717][ T1757] ? __pfx___do_sys_prctl+0x10/0x10 [ 1487.633752][ T1757] do_syscall_64+0x106/0xf80 [ 1487.633771][ T1757] ? clear_bhb_loop+0x40/0x90 [ 1487.633802][ T1757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.633821][ T1757] RIP: 0033:0x7f88f979c819 [ 1487.633838][ T1757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.633855][ T1757] RSP: 002b:00007f88fa6690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1487.633874][ T1757] RAX: ffffffffffffffda RBX: 00007f88f9a15fa8 RCX: 00007f88f979c819 [ 1487.633886][ T1757] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88f9a15fac [ 1487.633899][ T1757] RBP: 00007f88f9a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.633910][ T1757] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1487.633922][ T1757] R13: 00007f88f9a16038 R14: 00007ffd0eeb8fa0 R15: 00007ffd0eeb9088 [ 1487.633945][ T1757] [ 1489.086690][ T30] audit: type=1800 audit(2147521691.037:42): pid=1784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8124" name="lu_gp_id" dev="configfs" ino=174746 res=0 errno=0 [ 1489.117329][ T1784] kstrtoul() returned -22 for lu_gp_id [ 1490.202040][ T1800] netlink: 326 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1490.781952][ T1812] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8131'. [ 1490.845812][ T1818] FAULT_INJECTION: forcing a failure. [ 1490.845812][ T1818] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.901581][ T1818] CPU: 0 UID: 0 PID: 1818 Comm: syz.1.8131 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1490.901614][ T1818] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1490.901622][ T1818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1490.901634][ T1818] Call Trace: [ 1490.901641][ T1818] [ 1490.901649][ T1818] dump_stack_lvl+0x100/0x190 [ 1490.901683][ T1818] should_fail_ex.cold+0x5/0xa [ 1490.901706][ T1818] should_failslab+0xc2/0x120 [ 1490.901728][ T1818] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1490.901770][ T1818] ? shmem_alloc_inode+0x25/0x50 [ 1490.901795][ T1818] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1490.901819][ T1818] shmem_alloc_inode+0x25/0x50 [ 1490.901841][ T1818] alloc_inode+0x68/0x250 [ 1490.901868][ T1818] new_inode+0x22/0x1c0 [ 1490.901897][ T1818] shmem_get_inode+0x212/0x1040 [ 1490.901926][ T1818] ? __pfx_shmem_get_inode+0x10/0x10 [ 1490.901952][ T1818] ? rcu_is_watching+0x12/0xc0 [ 1490.901989][ T1818] shmem_tmpfile+0xbf/0x210 [ 1490.902013][ T1818] ? d_alloc+0x176/0x1e0 [ 1490.902034][ T1818] ? __pfx_shmem_tmpfile+0x10/0x10 [ 1490.902060][ T1818] ? do_raw_spin_unlock+0x145/0x1e0 [ 1490.902089][ T1818] ? _raw_spin_unlock+0x28/0x50 [ 1490.902122][ T1818] vfs_tmpfile+0x2be/0x9a0 [ 1490.902148][ T1818] path_openat+0x164e/0x31a0 [ 1490.902168][ T1818] ? kasan_save_stack+0x3f/0x50 [ 1490.902185][ T1818] ? kasan_save_stack+0x30/0x50 [ 1490.902201][ T1818] ? __kasan_slab_alloc+0x89/0x90 [ 1490.902220][ T1818] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1490.902248][ T1818] ? do_getname+0x35/0x390 [ 1490.902274][ T1818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.902296][ T1818] ? __pfx_path_openat+0x10/0x10 [ 1490.902325][ T1818] do_file_open+0x20e/0x430 [ 1490.902348][ T1818] ? __pfx_do_file_open+0x10/0x10 [ 1490.902384][ T1818] ? _raw_spin_unlock+0x28/0x50 [ 1490.902412][ T1818] ? alloc_fd+0x476/0x790 [ 1490.902438][ T1818] do_sys_openat2+0x10d/0x1e0 [ 1490.902465][ T1818] ? __pfx_do_sys_openat2+0x10/0x10 [ 1490.902498][ T1818] __x64_sys_open+0xfe/0x1d0 [ 1490.902524][ T1818] ? __pfx___x64_sys_open+0x10/0x10 [ 1490.902558][ T1818] do_syscall_64+0x106/0xf80 [ 1490.902577][ T1818] ? clear_bhb_loop+0x40/0x90 [ 1490.902599][ T1818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.902618][ T1818] RIP: 0033:0x7ff6c4b9c819 [ 1490.902635][ T1818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.902653][ T1818] RSP: 002b:00007ff6c5a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1490.902672][ T1818] RAX: ffffffffffffffda RBX: 00007ff6c4e16090 RCX: 00007ff6c4b9c819 [ 1490.902684][ T1818] RDX: 0000000000000408 RSI: 0000000000595002 RDI: 0000200000000100 [ 1490.902695][ T1818] RBP: 00007ff6c4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1490.902706][ T1818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.902717][ T1818] R13: 00007ff6c4e16128 R14: 00007ff6c4e16090 R15: 00007ffc8e9d40a8 [ 1490.902740][ T1818] [ 1493.282654][ T1854] FAULT_INJECTION: forcing a failure. [ 1493.282654][ T1854] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.362663][ T1854] CPU: 0 UID: 0 PID: 1854 Comm: syz.8.8137 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1493.362705][ T1854] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1493.362713][ T1854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1493.362725][ T1854] Call Trace: [ 1493.362732][ T1854] [ 1493.362740][ T1854] dump_stack_lvl+0x100/0x190 [ 1493.362773][ T1854] should_fail_ex.cold+0x5/0xa [ 1493.362796][ T1854] ? sk_prot_alloc+0x10b/0x2a0 [ 1493.362826][ T1854] should_failslab+0xc2/0x120 [ 1493.362853][ T1854] __kmalloc_noprof+0xe0/0x850 [ 1493.362893][ T1854] sk_prot_alloc+0x10b/0x2a0 [ 1493.362918][ T1854] sk_alloc+0x36/0xe80 [ 1493.362947][ T1854] mctp_pf_create+0xe8/0x360 [ 1493.362969][ T1854] __sock_create+0x339/0x860 [ 1493.362998][ T1854] __sys_socket+0x14d/0x260 [ 1493.363023][ T1854] ? __pfx___sys_socket+0x10/0x10 [ 1493.363055][ T1854] __x64_sys_socket+0x72/0xb0 [ 1493.363079][ T1854] ? lockdep_hardirqs_on+0x78/0x100 [ 1493.363098][ T1854] do_syscall_64+0x106/0xf80 [ 1493.363117][ T1854] ? clear_bhb_loop+0x40/0x90 [ 1493.363140][ T1854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.363159][ T1854] RIP: 0033:0x7f88f979c819 [ 1493.363176][ T1854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.363194][ T1854] RSP: 002b:00007f88fa669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1493.363212][ T1854] RAX: ffffffffffffffda RBX: 00007f88f9a15fa0 RCX: 00007f88f979c819 [ 1493.363224][ T1854] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 1493.363235][ T1854] RBP: 00007f88f9832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1493.363246][ T1854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.363257][ T1854] R13: 00007f88f9a16038 R14: 00007f88f9a15fa0 R15: 00007ffd0eeb9088 [ 1493.363286][ T1854] [ 1495.781974][ T1876] FAULT_INJECTION: forcing a failure. [ 1495.781974][ T1876] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1495.852610][ T1876] CPU: 0 UID: 0 PID: 1876 Comm: syz.7.8141 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1495.852645][ T1876] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1495.852653][ T1876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1495.852664][ T1876] Call Trace: [ 1495.852671][ T1876] [ 1495.852679][ T1876] dump_stack_lvl+0x100/0x190 [ 1495.852720][ T1876] should_fail_ex.cold+0x5/0xa [ 1495.852744][ T1876] get_futex_key+0x1d2/0x1620 [ 1495.852772][ T1876] ? __pfx_get_futex_key+0x10/0x10 [ 1495.852795][ T1876] ? futex_hash+0x2c5/0x380 [ 1495.852824][ T1876] futex_wake+0xea/0x530 [ 1495.852854][ T1876] ? __pfx_futex_wait+0x10/0x10 [ 1495.852883][ T1876] ? __pfx_futex_wake+0x10/0x10 [ 1495.852914][ T1876] ? apparmor_capable+0x1d7/0x4d0 [ 1495.852940][ T1876] do_futex+0x32b/0x350 [ 1495.852967][ T1876] ? __pfx_do_futex+0x10/0x10 [ 1495.852992][ T1876] ? cap_task_prctl+0x104/0xa50 [ 1495.853012][ T1876] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1495.853037][ T1876] __x64_sys_futex+0x34f/0x4d0 [ 1495.853064][ T1876] ? __pfx___x64_sys_futex+0x10/0x10 [ 1495.853090][ T1876] ? __pfx___do_sys_prctl+0x10/0x10 [ 1495.853125][ T1876] do_syscall_64+0x106/0xf80 [ 1495.853178][ T1876] ? clear_bhb_loop+0x40/0x90 [ 1495.853203][ T1876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.853223][ T1876] RIP: 0033:0x7f0bdf59c819 [ 1495.853240][ T1876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.853258][ T1876] RSP: 002b:00007f0be040d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1495.853278][ T1876] RAX: ffffffffffffffda RBX: 00007f0bdf816098 RCX: 00007f0bdf59c819 [ 1495.853290][ T1876] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0bdf81609c [ 1495.853302][ T1876] RBP: 00007f0bdf816090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.853313][ T1876] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1495.853325][ T1876] R13: 00007f0bdf816128 R14: 00007fff2a0b7cc0 R15: 00007fff2a0b7da8 [ 1495.853349][ T1876] [ 1496.732760][T31996] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1496.765396][T31996] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1496.890828][T25979] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1497.048300][T25979] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1497.122475][T25979] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1498.213904][ T1878] chnl_net:caif_netlink_parms(): no params data found [ 1498.620270][ T1878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.677091][ T1878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.731125][ T1878] bridge_slave_0: entered allmulticast mode [ 1498.784788][ T1878] bridge_slave_0: entered promiscuous mode [ 1498.820375][ T1878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.863042][ T1878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.870270][ T1878] bridge_slave_1: entered allmulticast mode [ 1498.918409][ T1878] bridge_slave_1: entered promiscuous mode [ 1499.019158][ T1878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.073302][ T1878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.224398][ T1878] team0: Port device team_slave_0 added [ 1499.271570][ T1878] team0: Port device team_slave_1 added [ 1499.324779][ T1369] Bluetooth: hci8: command tx timeout [ 1499.384517][ T1878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.455321][ T1878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.583040][ T1878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.666692][ T1878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.703953][ T1878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.835297][ T1928] syz.8.8150 (1928): attempted to duplicate a private mapping with mremap. This is not supported. [ 1499.868668][ T1878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.970746][ T1928] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8150'. [ 1500.101828][ T1878] hsr_slave_0: entered promiscuous mode [ 1500.108638][ T1931] FAULT_INJECTION: forcing a failure. [ 1500.108638][ T1931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.132700][ T1878] hsr_slave_1: entered promiscuous mode [ 1500.160613][ T1878] debugfs: 'hsr0' already exists in 'hsr' [ 1500.166398][ T1878] Cannot create hsr debugfs directory [ 1500.192637][ T1931] CPU: 0 UID: 0 PID: 1931 Comm: syz.7.8151 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1500.192677][ T1931] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1500.192685][ T1931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1500.192696][ T1931] Call Trace: [ 1500.192703][ T1931] [ 1500.192711][ T1931] dump_stack_lvl+0x100/0x190 [ 1500.192746][ T1931] should_fail_ex.cold+0x5/0xa [ 1500.192769][ T1931] _copy_from_iter+0x1f4/0x1690 [ 1500.192797][ T1931] ? __asan_memset+0x23/0x50 [ 1500.192827][ T1931] ? __pfx__copy_from_iter+0x10/0x10 [ 1500.192852][ T1931] ? __pfx___alloc_skb+0x10/0x10 [ 1500.192882][ T1931] ? __pfx___might_resched+0x10/0x10 [ 1500.192912][ T1931] ? __lock_acquire+0x4a5/0x2630 [ 1500.192947][ T1931] netlink_sendmsg+0x808/0xda0 [ 1500.192973][ T1931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1500.192992][ T1931] ? __import_iovec+0x1d2/0x640 [ 1500.193019][ T1931] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1500.193043][ T1931] ____sys_sendmsg+0x9e1/0xb70 [ 1500.193066][ T1931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1500.193089][ T1931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1500.193122][ T1931] ___sys_sendmsg+0x190/0x1e0 [ 1500.193149][ T1931] ? __pfx____sys_sendmsg+0x10/0x10 [ 1500.193199][ T1931] __sys_sendmsg+0x170/0x220 [ 1500.193218][ T1931] ? __pfx___sys_sendmsg+0x10/0x10 [ 1500.193250][ T1931] do_syscall_64+0x106/0xf80 [ 1500.193269][ T1931] ? clear_bhb_loop+0x40/0x90 [ 1500.193292][ T1931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.193312][ T1931] RIP: 0033:0x7f0bdf59c819 [ 1500.193328][ T1931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.193347][ T1931] RSP: 002b:00007f0be042e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1500.193366][ T1931] RAX: ffffffffffffffda RBX: 00007f0bdf815fa0 RCX: 00007f0bdf59c819 [ 1500.193378][ T1931] RDX: 0000000000000014 RSI: 0000200000001600 RDI: 0000000000000003 [ 1500.193390][ T1931] RBP: 00007f0be042e090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.193401][ T1931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.193412][ T1931] R13: 00007f0bdf816038 R14: 00007f0bdf815fa0 R15: 00007fff2a0b7da8 [ 1500.193435][ T1931] [ 1501.431118][ T1369] Bluetooth: hci8: command tx timeout [ 1503.470303][ T1878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1503.481437][ T1369] Bluetooth: hci8: command tx timeout [ 1503.547707][ T1878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1503.603575][ T1878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1503.711805][ T1878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1504.092721][ T1878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.211729][ T1878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.284890][ T537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.292129][ T537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.440236][T26608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.447421][T26608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1504.731761][ T1982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1504.731968][ T1982] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1504.732114][ T1982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1504.732264][ T1982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1504.732405][ T1982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1504.732545][ T1982] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1504.732693][ T1982] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1504.732837][ T1982] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1504.732988][ T1982] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1504.733055][ T1982] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1504.768528][ T1982] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1505.474449][ T2009] FAULT_INJECTION: forcing a failure. [ 1505.474449][ T2009] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.474484][ T2009] CPU: 0 UID: 0 PID: 2009 Comm: syz.7.8160 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1505.474512][ T2009] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1505.474520][ T2009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1505.474531][ T2009] Call Trace: [ 1505.474538][ T2009] [ 1505.474545][ T2009] dump_stack_lvl+0x100/0x190 [ 1505.474579][ T2009] should_fail_ex.cold+0x5/0xa [ 1505.474602][ T2009] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 1505.474628][ T2009] should_failslab+0xc2/0x120 [ 1505.474650][ T2009] __kmalloc_noprof+0xe0/0x850 [ 1505.474680][ T2009] ? lockdep_hardirqs_on+0x78/0x100 [ 1505.474704][ T2009] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 1505.474735][ T2009] genl_family_rcv_msg_doit+0xc7/0x300 [ 1505.474762][ T2009] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1505.474786][ T2009] ? genl_get_cmd+0x3ef/0x720 [ 1505.474823][ T2009] ? bpf_lsm_capable+0x9/0x10 [ 1505.474844][ T2009] ? security_capable+0x80/0x260 [ 1505.474867][ T2009] genl_rcv_msg+0x560/0x800 [ 1505.474894][ T2009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.474918][ T2009] ? __pfx_net_shaper_nl_pre_doit_write+0x10/0x10 [ 1505.474945][ T2009] ? __pfx_net_shaper_nl_group_doit+0x10/0x10 [ 1505.474972][ T2009] ? __pfx_net_shaper_nl_post_doit_write+0x10/0x10 [ 1505.475008][ T2009] netlink_rcv_skb+0x159/0x420 [ 1505.475029][ T2009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.475054][ T2009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1505.475084][ T2009] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1505.475106][ T2009] genl_rcv+0x28/0x40 [ 1505.475127][ T2009] netlink_unicast+0x5aa/0x870 [ 1505.475151][ T2009] ? __pfx_netlink_unicast+0x10/0x10 [ 1505.475171][ T2009] ? __pfx___might_resched+0x10/0x10 [ 1505.475200][ T2009] ? __lock_acquire+0x4a5/0x2630 [ 1505.475232][ T2009] netlink_sendmsg+0x8b0/0xda0 [ 1505.475257][ T2009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.475277][ T2009] ? __import_iovec+0x1d2/0x640 [ 1505.475304][ T2009] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1505.475329][ T2009] ____sys_sendmsg+0x9e1/0xb70 [ 1505.475351][ T2009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.475373][ T2009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.475407][ T2009] ___sys_sendmsg+0x190/0x1e0 [ 1505.475434][ T2009] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.475485][ T2009] __sys_sendmsg+0x170/0x220 [ 1505.475504][ T2009] ? __pfx___sys_sendmsg+0x10/0x10 [ 1505.475554][ T2009] do_syscall_64+0x106/0xf80 [ 1505.475573][ T2009] ? clear_bhb_loop+0x40/0x90 [ 1505.475597][ T2009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.475616][ T2009] RIP: 0033:0x7f0bdf59c819 [ 1505.475632][ T2009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.475651][ T2009] RSP: 002b:00007f0be042e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.475669][ T2009] RAX: ffffffffffffffda RBX: 00007f0bdf815fa0 RCX: 00007f0bdf59c819 [ 1505.475681][ T2009] RDX: 0000000000000014 RSI: 0000200000001600 RDI: 0000000000000003 [ 1505.475693][ T2009] RBP: 00007f0be042e090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.475704][ T2009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.475715][ T2009] R13: 00007f0bdf816038 R14: 00007f0bdf815fa0 R15: 00007fff2a0b7da8 [ 1505.475738][ T2009] [ 1505.849367][ T2016] sctp: [Deprecated]: syz.7.8161 (pid 2016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1505.849367][ T2016] Use struct sctp_sack_info instead [ 1505.892957][ T1878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.437038][ T1369] Bluetooth: hci2: command 0x0c1a tx timeout [ 1506.756886][ T1369] Bluetooth: hci8: command 0x0c1a tx timeout [ 1506.756940][ T1369] Bluetooth: hci7: command 0x0c1a tx timeout [ 1506.756964][ T1369] Bluetooth: hci6: command 0x0c1a tx timeout [ 1506.756989][ T1369] Bluetooth: hci5: command 0x0c1a tx timeout [ 1506.757012][ T1369] Bluetooth: hci0: command 0x0406 tx timeout [ 1506.757037][ T1369] Bluetooth: hci3: command 0x0406 tx timeout [ 1506.757062][ T1369] Bluetooth: hci1: command 0x0406 tx timeout [ 1506.757088][ T1369] Bluetooth: hci4: command 0x0406 tx timeout [ 1507.139063][ T1878] veth0_vlan: entered promiscuous mode [ 1507.170574][ T1878] veth1_vlan: entered promiscuous mode [ 1507.234531][ T1878] veth0_macvtap: entered promiscuous mode [ 1507.300791][ T1878] veth1_macvtap: entered promiscuous mode [ 1507.395177][ T1878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.412204][ T1878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.455398][ T568] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.455441][ T568] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.455471][ T568] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.455502][ T568] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.925824][ T537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.925846][ T537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.196752][T26608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.196773][T26608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.794900][ T1369] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1508.798978][ T1369] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1508.799802][ T1369] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1508.800530][ T1369] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1508.800947][ T1369] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1508.850123][ T1369] Bluetooth: hci8: command 0x0c1a tx timeout [ 1510.134395][ T2074] chnl_net:caif_netlink_parms(): no params data found [ 1510.795436][ T2074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.829207][ T2074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.829397][ T2074] bridge_slave_0: entered allmulticast mode [ 1510.849798][ T2074] bridge_slave_0: entered promiscuous mode [ 1510.851677][ T2074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.851743][ T2074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.851864][ T2074] bridge_slave_1: entered allmulticast mode [ 1510.853065][ T2074] bridge_slave_1: entered promiscuous mode [ 1510.923396][ T1369] Bluetooth: hci9: command tx timeout [ 1510.924434][ T1369] Bluetooth: hci8: command 0x0c1a tx timeout [ 1511.041428][ T2074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.043839][ T2074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.167423][ T2074] team0: Port device team_slave_0 added [ 1511.259910][ T2074] team0: Port device team_slave_1 added [ 1511.437809][ T2074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.437828][ T2074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.437853][ T2074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.513318][ T2074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.513336][ T2074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.513370][ T2074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.545185][ T2121] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8169'. [ 1511.867154][ T2074] hsr_slave_0: entered promiscuous mode [ 1511.885844][ T2074] hsr_slave_1: entered promiscuous mode [ 1511.886441][ T2074] debugfs: 'hsr0' already exists in 'hsr' [ 1511.886460][ T2074] Cannot create hsr debugfs directory [ 1513.000613][T31996] Bluetooth: hci9: command tx timeout [ 1513.310454][ T2147] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 1514.863538][ T2167] FAULT_INJECTION: forcing a failure. [ 1514.863538][ T2167] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.000879][ T2167] CPU: 0 UID: 0 PID: 2167 Comm: syz.5.8175 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1515.000913][ T2167] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1515.000920][ T2167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1515.000932][ T2167] Call Trace: [ 1515.000939][ T2167] [ 1515.000947][ T2167] dump_stack_lvl+0x100/0x190 [ 1515.000981][ T2167] should_fail_ex.cold+0x5/0xa [ 1515.001004][ T2167] should_failslab+0xc2/0x120 [ 1515.001026][ T2167] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1515.001058][ T2167] ? __alloc_skb+0x140/0x710 [ 1515.001092][ T2167] __alloc_skb+0x140/0x710 [ 1515.001120][ T2167] ? __alloc_skb+0x5b7/0x710 [ 1515.001149][ T2167] ? __pfx___alloc_skb+0x10/0x10 [ 1515.001177][ T2167] ? genl_rcv_msg+0x4be/0x800 [ 1515.001207][ T2167] netlink_ack+0x117/0xb80 [ 1515.001234][ T2167] netlink_rcv_skb+0x333/0x420 [ 1515.001254][ T2167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1515.001279][ T2167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1515.001308][ T2167] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1515.001331][ T2167] genl_rcv+0x28/0x40 [ 1515.001352][ T2167] netlink_unicast+0x5aa/0x870 [ 1515.001376][ T2167] ? __pfx_netlink_unicast+0x10/0x10 [ 1515.001395][ T2167] ? __pfx___might_resched+0x10/0x10 [ 1515.001424][ T2167] ? __lock_acquire+0x4a5/0x2630 [ 1515.001456][ T2167] netlink_sendmsg+0x8b0/0xda0 [ 1515.001480][ T2167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1515.001499][ T2167] ? __import_iovec+0x1d2/0x640 [ 1515.001527][ T2167] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1515.001558][ T2167] ____sys_sendmsg+0x9e1/0xb70 [ 1515.001581][ T2167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1515.001604][ T2167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1515.001638][ T2167] ___sys_sendmsg+0x190/0x1e0 [ 1515.001665][ T2167] ? __pfx____sys_sendmsg+0x10/0x10 [ 1515.001716][ T2167] __sys_sendmsg+0x170/0x220 [ 1515.001735][ T2167] ? __pfx___sys_sendmsg+0x10/0x10 [ 1515.001767][ T2167] do_syscall_64+0x106/0xf80 [ 1515.001787][ T2167] ? clear_bhb_loop+0x40/0x90 [ 1515.001810][ T2167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.001830][ T2167] RIP: 0033:0x7f6d16b9c819 [ 1515.001847][ T2167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.001865][ T2167] RSP: 002b:00007f6d17afa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1515.001885][ T2167] RAX: ffffffffffffffda RBX: 00007f6d16e15fa0 RCX: 00007f6d16b9c819 [ 1515.001897][ T2167] RDX: 0000000000000014 RSI: 0000200000001600 RDI: 0000000000000003 [ 1515.001909][ T2167] RBP: 00007f6d17afa090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.001920][ T2167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.001931][ T2167] R13: 00007f6d16e16038 R14: 00007f6d16e15fa0 R15: 00007ffcbcdc2e88 [ 1515.001955][ T2167] [ 1515.593710][T31996] Bluetooth: hci9: command tx timeout [ 1515.752232][ T2181] FAULT_INJECTION: forcing a failure. [ 1515.752232][ T2181] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.821038][ T2181] CPU: 0 UID: 0 PID: 2181 Comm: syz.5.8177 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1515.821073][ T2181] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1515.821081][ T2181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1515.821091][ T2181] Call Trace: [ 1515.821098][ T2181] [ 1515.821106][ T2181] dump_stack_lvl+0x100/0x190 [ 1515.821139][ T2181] should_fail_ex.cold+0x5/0xa [ 1515.821163][ T2181] ? snd_pcm_plugin_build+0x434/0x650 [ 1515.821190][ T2181] should_failslab+0xc2/0x120 [ 1515.821211][ T2181] __kmalloc_noprof+0xe0/0x850 [ 1515.821241][ T2181] ? snd_pcm_hw_params+0x262/0x1cb0 [ 1515.821274][ T2181] snd_pcm_plugin_build+0x434/0x650 [ 1515.821305][ T2181] snd_pcm_plugin_build_io+0x207/0x5f0 [ 1515.821335][ T2181] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 1515.821365][ T2181] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1515.821399][ T2181] snd_pcm_oss_change_params_locked+0x2eb3/0x39f0 [ 1515.821436][ T2181] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1515.821471][ T2181] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1515.821508][ T2181] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 1515.821538][ T2181] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 1515.821565][ T2181] ? __fget_files+0x215/0x3d0 [ 1515.821583][ T2181] ? hook_file_ioctl_common+0x146/0x410 [ 1515.821609][ T2181] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1515.821638][ T2181] ? __fget_files+0x21f/0x3d0 [ 1515.821661][ T2181] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1515.821689][ T2181] __x64_sys_ioctl+0x18e/0x210 [ 1515.821719][ T2181] do_syscall_64+0x106/0xf80 [ 1515.821738][ T2181] ? clear_bhb_loop+0x40/0x90 [ 1515.821761][ T2181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.821780][ T2181] RIP: 0033:0x7f6d16b9c819 [ 1515.821797][ T2181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.821815][ T2181] RSP: 002b:00007f6d17ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1515.821834][ T2181] RAX: ffffffffffffffda RBX: 00007f6d16e16180 RCX: 00007f6d16b9c819 [ 1515.821846][ T2181] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1515.821857][ T2181] RBP: 00007f6d16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1515.821868][ T2181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1515.821879][ T2181] R13: 00007f6d16e16218 R14: 00007f6d16e16180 R15: 00007ffcbcdc2e88 [ 1515.821902][ T2181] [ 1516.460709][ T2074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1516.649477][ T2074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1516.698104][ T2074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1516.754010][ T2074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1517.458718][ T2074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.569922][ T2074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.649630][T31996] Bluetooth: hci9: command tx timeout [ 1517.743262][T26608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.750473][T26608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.863242][T26608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.870643][T26608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.217575][ T2074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.027621][ T2236] zswap: compressor not available [ 1521.066205][ T2074] veth0_vlan: entered promiscuous mode [ 1521.187919][ T2074] veth1_vlan: entered promiscuous mode [ 1521.345927][ T2268] random: crng reseeded on system resumption [ 1521.376239][ T2074] veth0_macvtap: entered promiscuous mode [ 1521.431024][ T2074] veth1_macvtap: entered promiscuous mode [ 1521.549501][ T2074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.611113][ T2074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.727464][ T538] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.834049][ T538] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.894098][ T538] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.902834][ T538] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.506474][ T2289] FAULT_INJECTION: forcing a failure. [ 1522.506474][ T2289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.550553][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.624508][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.646584][ T2289] CPU: 0 UID: 0 PID: 2289 Comm: syz.7.8190 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1522.646620][ T2289] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1522.646628][ T2289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1522.646639][ T2289] Call Trace: [ 1522.646647][ T2289] [ 1522.646655][ T2289] dump_stack_lvl+0x100/0x190 [ 1522.646700][ T2289] should_fail_ex.cold+0x5/0xa [ 1522.646724][ T2289] _copy_to_user+0x32/0xd0 [ 1522.646756][ T2289] simple_read_from_buffer+0xcb/0x170 [ 1522.646790][ T2289] proc_fail_nth_read+0x1af/0x230 [ 1522.646816][ T2289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1522.646842][ T2289] ? rw_verify_area+0xce/0x6d0 [ 1522.646881][ T2289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1522.646906][ T2289] vfs_read+0x1e4/0xb30 [ 1522.646928][ T2289] ? __pfx_vfs_read+0x10/0x10 [ 1522.646945][ T2289] ? __fget_files+0x215/0x3d0 [ 1522.646970][ T2289] ? __fget_files+0x21f/0x3d0 [ 1522.646995][ T2289] ksys_read+0x12a/0x250 [ 1522.647013][ T2289] ? __pfx_ksys_read+0x10/0x10 [ 1522.647038][ T2289] do_syscall_64+0x106/0xf80 [ 1522.647058][ T2289] ? clear_bhb_loop+0x40/0x90 [ 1522.647081][ T2289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.647101][ T2289] RIP: 0033:0x7f0bdf55d04e [ 1522.647117][ T2289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1522.647136][ T2289] RSP: 002b:00007f0be042dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1522.647155][ T2289] RAX: ffffffffffffffda RBX: 00007f0be042e6c0 RCX: 00007f0bdf55d04e [ 1522.647167][ T2289] RDX: 000000000000000f RSI: 00007f0be042e0a0 RDI: 0000000000000004 [ 1522.647178][ T2289] RBP: 00007f0be042e090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.647190][ T2289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1522.647201][ T2289] R13: 00007f0bdf816038 R14: 00007f0bdf815fa0 R15: 00007fff2a0b7da8 [ 1522.647225][ T2289] [ 1523.123708][ T538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.196031][ T538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.874409][T31996] Bluetooth: hci8: unexpected event 0x3e length: 508 > 260 [ 1523.874448][T31996] Bluetooth: hci8: unexpected subevent 0x02 length: 507 > 260 [ 1523.892471][T31996] Bluetooth: hci8: Dropping invalid advertising data [ 1523.900947][T31996] Bluetooth: hci8: unknown advertising packet type: 0xe9 [ 1523.900979][T31996] Bluetooth: hci8: Malformed LE Event: 0x02 [ 1527.398495][ T2359] FAULT_INJECTION: forcing a failure. [ 1527.398495][ T2359] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.529109][ T2359] CPU: 0 UID: 0 PID: 2359 Comm: syz.6.8201 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1527.529143][ T2359] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1527.529151][ T2359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1527.529162][ T2359] Call Trace: [ 1527.529169][ T2359] [ 1527.529177][ T2359] dump_stack_lvl+0x100/0x190 [ 1527.529212][ T2359] should_fail_ex.cold+0x5/0xa [ 1527.529234][ T2359] should_failslab+0xc2/0x120 [ 1527.529257][ T2359] __kvmalloc_node_noprof+0xfa/0xa00 [ 1527.529275][ T2359] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 1527.529295][ T2359] ? register_lock_class+0x40/0x560 [ 1527.529326][ T2359] v4l2_ctrl_new+0x4a6/0x23a0 [ 1527.529355][ T2359] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1527.529384][ T2359] ? lock_acquire+0x1cf/0x380 [ 1527.529412][ T2359] ? rcu_is_watching+0x12/0xc0 [ 1527.529444][ T2359] v4l2_ctrl_new_std+0x1bb/0x290 [ 1527.529472][ T2359] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1527.529498][ T2359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1527.529522][ T2359] ? __asan_memset+0x23/0x50 [ 1527.529551][ T2359] ? __asan_memcpy+0x3c/0x60 [ 1527.529579][ T2359] ? find_ref+0x209/0x420 [ 1527.529601][ T2359] handler_new_ref+0x82f/0xc60 [ 1527.529630][ T2359] v4l2_ctrl_new+0xe67/0x23a0 [ 1527.529658][ T2359] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1527.529689][ T2359] v4l2_ctrl_new_std+0x1bb/0x290 [ 1527.529716][ T2359] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1527.529740][ T2359] ? trace_kmalloc+0x101/0x130 [ 1527.529760][ T2359] ? __kasan_kmalloc+0xaa/0xb0 [ 1527.529779][ T2359] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1527.529799][ T2359] ? lockdep_set_lock_cmp_fn+0xa0/0xe0 [ 1527.529826][ T2359] ? media_request_object_init+0x105/0x180 [ 1527.529849][ T2359] vim2m_open+0x140/0x830 [ 1527.529880][ T2359] v4l2_open+0x1d2/0x490 [ 1527.529901][ T2359] ? __pfx_v4l2_open+0x10/0x10 [ 1527.529921][ T2359] chrdev_open+0x234/0x6a0 [ 1527.529941][ T2359] ? __pfx_apparmor_file_open+0x10/0x10 [ 1527.529962][ T2359] ? __pfx_chrdev_open+0x10/0x10 [ 1527.529984][ T2359] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1527.530010][ T2359] do_dentry_open+0x6d8/0x1660 [ 1527.530030][ T2359] ? __pfx_chrdev_open+0x10/0x10 [ 1527.530055][ T2359] vfs_open+0x82/0x3f0 [ 1527.530082][ T2359] path_openat+0x208c/0x31a0 [ 1527.530110][ T2359] ? __pfx_path_openat+0x10/0x10 [ 1527.530139][ T2359] do_file_open+0x20e/0x430 [ 1527.530162][ T2359] ? __pfx_do_file_open+0x10/0x10 [ 1527.530199][ T2359] ? alloc_fd+0x476/0x790 [ 1527.530221][ T2359] ? do_getname+0x191/0x390 [ 1527.530247][ T2359] do_sys_openat2+0x10d/0x1e0 [ 1527.530273][ T2359] ? __pfx_do_sys_openat2+0x10/0x10 [ 1527.530306][ T2359] __x64_sys_openat+0x12d/0x210 [ 1527.530333][ T2359] ? __pfx___x64_sys_openat+0x10/0x10 [ 1527.530373][ T2359] do_syscall_64+0x106/0xf80 [ 1527.530392][ T2359] ? clear_bhb_loop+0x40/0x90 [ 1527.530415][ T2359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.530434][ T2359] RIP: 0033:0x7fb7a3d9c819 [ 1527.530451][ T2359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.530470][ T2359] RSP: 002b:00007fb7a4d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1527.530489][ T2359] RAX: ffffffffffffffda RBX: 00007fb7a4015fa0 RCX: 00007fb7a3d9c819 [ 1527.530501][ T2359] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1527.530512][ T2359] RBP: 00007fb7a3e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1527.530524][ T2359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1527.530535][ T2359] R13: 00007fb7a4016038 R14: 00007fb7a4015fa0 R15: 00007ffefa4cfb28 [ 1527.530558][ T2359] [ 1528.308021][ T2359] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1528.968354][ T2371] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1529.985430][ T2383] qrtr: Invalid version 0 [ 1530.579573][ T2402] FAULT_INJECTION: forcing a failure. [ 1530.579573][ T2402] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.698913][ T2402] CPU: 0 UID: 0 PID: 2402 Comm: syz.7.8210 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1530.698947][ T2402] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1530.698955][ T2402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1530.698966][ T2402] Call Trace: [ 1530.698973][ T2402] [ 1530.698981][ T2402] dump_stack_lvl+0x100/0x190 [ 1530.699013][ T2402] should_fail_ex.cold+0x5/0xa [ 1530.699036][ T2402] should_failslab+0xc2/0x120 [ 1530.699058][ T2402] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1530.699087][ T2402] ? copy_net_ns+0xe8/0x7c0 [ 1530.699114][ T2402] copy_net_ns+0xe8/0x7c0 [ 1530.699134][ T2402] ? copy_cgroup_ns+0x71/0x970 [ 1530.699159][ T2402] create_new_namespaces+0x3ea/0xac0 [ 1530.699185][ T2402] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1530.699209][ T2402] ksys_unshare+0x473/0xad0 [ 1530.699235][ T2402] ? __pfx_ksys_unshare+0x10/0x10 [ 1530.699268][ T2402] __x64_sys_unshare+0x31/0x40 [ 1530.699292][ T2402] do_syscall_64+0x106/0xf80 [ 1530.699311][ T2402] ? clear_bhb_loop+0x40/0x90 [ 1530.699343][ T2402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.699363][ T2402] RIP: 0033:0x7f0bdf59c819 [ 1530.699379][ T2402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.699397][ T2402] RSP: 002b:00007f0be042e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1530.699416][ T2402] RAX: ffffffffffffffda RBX: 00007f0bdf815fa0 RCX: 00007f0bdf59c819 [ 1530.699429][ T2402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1530.699441][ T2402] RBP: 00007f0bdf632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1530.699452][ T2402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1530.699464][ T2402] R13: 00007f0bdf816038 R14: 00007f0bdf815fa0 R15: 00007fff2a0b7da8 [ 1530.699488][ T2402] [ 1531.410967][T31757] NFSD: Failed to start, no listeners configured. [ 1533.035962][ T2450] FAULT_INJECTION: forcing a failure. [ 1533.035962][ T2450] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.096529][ T2454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8214'. [ 1533.253604][ T2450] CPU: 0 UID: 0 PID: 2450 Comm: syz.6.8216 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1533.253639][ T2450] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1533.253646][ T2450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1533.253657][ T2450] Call Trace: [ 1533.253664][ T2450] [ 1533.253672][ T2450] dump_stack_lvl+0x100/0x190 [ 1533.253705][ T2450] should_fail_ex.cold+0x5/0xa [ 1533.253728][ T2450] should_failslab+0xc2/0x120 [ 1533.253750][ T2450] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1533.253779][ T2450] ? alloc_empty_file+0x55/0x1c0 [ 1533.253807][ T2450] alloc_empty_file+0x55/0x1c0 [ 1533.253833][ T2450] alloc_file_pseudo+0x13a/0x230 [ 1533.253858][ T2450] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1533.253884][ T2450] ? alloc_fd+0x476/0x790 [ 1533.253908][ T2450] sock_alloc_file+0x50/0x210 [ 1533.253929][ T2450] __sys_socket+0x1c0/0x260 [ 1533.253953][ T2450] ? __pfx___sys_socket+0x10/0x10 [ 1533.253984][ T2450] __x64_sys_socket+0x72/0xb0 [ 1533.254007][ T2450] ? lockdep_hardirqs_on+0x78/0x100 [ 1533.254027][ T2450] do_syscall_64+0x106/0xf80 [ 1533.254045][ T2450] ? clear_bhb_loop+0x40/0x90 [ 1533.254068][ T2450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.254087][ T2450] RIP: 0033:0x7fb7a3d9c819 [ 1533.254103][ T2450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1533.254121][ T2450] RSP: 002b:00007fb7a4ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1533.254140][ T2450] RAX: ffffffffffffffda RBX: 00007fb7a4016090 RCX: 00007fb7a3d9c819 [ 1533.254152][ T2450] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 1533.254163][ T2450] RBP: 00007fb7a3e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1533.254174][ T2450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.254186][ T2450] R13: 00007fb7a4016128 R14: 00007fb7a4016090 R15: 00007ffefa4cfb28 [ 1533.254210][ T2450] [ 1536.216727][ T2496] nbd: illegal input index 37139 [ 1536.812286][ T2503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1536.820527][ T2503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1536.882214][ T2503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1536.948617][ T2503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1537.008478][ T2503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1537.082152][ T2503] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1537.123015][ T2503] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1537.182655][ T2503] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1537.235208][ T2503] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1537.302167][ T2503] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1537.350750][ T2503] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1537.434221][ T2503] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1537.931125][ T2523] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8223'. [ 1538.080487][ T2523] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8223'. [ 1538.228849][ T2536] FAULT_INJECTION: forcing a failure. [ 1538.228849][ T2536] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.356230][ T2536] CPU: 0 UID: 0 PID: 2536 Comm: syz.6.8226 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1538.356273][ T2536] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1538.356281][ T2536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1538.356293][ T2536] Call Trace: [ 1538.356299][ T2536] [ 1538.356307][ T2536] dump_stack_lvl+0x100/0x190 [ 1538.356341][ T2536] should_fail_ex.cold+0x5/0xa [ 1538.356365][ T2536] should_failslab+0xc2/0x120 [ 1538.356387][ T2536] __kvmalloc_node_noprof+0xfa/0xa00 [ 1538.356405][ T2536] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 1538.356425][ T2536] ? register_lock_class+0x40/0x560 [ 1538.356455][ T2536] v4l2_ctrl_new+0x4a6/0x23a0 [ 1538.356483][ T2536] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1538.356505][ T2536] ? lock_acquire+0x1cf/0x380 [ 1538.356534][ T2536] ? rcu_is_watching+0x12/0xc0 [ 1538.356566][ T2536] v4l2_ctrl_new_std+0x1bb/0x290 [ 1538.356594][ T2536] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1538.356621][ T2536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1538.356645][ T2536] ? __asan_memset+0x23/0x50 [ 1538.356673][ T2536] ? __asan_memcpy+0x3c/0x60 [ 1538.356699][ T2536] ? find_ref+0x209/0x420 [ 1538.356720][ T2536] handler_new_ref+0x82f/0xc60 [ 1538.356746][ T2536] v4l2_ctrl_new+0xe67/0x23a0 [ 1538.356774][ T2536] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1538.356805][ T2536] v4l2_ctrl_new_std+0x1bb/0x290 [ 1538.356833][ T2536] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1538.356856][ T2536] ? trace_kmalloc+0x101/0x130 [ 1538.356876][ T2536] ? __kasan_kmalloc+0xaa/0xb0 [ 1538.356894][ T2536] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1538.356914][ T2536] ? lockdep_set_lock_cmp_fn+0xa0/0xe0 [ 1538.356942][ T2536] ? media_request_object_init+0x105/0x180 [ 1538.356965][ T2536] vim2m_open+0x140/0x830 [ 1538.356997][ T2536] v4l2_open+0x1d2/0x490 [ 1538.357017][ T2536] ? __pfx_v4l2_open+0x10/0x10 [ 1538.357037][ T2536] chrdev_open+0x234/0x6a0 [ 1538.357058][ T2536] ? __pfx_apparmor_file_open+0x10/0x10 [ 1538.357079][ T2536] ? __pfx_chrdev_open+0x10/0x10 [ 1538.357101][ T2536] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1538.357127][ T2536] do_dentry_open+0x6d8/0x1660 [ 1538.357146][ T2536] ? __pfx_chrdev_open+0x10/0x10 [ 1538.357172][ T2536] vfs_open+0x82/0x3f0 [ 1538.357200][ T2536] path_openat+0x208c/0x31a0 [ 1538.357228][ T2536] ? __pfx_path_openat+0x10/0x10 [ 1538.357258][ T2536] do_file_open+0x20e/0x430 [ 1538.357287][ T2536] ? __pfx_do_file_open+0x10/0x10 [ 1538.357324][ T2536] ? alloc_fd+0x476/0x790 [ 1538.357345][ T2536] ? do_getname+0x191/0x390 [ 1538.357372][ T2536] do_sys_openat2+0x10d/0x1e0 [ 1538.357404][ T2536] ? __pfx_do_sys_openat2+0x10/0x10 [ 1538.357438][ T2536] __x64_sys_openat+0x12d/0x210 [ 1538.357466][ T2536] ? __pfx___x64_sys_openat+0x10/0x10 [ 1538.357501][ T2536] do_syscall_64+0x106/0xf80 [ 1538.357520][ T2536] ? clear_bhb_loop+0x40/0x90 [ 1538.357543][ T2536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.357562][ T2536] RIP: 0033:0x7fb7a3d9c819 [ 1538.357579][ T2536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.357597][ T2536] RSP: 002b:00007fb7a4d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1538.357616][ T2536] RAX: ffffffffffffffda RBX: 00007fb7a4015fa0 RCX: 00007fb7a3d9c819 [ 1538.357628][ T2536] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1538.357639][ T2536] RBP: 00007fb7a3e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1538.357650][ T2536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1538.357661][ T2536] R13: 00007fb7a4016038 R14: 00007fb7a4015fa0 R15: 00007ffefa4cfb28 [ 1538.357685][ T2536] [ 1539.253269][T31996] Bluetooth: hci4: command 0x0406 tx timeout [ 1539.260124][T31996] Bluetooth: hci2: command 0x0c1a tx timeout [ 1539.267780][T31996] Bluetooth: hci1: command 0x0406 tx timeout [ 1539.275320][T31996] Bluetooth: hci0: command 0x0406 tx timeout [ 1539.281363][T31996] Bluetooth: hci3: command 0x0406 tx timeout [ 1539.294232][T31996] Bluetooth: hci5: command 0x0c1a tx timeout [ 1539.300342][T31996] Bluetooth: hci6: command 0x0c1a tx timeout [ 1539.307791][T31996] Bluetooth: hci8: command 0x0c1a tx timeout [ 1539.314396][T31996] Bluetooth: hci7: command 0x0c1a tx timeout [ 1539.504642][ T1369] Bluetooth: hci9: command 0x0c1a tx timeout [ 1541.574250][ T1369] Bluetooth: hci9: command 0x0c1a tx timeout [ 1542.031767][ T2609] FAULT_INJECTION: forcing a failure. [ 1542.031767][ T2609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1542.173642][ T2609] CPU: 0 UID: 0 PID: 2609 Comm: syz.7.8238 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1542.173676][ T2609] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1542.173684][ T2609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1542.173696][ T2609] Call Trace: [ 1542.173703][ T2609] [ 1542.173710][ T2609] dump_stack_lvl+0x100/0x190 [ 1542.173744][ T2609] should_fail_ex.cold+0x5/0xa [ 1542.173767][ T2609] _copy_from_user+0x2e/0xd0 [ 1542.173793][ T2609] do_sock_getsockopt+0x30b/0x3d0 [ 1542.173819][ T2609] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1542.173853][ T2609] __sys_getsockopt+0x133/0x1d0 [ 1542.173886][ T2609] ? __pfx_ksys_write+0x10/0x10 [ 1542.173908][ T2609] ? __x64_sys_getsockopt+0xbd/0x160 [ 1542.173938][ T2609] __x64_sys_getsockopt+0xbd/0x160 [ 1542.173968][ T2609] ? do_syscall_64+0x95/0xf80 [ 1542.174020][ T2609] ? lockdep_hardirqs_on+0x78/0x100 [ 1542.174039][ T2609] do_syscall_64+0x106/0xf80 [ 1542.174058][ T2609] ? clear_bhb_loop+0x40/0x90 [ 1542.174082][ T2609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.174105][ T2609] RIP: 0033:0x7f0bdf59c819 [ 1542.174122][ T2609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.174140][ T2609] RSP: 002b:00007f0be042e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1542.174165][ T2609] RAX: ffffffffffffffda RBX: 00007f0bdf815fa0 RCX: 00007f0bdf59c819 [ 1542.174177][ T2609] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000003 [ 1542.174188][ T2609] RBP: 00007f0be042e090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.174200][ T2609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.174211][ T2609] R13: 00007f0bdf816038 R14: 00007f0bdf815fa0 R15: 00007fff2a0b7da8 [ 1542.174234][ T2609] [ 1543.655570][ T1369] Bluetooth: hci9: command 0x0c1a tx timeout [ 1544.491573][ T2658] FAULT_INJECTION: forcing a failure. [ 1544.491573][ T2658] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.572074][ T2658] CPU: 0 UID: 0 PID: 2658 Comm: syz.5.8248 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1544.572109][ T2658] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1544.572116][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1544.572129][ T2658] Call Trace: [ 1544.572137][ T2658] [ 1544.572145][ T2658] dump_stack_lvl+0x100/0x190 [ 1544.572190][ T2658] should_fail_ex.cold+0x5/0xa [ 1544.572213][ T2658] should_failslab+0xc2/0x120 [ 1544.572236][ T2658] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1544.572262][ T2658] ? alloc_pipe_info+0x10e/0x590 [ 1544.572285][ T2658] ? security_inode_alloc+0xcf/0x2c0 [ 1544.572311][ T2658] alloc_pipe_info+0x10e/0x590 [ 1544.572333][ T2658] create_pipe_files+0x8c/0x970 [ 1544.572356][ T2658] do_pipe2+0xbd/0x1e0 [ 1544.572384][ T2658] ? __pfx_do_pipe2+0x10/0x10 [ 1544.572412][ T2658] __x64_sys_pipe+0x33/0x50 [ 1544.572433][ T2658] do_syscall_64+0x106/0xf80 [ 1544.572458][ T2658] ? clear_bhb_loop+0x40/0x90 [ 1544.572485][ T2658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.572505][ T2658] RIP: 0033:0x7f6d16b9c819 [ 1544.572528][ T2658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.572547][ T2658] RSP: 002b:00007f6d17afa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1544.572565][ T2658] RAX: ffffffffffffffda RBX: 00007f6d16e15fa0 RCX: 00007f6d16b9c819 [ 1544.572577][ T2658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1544.572588][ T2658] RBP: 00007f6d16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1544.572599][ T2658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.572609][ T2658] R13: 00007f6d16e16038 R14: 00007f6d16e15fa0 R15: 00007ffcbcdc2e88 [ 1544.572637][ T2658] [ 1546.464791][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.471197][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.003088][ T2799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8266'. [ 1551.060139][ T2799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8266'. [ 1551.185980][ T2799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8266'. [ 1552.397644][ T2840] FAULT_INJECTION: forcing a failure. [ 1552.397644][ T2840] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.548889][ T2840] CPU: 0 UID: 0 PID: 2840 Comm: syz.7.8271 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1552.548922][ T2840] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1552.548929][ T2840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1552.548941][ T2840] Call Trace: [ 1552.548948][ T2840] [ 1552.548956][ T2840] dump_stack_lvl+0x100/0x190 [ 1552.548991][ T2840] should_fail_ex.cold+0x5/0xa [ 1552.549014][ T2840] should_failslab+0xc2/0x120 [ 1552.549036][ T2840] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1552.549066][ T2840] ? __kernfs_new_node+0xd2/0x960 [ 1552.549099][ T2840] __kernfs_new_node+0xd2/0x960 [ 1552.549138][ T2840] ? __pfx___kernfs_new_node+0x10/0x10 [ 1552.549173][ T2840] ? find_held_lock+0x2b/0x80 [ 1552.549192][ T2840] ? kernfs_root+0xee/0x2a0 [ 1552.549220][ T2840] ? kernfs_root+0xee/0x2a0 [ 1552.549252][ T2840] kernfs_new_node+0x11b/0x1a0 [ 1552.549280][ T2840] __kernfs_create_file+0x53/0x350 [ 1552.549306][ T2840] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1552.549339][ T2840] internal_create_group+0x593/0xf40 [ 1552.549374][ T2840] ? __pfx_internal_create_group+0x10/0x10 [ 1552.549408][ T2840] ? kernfs_create_link+0x1bd/0x240 [ 1552.549435][ T2840] internal_create_groups+0x9d/0x150 [ 1552.549466][ T2840] device_add+0x77a/0x1950 [ 1552.549495][ T2840] ? __pfx_device_add+0x10/0x10 [ 1552.549518][ T2840] ? __pfx___might_resched+0x10/0x10 [ 1552.549547][ T2840] ? lockdep_hardirqs_on+0x78/0x100 [ 1552.549574][ T2840] __add_disk+0x518/0xe40 [ 1552.549600][ T2840] add_disk_fwnode+0x118/0x5c0 [ 1552.549624][ T2840] loop_add+0x90b/0xb60 [ 1552.549653][ T2840] ? __pfx_loop_add+0x10/0x10 [ 1552.549696][ T2840] ? find_held_lock+0x2b/0x80 [ 1552.549715][ T2840] ? __fget_files+0x215/0x3d0 [ 1552.549736][ T2840] loop_control_ioctl+0xae/0x620 [ 1552.549768][ T2840] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1552.549801][ T2840] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1552.549832][ T2840] __x64_sys_ioctl+0x18e/0x210 [ 1552.549863][ T2840] do_syscall_64+0x106/0xf80 [ 1552.549883][ T2840] ? clear_bhb_loop+0x40/0x90 [ 1552.549906][ T2840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.549926][ T2840] RIP: 0033:0x7f0bdf59c819 [ 1552.549943][ T2840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.549961][ T2840] RSP: 002b:00007f0be040d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1552.549981][ T2840] RAX: ffffffffffffffda RBX: 00007f0bdf816090 RCX: 00007f0bdf59c819 [ 1552.549993][ T2840] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 1552.550004][ T2840] RBP: 00007f0bdf632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1552.550015][ T2840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.550026][ T2840] R13: 00007f0bdf816128 R14: 00007f0bdf816090 R15: 00007fff2a0b7da8 [ 1552.550050][ T2840] [ 1553.770415][ T2865] program syz.5.8273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1555.086963][ T30] audit: type=1800 audit(2147522780.032:43): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8274" name="trace_pipe" dev="tracefs" ino=1663 res=0 errno=0 [ 1556.062337][ T31] INFO: task syz-executor:26596 blocked for more than 142 seconds. [ 1556.070279][ T31] Tainted: G U L syzkaller #0 [ 1556.101212][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1556.208694][ T31] task:syz-executor state:D stack:24232 pid:26596 tgid:26596 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1556.291422][ T31] Call Trace: [ 1556.294756][ T31] [ 1556.297713][ T31] __schedule+0xfee/0x6120 [ 1556.441696][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1556.446708][ T31] ? __pfx___schedule+0x10/0x10 [ 1556.547263][ T31] ? find_held_lock+0x2b/0x80 [ 1556.570247][ T31] ? schedule+0x2bf/0x390 [ 1556.598091][ T31] schedule+0xdd/0x390 [ 1556.632639][ T31] schedule_preempt_disabled+0x13/0x30 [ 1556.678647][ T31] __mutex_lock+0xc9a/0x1b90 [ 1556.691447][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1556.696821][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1556.774747][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1556.779831][ T31] ? net_generic+0xea/0x2a0 [ 1556.842516][ T31] ? net_generic+0xea/0x2a0 [ 1556.847112][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1556.871706][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1556.901769][ T31] nfsd_umount+0x3b/0x60 [ 1556.906191][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1556.951565][ T31] deactivate_super+0xe7/0x110 [ 1556.956403][ T31] cleanup_mnt+0x21f/0x450 [ 1556.960866][ T31] task_work_run+0x150/0x240 [ 1557.028569][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1557.041624][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 1557.082375][ T31] do_syscall_64+0x668/0xf80 [ 1557.087116][ T31] ? clear_bhb_loop+0x40/0x90 [ 1557.121904][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.127929][ T31] RIP: 0033:0x7fbcb019da57 [ 1557.161687][ T31] RSP: 002b:00007ffd7b39ae98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1557.170225][ T31] RAX: 0000000000000000 RBX: 00007fbcb0232048 RCX: 00007fbcb019da57 [ 1557.243603][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7b39af50 [ 1557.281738][ T31] RBP: 00007ffd7b39af50 R08: 00007ffd7b39bf50 R09: 00000000ffffffff [ 1557.321757][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7b39bfe0 [ 1557.329761][ T31] R13: 00007fbcb0232048 R14: 0000000000157e69 R15: 00007ffd7b39c020 [ 1557.381801][ T31] [ 1557.480996][ T31] [ 1557.480996][ T31] Showing all locks held in the system: [ 1557.521975][ T31] 1 lock held by khungtaskd/31: [ 1557.526875][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1557.601962][ T31] 2 locks held by syz-executor/26596: [ 1557.607470][ T31] #0: ffff88803f1e20e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1557.682554][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1557.731948][ T31] 1 lock held by syz.2.7081/29423: [ 1557.737196][ T31] 2 locks held by syz.3.7633/31757: [ 1557.771955][ T31] #0: ffffffff906c33f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1557.780200][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1557.852155][ T31] 2 locks held by syz-executor/31992: [ 1557.857652][ T31] #0: ffff8880349ea0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1557.919557][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1557.942053][ T31] 3 locks held by syz.0.8091/1567: [ 1557.947194][ T31] #0: ffff88807cb36ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1557.969411][ T31] #1: ffff8880433c0420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 1557.992254][ T31] #2: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 1558.012248][ T31] 3 locks held by syz.1.8136/1850: [ 1558.017380][ T31] #0: ffff88803c6b5eb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1558.052112][ T31] #1: ffff888047aec420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 1558.071842][ T31] #2: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 1558.092260][ T31] 2 locks held by syz-executor/2074: [ 1558.098157][ T31] #0: ffff88806c1b60e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1558.121973][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1558.131662][ T31] 2 locks held by syz.8.8269/2826: [ 1558.155497][ T31] #0: ffffffff906c33f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1558.173115][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1558.197888][ T31] 1 lock held by syz.5.8276/2903: [ 1558.209203][ T31] #0: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1558.272204][ T31] [ 1558.274565][ T31] ============================================= [ 1558.274565][ T31] [ 1558.342270][ T31] NMI backtrace for cpu 0 [ 1558.342293][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1558.342322][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1558.342329][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1558.342340][ T31] Call Trace: [ 1558.342347][ T31] [ 1558.342354][ T31] dump_stack_lvl+0x100/0x190 [ 1558.342388][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1558.342421][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1558.342450][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1558.342480][ T31] sys_info+0x141/0x190 [ 1558.342503][ T31] watchdog+0xd25/0x1050 [ 1558.342528][ T31] ? __pfx_watchdog+0x10/0x10 [ 1558.342548][ T31] ? __kthread_parkme+0x18c/0x230 [ 1558.342572][ T31] ? kthread+0x13a/0x450 [ 1558.342597][ T31] ? __pfx_watchdog+0x10/0x10 [ 1558.342614][ T31] kthread+0x370/0x450 [ 1558.342639][ T31] ? __pfx_kthread+0x10/0x10 [ 1558.342666][ T31] ret_from_fork+0x754/0xd80 [ 1558.342696][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1558.342727][ T31] ? __switch_to+0x7b4/0x1120 [ 1558.342748][ T31] ? __pfx_kthread+0x10/0x10 [ 1558.342775][ T31] ret_from_fork_asm+0x1a/0x30 [ 1558.342806][ T31] [ 1558.944574][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1558.951600][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1558.962393][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1558.967612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1558.977684][ T31] Call Trace: [ 1558.981061][ T31] [ 1558.984084][ T31] dump_stack_lvl+0x100/0x190 [ 1558.988805][ T31] vpanic+0x552/0x970 [ 1558.992795][ T31] ? __pfx_vpanic+0x10/0x10 [ 1558.997300][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1559.003472][ T31] panic+0xd1/0xe0 [ 1559.007216][ T31] ? __pfx_panic+0x10/0x10 [ 1559.011651][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1559.017915][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1559.024083][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1559.030335][ T31] ? watchdog.cold+0x198/0x1ca [ 1559.035114][ T31] ? watchdog+0xd35/0x1050 [ 1559.039558][ T31] watchdog.cold+0x1a9/0x1ca [ 1559.044248][ T31] ? __pfx_watchdog+0x10/0x10 [ 1559.049080][ T31] ? __kthread_parkme+0x18c/0x230 [ 1559.054166][ T31] ? kthread+0x13a/0x450 [ 1559.058418][ T31] ? __pfx_watchdog+0x10/0x10 [ 1559.063184][ T31] kthread+0x370/0x450 [ 1559.067350][ T31] ? __pfx_kthread+0x10/0x10 [ 1559.071952][ T31] ret_from_fork+0x754/0xd80 [ 1559.076592][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1559.081747][ T31] ? __switch_to+0x7b4/0x1120 [ 1559.086438][ T31] ? __pfx_kthread+0x10/0x10 [ 1559.091100][ T31] ret_from_fork_asm+0x1a/0x30 [ 1559.095901][ T31] [ 1559.099088][ T31] Kernel Offset: disabled [ 1559.103419][ T31] Rebooting in 86400 seconds..