last executing test programs: 3m3.568487626s ago: executing program 32 (id=2313): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x8, 0xe) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) 3m2.41161325s ago: executing program 3 (id=2366): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x10001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xa) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x22003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0x22, 0x2, 0x2) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$auto(0x7, 0x0, 0x6) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 3m1.701645713s ago: executing program 3 (id=2368): madvise$auto_MADV_MERGEABLE(0x8000000, 0x4, 0xc) madvise$auto_MADV_MERGEABLE(0x5, 0xfffffffffffffff7, 0xc) madvise$auto_MADV_MERGEABLE(0x4bc3, 0x6, 0xc) madvise$auto_MADV_MERGEABLE(0x7, 0xd, 0xc) madvise$auto_MADV_MERGEABLE(0x401, 0x7, 0xc) madvise$auto_MADV_MERGEABLE(0xffff, 0x7, 0xc) madvise$auto_MADV_MERGEABLE(0x91d, 0x3, 0xc) madvise$auto_MADV_MERGEABLE(0x4, 0xfffffffffffffff8, 0xc) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) madvise$auto_MADV_MERGEABLE(0x2, 0xffffffffffffffff, 0xc) madvise$auto_MADV_MERGEABLE(0x800, 0x3d5, 0xc) madvise$auto_MADV_MERGEABLE(0x2, 0xffff, 0xc) madvise$auto_MADV_MERGEABLE(0x1c, 0x7, 0xc) madvise$auto_MADV_MERGEABLE(0x7, 0x401, 0xc) madvise$auto_MADV_MERGEABLE(0xfffffffffffffffc, 0x1000, 0xc) madvise$auto_MADV_MERGEABLE(0x8, 0x212b, 0xc) madvise$auto_MADV_MERGEABLE(0x7fff, 0x6, 0xc) madvise$auto_MADV_MERGEABLE(0x8, 0x6, 0xc) madvise$auto_MADV_MERGEABLE(0x3, 0x3c, 0xc) madvise$auto_MADV_MERGEABLE(0x5, 0xffff, 0xc) madvise$auto_MADV_MERGEABLE(0x1, 0x2, 0xc) madvise$auto_MADV_MERGEABLE(0x7, 0x0, 0xc) madvise$auto_MADV_MERGEABLE(0xea30, 0x6, 0xc) madvise$auto_MADV_MERGEABLE(0x8, 0x7, 0xc) madvise$auto_MADV_MERGEABLE(0x4, 0x1, 0xc) madvise$auto_MADV_MERGEABLE(0xe, 0x3, 0xc) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20000, 0x0) ioctl$auto_EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x7, 0x4]) madvise$auto_MADV_MERGEABLE(0xa1, 0x4e, 0xc) madvise$auto_MADV_MERGEABLE(0x9ae, 0x8001, 0xc) 3m1.553794903s ago: executing program 3 (id=2369): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) r0 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$auto_stats_fops_(r0, &(0x7f0000000140)=""/149, 0x95) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x80800002) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) pread64$auto(r2, 0x0, 0x7e91, 0x7fffffff) readv$auto(0x3, 0x0, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) io_uring_setup$auto(0x59, 0x0) clock_adjtime$auto(0x354d, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28001) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) 3m0.316209545s ago: executing program 3 (id=2372): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r0 = pipe2$auto(0x0, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0xbb, 0x0) vmsplice$auto(r0, 0x0, 0x2, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x70000, 0x0) r3 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r3, 0x65, 0x8, 0x0, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) close_range$auto(0x0, 0x5, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket(0x2, 0x3, 0xe8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya3\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 2m59.949958191s ago: executing program 3 (id=2374): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity$auto(0x0, 0x9899, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000003a00)={0x18, r1, 0x201, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1}, 0x4044) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x3, 0x0, 0x0) (async) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r3, 0x0, 0xfffffdf1) (async) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async) open(&(0x7f0000000040)='&&\x00', 0x40202, 0x79) (async) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0x4c, 0x9) 2m56.048936852s ago: executing program 3 (id=2380): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x5}, 0xa) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x8000000000007}, 0x9) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x6, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x0) 2m40.734938975s ago: executing program 33 (id=2380): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x5}, 0xa) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x8000000000007}, 0x9) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x6, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x0) 2m38.663645037s ago: executing program 4 (id=2443): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0xffffffffffffffff, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x4, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x400000000000, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a], "49822ea0dcada2cb578bb19d553ec885e2b3d6a29b8a8fea6e8e2fe2b37fd614dbb91b3038659f54338e7b0657f901ecb180ba7b95aecffd30b91220402899d431d4feda642281982452cd3d63fcc1c1459d8c9e12eebc9dc3b69ee4e892b1f7901e64328aaa8a8728472194aa3a0b61cbbd1af1cd4a3d3585ede3ee122921cc0e2a827c9f62740300800000abd8bd55b25455547f5f067e1dd7a9532f6d603857"}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x26082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) open(&(0x7f0000000040)='./cgroup/file0\x00', 0x80880, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') close_range$auto(0x2, r1, 0xc82) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) 2m37.38306325s ago: executing program 4 (id=2444): r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x6b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x6, 0x0) r1 = fsopen$auto(0x0, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/msg_next_id\x00', 0xc0082, 0x0) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x4, 0x14000000000000) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x45ac00, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000040)="735df89f7e4750762b5a75fe90420785") socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x6b) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x6, 0x0) (async) fsopen$auto(0x0, 0x1) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/msg_next_id\x00', 0xc0082, 0x0) (async) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) (async) pread64$auto(r0, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x4, 0x14000000000000) (async) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x45ac00, 0x0) (async) ioctl$auto_FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000040)="735df89f7e4750762b5a75fe90420785") (async) 2m37.081641342s ago: executing program 4 (id=2446): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/udp_slot_table_entries\x00', 0x80302, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr5/queues/rx-0/rps_cpus\x00', 0x42401, 0x0) write$auto(r0, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0xa71}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x9}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x2, 0x0) ioctl$auto_MEMERASE64(r3, 0x40104d14, &(0x7f0000000040)={0x100000006, 0xa00000000010000}) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r1) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r4, @ANYBLOB="010729bd7000fddbdf8900000000"], 0x6b}, 0x1, 0x0, 0x0, 0x800}, 0x400e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xffd8) 2m36.038001676s ago: executing program 4 (id=2449): r0 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x2}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x24004814) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) write$auto_cpu_latency_qos_fops_qos(0xffffffffffffffff, &(0x7f00000000c0)="4d46f158ba101c8c2d9356700b866489eff04b4760b3539b045b1af49ea855e368af3d1e6e1f4357d9e208a8ed480f4eff72480ed222ec48dbb1c4c6d0fd8e8a7b798aa8066160cb78be83de9b691f6907f58b4f87e18d4d420de6c18f156d749715ddbf8127891d08247d8c919da0fbb26ace2399e1c632f1e2b0c8ffe8ce7dc7b80b98438f066bd662d0d89bd610fc61883c13fe44afc3e67b91241c5cf586c524a26879", 0xa5) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r1, 0xc2604110, 0x0) r3 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/uprobe_events\x00', 0x0, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000380)={@inferred=r3, "a04d700447d05b429b9cd6173b700cb7e98e97445b56c566f0b6df178f878053f622af57fa64322fd7e49e3a80c938f8b3d7c155080fdcd173d3803954c3a7740d5826906351f0f8a56a7b5d772117e6f9ada34a5a91d1e55f32e695f0482b6720666458db4d06c406c8cffb4b9d57b19b5b3e7112e33a61f574d3f4e9fa4e8d8fb4566df127d9f71dc17bb96644ff06c79ab7038528e07b34761acf21e964912d20581e179c810147e3eadd8e4cdc1f58dbbb96a52c987863bf2c06de258aab07a668338b41127113a88da3f880d0685242cbdd8d20897c6b23abe9f79c77a1b6cbc938efc507cdfdf2b109365d522d92deca0d3f151560c0986b8fdba5dab88058290b68af5ab083ce710713ba1f1ab13f8a697d8783ad50bd138c5c24449138237d1e3fe34a467dcf85112e6791c7626812d6de848f73d22385864a518e5f7b48bf2fca5843de96c12c65e157a9fc821d59589ba00072ff921c6c0290e69ffa18eb4566bf82860bc647402a4457c3e683b4db4ac08c991f44c9e224d9834709b6fcd7c53188453af63e567275deede0c094adb24a30be16f59e9e4887ddd5939ae305fb876e389e8ec00fda6dafdc22123465b714d29534685b61d4c0827516ef4c708a0a78d80f6c7e29e9265e408bf4d8f1ce1367393138b324352360cfcada8e9856967506b4426f8f5ced38868468a100f95dde690fded269c6e5b72b66399679b3e11c1712b2f75e4caa501a85f90c63f7c1f657883090f8504c441d7bfddfe5a4d2fb2d19857e36b423e39858dd001e26c0955587f49a848a7b18b6a11e09a036122561590372a89082a29282f1d8a14f5292b1ed9f857796a09d4949f321a029f6e39b0fd5aa57dd0f48d02e915d469b2c26723debddd7c8aa984de696dbae3f7def637dbe7f49ac5cd1371ecb0c04e7a103fc19bb30931a1ae9eb450651f7ffa242d629925215c0606dd68236e53e97cd6dce6a8423b05706d5d043876a0fb2bdd8d85e0364a7fe2c721ed054615e54c56c6e4de361672338b4eef4e262ca18a70b84fbacf21968342a286982dd14c13611aa7cce119179c07e65a7dc86b99d7a5f264cfabb60b5a205100721d03ca54b5a80d63eb9d584d65658c0ee2d98a50a3209ff16d3897921b5966046db6d052d4e6651c56f75d32bc599632116efe32e8d924738fdd0e2dca8aa946c2c48b54c72e6f9c4924d4e6a3a23ebacfc4151a90216805fa79832b6bb4e89d45c9f27aca333592261067b21a180f3abb09c2ae572a441c2fc0c3f5a71fab6f86db933cff0c2870344c99b3abc4c7fdefad65d2a809abd462012ebc3166c089e5eec97ff14416945fe55a6a7ff67ef6e7b4bfe19537894b2c54ef5afcabb54f762b5d03e57f81d27e5898082747bd4cc2c2690dc0aa6658b39d4dd022594af889014144866217a994b3aa04609bdc34d87d99b2f6fb0383dddecff299da177dc423dce6f0f938fa85b902137171bff53925a471d2469ed5568a2fce317e14c99dffbac0c436441b23a09add9f08070eedf31037a3402a8c154cb620bb2490205220f4dc1989d711aa2c3b699080ee42be5df2ad2648599f023def89e85c01df810f40247018b461157f8e576d4364c68b9017123dabdb9d75915295fb9f95ef4c9d75cbf3bf998db46868757101319bf99a4cb583049c5f9acd54b3ecd3f3d587f4928f0dc6d3943bdb6b2880d605f2a3f87e37a9b2416149ddb65ef772ef84cb51778248b9063728a8df88dfcb0512fa6a232bfa2d5b79c7191e651ba9247e0d113c893d92461951f53eec6ed6b9b017f8fb6561f8fb3ccaf0b9a0d1d8cf4a88b1ea708fdd9345bee35f2d4f9e028e2ebf4fba7486e96f45059bd9355e87060b1e71fb48b714d4fbd8cdbb1d10bc3ae64f8a3b7913e1133cba33dd70159024e03a0681524b1d1ba53ce8ce1705a2688bfbf89ace7e5972d7a5766bba90f30b4688a2b84533ac452c6a7b54ef645af4a91b5fe355001a11a9ad0199b0c357d27d5be2fc0892b82294d2c41eef91d1b74e4ac05ea52833296ac28633002a47f46084ff03e3e2a0e5846fa3f8661b9ec3a9ad0f32b065ccde1dbef6d6dd79634bcc9663486aef447781a18fd07706bd9a8e9dffdebc8cd52607ec9e86a88b2a9bfe8d97123822ad8fb650ccca29e397141b62f3e482d976a82a70a170533f509faed178fcb9889d4b22256b39a740cfb70f48938fb81928cf9a9e3e4bc904dd78b98bb33539f65957c7dd0dc310f2ab49d8642c32a5bf1fd86239a8e0146809454c2784109d80bd85c6e6cea4795c5a78a289ed0d7c55deeaea652f72982e83668c68d2f993f768ef2be9b8f7ed6a963c30fafa84fee41902cf5c38bcc3043df8f463dc2429992b3dc2347aa0a1b7d235c59d93963c332ecd7f5b037f438fb223d84316e9d87c49dd45a62c26c3fe7d06425332254c3d81a31363f99c4477eb1fc2e9d17f5b64c6d25d9c16641a423ffeebd3b890e4468cca08e4478b600ce5fa37f469f38e461a999e70620f87ea1724363b432a26d472384d0b14a99e1db92f08bdf1f1ab567da283959932465921f4882d1912aefaf9d718e88452ac86d59b1876cadc48be5041687a270e06de27d7d2dcb7bd6285701060e632296c4560a86b14ed69d4fbd861dda12617c6ce18114e379cf60988cd88768097907d4896d32a9cfa7ceb0f9b9dce39927f009abcb225dc2347807d66ade4c7b2fe466470915aa2f6334c13b904db9d0745cd8f4f14387e9f45481abc67f80611fac631dcb26fdc1ee5e1594ed3fa58191a84e5e83e1fd0dde55821ef2172bc01d6c7c6f9c38ef51b7768f872ae1d9ec8d8f0af6c942b22dd268f6586607f6f25c7276214bd5adedfb133ac69119cccf3371d41c4344508530f2bc17f756c24b37239dfde87b9253f271cc7c9f6a7f1037ab52ce162cc17f0a25768348b617a6c76abb9a4fe9afb658401f3627b78a8b8fb595a216439184577692de4583df6f0df99316a166569eeffd0001526713da06c0d03598c1b5ef970334b93f2d28f218947275dc6f2b734467e96d3efbde1ba3ed14d0f962bbe1ca29603df362c0c755b73ee13663de9115d4dd9c52e8ae29ad3e0e1be490576e5abf25bfc2b4e748d2bbdd6c48b4bcc8f3cd60590735eb6aa8b4710ba8f4c5cd98b3bb044294929dab149084c64a6f2da61dcc1011b0b3ba3ef415df32abe897a1a6b720b41fa464b9bdd2ea851080756f6cfbaa348a4fa0fd77f09a7ea4aee650be46279e86c904c36c6cf65ac775be22b7b759eb51b884b7760a6d620daeb5a8b649e7add6a918d57f2a04ca44c9d974c172e3a822777de76b8eba880d2439c59ca8ebd6b5fc03429084f545968931bd3cd83b782d8a00688b9a0559041a88405c45248523185d74e89c622623a0d40a4d6b0ee17887bb167d2792be5e41bd9d331686dfcd8323466c5b6d8181ce69a5560e64537b0531a8c29abb5e632f59673d2bdfa3614bd1bf729419a195df2d0ba97cabdc9dc748c53e9d5f812b2d8c288b5939e1703e65717d3edf3d51c36d9b49ad74e1252db98eb5bf5ca6240ca4a5aef337ee5d2ce29fa53b1ff4dddb4ccb62e2486d6ef019c191b1c42e0cfa74caf117c229b5eb6e4c6095bbc17b669d446653346744085bac12caf0d857d55314a5d6a9711712d5f033e6a7a5525f652b373d73c887c337a7e076f4477d729b426a19d9eb9e15d4f05e8cda9035fa204d00633905a385307416acc839951bb9237954cf913a78c12405898280ec580df90dd8e58e04345009c7b6b28fe7a3abfa80d0b4c4f91e4e26d218767b6e1599febd6a3e3e695813d9dc0e71b1120526e0383554e833ea132a3bd93b21b5021e57683e7e47b63c529290a72cdb578576313f62bbd9048fdfdd37b479cfad9e71f312f99835bf8be253854d3841f8338e96fb86a1d7a1ed8371cc96f6bf84b52178834b461f9d86da21aec01fb04c4b350bf021a4fd55b7c2d59efef978ead5ed412a4a1ff7151f9422be6c3eb08749fe51006a95c8f9e1b36f3c96913b47857c71e0b5e75925d251c9061319538de9000ce358f2936deb7cf47acafc04c7f2e1083d154e633a3f124be0f90b7e3f1c4bdf942701c0cfa7499ce10d0690af543d71dad23f214abf2f382f73eb902ea100c443f486bc381c09d033cc81f758c0176c6c6478d63c7706b9b58da184a0a8db35a6a940f43b6c9aa35ed154073a43c263b873ad817234529fc54132403c3e437b9c8cc4a25f14b13a2ef3ce507c2b8fc49d4e443361c0a65d04c973d8106b3ca50a99d865b8e3d24eaef3cfb91062d9e5a560da1cddd295450b88f45aefde1d5fa463eea76b6f464cb5c862b58f7a56de879cfe42c49e7c0172fd7f25a576fe799b642c8f367a9111619da98f73f4e547fe744bbbf6b36f692f983db547ec2b2a6517a444860872f6052607f62ed9b563ee2cc5608487ad0da63ff809fe3cbdd21f003e034ea88c73e19cba87e5dc61b132c88f45c82a535b66d1e55e650368e2478444573420b0631fd6193df094cd3802b6bd0d7f6fc4e9462814ff69f4038286464f17eb106764468f1dd77ec1f5db98e0aee4796be1b150270bea22f4673cb78805e8f93458582848c21f984a385053821ac8d6b01d78f0e082b5f327260f9451123d52afe678757b45e1eda969fa0f49d842beccbdae5d1fa4e1be3742111bf9480e06f0fcd11f47a9a95c0d35859d23aaa5e4bd01d7f4e1a3b93a06ab9641427602d1a37bb4b5ebcd2dc4176a10723399ec1b18ce175f99dea2c3028be1cea04ceda979253cff2658c16b6964ae75ab3741cb602920b725d6544163e4a68593291b18475c4b0ca0b7e3deec7de71d3ff75423e2cb4adf1f4c41d0e32d611cc89188277c9a90f1f80c2de4e27549982edd692985e9b6763829a627f0a1b190f44a2bf9fb643fb4422cdbf14bfd4197d4a98a56fd5c485d510e5cf3c9a089039aa07e8bc207c2be56b7bb3e6065420ef7aa50a7296c87cb14d8f1c1990e7b45da3e52e5df80514572d8db760b9492740d284fb458699b0516ffe689c9de10a3503d13af596f1c80b226df25819afb85c97bbb42598fc2125187e6e89f88d21161c50ab995f72fcac2321fe5c9ca48e48576d7c27700807d28c4dd9801bc75aa4b9952d0ed677c0b2e52ee049ce83041a9bc29c03ebf30c4f48048a088c809116453a2b011acdee91ada66ce98426c4383d5edba9448cf498cc55d59dc65194c4ace2ecfb5f42ce788afc036b52b2cd66883873c96e5ca292fae54190f0cda613c7363719b7cefdc7d2f5780dd5390de5655cfb3a7090a7eac4b2b17af1d1d41d6d8f833e2703ee518d8f338557bd25292e069a8df1e6e94a3b51dbea743acc6534ede70578c8c5ee452c9858ed1103202e8bdc2aac9c679597141d07a8e1ad9c324135f1cbdb02b22ed7da77fa477f05234b67e900abf438c9d49d38dbd52838bb175ef9bb1b80ad470203020f0dc542c2a9bbad70ee8104d7825470bd95f9af7c3c887a9ef75fbc30ab18602fbcbbe828d581e8d9cc59bb010112547ae032a8ab7c319bd0fde786e9edc55d50d662dbc09375fb2e8a0c08cd3156d792e83aeb986a7913548febb17b98a74c4edd84ce536e9469dcd53c6c62a72c3c197facc22552d0061d2e5f082f119be7ebd8285987e3ec49abc3414b3d270bb6583d82307716d1610f315ab3590291795963b5c392bfcdbff2c505d315aa9d666b7979be31b07e643701067a1d199ff33f0dbdaa4bc"}) 2m35.812694763s ago: executing program 4 (id=2450): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xa, 0xfc000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x15, 0x0) (async) mmap$auto(0x0, 0xf1, 0xdf, 0x80000eb1, 0x401, 0x8000) (async) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r0 = socket(0x10, 0x2, 0xff) (async, rerun: 32) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socketcall$auto(0x3, &(0x7f0000000000)=0x10) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r0) sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000aba76d0a48c849b4a1b9543a2b779207bf088eff8adb5ec83feea0b9dd922c30341ecaac156b320f654559881474a940569fb315a3047b626a3b3350986e97c93deeeb4325c2f7c831df08ee35a43005bf57303f37d2f54fd4515aa766a43d08f4dbaa5d00005af787", @ANYRES16=r3, @ANYBLOB="20002dbd7000fedbdf25050000000a000100aaaaaaaaaabb00000800040002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x4000044) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f0000000200)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) r4 = socket(0xf, 0x4, 0x7ff) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2m35.491735437s ago: executing program 4 (id=2451): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010329bd7000fedbdf250c0000000800010037cf"], 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0xc000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r3 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = open(0x0, 0x22040, 0x75) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r6) sendmsg$auto_SMC_PNETID_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4f03de6cfebaa2e97d04d595271504b7b32a2c000000d11f45e66407c0c87d4c70796b0966529fe4", @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000000)="05811aba7a78239941c001766054ccd7bd0b8f004a79bc76e12817983e45f963e99f17c478f9e1ec85e21d337b7abd3a500c1c3d7041ae84a1d85e4bb1ce225b6c67f2c4923696141fbae82a15a680cd5c0e72e9e8a3879e2b83ccb27df2cda7269e6bdb200c68342aec0db1fa1eafaf03b43a78e5d28a41cc0d68d2fd555b4fc233c974a0149294d19c31b54897329ddb8ee77c805d8404f3d0b1c20bfda0", 0x9f) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) r7 = socket(0xa, 0x3, 0x87) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x1) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000002980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002940)={&(0x7f0000003e00)=ANY=[@ANYBLOB="00000000000000000000000000000000741ed8695e8e0ec21848f02b6c34c783e20af5f6abb0c6af947a878fe2ba4ba392f5a122ee0c97534f3af59b47ffe9ea29ff63de85351ea309b06be03476ba209541e7d7c5051a7486511ef0538452e90d6b88b89627de0561b5435e50a9f105efc762fa6c515bbdcc06561957caf11e450ec9a073a2aa7a8c2e0aba1cad74aaaa4856", @ANYRES16=r8, @ANYBLOB="02002abd7000ffdbdf254a0000000800cb00010100000400d800050059008100000004002d01041025017b9c577d463c121bc829bfae27ab30c50be8a2dfb5dcd329cc7220325b83d109be7dd0d6372ce486ce1427e20de3a2f4ea3edbb4245cfa775c54348e6d9a136c656f45c94899ca770be8c48e2b410c119b56dfe855c424d3f31f02fe88c25483df9f67f8626e5d50d84192ac567b782b34506a5727b9523c7acd2c5c47b29796a29e4953fa2f32c23da3d849cd52cbaea44668edc00a3ce550c4966c053b2b70da9fc09fbe0f42e0c7e3acd0cd886bf022aeede3b5cf95dd3e210ddc27ed8f36c28b0fede4615334b90b78a73f76890258757593a96a55143f5708adba3d237ea44cb803563c212f9a11ab46fe290a23d8e6a89d1ebd16888208419e7983cd179c6b9b01af07d5d7856d89d3f34f921f07ac3e271008378c2e1efcf1e6d70c510ff5504d944c009710a6fb59ca26932cb8c2a5e55ec3282e5b1f84c3a0a198010cafa6519d809190e809e79939d10057a7ee89d7674efcb27dffe98fa1da5acfdb4ea41029096f7fd53f2fb0bfed2ba9d217efea514fe083af02f64504855cc4b046d34b20d9110a2c3f351cb305f027a1e37872ec3dbd426ecc1edcaaf5d6d60b205953509b90713ebccc535292bb721fa2efbae32761d7d8fca590af42eef9dc5908f9841c4a01968d24ec592cc2255ed706c6a00f00a1153add97ed25da91c320f3c20322d55f7a92f7ed1155275c27db621cd6c23bdcd183fe5afca72847894b68e50797cd7d12f6bb76f78ca02c18029024b7602f8162a5f453d4baab3b5dbabb6e395ea4ccdac4c218be46f3b75a587c5d20ff6c5c5ea067bb08df83e947df1e570897fdd5232ff6150dc1f410f4ccac66f3ef7f04f6c7c8e8181c4f7bf3fe6bcf13796ac4db3cad103bd19f66b77d2d59edfd323cf2f6718a3391f6e927a2ed271736d6ae98d7e40329a77a46028bfbf8a71b516d5f61cda3b7c7725596e6adc10bb7b4c82a325b491db707712cea09af17756e839141bb5516a7159a11879a5129417839196aa8fc0b286e234946b02fb2d759c4cfc3ea6c9ef1c265c3a72a01f5d3d13d45ee84aaeab8d47fd82b0eb4cc3f08252411fefc283dc501fbe77a212b19a202bf7e54cbe267984af5772f1eb49d750b9f1fd2e26387c362b727ef75850b94e88ddb4c33c95ebd03b0d34d64d88f72e424e3717d56e1c59804135cd29a422f066d09e766e513025ccfef7d3c151f1f7fdd65cd6f99dbd8907c90cd5c6dc8c70572809abc37aa3c572732257bd74a0599e3d82d94e74823af5b07cac2a6ee9443e2ed4f3cb0c6bdaeaccc884cea3f6432cd1c9a85a5c1a986f6a9dd987839ab397747fa0774b71e19431fbd1410086932c713c1fc237886e2bfd1fb32b887f544c3c0f17a424150e7b20171eca10ac5273c0fb0ad8268ec1e6a1d91d109c4e1860304df9e728e1863483b1a173eb215400a63ca2ea0c08edf9f317e5f4f5db146e2f164508ee3afe5a4eaa25e498df17bff650e040ed06074a4fe70b33afe9f0b99c40b2c0e26ac2139beed908486adaa236a723a59a4ef8023a4955187adeeed761bd083d27d3eec73672f3294d61e018a6c63e30e0d5a8ba738d585d3e29c317599dcc5fc3907f0930cb485bc9c492aaa66d36e77e2e59911e3a05eda7c16e05da6f1ecdadb007e08d765ebc1124bf2e34aa9571b34b0058dca2491e3e7148861c432a84799d29d52a30fd088f73da2013f2f1324c4331117aeefd08d7acd456f7523fdcec3df3d5fec2be930ebc3e73a344b250c382b778a9f28892278b85eff2013d954fcaeefaa651538ec5a3141e7d1a89765e4e3af4af6fd26cef37b3f7265ade7e5a732bbcaa8e196d4bee042889e467bf8a47ec16c3e3ccba0c1c70ae5a8611a2c7cf4aaba552e238a94c36ece8430a91ed08b70c963bfe36356c4f298a7155cf22e23c8ac315862908fd313fe7417f9c0987f39d3ee895b4c37d8dd7fde37464aa6585003d6568a2249ee3c51487b404cbf9bbf1882813a915184d605f79a9ccc35e5966d5f4778ed4c603ac3ce2347cd9f73059164aa002ef119b9fccbb18e6a1d9080f50b0639b00267f2ee2f34cb831f2a4e2d20ff7c9950fdaf239bfc66bd601b5b433d2ac71b9314b01d9d090b46f2733b452aafd2d8c42ea6d58971fbeccae6d84312eb13c887aa867a99a6b89bfd83a59888fe8e719893a988e2d91c4e83fd27cf070a0d2e382642533462d1606c89f18dc6db991dc902a303791988bd488c30c2de2aded566e903199655e482199b5ec84c2637e76b1ac773ae22a2383734d4ace37bfe967896ce5662d5b51d810dc3fa2b91a8bf41d6b60463c5a6dd707d2324754cd2e83db2d8428ee24517ab1afc4e73899189c15488005c758a66f9e0d47d051305c13efba7417831f341bcb6093a02b0ce26dc3ad6569452f6c40b8ce66dc1973ed64cf2a32560aebf9cc5a938b8ca90da1c4d33dc8bcaf430048b10bd5be2a5bb18e27aa716f60a7449a3fa2d3ee49c0443327371560e89e3e647707b13ab1570e523b712f07ee18c309ccf74a268a3cefbdd100c4bad41ed516e9ad648a7588686ae3b95e9b7f5fee0819515d5bed89888fc7d95b7763130943fa9e9deb9af0b85e1b13cd84e9f25c1e9c017d0eb674d578ec4e8242c6faae1310846c3dd84139119ad02991b4587871ce67ecaa90a49f111b80834034abb5d4f3dd86cdbc16566a0845e544adfbd4b5b31e9626141ed93af479881a4a90fc20b56d5517c9713254c2f230c3106945af169aa383ce9765c8531934f56d424226485623b9365415efaef394b6e8e138f44455fd4f61ce375af2a71825ca6f965f415ad0e0e54b2230a898425060a40ef9f4a2940dd1d360c9db9809eb093d7a92f3a678c855d8a50a36d37407a555783594c02e0bdab4461fedcb3dda10d4caac11dc47fa9a154d162cffe3b7f78c50d7bbcc8f74723f1d6835e5e31e51eb35ffcdcd853ff86f42c9cac9b33c1827822077aef138d8b88d0b48786c64a4a8cefa8c10429bcfe30d401153f81cae40aa764d6a0cec16cf6ab25c236e47238940a8543b585d5b7398218530b3c96d4aa27e741cb9e4875df2f684487d86dd39c06d78cf4c88c4017547cb2602ed7882c285e691e2178b47e7f4013a3d12ed43ecb8fc6158db33b7feff25387f6250cf2a530287f8dcc3b248234b0f39c10146b830d6769d521c8042127886d0065a2bda580f1642098a0dd7378928ae19b91713ad074c82f53e3de750845fbf8d0a4d4945f38756a3c5483668b7ac3cc92711a631040b9c477fb829054a201148c60aa1154f9d58f0f84bea1053f5bc92faf7d501e3918aa9d033cd4512b74543b59685759291bbdef03c926a00e02a9bda468bf93838d9a29fe70ab87c67705a7d67a28bf1d646ccd8bfa0de50e60ecc3b83578423b1f482748f3a5e6baabedd9711816a09a18745e6e3f3500ae0b826ec769e9d1d01f844e53fbc0e0a51cd677929485c6ef5ddf2fda97a61864d68d9d816a5d31a42dfca68b45982d42acbf17b65b5ab10d90be98fd2d91a7fa888a41e06941e308945a4f32a1c40792053e7bce60c7b5f6c9cb170f5cb469bf0912a97464c9fb5643e1b8abc62aa39c9fbbe82fec63a37aac0518ca3f63a69b9451cdf4c63919c27408cf7db27e56c4c5315aa6005ea86f14b0e05b7031bbc5255ebb86c69f270107e4e4c1a8c82a8a6561d4709f1d9b4879f5c8d310d98ed1ca25e812039791c1b5a11a79546d93d74e7cff1428c20c96634a456d606f873ba41913f3813b45839c0d0e225c5cdde449df6588c6b1350a32666c191f760344eb910c8dd015f278ee18fa529bdce19be1cc04e6e97163c0e4ad0fd623af47676b662003823d47ca1819dd60af98bc58e6a171a829ce34d173ef689c376b5a63271ff7abc1e09d67936676d17f45e5b3371e5feb085082aea7dcd02e610a088f6a721218d53853a9bf560b2f63d866c9eee19bd59dc2321a78bb95372b063e466dcd8f26fa7b29b808604098b931b72e92b95ebf9af66198504043f300e72e4a61d646c52a0dc512453678e57c98ba28c68a00792c47908b229f84c235205bb56b00f346aa70916377cdd8a649181e89c99ac9bda663d0062bf2f59de0e0e857a4e1ed19773802c65adb45c8feb411894f317abd05d5341b13ac91ccc3619b38ad798fe2d9e5ea4eb5cf69a8ed70a2789927eb74e4293e0d35dd1cc4793beae4459e716da67df4f15a0eab8082ab76bf6d133d9a2c415aab37e6a4d86d94a61d45a95aa7206c0a531a9a375b411e260651019010c1617bb6dbf1d5b5077ff3f035a5e6c8d5d921a232f630cbee42af2565e205a79d9b27b188ee31a2d57c3d3d578b620533ce6760161e47dbcf5849ea068583eb81ac88b977a15d6d29612c3fb8d399c7017dfff6f39f73e4b808793488dca5a68cdf048fdd5d45d499e558c33a6fff6442289dd46cda4b4aecd8bcfa705430dfa94eeb3e688f97170af0b3b3db968e90f6c025440efa70a81b36a4ad89fe87ee7820a817763b36b6f9b97a36e70bb8405c2cd73cfff76e3995eeec019a82e92fff742d64437da379827c416c9d813aee0c75eaf3af4f5770320d13396044b29a2fb213583ba07c0bef09e61ad98006bed672c5f7b8450801344b78f0fcaa32215856763cb986b356d2456312975d8e6025b4d969ced6447092e81bd4bd3a8cd0393999054f42cc547a36aa1b8c85e688e4e46640ca664ee03b92d423dfc8338cd467a0da4f7fbb7f462abb710afd3045cb1f131b20ed73ddb30e14635e18bfa118832ca6d3c4cdd4efc197e4a69bf47adee089c3e6e98ca8ad00af46a4d5459c2775421590011177512a1e2ac8007a2b5ad206f49ea8285149c21e466c395529865858758552ed718f4a800584cfc4b2fc3e33ee4eef20b34fb3e240c0e784e587edb8f9dc84b9a35af0a358028dc8949f91d8a4311c24ec91a1060a06663ee151dc7b15e6a4ed37501a64b71a4e5e2ad332786e3381687bbf0092364c533e0b940a8dd8a34a12cc62d08326698c8d0b0643a42c0c232fa1c774bdfc3982d2728a64c20f47ea9bbdab7ccc60732fa7324d2e2af314fac24efff1f5172eca2012c93f8f9e266f3ebc75e2af19cd397054f8debaba7587dbfc9d6d300c729a0ef2a647d6ef0df5a37a5da6ff4a0945e0957b39265e9c038fbc179ee7fdc6ac439215059111b2178b6224ea3d07d207da786a8fd55934d7dde1cf9a1525af4cebfcd8e38c7e95fc1651b37502d71a050156a6854f4c15f937a679097e09e22975519100cd104b93c4ba99a8771cb0bf4cc60d25c124d428cea67c17eb13ac326d71e28acf4034c8332edd4554e1a095f635a177218a10564d096ef5c8edb6a23dd74b7c4aefa9693762343a37794105949b386c478dd01284a7ba4fd11ea953bb8d8034a7e8aaaf9db11e08e05a7e7471dee77558715f9e5bcdcbbeb52da526c9d7e5618666949006b258e60bce983589f6858f3648e32f707307edd2acc4ff5ac9ab6f1b744029dead41007fc86a00fa34a680b0a5c552653563797bbc85961519cf143f75a169570af2c1ba7383ac3427777c455c7801f7c6f4f90e1cd00693afe00a6925d8ef56230b8b0c1f22e091b71bebffac6c08dac95fc8d960efdaa719dad22c2210e3cd266711ee25a5d6a353311bc4b4fad73c71ba49ef1cf2f55c733b503a5226e69f20d19a41b314265ec743e97f6ee95d1a7df0fb8cc01bf6be7d8efaeca7dcfdc7dd54effb4cbd7a5439157e6a98deca1c8715167af861c6ea1c88f0652311"], 0x1030}, 0x1, 0x0, 0x0, 0x8004}, 0x200480c4) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbc4256300000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000080", @ANYRES16=r8, @ANYBLOB="200029bd7000ffdbdf252b0000000800b7007f00000014000400626174616476300000000000000000001800180057be3e8f0b41da2999438d0fab8e7a036128830a08000b0107000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r0) syz_clone3(&(0x7f0000003a00)={0x40080, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {}, &(0x7f0000000580)=""/49, 0x31, &(0x7f00000029c0)=""/4096, &(0x7f00000039c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8, {r4}}, 0x58) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 2m27.70931853s ago: executing program 0 (id=2472): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x62}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x2000c8e4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x11, 0x2, 0x6) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x9}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) sched_getparam$auto(0x0, &(0x7f0000000180)={0x5}) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) unshare$auto(0x40000080) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x25, &(0x7f0000000240)={0x0, 0x9}, 0x4, 0x0, 0x5, 0x7}, 0x8}, 0x4000000, 0x4b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) eventfd$auto(0x1000) open(0x0, 0x80a40, 0x9e) socket$nl_generic(0x10, 0x3, 0x10) 2m26.722719603s ago: executing program 0 (id=2475): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram4\x00', 0x14be02, 0x0) socketpair$auto(0xb, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x3, 0x2) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket(0x21, 0x2, 0x77) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) fanotify_init$auto(0x5, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x9b76, r2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000100)={0x3, 0x1, 0x2}) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev$auto(r1, &(0x7f0000001000)={0x0, 0x7}, 0x2, 0xec, 0xc) r4 = socket(0xa, 0x5, 0x84) mmap$auto(0x8, 0xfa79, 0xe3, 0x9b72, r4, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68) ioctl$auto_FIOASYNC(r0, 0x5452, 0x1ff) ioctl$auto_TCFLSH2(r3, 0x400455c8, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x18b702, 0x0) write$auto(r5, 0x0, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa8042, 0x0) 2m26.447461402s ago: executing program 0 (id=2476): r0 = socket(0xa, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x54) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0xd51) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r2, 0x9, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc040aed5, 0x0) sysfs$auto(0x2, 0x10000000000000b, 0x0) r3 = socket(0x28, 0x1, 0x0) getsockopt$auto(r3, 0x28, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe987, 0xdf, 0xeb5, 0x401, 0x7fff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) pread64$auto(0xffffffffffffffff, 0x0, 0xd, 0x6e9) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0) write$auto(r4, &(0x7f0000000040)='/dev/ram14\x00', 0x2) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0xffffffff, 0x0, 0x4005, &(0x7f0000000b40)={{0xffffffffffffffff}, {0xfffffffffffff4c5, 0x2}, 0x408, 0x8, 0x0, 0xdd0, 0x7, 0x400000000000010, 0x0, 0x4, 0x7, 0x3, 0x100000, 0x96bd, 0x7ff, 0xbf0}) 2m26.21252689s ago: executing program 0 (id=2478): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) write$auto(r1, 0x0, 0xf) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) mmap$auto(0x2, 0x2020009, 0x3, 0x1a, 0xffffffffffffffff, 0xa9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x7fffffff, 0x0, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r2, 0x0, 0x18) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket(0x1, 0x3, 0x0) quotactl_fd$auto(r4, 0x80000401, 0xfffffffb, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) close_range$auto(0x2, 0x8, 0x0) futex_wake$auto(0x0, 0x4, 0x1, 0x9) mincore$auto(0x1000, 0x4000000, 0x0) 2m26.053953922s ago: executing program 0 (id=2479): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/mpls/conf/wg0/input\x00', 0x141241, 0x0) write$auto(r0, 0x0, 0x3) (fail_nth: 6) 2m25.111852815s ago: executing program 0 (id=2484): r0 = socket(0x26, 0x808, 0x1000) getsockopt$auto(r0, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(0xffffffffffffffff, 0x0, 0xd4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x181081, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x2) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) flock$auto(r1, 0x5) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) bpf$auto(0x6, &(0x7f00000001c0)=@bpf_attr_11={0x1000000009, 0x7fffffff, 0x8, 0x4, 0x8, 0x6c73, 0x4}, 0xfffffffc) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x19, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x200300) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)="fc06c1f730b9d2867a8ba29f242cf38f59f712") mmap$auto(0x0, 0x10000, 0xde, 0x11, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 2m22.723840281s ago: executing program 5 (id=2491): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x200c) (async) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x6e0, 0x400, 0x718c1257}]}) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m22.672513929s ago: executing program 5 (id=2492): socket(0xa, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket(0x80000000000000a, 0x2, 0x0) (async) r0 = socket(0xa, 0x5, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/3/effective_affinity_list\x00', 0x88000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x100000000000009) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) (async) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r2, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) bpf$auto(0x0, 0x0, 0x6f3) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) (async) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0) (async, rerun: 64) io_uring_setup$auto(0x9, 0x0) (rerun: 64) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/fo\"mat\x00') (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, 0x0, 0x4048000) 2m22.507879738s ago: executing program 5 (id=2494): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) fcntl$auto(0x3, 0x400, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x800, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x2000, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.3/usb15/15-0:1.0/usb15-port3/power/runtime_active_time\x00', 0x43a000, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) bind$auto(0x3, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) 2m22.412603181s ago: executing program 5 (id=2496): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf0102000000000000000400000008001c"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) (async) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xfffffffe}]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) stat$auto(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x5, 0x1, 0xa, 0x1, 0xee01, 0x0, 0x0, 0xab1, 0x2, 0xa9b2, 0x5, 0x0, 0x5, 0xb7c, 0x1ff, 0x1, 0xd0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000002680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002640)={&(0x7f0000000440)={0x21f8, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_SEC_LEVEL={0x2014, 0x2d, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @fd=r0}, @generic="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", @generic="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", @nested={0x8, 0xf8, 0x0, 0x1, [@nested={0x4, 0xf3}]}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3ff}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x17d, 0x19, 0x0, 0x1, [@nested={0xd3, 0x15, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @uid=r3}, @generic="9b4c6127094cbd4c8ab73f48793ba606fc099e23bbd06c9a59df3e813cbfcee4466532076b7a07b91e08a768d40bf6940c8e0fed43c421001ea27f1d090d7a965c4d9ff5037685274cf1a3e6c119c90880ee9fd451c63dee3dd93a33b78396af29da5ec44b7939efced3883e46fe93c9a198ef3df3d191aa5e3f9a6ccccaa32915559a7f0fc8216f35b41b0b6ba156a50002edd49df1016cd42cf2bad3bc818734266056025b7a816b08f149a741b3d3491f4ea8cca2d3c88d327ffdf4da22b86a61908ded85c4"]}, @typed={0x4, 0xff}, @typed={0x8, 0x80, 0x0, 0x0, @fd=r0}, @generic="cba8b0cc2ff53e618c57e051e18712340c86ece2153b56b0ef8305f531ccd9fa483628e93d7de63eec3ac6c0e86eaa396ebb6947f0c0254ef04d2e55ed759167467b5ba07dfa7d00e31e41be1a5c06c9c25483ff28ffd9e30a46fce3818bb4fecb5a7acefeff8c6d618448684ebf1251335c", @typed={0x8, 0x125, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="af5338ee1f8105f9c3fd5b2cbc3ff34a68bda6620689b04b7a5d8c0ce00df9"]}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x3}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}]}, 0x21f8}, 0x1, 0x0, 0x0, 0x20004041}, 0x44040) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, &(0x7f0000000140)={{0x5, 0x6}, {0x0, 0xa}, 0x7607, 0x2, 0x0, 0x6, 0x3, 0x9, 0x3fe, 0x401, 0x24f0, 0x4, 0x45d, 0x5, 0x4, 0x1ff}) (async) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, &(0x7f0000000140)={{0x5, 0x6}, {0x0, 0xa}, 0x7607, 0x2, 0x0, 0x6, 0x3, 0x9, 0x3fe, 0x401, 0x24f0, 0x4, 0x45d, 0x5, 0x4, 0x1ff}) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/oss/sndstat\x00', 0x40441, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/oss/sndstat\x00', 0x40441, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r4, 0xae03, 0x27) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/devices/virtual/tty/tty19/power/runtime_suspended_time\x00', 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/devices/virtual/tty/tty19/power/runtime_suspended_time\x00', 0x2, 0x0) 2m22.252246161s ago: executing program 5 (id=2498): openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x40aa2, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async, rerun: 64) shmctl$auto(0xffff, 0xad, &(0x7f0000002540)={{0x80000001, 0x0, 0xee01, 0x1, 0x5, 0x81}, 0x4, 0xfffffffffffffffd, 0x1, 0x0, @inferred=0xffffffffffffffff, @inferred, 0x5, 0x0, 0x0, &(0x7f0000001540)="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"}) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) socket(0xa, 0x801, 0x106) (async, rerun: 64) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (async, rerun: 64) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) write$auto(0x3, 0x0, 0xfdef) 2m22.0785484s ago: executing program 5 (id=2499): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x18, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5268193e83e33d5b}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40100c4}, 0x8000804) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) 2m20.296761349s ago: executing program 34 (id=2451): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010329bd7000fedbdf250c0000000800010037cf"], 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0xc000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r3 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = open(0x0, 0x22040, 0x75) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r6) sendmsg$auto_SMC_PNETID_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4f03de6cfebaa2e97d04d595271504b7b32a2c000000d11f45e66407c0c87d4c70796b0966529fe4", @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000000)="05811aba7a78239941c001766054ccd7bd0b8f004a79bc76e12817983e45f963e99f17c478f9e1ec85e21d337b7abd3a500c1c3d7041ae84a1d85e4bb1ce225b6c67f2c4923696141fbae82a15a680cd5c0e72e9e8a3879e2b83ccb27df2cda7269e6bdb200c68342aec0db1fa1eafaf03b43a78e5d28a41cc0d68d2fd555b4fc233c974a0149294d19c31b54897329ddb8ee77c805d8404f3d0b1c20bfda0", 0x9f) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) r7 = socket(0xa, 0x3, 0x87) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x1) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000002980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002940)={&(0x7f0000003e00)=ANY=[@ANYBLOB="00000000000000000000000000000000741ed8695e8e0ec21848f02b6c34c783e20af5f6abb0c6af947a878fe2ba4ba392f5a122ee0c97534f3af59b47ffe9ea29ff63de85351ea309b06be03476ba209541e7d7c5051a7486511ef0538452e90d6b88b89627de0561b5435e50a9f105efc762fa6c515bbdcc06561957caf11e450ec9a073a2aa7a8c2e0aba1cad74aaaa4856", @ANYRES16=r8, @ANYBLOB="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"], 0x1030}, 0x1, 0x0, 0x0, 0x8004}, 0x200480c4) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbc4256300000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000080", @ANYRES16=r8, @ANYBLOB="200029bd7000ffdbdf252b0000000800b7007f00000014000400626174616476300000000000000000001800180057be3e8f0b41da2999438d0fab8e7a036128830a08000b0107000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r0) syz_clone3(&(0x7f0000003a00)={0x40080, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {}, &(0x7f0000000580)=""/49, 0x31, &(0x7f00000029c0)=""/4096, &(0x7f00000039c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8, {r4}}, 0x58) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 2m9.97430116s ago: executing program 35 (id=2484): r0 = socket(0x26, 0x808, 0x1000) getsockopt$auto(r0, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(0xffffffffffffffff, 0x0, 0xd4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x181081, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x2) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) flock$auto(r1, 0x5) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) bpf$auto(0x6, &(0x7f00000001c0)=@bpf_attr_11={0x1000000009, 0x7fffffff, 0x8, 0x4, 0x8, 0x6c73, 0x4}, 0xfffffffc) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x19, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x200300) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)="fc06c1f730b9d2867a8ba29f242cf38f59f712") mmap$auto(0x0, 0x10000, 0xde, 0x11, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 2m6.795989977s ago: executing program 36 (id=2499): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x18, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5268193e83e33d5b}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40100c4}, 0x8000804) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) 1m51.810548558s ago: executing program 1 (id=2585): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/nullb/features\x00', 0x40240, 0x0) r1 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) pread64$auto(r1, 0x0, 0x7e91, 0x7fffffff) fchmod$auto(r0, 0x7) 1m51.551429592s ago: executing program 1 (id=2588): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mbind$auto(0x1000000000, 0xa, 0x4, 0x0, 0x2000000006, 0x524b) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x160, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2fa}, @SEG6_ATTR_HMACINFO={0x13a, 0x7, 0x0, 0x1, [@generic="f6b61eb7386a3dd2e102b9f3336af8f4c944340ae938a976a8496fe013e940a9830c1c9fa439a09509f5d105dd1f9a83c3f97bfc20dd9a86f7b6d63650166304aa22cb6133241a36653586684f23ce97e02e116d30beaf07c0c923c7a6e0839e4cecc759c29658533afa", @nested={0xcc, 0x26, 0x0, 0x1, [@typed={0x99, 0x14, 0x0, 0x0, @binary="6db740bfb04bbcd0eb719a98569f97308b40fa4d3b5179848b263bf7e6219c141e30c53880c8d05da40844e87a98cd1e7f25262bd7b78cd2569e3542c076c429d31d9cd0c94c82bda2740f955d606038e44717686b4e3aa463d2fdbf01ed9fbf4923647e6f3c449cb9d09955b4c4a46c10a4ba24d2ab9affdfa578f7e63fcf25702b6080aa286c2c2fed59c03279bf07b3c57825ac"}, @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0xf2}]}]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 1m50.395816456s ago: executing program 1 (id=2594): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/gretap0/statistics/collisions\x00', 0x280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000003c0)=""/20, 0xfffffcc4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:352/strict_limit\x00', 0x100b02, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop1\x00', 0x141203, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0xc8) socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r3 = getpgrp(0x0) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r2) syz_clone3(&(0x7f0000000600)={0x21030000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x5}, &(0x7f0000000440)=""/134, 0x86, &(0x7f0000000500)=""/175, &(0x7f00000005c0)=[r3, 0x0], 0x2, {r2}}, 0x58) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r4, 0x200, 0x70bd2d, 0x1, {}, [@THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x7}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth1_to_hsr\x00'}, @THERMAL_GENL_ATTR_TZ_TRIP={0x20, 0x4, 0x0, 0x1, [@typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xe1, 0x0, 0x0, @pid}]}, @THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000011) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x4, 0xffffffffffffffad) write$auto(0xffffffffffffffff, 0x0, 0x3) write$auto(0x3, 0x0, 0x100082) r5 = socket(0x2b, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r6 = pidfd_open$auto(0x1, 0x0) setns(r6, 0x60020000) syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x57) ioctl$auto(r5, 0x89a0, r5) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0x0) socket(0x27, 0x2, 0x9) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 1m50.119392992s ago: executing program 1 (id=2595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x534, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MACSEC_ATTR_OFFLOAD={0x51e, 0x9, 0x0, 0x1, [@typed={0x4, 0x14d}, @generic="b82fb223f1664bf1c15f1a3570b07c4d9b31ff72972607b175f992b4f0bbc07097fa6e0faaec0f8b95ea7b09ae958dde00e2e3f02913640281309962787d632063b7817bcf6d97240b3b8614f9c90f5a6eb0f22f9678bb2fa73de2b732688f9bb5a42ea74d850e96ce1670ae38fad2617820c3d1cbe6ac39251c3ac3a29a8c0d2c6fdebf1765dc86541d459d68f8cdd6ca410361f2ad96883e8cd4d7755f470541346a116a09ced23fd5e029", @generic="54ef932e35f696b7e0b7304e0640edf48ca78b15a28177d8b4a9562ee18a1b6d0b1393617a3cabe85ae64ec2b17b04f05181bf98da4ddfbc29f696d13cba8a0fef91686db3563136e610d113a084de3eae08b20a61656ca23861b41d28b4c242d6102ddbb111c73890b28dd2ab4973049359338b500f1cac78dbd87d52bb03daa285e402181d0f9d7b738c51a6c58eaff220ebce984714a579b82f9c43028f77b334e94dcfc81ee52393692fb6af9ef5db273296884dcf50b054014579b1ac8456842c13bc59b6dd798e8b27d60d25dd4e5329281cc77cd9055be333236e76fa19690194169cb967e864647781a18eb182fe782a6174047a23", @generic="8845e56180e357c198bcb993e5f1a07224b36a378095149e2620955397127ecdb9489d6c9de9e409b3bb0937aa9cc9b01c9ccacf3d68a911f6da449e86c975a4cefd62515f56dbf0777c3a3c8e7064b45afc5f61d2fc4abd6b0199204ada58d0ab640d0a258175ad68f3fd1ac16491145ae12b8717fd1653a17d98681a1fdbf92b45df1b7d6dfeb098011a0584cd188cb2c6cb6bf2e96c3b9d633a5303b031c1b01a63e58000f7bc2e36e4e0edf173227190023b30e2e60c3e351310a683ae9e9f662ceb910c26a42eae5481c6aae7b63534721d1c51f23bbda8694173630994d66b9b04de31361a522f2c7e5a", @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@loopback}, @nested={0x26f, 0xb, 0x0, 0x1, [@generic="2032f1a7c0d92f342161429920f0d580162511ff0e1ecb4f61fc614eab1e85ccafa058e66a0ccdcf78b34d416f53d4aa980dc8a42018988f8cc8e266181569a19a7f6b0a04a470ccdc129d4c192d44689394c1ec5b804a0d7c63518dd0f0f6b350652a80b401b87ad77b285e10985999b1b196172fe0cbb1c31793739e764e379bab5f91904d66f34f68e28c742f36309d3d06d9fe77be43fb1b9e55463cd6bbfc5b571f92ce9a2064d5c3d1468e5812ee330b58229ad91d42a10f9bd634d3d94c5dbe981d066ea3c3345659e8126bbf44c59777b44a5bcd5c9f283971390f14a200530a59cd45e4b5", @nested={0x4, 0x15a}, @generic="d238483a1884cb471eba46826a5771dc52a1280f408c1052c979f5902ae08823a6bb4acd752b044239ce59c4fc44deec24375cd1fcd420d9c974ade6e5d22a5ce770b0e64eed149aa2df40d98081f4f03f6308a7c6eb9f12a9cd7e081e942cbd002592ff8ec54beb555aa9141330fe1cd675403b277648650450a149554f8c5648e1a6ad05f68395ba4a", @nested={0x4, 0xb8}, @generic="d4ebecbcc50db08ad6819687792e7d5538b44db45fcff952a59da8b74719c2202ceee4fabca56e3653987d9364e1744b1fb59a81d4b56a7c01bcebd763b16015b66e88c39e2e819fc72ee92d43753078ce4fe09a752bdaff3da402fe0f3cf06e93204995e6c265cbbd4a9b", @generic="2e064647c297aaac43c84b764867b2545cef599311db1f7bf20854fbd19936f6f7284911f18a6fd9dcf0bcea917cf77ef776c30670a8e881faa3f7d5da0657f31ca4d96440071fa29311817dacbfff17066475b7f4a4df6ab0aeba90e61e91ba6aa7ae3c40f66e5620156780a5ea5dea64787564752c606a8194c607d617a14b6e5d6e18cd"]}]}]}, 0x534}, 0x1, 0x0, 0x0, 0x8c4}, 0x880) setsockopt$auto_SO_INCOMING_CPU(r0, 0x1, 0x31, &(0x7f0000000640)='%0(\x00', 0xb) r2 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000006c0), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x19}, 0x44010) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000840), r0) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0xd0c}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xd8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x70d0}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000814}, 0x400c091) statmount$auto(&(0x7f0000000940)={0x8, @raw=0x4, 0x0, 0x9, 0x1}, &(0x7f0000000980)={0xffff8001, 0x80000001, 0x2, 0x3, 0x3, 0x1000, 0x0, 0xb4, 0x8, 0x1000, 0x5, 0x9, 0x2, 0x2, 0x2, 0xa, 0xe3, 0x5, 0x1, 0x4, 0x1, 0x1c, 0xcc0, 0x4, 0xfff, 0x9, 0x2a2, 0x0, 0x0, 0x80, 0x828, [0x0, 0x7ff, 0x1c, 0x32b, 0xfffffffffffff640, 0x800, 0x3, 0x4, 0x8000000000000000, 0x7, 0x2c, 0x7, 0x462, 0x6, 0x7, 0x8, 0xac05, 0x7fffffffffffffff, 0xb, 0x0, 0x4, 0x4, 0x9e, 0x3, 0x8, 0x2, 0x59, 0x7, 0x9, 0x8, 0x1, 0x23b, 0x6, 0x7ff, 0x7, 0x9b, 0xf394, 0x1, 0xfffffffffffff45a, 0x7f, 0x1, 0x8, 0x9], "8bf996bc5b081a9346b99d06b57325dac1b1effcfbfb561184da22b8107952ccde888f192f64aee07d3dde5eb0eb55bfc5bfacf943220ea8a6f9813551554d23bbb74d86d065220526af375ebd94aa891b91ef31fdb9ab6b465d1a510acbba04677e0d209f2af9a2132f0e903e46ea4f3d7d5ca1910a96b95a96d7d21973111758fcfebda62ae431e99379bca7cca54be4f7e3163470fa19bbb8de9cac87e96840394aa2174345186dba7dc1e438d8bd4ac7452b2512f5a0c51a5af750"}, 0x6, 0xfff) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/fb0\x00', 0x400, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/evt_media_change\x00', 0x2, 0x0) r5 = socket(0x18, 0xd, 0x7) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000d00)={@siginfo_0_0={0x4, 0x6, 0x5, @_kill={0xffffffffffffffff}}}, 0xc3ef, &(0x7f0000000d80)={{0xfffffffffffffff8, 0x9}, {0xfff, 0x2}, 0x6c50, 0x7, 0x8, 0x55, 0x1, 0x6, 0x4, 0x200, 0x4, 0x101, 0x8e4c, 0xa3, 0x80000001, 0xfffffffffffffff8}) capget$auto(&(0x7f0000000e40)={0xffff, r6}, &(0x7f0000000e80)={0xf, 0x9, 0x4}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x2001, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x78, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x4e, 0x7, "7a128542b56a30adfaa5f9f25a48dbf26eeeb9d7261ff219222196382fb4fb8bc3f6181a413ba1b2a008652cc7df18f95899981c223273b0e05925c0dc3c576289490d4d84b5fdc2de89"}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x84) write$auto(r0, &(0x7f0000001040)='\x00', 0x80000001) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000001080), 0x900, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'veth1_to_team\x00', 0x0}) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f0000001840)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f0000001140)={0x69c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x6}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r7}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x666, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x3}]}, 0x69c}, 0x1, 0x0, 0x0, 0x4090}, 0x40840) r8 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000001880), 0x440800, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000018c0), 0x80000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001940), r0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r9, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x20, r10, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c1}, 0x4000) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a80), r5) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, r11, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x34, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x5}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000001bc0)={r4, 0x0, 0x8, 0x0, 0xa, 0x8, [0xfffffffffffffff8, 0x10, 0x51c, 0x9, 0x1, 0x1]}) fcntl$auto_F_SETFL(r12, 0x4, 0x0) 1m49.728167482s ago: executing program 1 (id=2597): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) (async) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x100000000000004, 0x56bb, {[0x2c81, 0x3]}, 0x10003, 0x8, 0x8, [0x6, 0x3, 0x6, 0x8]}) r0 = socket(0x10, 0x2, 0x14) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0) setresuid$auto(0x8000000000000001, 0x1, 0x200) (async) setresuid$auto(0x8000000000000001, 0x1, 0x200) mlockall$auto(0x1) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x3981, 0x0) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x3981, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc) write$auto(r0, &(0x7f00000002c0)='\xeb\x85\xf6p\xab\xc5\xd0n\x04', 0xfdfffffffffffffa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x1ffc, 0x9, 0x2100000002, 0x0, 0x79, 0x2) (async) mbind$auto(0x1ffc, 0x9, 0x2100000002, 0x0, 0x79, 0x2) r2 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x17, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) setrlimit$auto(0x7ffb, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x4000009b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x0, 0x80000000, 0x0, 0x6, 0x20000002) (async) mbind$auto(0x2000, 0x0, 0x80000000, 0x0, 0x6, 0x20000002) syz_clone3(&(0x7f0000000140)={0x100080000, 0x0, 0x0, 0x0, {0x200002d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async) syz_clone3(&(0x7f0000000140)={0x100080000, 0x0, 0x0, 0x0, {0x200002d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) (async) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r3, 0x0, 0x39b8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40602, 0x0) 1m49.439924698s ago: executing program 1 (id=2601): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r0, 0x400, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto_BPF_TOKEN_CREATE(0x24, 0x0, 0x7) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 1m42.803789185s ago: executing program 7 (id=2627): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40180, 0x0) (async) r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) read$auto_dvb_dvr_fops_dmxdev(r0, 0x0, 0x0) (async) setfsuid$auto(0xee00) (async) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x2) unshare$auto(0x40000080) (async) write$auto(r0, &(0x7f0000000240)='\x04\x0e\x06\xd5\x89|A\xbaI\xd9@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x11, 0x3, 0x2) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040890}, 0x800) listmount$auto(0x0, 0x0, 0x0, 0x1) (async) socket(0x2, 0x3, 0x100) r1 = socket(0x23, 0x2, 0x806) close_range$auto(0xffffffffffffffff, r1, 0xbac5) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800030f00020000060007000080000008000200"/34, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaaaa00000a000500ffffffffffff00000600060046000000060007e9070000000800040073090020e587bc4bb96e16bed364162c501943891b32bbdabc5a3f37810f4eacc7a1a8ce34955ffb2de8e658"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x4040090) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x200005, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x1c6}, 0x102) (async) r2 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="08edf772a3f509d041d486f17f67c4e822fb4063d0ce2bdc9e08684cb8a4d390f3ad22feb9755ebbf59f5658ddddc5e8f03708f51e71af6f39e55f56713e015d1e0aa970d77873a3c5c8802a8b0ffe5070a995ec1eada287699045fd1ac05d0f52fd893a2e8ac59af0c7e4ee8819c7b4422e09453622b458d645e34afb"], 0x1ac}}, 0x4004) 1m42.553665286s ago: executing program 7 (id=2628): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) sendfile$auto(r0, r0, 0x0, 0x71) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x24, r2, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x6}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) 1m42.293513894s ago: executing program 7 (id=2629): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) read$auto_cgwb_debug_stats_fops_(r0, 0x0, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) shmctl$auto_SHM_INFO(0xe, 0xe, &(0x7f00000002c0)={{0x9, 0xee00, 0xee01, 0x1, 0x8000, 0x400, 0x5}, 0x100, 0xfffffffffffffffe, 0x8000000000000000, 0x896, @inferred, @raw=0xffffffff, 0x10, 0x0, &(0x7f00000000c0)="34f09743940d91ee64344afdfb3c626fba4d1a44b9e1427c458c2026a568e91d83b0273439325ff53d6c7e3e888a8dc937ddf27b17587fb25cf42c4d51fb5ba94c7e9a1ecc6459585cdc3a5a33", &(0x7f00000001c0)="0d1aae4ee8dace9a2c13983e36ce88b77044af2fd43016f3cc01a2188af1a4357a278cb62e10abac63a8945e710d6a4ac878b4e41eae5aacebdc738bf23fcd2cef078fda5f5f456b566d091be7f21db00a56153bb00be539e2c168dbdb842eba7e07e2b2139a850b04b8f453f9f56f42955917a9fc8ebc8b19da1511acecb9259e9284b12d859c8226e12767ea24ac73f29fa2d16e52524e480571b4430903e56ff565f25efeb806c259296c608d41456c119cea82a6f144d3df0a1924fde125e9adf5429ee9cffefa062ba84db694244a2a5cffae1d8b0b1d81fb4f2ea135c9e4251fbb2bef893392933253d52cdd"}) r3 = setfsgid$auto(0x0) setresgid$auto(r3, 0x0, r3) fchown$auto(r1, r2, r3) socket(0xa, 0x801, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x7) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x102, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x100) write$auto(r5, 0x0, 0x81) r6 = socket(0x11, 0x3, 0x2fe) socket(0x11, 0x80003, 0xab) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) read$auto(r6, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x1) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) 1m40.287792042s ago: executing program 7 (id=2634): unshare$auto(0x40000080) lstat$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='1', 0x1) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) getsockopt$auto(r3, 0x84, 0x73, 0x0, &(0x7f0000000100)=0x99) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 1m38.464785075s ago: executing program 7 (id=2640): setxattr$auto(0x0, &(0x7f00000000c0)='ip_vti0\x00', 0x0, 0x183, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x6, 0xffe, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x591002, 0x448) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x1800, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r2, 0x0) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) write$auto(r0, 0x0, 0x10007c) 1m37.987959147s ago: executing program 7 (id=2643): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0x81) (async) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) (async) io_uring_setup$auto(0x243e, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = epoll_create$auto(0x3e) flock$auto(r0, 0x2) (async) listen$auto(0x3, 0x83) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$auto(r1, &(0x7f0000000080)=@in={0x28}, 0x68) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 1m34.348390578s ago: executing program 37 (id=2601): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r0, 0x400, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto_BPF_TOKEN_CREATE(0x24, 0x0, 0x7) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 1m22.961801594s ago: executing program 38 (id=2643): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0x81) (async) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) (async) io_uring_setup$auto(0x243e, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = epoll_create$auto(0x3e) flock$auto(r0, 0x2) (async) listen$auto(0x3, 0x83) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$auto(r1, &(0x7f0000000080)=@in={0x28}, 0x68) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 15.337896681s ago: executing program 2 (id=2931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x3, 0x7fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r3, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "016a76f37bf001ca2200000100"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socket(0x2, 0x1, 0x0) setsockopt$auto(r4, 0x6, 0x13, 0x0, 0x40) bind$auto(0x3, &(0x7f0000000080), 0x6b) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) acct$auto(&(0x7f0000000080)='^!!+\'\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x6000000000, 0x8, 0x7) madvise$auto(0x0, 0x400053, 0x9) shmdt$auto(0x0) 13.263873511s ago: executing program 2 (id=2938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x2, 0xa, 0xe57a) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd=r2, 0x2f, 0x1, 0x9, 0x81, @count=0x9, 0x0, 0x6, 0x8, 0x7, 0x1}, 0x6) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 13.010008193s ago: executing program 2 (id=2941): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$auto(r0, 0x6, 0x2, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4000, 0x20000043) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) (async) r1 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/power/pm_qos_no_power_off\x00', 0x20d40, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) (async) r2 = socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x10001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40802, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40802, 0x0) ioctl$auto_SG_GET_TRANSFORM(r2, 0x2205, &(0x7f00000000c0)="56270ddbf138c81a1a91bd3dc16cfac660a0371278733be5da01b950bf39c92118bad592c2d01f1bbd8276066ae276588971eeb5230483ec4c5eeeec72a86ecbee9533316d72a57cf84daa755d149fba75dd5f5278968448f470bee19d39bc77") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c?\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) 12.33967105s ago: executing program 2 (id=2944): r0 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000adc0)={0x38, r7, 0x1b, 0x70bd29, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x11}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r1, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) setsockopt$auto(r9, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r10, r10, 0x0, 0x3) unshare$auto(0x2000000000000003) 10.720115848s ago: executing program 9 (id=2948): unshare$auto(0x40000080) unshare$auto(0x437c) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x5, 0x400008, 0x200000000df, 0x9b72, r0, 0x800c) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x200a04, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x400a02, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port3/location\x00', 0x0, 0x0) semctl$auto_SETALL(0x9, 0xd, 0x11, 0x8) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) pipe2$auto(0x0, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x2, 0xa}, 0x5, 0x3fd) 9.366252918s ago: executing program 2 (id=2951): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x3) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x2) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr12/tx_queue_len\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x2b) write$auto(0x1, 0x0, 0x80000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb9, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rename$auto(0x0, &(0x7f0000000140)='./file0\x00') madvise$auto(0x0, 0xff7fffffffff0040, 0x7) getcpu$auto(0x0, &(0x7f00000000c0)=0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) sendto$auto(0xffffffffffffffff, &(0x7f0000000100)="7b7b4c71fa84648c33a0624414e4798ad3652c0811a6972f29d6eb806bf9ce8a", 0x0, 0x2, &(0x7f0000000040)=@hci={0x1f, 0x4}, 0xffff) 7.868538316s ago: executing program 2 (id=2954): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r1 = socket(0x6, 0x5, 0x73) bind$auto(r1, &(0x7f0000000340)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x6b) close_range$auto(0x2, 0x8, 0x0) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x6, 0x20, 0x0, 0x21) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r4 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r4, 0x65, 0x6, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8a004000", @ANYRES16=r5, @ANYBLOB="00082dbd7000fcdbdf25050000000600d400030000000800620005000000"], 0x24}}, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.542142719s ago: executing program 9 (id=2955): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram13\x00', 0x101000, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) r1 = prctl$auto_PR_SET_SECCOMP(0x16, 0xb, 0x580d9bf0, 0x3, 0x7) read$auto_binder_features_fops_(r1, &(0x7f0000000240)=""/141, 0x8d) fdatasync$auto(r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd6\x00', 0x60742, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty17\x00', 0x20001, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000380)="976f09bd68850edbe36136c8dda8a7f1165cca065833fd9b640f0000000000f6c02b55fba44503225c5a3b744483659ef0c4613e29c45e81dc254bfbf94d8d9ee2ab6b2bd118171e0f8b5196a37d4a987e883f68f01b0da50221d5e9bc0b0d91a686f83437ebf120bea1748257fd60f911f4", 0x72) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0x1, 0x0, 0x80000000) fcntl$auto(0x0, 0x407, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x9, 0x81, 0xd1) madvise$auto(0x0, 0x2000000080000001, 0x3) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000300)={0x80, 0x7, 0x2fe, 0x3, 0x101, 0xd7e, &(0x7f0000000400)="a4fb9c3f5010d03e7be734d281072161337a07339bc0f466099209346fc52db9f991fbe9e4100f17fcc2d8d818e935e51041164ab8a7e97c18a40c52363c913fb59df6da5167ee3de6c8dbab926285b33f45f7c5004f0cdc28a1785fc7551c7c6533a919042b6c549b22a90291a17b506cb13fe83ada268530b306f03a792d72e3e61d35c0a5e5affe61034ad8b352987ecf3fc8b1af0c54d3c1393b07913a7ab848008cfcc919622bed841cecc31920f05faa6e"}) 5.956543212s ago: executing program 9 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x0, r0, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xda9c, 0x1, 0x9}, 0x9, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000200)="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", 0x132) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r4, 0x0, 0xfffffdf1) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/binder1\x00', 0x181041, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f00000001c0)) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r4, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(r6, 0x7, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4004ae99, &(0x7f0000000040)={0x2}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop1\x00', 0x0, 0x0) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd10\x00', 0x0, 0x0) ioctl$auto_IOC_PR_RELEASE(r8, 0x801070cf, 0x0) 3.15937378s ago: executing program 8 (id=2967): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto_fops_u32_ro_(r1, &(0x7f0000000340)="94a41b209e6c5b7129366690078107967414885026d57de7480d4fb9d07ffd27684d264fe71cd1b16add3e8e35349360441319de1828b9d89d92c52c81ce6a333509ae957ff6a041eb3aae5c6291013031250b218b60c0baeb8f6fc02e15566a03655edd535fbf76ded6497c4366473061ebea3066c21813a69ad85e97297601a699c13287b2c44e7c42b985230cd83d89f9932e2ac902d4572b880a93231b5603d5569b4ead8f6c960fe0576c396cf844ae2e4b9cfd1f842e9e38365fb12681eb870bde", 0xc4) msgctl$auto_IPC_STAT(0x62, 0x2, &(0x7f0000000100)={{0xfff, 0xee01, 0xffffffffffffffff, 0x5, 0x2ce, 0x1ff, 0xa}, &(0x7f0000000180)=0x3, &(0x7f00000000c0)=0x1e, 0x200, 0x1, 0x1, 0x7ff, 0xa4ee, 0x10, 0x7, 0xb, @raw=0x9, @raw=0x81}) setreuid$auto(r2, 0x0) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f0000000000)="c80891d5aa70") r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/snd/midiC2D2\x00', 0x40881, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000002000)={0x1, 0xfffffff5, 0x1, 0x9, 0x2, "54c6f727760af2d3f9cff1dda86faf4b"}) 3.048520054s ago: executing program 8 (id=2968): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) statmount$auto(0x0, &(0x7f0000000180)={0x80000006, 0x1, 0x9, 0x7, 0x7, 0x8, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x5, 0x2, 0x7, 0xb3, 0x6, 0x8, 0x3, 0xa, 0x7, 0xbd, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x100000, 0x0, [0x99, 0x2, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xcd1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff5, 0x4, 0x0, 0xfdffffffffffff81, 0x7, 0x4, 0x0, 0x0, 0x200000000000000, 0x1d6, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x5fffffd, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000380), 0x9, 0xa505}, 0x800}, 0x7, 0x4008) (async) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0105"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), r1) (async) mmap$auto(0x0, 0xfeaf, 0x8, 0xeb5, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x480c1, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff, 0xffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000001c, 0x9, 0x0, 0x400000000009, 0x7) (async) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r4, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) close_range$auto(0x2, 0xffffffffffffffff, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) (async) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x7fffffffffffffff, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x6, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x74c) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x2, 0x400000000009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) (async) mount$auto(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfs\x00\x00X\xca\xd8\xce\xc1\xfc\x9f\x9f?o;\xf7\xdf\x9f\x11\xc5\xea\xd9', 0x8, 0x0) (async) connect$auto(r0, &(0x7f0000000940)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x1e) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), r0) 2.887883512s ago: executing program 8 (id=2969): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) r1 = socket(0x11, 0xa, 0x9) (async) unshare$auto(0x1) (async) r2 = socket(0x10, 0x3, 0xc) setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0x8) (async) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x7f835763b555bbe0, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0xa) (async) setreuid$auto(0x1, 0x3) (async) setgid$auto(0xee00) prctl$auto(0x800, 0xc6, 0x0, 0x2000000002, 0xfffffffffffffffd) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x0f\x97\xa1\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd3lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\xfa\v?\\#\xfc\x15-\xbc\xcd$\x83\xcf\xc5D\xcc', 0xc8) (async) socket(0x1f, 0x1, 0x8) (async) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0x8, 0xffffffff, 0xfffffffffffffffe, 0x7fff, 0xfc2, 0x27f, @inferred, @raw=0x9}) setresgid$auto(0x0, 0xffffffffffffffff, r3) keyctl$auto(0x23, 0x1, 0x6, 0x3, 0x9) (async) prctl$auto(0x1000000003b, 0x80001, 0x0, 0x200000005, 0x100000000000007) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x2, 0x80000000000000, 0x80000000, 0x0, 0x4517, 0x9, 0xffffffffffffffff, {0x3, 0x8001}, 0xfffffffc, 0xbfa, 0x4, 0x110, 0x0, 0x2, 0x8, 0x1659, 0x10000, 0x476, 0x4}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) r4 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x22b80, 0x0) read$auto_sco_debugfs_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/211, 0xd3) (async) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000180)={@config_section=&(0x7f0000000100)={"b7cc0c94ac258aa1c413deed2330e490d0d44955df1a7bb5c5388527688045aa16ec2015542ed95422e897eb444867871672402d21960b2680f2b0c6172c6fe5", @params=&(0x7f0000000300)={"d18fb96fd67e615e23795adcab4440b88418413300b55b14323a9be71d79dd7570f3879f0adfd7613e474f0b32b15595d510a4e6c7b1528c7e77dc9f61700caa", "7fd583501fda01bf7a4e131d5774540d51804cc57578666fccfb26dc04d213c51aaa79a82ec6a43100be1e275f0c96a37ee3c98b03b0c6c0b4fe4f1b9c71407f"}, @padding3}, 0xba}) 2.60831852s ago: executing program 9 (id=2970): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002140)=""/4094, 0xffe) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x181) r2 = creat$auto(&(0x7f0000000180)='./file0\x00', 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r4 = socket(0xa, 0x2, 0x0) sendto$auto(r4, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/dev_snmp6/vlan1\x00', 0x24002, 0x0) read$auto(r5, 0x0, 0x20) write$auto(0x3, 0x0, 0xdfd5) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYBLOB="010b2d"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) splice$auto(r3, 0x0, r2, 0x0, 0xb, 0xf) close_range$auto(0x2, 0x8, 0x0) 2.120331166s ago: executing program 6 (id=2972): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0) write$auto(r0, &(0x7f0000000040)='P\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x7ffffffffffffffe, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x3, 0x0, 0x4) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x10000000000001ff, 0x7, 0x2000000d1e, 0x20, 0x2, 0x100000000000000, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0x9, 0x401]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r1) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) setgroups$auto(0x81, 0xfffffffffffffffc) setfsuid$auto(0x0) socket(0x2, 0x3, 0xff) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) 1.936023967s ago: executing program 8 (id=2973): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0) getpid() mmap$auto(0x0, 0x6, 0xdb, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x5, 0x4, 0x90, 0xa, 0x1001ff000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0xb) madvise$auto(0xfffffffffffffffa, 0x7f, 0x10) madvise$auto(0x0, 0x2003f2, 0x15) socket(0x2, 0x802, 0x1) getsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x43, 0x9, 0x0, &(0x7f0000000100)=0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r3) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) socket(0x33, 0x3, 0x1) 1.797348607s ago: executing program 6 (id=2974): socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c80", @ANYRES32, @ANYBLOB="1200010089"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) (async) socket(0x1d, 0x2, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r0) r2 = socket(0x10, 0x3, 0x6) close_range$auto(r2, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r3 = fanotify_init$auto(0x65, 0x2) (rerun: 32) read$auto_proc_pagemap_operations_internal(r3, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0xa}, 0x3, 0x0) 1.538930895s ago: executing program 6 (id=2975): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x2400000, 0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x0) bind$auto(r2, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) futex$auto(0x0, 0x4f549, 0xc, 0x0, 0x0, 0x404) unshare$auto(0x40000080) socket(0x18, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) setns(0xffffffffffffffff, 0x0) r3 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000000)=0x401) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r4, 0x0, 0xfffffdf1) socket$nl_generic(0x10, 0x3, 0x10) acct$auto(0x0) fsetxattr$auto(r4, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x560f, r5) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 1.119984968s ago: executing program 9 (id=2976): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x5, {0x1, 0x4, 0xb, 0x8000, 0x4, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r0, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x11, r0, 0x3) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x5, 0x8001, 0xfffffffffffffffb, 0x100000004, 0x2c2, 0x800002017d, 0x4, 0xdfdfffff, 0xd, 0xd59, 0xfb, 0xff, 0x6, 0x100000005]}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0xfffffffffffffd22, r4, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x15}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x14800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) 1.015613439s ago: executing program 8 (id=2977): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x0, 0x10000, 0x0) (async) mincore$auto(0x0, 0x10000, 0x0) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) (async) semctl$auto(0xa, 0x2, 0x13, 0xde) socketpair$auto(0x1, 0x1, 0x4, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) (async) write$auto(0xffffffffffffffff, 0x0, 0x5) r1 = socket(0x11, 0x5, 0x9) bind$auto(r1, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) r2 = io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_NETNS_COOKIE(r3, 0x1, 0x47, 0x0, &(0x7f0000000100)=0x5) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) close_range$auto(0xffffffffffffffff, r2, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) (async) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0) 899.88646ms ago: executing program 6 (id=2978): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x4000, 0x0) fsetxattr$auto(r0, &(0x7f0000000200)='*,{:}{{*\x00', 0x0, 0x100, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000480)={0xff, 0x6, 0x2, 0xfffb, 0xf000, 0x4, &(0x7f0000000380)="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"}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) mmap$auto(0x0, 0x7, 0x10000000df, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmodat$auto(r2, &(0x7f0000000080)='./cgroup\x00', 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 528.869554ms ago: executing program 6 (id=2979): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r1, 0x1b, 0x70bd24, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x10}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "8982884700"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0xc800) r2 = socket(0xa, 0x1, 0x84) mprotect$auto(0x1ffffffff000, 0x100017, 0x4) getsockopt$auto(r2, 0xfffffffd, 0x484, 0x0, &(0x7f0000000040)=0x4) 384.179971ms ago: executing program 6 (id=2980): r0 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x620400, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(r0, 0x3, &(0x7f0000000040)='.]],\'\x00', &(0x7f0000000080)="5e09804c55e00199215043ea863c89a7d53b997f67edc10cb6d539bd41e341593e5c58819c97401d21fdf9f3c74c42fa896c7f30ac5a3aa3ce8c3afea2e19da762ec889829dbf8c3e2fad89229cbd58e030788b0c9d822bd3aeac18e35a3b4910d0d7e7f2a5e14397e2aa5b7871881a7c9e8dd3841123c171ae15069f465639e759b6a100faaf715a2232a875df1a88cc68be84d95d71cf9e8ac0ade7d02211213708fd318c3529a614d254b0fbfdb334ed428ac7c1075872dae419534195d8b4c61181193520d589b75caede56f58b495fa97a4078dbe", 0x1) r1 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000180)="3257614f556c8bf065acd42ab7be4eb93079b4e127d0521fffee47a25b05148f902fa71643e5fd6027c49d044e972036960bcb3240b814562c7fd4b748376b751515705a8748bd7a7fc4471121a568ff6cec6c02704e72094b89018627ff30c8593376d836e7add8760553e1a90d3064429cb23bf0d530e9d7fc212e5fda0b99f329bfe626d93d2b99c437a282dfc618876d9dcfcb4c832402a5c82cbaf68ff71b8a01e48c62254ffb54c74aa129e11cf5") read$auto_event_inject_fops_trace(r1, &(0x7f0000000240)=""/247, 0xf7) getsockopt$auto_SO_DONTROUTE(r0, 0x3ff, 0x5, &(0x7f0000000340)='/-*$[\x00', &(0x7f0000000380)=0x5) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x400, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME={0x347, 0x33, "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"}, @NL80211_ATTR_MBSSID_CONFIG={0x48, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r3}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x5}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x24}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xfd}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xc1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x8}, @NL80211_ATTR_MBSSID_ELEMS={0xc, 0x133, 0x0, 0x1, [@nested={0x8, 0x54, 0x0, 0x1, [@typed={0x4, 0xe7}]}]}, @NL80211_ATTR_VENDOR_DATA={0x3f, 0xc5, "48cdd8909b6bcca8104ff67c0666338cbd1ed280f841923675ac66f80228e1ae164c0642100ef0ee0ff9838fc51a7f38f466a6b700423242ce6c4d"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x9}]}, 0x400}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000940)='/sys/bus/pci/drivers/vmxnet3/bind\x00', 0x288403, 0x0) r7 = setfsgid$auto(0xffffffffffffffff) fchown$auto(r6, 0x0, r7) setregid$auto(r7, r7) msgctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000a40)={{0x9, 0xee00, r7, 0x8, 0x2ff, 0x2, 0x2}, &(0x7f00000009c0)=0xd7, &(0x7f0000000a00)=0x4, 0x8000000000000001, 0x6f, 0x0, 0x6, 0x2, 0x8, 0x5, 0xffff, @raw=0x7f, @raw=0xfff}) sendmsg$auto_NL80211_CMD_CONNECT(r1, &(0x7f0000000e80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x350, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_ADDRS={0x32a, 0xa6, 0x0, 0x1, [@nested={0x4, 0xc6}, @nested={0xc, 0x37, 0x0, 0x1, [@typed={0x8, 0xe9, 0x0, 0x0, @uid=r8}]}, @generic="4686cf532f4397a79a849cee6c8daf97a7255fc02c842be346b581c11238a0439053b60f87cc62fd1f8cf5c7c7bd6956ad985d86eb5f4a6d027d915790986203792fb783e8ec0cce6f3dd1f18284e98c3b6395189205b4ced919306fecef3839d014907b159192c658a888e72dd257253d2b1ecf323d494af1be9de130281ea2a15cc343c769f4fcfeeca0095ce38460cc22708763548da4a3c26778b1b3d7e9c08d5e36051d6b4d7ff72a95a60dd09e9fa94680cb7f101b88a18b1e340274cb686d78f70a2103221affbd22854bb2553c8707e122cf6e441c4fbec1b2ff621cc10ca89ad0f92a4635463d50b9eec9ac43dda4", @nested={0x105, 0x124, 0x0, 0x1, [@generic="e53336a959c39baa7117c5edd3652b3aed760b3085c9ea69f0e983c72fd0116f721f76cfd0fac35fe55565a9ea3dc545ed6e0400e0d0caeb6e8d5cb09ff15b40379eefea4dacbbecad190080769f10090063c332ecc1011770cfbae8f0f2d643fd91c1bbc24235bedff75d0ddd227f62b55dd95ce94839b387b311de7fa5a2c4cb9a67d9210badbbd19d2f72cea59cd0c088d832af1bd1fdf395a064054497a70c5ca4a162352297622766109453d66ad38bc99d5b3b199594c730bf81b202024a2d7e21dbfcb089e7ec4d3449c5e91ca9c8e62fe345abe4083a8989991734d3c82232e3dfd2a7f43cbdc91fd86affa6d7b856babf", @nested={0x4, 0xd8}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}]}, @nested={0xbf, 0x86, 0x0, 0x1, [@nested={0x4, 0x24}, @generic="54fe964df3abd2aed0def05d06e81d9dcdb7df610bc4933db6d15d002d1ec076ece951567f8a8933d0e9c396e8244f22d6d1e774bd25e05d30a75ad986469d05dd5d6a7f9717", @nested={0x4, 0x12e}, @generic="7535723d2a3c5908d52f7b4f717a342c3d004bb6fab14624883f136136927648d55353a974e5001e58a2ee761989f040a72cbf9e61586f3b4f52074f169e4a646867e6e81d5c63b4e4a17dc29988e4bedd20d17c6ac86bcdba4d6b18156cd7ea21ac5f7132da2ce1324bed641d"]}, @generic="2b77c08783940e6ced71a00898f75dddddd6c1073fe990e4aa0d3675abdf1c31c04b10bfdd22018180a7960f6baba7a7a88ec11410df91b1a2800d701ccd477fbc69797948387d65f95460b20e00546c7ec90837934d256d57bc81"]}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}]}, 0x350}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ec0), r1) keyctl$auto_KEYCTL_READ(0xb, 0x6, 0xffffffff, 0xffffffffffffffff, 0x49e20000) r9 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0x7, &(0x7f0000000f00)="72a85e0a7bc784a5be8059249aa4fa2f49645cf3c0c9c71dc5bf4506a59d676c558ea0182d8783a8bb38568cd319898bea9b8ae31273bae23538a3e1f5fddf25e08dc82352810d4500ffcdd9f6a91af636d3fe05f4df03cae9a77a32fd21d47d58156a8fe877ad2a4aafe1260c706709eecfb5f15cf88855708dd77106c0f4e7cc3a2c1a25a4f0956ab29f494b203c753b2f182ccbb2b5d80dc33888fa9de25126d32ec7b86255dd34335cccf8bf993bbd3f3c71ab565a12dd7a5c6f235bc0b0ccc202a4eb8c3e92ad") getsockopt$auto_SO_TIMESTAMPING_OLD(r9, 0x3, 0x25, &(0x7f0000001000)='/sys/bus/pci/drivers/vmxnet3/bind\x00', &(0x7f0000001040)=0x4) r10 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/input/event2\x00', 0x105000, 0x0) r11 = clone$auto(0x6495, 0x5, &(0x7f00000010c0)=0x100, &(0x7f0000001100)=0x4, 0x0) r12 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/ieee80211/phy9/hwsim/rx_rssi\x00', 0x40100, 0x0) r13 = fcntl$auto(r12, 0x518b, r11) sendmsg$auto_NL80211_CMD_GET_REG(r9, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x64, 0x14e, "f19d4f4ec6987fa7b4784df3c6bed322033b8cdb7da5e8c6a2680353380be24bea4816805e494bc1e17327cce02fa963accf20c4c31093b5e38540c7e32ec7fc330aa473987f869d7f431ca91bc11abc65d54bdd57fd02bb6b3c707f03ec7252"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x80}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(r5, 0x1, &(0x7f0000001300)='##:$\'^:\x00', &(0x7f0000001340)="688b9679d82327c44b5c4c6fa81d5103c9bb555b967066", 0x1) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001380)='/proc/interrupts\x00', 0x400000, 0x0) setsockopt$auto(r10, 0x723ba119, 0x3, &(0x7f00000013c0)='^\x00', 0x6) r14 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001440), r13) sendmsg$auto_NFC_CMD_DEV_UP(r13, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, r14, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4d}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xfffffffc}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x4}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'nl80211\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) 174.864112ms ago: executing program 9 (id=2981): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x8}) io_uring_setup$auto(0x59, 0x0) write$auto(r0, 0x0, 0x47ffffdf2) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 8 (id=2982): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0xef, 0x4, 0x10001, &(0x7f0000000000)=0x3, 0x0, 0xe430) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x0) kernel console output (not intermixed with test programs): soc_add_peer+0x252/0x14f0 [ 550.793394][T20912] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 550.793410][T20912] ? sctp_connect_new_asoc+0x41e/0x770 [ 550.793430][T20912] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 550.793449][T20912] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 550.793466][T20912] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 550.793485][T20912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 550.793504][T20912] sctp_sendmsg+0x1185/0x22b0 [ 550.793528][T20912] ? __pfx_sctp_sendmsg+0x10/0x10 [ 550.793546][T20912] ? do_user_addr_fault+0x8d6/0x12f0 [ 550.793565][T20912] ? aa_sk_perm+0x309/0xaa0 [ 550.793587][T20912] ? __pfx_aa_sk_perm+0x10/0x10 [ 550.793612][T20912] ? __pfx_sctp_sendmsg+0x10/0x10 [ 550.793632][T20912] inet_sendmsg+0x11c/0x140 [ 550.793652][T20912] ____sys_sendmsg+0x98d/0xb70 [ 550.793669][T20912] ? __pfx_inet_sendmsg+0x10/0x10 [ 550.793689][T20912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.793711][T20912] ? __pfx__kstrtoull+0x10/0x10 [ 550.793738][T20912] ___sys_sendmsg+0x190/0x1e0 [ 550.793759][T20912] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.793787][T20912] ? find_held_lock+0x2b/0x80 [ 550.793814][T20912] __sys_sendmmsg+0x205/0x430 [ 550.793831][T20912] ? __pfx___sys_sendmmsg+0x10/0x10 [ 550.793851][T20912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.793876][T20912] ? fput+0x79/0x100 [ 550.793894][T20912] ? ksys_write+0x1ac/0x250 [ 550.793909][T20912] ? __pfx_ksys_write+0x10/0x10 [ 550.793927][T20912] __x64_sys_sendmmsg+0x9c/0x100 [ 550.793941][T20912] ? lockdep_hardirqs_on+0x78/0x100 [ 550.793956][T20912] do_syscall_64+0x106/0xf80 [ 550.793970][T20912] ? clear_bhb_loop+0x40/0x90 [ 550.793989][T20912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.794004][T20912] RIP: 0033:0x7efcaf19c819 [ 550.794017][T20912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.794033][T20912] RSP: 002b:00007efcb0044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 550.794047][T20912] RAX: ffffffffffffffda RBX: 00007efcaf415fa0 RCX: 00007efcaf19c819 [ 550.794057][T20912] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 550.794071][T20912] RBP: 00007efcb0044090 R08: 0000000000000000 R09: 0000000000000000 [ 550.794080][T20912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.794089][T20912] R13: 00007efcaf416038 R14: 00007efcaf415fa0 R15: 00007fffb8e77d58 [ 550.794109][T20912] [ 551.937635][T20577] Bluetooth: hci3: command tx timeout [ 552.323858][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 552.758292][T20329] veth0_vlan: entered promiscuous mode [ 552.798804][T20329] veth1_vlan: entered promiscuous mode [ 552.868618][T20329] veth0_macvtap: entered promiscuous mode [ 552.927753][T20329] veth1_macvtap: entered promiscuous mode [ 552.996710][T20329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.035819][T20329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.083197][T20609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.112320][T20609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.176243][T20609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.205387][T20609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.712228][T20730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.739412][T20730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.852134][T20728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.884078][T20728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.729558][T21085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2398'. [ 555.930397][T21138] Invalid ELF header magic: != ELF [ 556.547794][T21190] Invalid ELF header magic: != ELF [ 557.252536][T21218] block2mtd: illegal erase size [ 558.697460][T21273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 558.711685][T21273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 558.721066][T21273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 558.731228][T21273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 558.738739][T21273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.339859][T21270] chnl_net:caif_netlink_parms(): no params data found [ 559.626939][T20642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.735606][T20642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.853263][T21345] zswap: compressor not available [ 559.945121][T20642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.089491][T21400] input: jJǸ-9%vJ86 as /devices/virtual/input/input24 [ 560.154547][T20642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.233860][T21270] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.241033][T21270] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.297730][T21270] bridge_slave_0: entered allmulticast mode [ 560.324004][T21270] bridge_slave_0: entered promiscuous mode [ 560.345137][T21270] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.374628][T21270] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.404317][T21270] bridge_slave_1: entered allmulticast mode [ 560.435212][T21270] bridge_slave_1: entered promiscuous mode [ 560.574923][T21270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.610282][T21270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.781967][T20577] Bluetooth: hci5: command tx timeout [ 560.827622][T21270] team0: Port device team_slave_0 added [ 560.865890][T21270] team0: Port device team_slave_1 added [ 560.943576][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.951150][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.105091][T21270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.131802][T21270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.230416][T21270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.360692][T21508] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 561.404960][T21270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.426349][T21270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.546183][T21270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.646899][T20642] bridge_slave_0: left allmulticast mode [ 561.671444][T20642] bridge_slave_0: left promiscuous mode [ 561.677749][T20642] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.356826][T21270] hsr_slave_0: entered promiscuous mode [ 562.394046][T21270] hsr_slave_1: entered promiscuous mode [ 562.400136][T21270] debugfs: 'hsr0' already exists in 'hsr' [ 562.444374][T21270] Cannot create hsr debugfs directory [ 562.849897][T20577] Bluetooth: hci5: command tx timeout [ 563.342880][T20642] hsr_slave_0: left promiscuous mode [ 563.413581][T20642] hsr_slave_1: left promiscuous mode [ 563.432785][T20642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.457994][T20642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.482864][T20642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.519988][T20642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.580555][T20642] veth1_macvtap: left promiscuous mode [ 563.599853][T20642] veth0_macvtap: left promiscuous mode [ 563.621613][T20642] veth1_vlan: left promiscuous mode [ 563.639278][T20642] veth0_vlan: left promiscuous mode [ 563.794865][T21686] input: f as /devices/virtual/input/input25 [ 564.919473][T20577] Bluetooth: hci5: command tx timeout [ 565.697129][T21273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 565.723412][T21273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 565.732492][T21273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 565.743464][T21273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 565.751123][T21273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 565.832074][T21270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 566.007802][T21270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 566.108416][T21270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 566.156865][T21270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 566.676330][T21270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.843801][T21270] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.915163][T20572] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.922384][T20572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.931483][T21843] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 566.986656][T20577] Bluetooth: hci5: command tx timeout [ 567.051412][T20730] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.058591][T20730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.232808][T21750] chnl_net:caif_netlink_parms(): no params data found [ 567.536364][T21860] netlink: 5328 bytes leftover after parsing attributes in process `syz.0.2442'. [ 567.604058][T21870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2443'. [ 567.645772][T21750] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.699266][T21750] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.758077][T21750] bridge_slave_0: entered allmulticast mode [ 567.782882][T20577] Bluetooth: hci0: command tx timeout [ 567.800825][T21750] bridge_slave_0: entered promiscuous mode [ 567.841663][T21750] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.896566][T21750] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.941272][T21750] bridge_slave_1: entered allmulticast mode [ 567.974730][T21750] bridge_slave_1: entered promiscuous mode [ 568.097543][T21270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.233360][T21750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.287102][T21750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.508539][T21750] team0: Port device team_slave_0 added [ 568.548145][T21750] team0: Port device team_slave_1 added [ 568.731651][T21270] veth0_vlan: entered promiscuous mode [ 568.764595][T21750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.810884][T21750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.965801][T21750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.033046][T21750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.075687][T21750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.202626][T21750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.442540][T21270] veth1_vlan: entered promiscuous mode [ 569.512763][T21750] hsr_slave_0: entered promiscuous mode [ 569.537686][T21750] hsr_slave_1: entered promiscuous mode [ 569.562773][T21750] debugfs: 'hsr0' already exists in 'hsr' [ 569.583737][T21750] Cannot create hsr debugfs directory [ 569.853582][T20577] Bluetooth: hci0: command tx timeout [ 569.945439][T21270] veth0_macvtap: entered promiscuous mode [ 569.998408][T21270] veth1_macvtap: entered promiscuous mode [ 570.067747][T21270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.154221][T22123] __vm_enough_memory: pid: 22123, comm: syz.4.2450, bytes: 4398046511104 not enough memory for the allocation [ 570.195382][T21270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.275709][T20572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.308975][T20572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.348465][T20572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.437048][T20572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.572169][T21750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 570.611005][T20609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.628570][T20609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.652231][T21750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 570.670722][T21750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 570.696204][T21750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 570.741469][T20609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.764667][T20609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.881409][T22183] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 570.905224][T21750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.997433][T21750] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.045083][T20769] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.052372][T20769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.187164][T20769] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.194332][T20769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.273892][T21750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 571.808596][T21750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.922334][T20577] Bluetooth: hci0: command tx timeout [ 572.645604][T21750] veth0_vlan: entered promiscuous mode [ 572.701744][T21750] veth1_vlan: entered promiscuous mode [ 572.825070][T21750] veth0_macvtap: entered promiscuous mode [ 572.870761][T21750] veth1_macvtap: entered promiscuous mode [ 572.951292][T21750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.016160][T21750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.249482][T20609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.297725][T20609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.347685][T20609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.439118][T20609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.615733][T22254] FAULT_INJECTION: forcing a failure. [ 573.615733][T22254] name failslab, interval 1, probability 0, space 0, times 0 [ 573.812969][T22254] CPU: 0 UID: 0 PID: 22254 Comm: syz.1.2458 Tainted: G U L syzkaller #0 PREEMPT(full) [ 573.812998][T22254] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 573.813004][T22254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 573.813013][T22254] Call Trace: [ 573.813018][T22254] [ 573.813024][T22254] dump_stack_lvl+0x100/0x190 [ 573.813053][T22254] should_fail_ex.cold+0x5/0xa [ 573.813071][T22254] should_failslab+0xc2/0x120 [ 573.813089][T22254] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 573.813112][T22254] ? security_file_alloc+0x34/0x2c0 [ 573.813133][T22254] ? trace_kmem_cache_alloc+0xf3/0x120 [ 573.813153][T22254] security_file_alloc+0x34/0x2c0 [ 573.813173][T22254] init_file+0x95/0x480 [ 573.813192][T22254] alloc_empty_file+0x73/0x1c0 [ 573.813213][T22254] path_openat+0xe8/0x31a0 [ 573.813229][T22254] ? kasan_save_stack+0x3f/0x50 [ 573.813242][T22254] ? kasan_save_stack+0x30/0x50 [ 573.813255][T22254] ? kasan_save_track+0x14/0x30 [ 573.813268][T22254] ? __kasan_slab_alloc+0x89/0x90 [ 573.813282][T22254] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 573.813304][T22254] ? do_getname+0x35/0x390 [ 573.813323][T22254] ? do_sys_openat2+0xc5/0x1e0 [ 573.813343][T22254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.813361][T22254] ? __pfx_path_openat+0x10/0x10 [ 573.813384][T22254] do_file_open+0x20e/0x430 [ 573.813402][T22254] ? __pfx_do_file_open+0x10/0x10 [ 573.813432][T22254] ? alloc_fd+0x476/0x790 [ 573.813449][T22254] ? do_getname+0x191/0x390 [ 573.813477][T22254] do_sys_openat2+0x10d/0x1e0 [ 573.813497][T22254] ? __pfx_do_sys_openat2+0x10/0x10 [ 573.813525][T22254] __x64_sys_openat+0x12d/0x210 [ 573.813546][T22254] ? __pfx___x64_sys_openat+0x10/0x10 [ 573.813576][T22254] do_syscall_64+0x106/0xf80 [ 573.813592][T22254] ? clear_bhb_loop+0x40/0x90 [ 573.813611][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.813626][T22254] RIP: 0033:0x7fe454b5d04e [ 573.813640][T22254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 573.813655][T22254] RSP: 002b:00007fe452dd4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.813671][T22254] RAX: ffffffffffffffda RBX: 00007fe452dd56c0 RCX: 00007fe454b5d04e [ 573.813681][T22254] RDX: 0000000000000002 RSI: 00007fe452dd4f90 RDI: ffffffffffffff9c [ 573.813690][T22254] RBP: 00007fe454c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 573.813699][T22254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.813707][T22254] R13: 00007fe454e16128 R14: 00007fe454e16090 R15: 00007ffd1df041e8 [ 573.813726][T22254] [ 574.244927][T20577] Bluetooth: hci0: command tx timeout [ 574.274793][T22283] FAULT_INJECTION: forcing a failure. [ 574.274793][T22283] name failslab, interval 1, probability 0, space 0, times 0 [ 574.288328][T22283] CPU: 0 UID: 0 PID: 22283 Comm: syz.1.2459 Tainted: G U L syzkaller #0 PREEMPT(full) [ 574.288356][T22283] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 574.288362][T22283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 574.288371][T22283] Call Trace: [ 574.288377][T22283] [ 574.288383][T22283] dump_stack_lvl+0x100/0x190 [ 574.288411][T22283] should_fail_ex.cold+0x5/0xa [ 574.288430][T22283] should_failslab+0xc2/0x120 [ 574.288448][T22283] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 574.288472][T22283] ? __pmd_alloc+0xbf/0x950 [ 574.288497][T22283] __pmd_alloc+0xbf/0x950 [ 574.288524][T22283] __handle_mm_fault+0xa9e/0x2b60 [ 574.288549][T22283] ? mt_find+0x45e/0x8e0 [ 574.288567][T22283] ? __pfx___handle_mm_fault+0x10/0x10 [ 574.288587][T22283] ? __pfx_mt_find+0x10/0x10 [ 574.288614][T22283] ? find_vma+0xbf/0x140 [ 574.288628][T22283] ? __pfx_find_vma+0x10/0x10 [ 574.288646][T22283] handle_mm_fault+0x36d/0xa20 [ 574.288671][T22283] do_user_addr_fault+0x74c/0x12f0 [ 574.288692][T22283] exc_page_fault+0x6f/0xd0 [ 574.288708][T22283] asm_exc_page_fault+0x26/0x30 [ 574.288723][T22283] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 574.288744][T22283] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 [ 574.288759][T22283] RSP: 0018:ffffc9000487fb30 EFLAGS: 00050206 [ 574.288772][T22283] RAX: 0000000000000001 RBX: ffff88802b744680 RCX: 0000000000000003 [ 574.288781][T22283] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802b744680 [ 574.288791][T22283] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10056e88d0 [ 574.288800][T22283] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc9000487fd80 [ 574.288809][T22283] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 [ 574.288827][T22283] _copy_from_iter+0x355/0x1690 [ 574.288853][T22283] ? __pfx__copy_from_iter+0x10/0x10 [ 574.288871][T22283] ? trace_kmalloc+0x101/0x130 [ 574.288887][T22283] ? __kasan_kmalloc+0xaa/0xb0 [ 574.288902][T22283] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 574.288916][T22283] ? proc_sys_call_handler+0x2c7/0x5a0 [ 574.288937][T22283] proc_sys_call_handler+0x3ed/0x5a0 [ 574.288953][T22283] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 574.288974][T22283] vfs_write+0x6ac/0x1070 [ 574.288990][T22283] ? __pfx_proc_sys_write+0x10/0x10 [ 574.289007][T22283] ? __pfx_vfs_write+0x10/0x10 [ 574.289034][T22283] ksys_write+0x12a/0x250 [ 574.289049][T22283] ? __pfx_ksys_write+0x10/0x10 [ 574.289070][T22283] do_syscall_64+0x106/0xf80 [ 574.289085][T22283] ? clear_bhb_loop+0x40/0x90 [ 574.289104][T22283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.289119][T22283] RIP: 0033:0x7fe454b9c819 [ 574.289132][T22283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.289147][T22283] RSP: 002b:00007fe452df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.289160][T22283] RAX: ffffffffffffffda RBX: 00007fe454e15fa0 RCX: 00007fe454b9c819 [ 574.289170][T22283] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 574.289178][T22283] RBP: 00007fe452df6090 R08: 0000000000000000 R09: 0000000000000000 [ 574.289187][T22283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.289195][T22283] R13: 00007fe454e16038 R14: 00007fe454e15fa0 R15: 00007ffd1df041e8 [ 574.289215][T22283] [ 574.934972][T20642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.944600][T20642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.955229][T20642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.963074][T20642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.488670][T22324] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2462'. [ 576.342900][T22376] FAULT_INJECTION: forcing a failure. [ 576.342900][T22376] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 576.397803][T22376] CPU: 0 UID: 0 PID: 22376 Comm: syz.0.2469 Tainted: G U L syzkaller #0 PREEMPT(full) [ 576.397830][T22376] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 576.397836][T22376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 576.397845][T22376] Call Trace: [ 576.397850][T22376] [ 576.397857][T22376] dump_stack_lvl+0x100/0x190 [ 576.397885][T22376] should_fail_ex.cold+0x5/0xa [ 576.397902][T22376] ? prepare_alloc_pages+0x16d/0x5f0 [ 576.397922][T22376] should_fail_alloc_page+0xeb/0x140 [ 576.397941][T22376] prepare_alloc_pages+0x1f0/0x5f0 [ 576.397962][T22376] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 576.397988][T22376] ? stack_trace_save+0x8e/0xc0 [ 576.398005][T22376] ? __pfx_stack_trace_save+0x10/0x10 [ 576.398021][T22376] ? stack_depot_save_flags+0x27/0x9d0 [ 576.398043][T22376] ? register_lock_class+0x40/0x560 [ 576.398066][T22376] ? kasan_save_stack+0x3f/0x50 [ 576.398079][T22376] ? kasan_save_stack+0x30/0x50 [ 576.398092][T22376] ? kasan_save_track+0x14/0x30 [ 576.398106][T22376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 576.398130][T22376] ? __handle_mm_fault+0xa9e/0x2b60 [ 576.398150][T22376] ? handle_mm_fault+0x36d/0xa20 [ 576.398169][T22376] ? do_user_addr_fault+0x74c/0x12f0 [ 576.398184][T22376] ? asm_exc_page_fault+0x26/0x30 [ 576.398199][T22376] ? _copy_from_iter+0x355/0x1690 [ 576.398226][T22376] ? proc_sys_call_handler+0x3ed/0x5a0 [ 576.398240][T22376] ? vfs_write+0x6ac/0x1070 [ 576.398254][T22376] ? ksys_write+0x12a/0x250 [ 576.398267][T22376] ? do_syscall_64+0x106/0xf80 [ 576.398282][T22376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.398306][T22376] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.398324][T22376] ? policy_nodemask+0xed/0x4f0 [ 576.398343][T22376] alloc_pages_mpol+0x1fb/0x550 [ 576.398360][T22376] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 576.398383][T22376] alloc_pages_noprof+0x136/0x390 [ 576.398401][T22376] pte_alloc_one+0x1c/0x3d0 [ 576.398418][T22376] do_fault+0x88e/0x18e0 [ 576.398436][T22376] ? __pmd_alloc+0x3fb/0x950 [ 576.398456][T22376] __handle_mm_fault+0x1815/0x2b60 [ 576.398481][T22376] ? mt_find+0x45e/0x8e0 [ 576.398498][T22376] ? __pfx___handle_mm_fault+0x10/0x10 [ 576.398518][T22376] ? __pfx_mt_find+0x10/0x10 [ 576.398546][T22376] ? find_vma+0xbf/0x140 [ 576.398561][T22376] ? __pfx_find_vma+0x10/0x10 [ 576.398579][T22376] handle_mm_fault+0x36d/0xa20 [ 576.398604][T22376] do_user_addr_fault+0x74c/0x12f0 [ 576.398625][T22376] exc_page_fault+0x6f/0xd0 [ 576.398640][T22376] asm_exc_page_fault+0x26/0x30 [ 576.398655][T22376] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 576.398676][T22376] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 [ 576.398691][T22376] RSP: 0018:ffffc90004bdfb30 EFLAGS: 00050206 [ 576.398704][T22376] RAX: 0000000000000001 RBX: ffff8880304d7bc0 RCX: 0000000000000003 [ 576.398714][T22376] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880304d7bc0 [ 576.398723][T22376] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100609af78 [ 576.398732][T22376] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc90004bdfd80 [ 576.398741][T22376] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 [ 576.398759][T22376] _copy_from_iter+0x355/0x1690 [ 576.398784][T22376] ? __pfx__copy_from_iter+0x10/0x10 [ 576.398803][T22376] ? trace_kmalloc+0x101/0x130 [ 576.398819][T22376] ? __kasan_kmalloc+0xaa/0xb0 [ 576.398833][T22376] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 576.398847][T22376] ? proc_sys_call_handler+0x2c7/0x5a0 [ 576.398867][T22376] proc_sys_call_handler+0x3ed/0x5a0 [ 576.398883][T22376] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 576.398904][T22376] vfs_write+0x6ac/0x1070 [ 576.398920][T22376] ? __pfx_proc_sys_write+0x10/0x10 [ 576.398936][T22376] ? __pfx_vfs_write+0x10/0x10 [ 576.398963][T22376] ksys_write+0x12a/0x250 [ 576.398978][T22376] ? __pfx_ksys_write+0x10/0x10 [ 576.398999][T22376] do_syscall_64+0x106/0xf80 [ 576.399013][T22376] ? clear_bhb_loop+0x40/0x90 [ 576.399032][T22376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.399047][T22376] RIP: 0033:0x7f5e5059c819 [ 576.399060][T22376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.399074][T22376] RSP: 002b:00007f5e5148d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.399087][T22376] RAX: ffffffffffffffda RBX: 00007f5e50815fa0 RCX: 00007f5e5059c819 [ 576.399097][T22376] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 576.399105][T22376] RBP: 00007f5e5148d090 R08: 0000000000000000 R09: 0000000000000000 [ 576.399114][T22376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.399122][T22376] R13: 00007f5e50816038 R14: 00007f5e50815fa0 R15: 00007ffe6a2c3498 [ 576.399143][T22376] [ 577.557530][ T30] audit: type=1326 audit(4294967517.550:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22378 comm="syz.5.2467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd21819c819 code=0x0 [ 577.963839][T22380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.979672][T22380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 578.003592][T22380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 578.037318][T22380] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 578.082914][T22380] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 578.150388][T22380] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 578.161228][T22380] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 578.207404][T22380] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 578.234553][T22380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 578.273880][T22380] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 578.318509][T22380] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 579.473772][T22435] warning: `syz.1.2477' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 579.815393][T22443] FAULT_INJECTION: forcing a failure. [ 579.815393][T22443] name failslab, interval 1, probability 0, space 0, times 0 [ 579.843049][T22443] CPU: 0 UID: 0 PID: 22443 Comm: syz.0.2479 Tainted: G U L syzkaller #0 PREEMPT(full) [ 579.843077][T22443] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 579.843083][T22443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.843092][T22443] Call Trace: [ 579.843098][T22443] [ 579.843105][T22443] dump_stack_lvl+0x100/0x190 [ 579.843132][T22443] should_fail_ex.cold+0x5/0xa [ 579.843152][T22443] should_failslab+0xc2/0x120 [ 579.843169][T22443] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 579.843193][T22443] ? ptlock_alloc+0x1f/0x70 [ 579.843218][T22443] ptlock_alloc+0x1f/0x70 [ 579.843239][T22443] pte_alloc_one+0x82/0x3d0 [ 579.843257][T22443] do_fault+0x88e/0x18e0 [ 579.843275][T22443] ? __pmd_alloc+0x3fb/0x950 [ 579.843295][T22443] __handle_mm_fault+0x1815/0x2b60 [ 579.843320][T22443] ? mt_find+0x45e/0x8e0 [ 579.843338][T22443] ? __pfx___handle_mm_fault+0x10/0x10 [ 579.843358][T22443] ? __pfx_mt_find+0x10/0x10 [ 579.843385][T22443] ? find_vma+0xbf/0x140 [ 579.843401][T22443] ? __pfx_find_vma+0x10/0x10 [ 579.843418][T22443] handle_mm_fault+0x36d/0xa20 [ 579.843443][T22443] do_user_addr_fault+0x74c/0x12f0 [ 579.843464][T22443] exc_page_fault+0x6f/0xd0 [ 579.843481][T22443] asm_exc_page_fault+0x26/0x30 [ 579.843496][T22443] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 579.843517][T22443] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 [ 579.843531][T22443] RSP: 0018:ffffc9000508fb30 EFLAGS: 00050206 [ 579.843544][T22443] RAX: 0000000000000001 RBX: ffff88805a4c0e00 RCX: 0000000000000003 [ 579.843554][T22443] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88805a4c0e00 [ 579.843563][T22443] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100b4981c0 [ 579.843572][T22443] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc9000508fd80 [ 579.843581][T22443] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 [ 579.843599][T22443] _copy_from_iter+0x355/0x1690 [ 579.843625][T22443] ? __pfx__copy_from_iter+0x10/0x10 [ 579.843643][T22443] ? trace_kmalloc+0x101/0x130 [ 579.843660][T22443] ? __kasan_kmalloc+0xaa/0xb0 [ 579.843680][T22443] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 579.843694][T22443] ? proc_sys_call_handler+0x2c7/0x5a0 [ 579.843714][T22443] proc_sys_call_handler+0x3ed/0x5a0 [ 579.843730][T22443] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 579.843752][T22443] vfs_write+0x6ac/0x1070 [ 579.843768][T22443] ? __pfx_proc_sys_write+0x10/0x10 [ 579.843784][T22443] ? __pfx_vfs_write+0x10/0x10 [ 579.843812][T22443] ksys_write+0x12a/0x250 [ 579.843827][T22443] ? __pfx_ksys_write+0x10/0x10 [ 579.843848][T22443] do_syscall_64+0x106/0xf80 [ 579.843863][T22443] ? clear_bhb_loop+0x40/0x90 [ 579.843881][T22443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.843896][T22443] RIP: 0033:0x7f5e5059c819 [ 579.843909][T22443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.843923][T22443] RSP: 002b:00007f5e5148d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.843937][T22443] RAX: ffffffffffffffda RBX: 00007f5e50815fa0 RCX: 00007f5e5059c819 [ 579.843947][T22443] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 579.843955][T22443] RBP: 00007f5e5148d090 R08: 0000000000000000 R09: 0000000000000000 [ 579.843964][T22443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.843973][T22443] R13: 00007f5e50816038 R14: 00007f5e50815fa0 R15: 00007ffe6a2c3498 [ 579.843993][T22443] [ 580.325219][T20577] Bluetooth: hci1: command 0x0406 tx timeout [ 580.331307][T20577] Bluetooth: hci3: command 0x0c1a tx timeout [ 580.337388][T20577] Bluetooth: hci4: command 0x0c1a tx timeout [ 580.343858][T20577] Bluetooth: hci5: command 0x0c1a tx timeout [ 580.350228][T20577] Bluetooth: hci0: command 0x0c1a tx timeout [ 580.557177][T22456] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 581.539570][ T30] audit: type=1800 audit(4294967522.222:15): pid=22498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2486" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 582.349191][T20577] Bluetooth: hci0: command 0x0c1a tx timeout [ 582.356609][T21273] Bluetooth: hci5: command 0x0c1a tx timeout [ 582.362614][T21273] Bluetooth: hci3: command 0x0c1a tx timeout [ 583.961670][T22584] block2mtd: illegal erase size [ 584.417847][T22521] Bluetooth: hci0: command 0x0c1a tx timeout [ 584.424011][T20708] Bluetooth: hci3: command 0x0c1a tx timeout [ 584.430196][T20577] Bluetooth: hci5: command 0x0c1a tx timeout [ 585.702872][T20708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.713889][T20708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.724290][T20708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.733133][T20708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.741641][T20708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.921331][T22596] kexec: Could not allocate control_code_buffer [ 586.082877][T22620] chnl_net:caif_netlink_parms(): no params data found [ 586.122131][T22699] random: crng reseeded on system resumption [ 586.258259][T22620] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.268425][T22620] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.284291][T22620] bridge_slave_0: entered allmulticast mode [ 586.308743][T22620] bridge_slave_0: entered promiscuous mode [ 586.327029][T22620] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.334210][T22620] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.350793][T22620] bridge_slave_1: entered allmulticast mode [ 586.365001][T22620] bridge_slave_1: entered promiscuous mode [ 586.432557][T22620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.457046][T22620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.529381][T22620] team0: Port device team_slave_0 added [ 586.548342][T22620] team0: Port device team_slave_1 added [ 586.603088][T22620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.623000][T22620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.674654][T22620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.706384][T22620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.713676][T22620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.753055][T22620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.856478][T22620] hsr_slave_0: entered promiscuous mode [ 586.865069][T22620] hsr_slave_1: entered promiscuous mode [ 586.871301][T22620] debugfs: 'hsr0' already exists in 'hsr' [ 586.879329][T22620] Cannot create hsr debugfs directory [ 587.309654][T22620] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 587.327170][T22620] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 587.337065][T22620] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 587.347905][T22620] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 587.434159][T22620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.453386][T22620] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.465355][T20763] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.472530][T20763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.499271][T20763] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.506475][T20763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.693482][T22620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.761462][T20708] Bluetooth: hci2: command tx timeout [ 587.991568][T22620] veth0_vlan: entered promiscuous mode [ 588.015089][T22620] veth1_vlan: entered promiscuous mode [ 588.072275][T22620] veth0_macvtap: entered promiscuous mode [ 588.103002][T22620] veth1_macvtap: entered promiscuous mode [ 588.144763][T22620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.160751][T22620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.175474][T20609] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.192756][T20609] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.233609][T20609] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.268238][T20609] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.310467][T22573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.341518][T22573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.375216][T20609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.384096][T20609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.577924][T20708] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 588.674571][T22965] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 589.530416][T23011] futex_wake_op: syz.1.2512 tries to shift op by -2048; fix this program [ 589.539129][T23011] futex_wake_op: syz.1.2512 tries to shift op by -2048; fix this program [ 589.573571][T23011] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 589.770551][T23014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2513'. [ 589.828552][T20708] Bluetooth: hci2: command tx timeout [ 590.770176][T23056] FAULT_INJECTION: forcing a failure. [ 590.770176][T23056] name failslab, interval 1, probability 0, space 0, times 0 [ 590.799693][T23056] CPU: 0 UID: 0 PID: 23056 Comm: syz.6.2516 Tainted: G U L syzkaller #0 PREEMPT(full) [ 590.799722][T23056] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 590.799728][T23056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 590.799738][T23056] Call Trace: [ 590.799744][T23056] [ 590.799751][T23056] dump_stack_lvl+0x100/0x190 [ 590.799780][T23056] should_fail_ex.cold+0x5/0xa [ 590.799800][T23056] should_failslab+0xc2/0x120 [ 590.799818][T23056] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 590.799842][T23056] ? alloc_empty_file+0x55/0x1c0 [ 590.799865][T23056] alloc_empty_file+0x55/0x1c0 [ 590.799884][T23056] alloc_file_pseudo+0x13a/0x230 [ 590.799911][T23056] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 590.799931][T23056] ? alloc_fd+0x476/0x790 [ 590.799950][T23056] sock_alloc_file+0x50/0x210 [ 590.799966][T23056] __sys_socket+0x1c0/0x260 [ 590.799986][T23056] ? __pfx___sys_socket+0x10/0x10 [ 590.800011][T23056] __x64_sys_socket+0x72/0xb0 [ 590.800029][T23056] ? lockdep_hardirqs_on+0x78/0x100 [ 590.800045][T23056] do_syscall_64+0x106/0xf80 [ 590.800059][T23056] ? clear_bhb_loop+0x40/0x90 [ 590.800079][T23056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.800095][T23056] RIP: 0033:0x7ff18939c819 [ 590.800110][T23056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.800125][T23056] RSP: 002b:00007ff1875ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 590.800140][T23056] RAX: ffffffffffffffda RBX: 00007ff189615fa0 RCX: 00007ff18939c819 [ 590.800150][T23056] RDX: 00000000000000ab RSI: 0000000000080003 RDI: 0000000000000011 [ 590.800159][T23056] RBP: 00007ff189432c91 R08: 0000000000000000 R09: 0000000000000000 [ 590.800169][T23056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.800178][T23056] R13: 00007ff189616038 R14: 00007ff189615fa0 R15: 00007fffcbdd2cc8 [ 590.800198][T23056] [ 591.624104][T23066] netlink: 'syz.6.2519': attribute type 1 has an invalid length. [ 591.897216][T20708] Bluetooth: hci2: command tx timeout [ 592.265465][T23080] random: crng reseeded on system resumption [ 593.968280][T20708] Bluetooth: hci2: command tx timeout [ 594.296951][T23221] futex_wake_op: syz.1.2529 tries to shift op by -2048; fix this program [ 594.600557][ T9] Process accounting resumed [ 595.996402][T22521] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 596.011515][T22521] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 596.020450][T22521] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 596.031299][T22521] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 596.042932][T22521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 596.646525][T23259] chnl_net:caif_netlink_parms(): no params data found [ 597.000964][T23259] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.010764][T23259] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.018065][T23259] bridge_slave_0: entered allmulticast mode [ 597.084798][T23259] bridge_slave_0: entered promiscuous mode [ 597.131021][T23259] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.173616][T23259] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.199734][T23259] bridge_slave_1: entered allmulticast mode [ 597.267239][T23259] bridge_slave_1: entered promiscuous mode [ 597.392771][T23259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.443847][T23259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.554772][T23259] team0: Port device team_slave_0 added [ 597.611182][T23259] team0: Port device team_slave_1 added [ 597.683969][T23259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.733211][T23259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.828402][T23259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.875748][T23259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.895676][T23259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.947477][T23469] input: jJǸ-9%vJ86 as /devices/virtual/input/input28 [ 597.996180][T23259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.105116][T22521] Bluetooth: hci6: command tx timeout [ 598.124157][T23259] hsr_slave_0: entered promiscuous mode [ 598.175779][T23259] hsr_slave_1: entered promiscuous mode [ 598.196523][T23259] debugfs: 'hsr0' already exists in 'hsr' [ 598.217948][T23259] Cannot create hsr debugfs directory [ 599.263662][T23259] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 599.348037][T23259] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 599.411459][T23259] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 599.481886][T20708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 599.495672][T20708] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 599.507201][T20708] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 599.526117][T20708] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 599.534654][T20708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 599.674570][T23259] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 600.174394][T22521] Bluetooth: hci6: command tx timeout [ 600.628325][T23259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.775215][T23259] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.798005][T23620] chnl_net:caif_netlink_parms(): no params data found [ 600.881639][T20763] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.888787][T20763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.949780][T20763] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.956971][T20763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.526836][T23620] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.566195][T23620] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.603019][T23620] bridge_slave_0: entered allmulticast mode [ 601.609346][T22521] Bluetooth: hci7: command tx timeout [ 601.634404][T23620] bridge_slave_0: entered promiscuous mode [ 601.735986][T23620] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.768563][T23620] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.817217][T23620] bridge_slave_1: entered allmulticast mode [ 601.849001][T23620] bridge_slave_1: entered promiscuous mode [ 601.963333][T23620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.042752][T23620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.188586][T23259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.222529][T23620] team0: Port device team_slave_0 added [ 602.243487][T22521] Bluetooth: hci6: command tx timeout [ 602.276750][T23620] team0: Port device team_slave_1 added [ 602.390464][T23620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.428969][T23620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.543838][T23620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.613580][T23620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.620578][T23620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.732119][T23620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.941472][T23620] hsr_slave_0: entered promiscuous mode [ 602.947812][T23620] hsr_slave_1: entered promiscuous mode [ 603.016031][T23620] debugfs: 'hsr0' already exists in 'hsr' [ 603.037671][T23620] Cannot create hsr debugfs directory [ 603.547973][T23259] veth0_vlan: entered promiscuous mode [ 603.591419][T23259] veth1_vlan: entered promiscuous mode [ 603.676107][T22521] Bluetooth: hci7: command tx timeout [ 603.742655][T24031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2555'. [ 603.779034][T23259] veth0_macvtap: entered promiscuous mode [ 603.826014][T23259] veth1_macvtap: entered promiscuous mode [ 603.848747][T23620] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 603.909731][T23620] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 603.965818][T23620] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 604.034780][T23620] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 604.076998][T23259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.122523][T23259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.182880][T22573] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.270309][T22573] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.312810][T22521] Bluetooth: hci6: command tx timeout [ 604.331095][T22573] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.382114][T22573] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.577092][T22573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.621597][T22573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.659557][T23620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.761681][T20609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.797860][T23620] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.808098][T20609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.883146][T22573] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.890354][T22573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.919869][T24055] FAULT_INJECTION: forcing a failure. [ 604.919869][T24055] name failslab, interval 1, probability 0, space 0, times 0 [ 604.950576][T22573] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.957822][T22573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.075608][T23620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 605.116459][T24055] CPU: 0 UID: 0 PID: 24055 Comm: syz.1.2558 Tainted: G U L syzkaller #0 PREEMPT(full) [ 605.116488][T24055] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 605.116494][T24055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 605.116504][T24055] Call Trace: [ 605.116510][T24055] [ 605.116517][T24055] dump_stack_lvl+0x100/0x190 [ 605.116545][T24055] should_fail_ex.cold+0x5/0xa [ 605.116565][T24055] should_failslab+0xc2/0x120 [ 605.116582][T24055] __kmalloc_cache_noprof+0x7a/0x6f0 [ 605.116604][T24055] ? wakeup_source_device_create+0x46/0x2e0 [ 605.116629][T24055] wakeup_source_device_create+0x46/0x2e0 [ 605.116650][T24055] wakeup_source_sysfs_add+0x1c/0x90 [ 605.116669][T24055] wakeup_source_register+0x154/0x3e0 [ 605.116688][T24055] ep_create_wakeup_source+0x1df/0x2e0 [ 605.116705][T24055] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 605.116724][T24055] ? do_epoll_ctl+0x1012/0x36a0 [ 605.116740][T24055] ? do_epoll_ctl+0x1012/0x36a0 [ 605.116760][T24055] do_epoll_ctl+0x1eee/0x36a0 [ 605.116785][T24055] ? __pfx_do_epoll_ctl+0x10/0x10 [ 605.116801][T24055] ? find_held_lock+0x2b/0x80 [ 605.116815][T24055] ? __might_fault+0xc5/0x140 [ 605.116836][T24055] ? __might_fault+0xc5/0x140 [ 605.116865][T24055] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 605.116881][T24055] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 605.116899][T24055] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 605.116922][T24055] do_syscall_64+0x106/0xf80 [ 605.116937][T24055] ? clear_bhb_loop+0x40/0x90 [ 605.116955][T24055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.116971][T24055] RIP: 0033:0x7fe454b9c819 [ 605.116986][T24055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.117001][T24055] RSP: 002b:00007fe452df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 605.117016][T24055] RAX: ffffffffffffffda RBX: 00007fe454e15fa0 RCX: 00007fe454b9c819 [ 605.117027][T24055] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006 [ 605.117035][T24055] RBP: 00007fe454c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 605.117044][T24055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.117053][T24055] R13: 00007fe454e16038 R14: 00007fe454e15fa0 R15: 00007ffd1df041e8 [ 605.117074][T24055] [ 605.601222][T23620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.793143][T22521] Bluetooth: hci7: command tx timeout [ 606.315774][T23620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.105042][T23620] veth0_vlan: entered promiscuous mode [ 607.187804][T23620] veth1_vlan: entered promiscuous mode [ 607.292931][T23620] veth0_macvtap: entered promiscuous mode [ 607.320699][T23620] veth1_macvtap: entered promiscuous mode [ 607.384141][T23620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.420845][T23620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.464444][T22572] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.493047][T22572] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.524861][T22572] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.561713][T22572] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.814686][T22521] Bluetooth: hci7: command tx timeout [ 607.841454][T24128] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 608.046480][T22573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.135095][T22573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.258221][T22572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.309596][T22572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.760461][T24166] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2567'. [ 608.823899][T24182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2568'. [ 608.905061][T24182] unsupported nlmsg_type 40 [ 609.512192][T24198] Process accounting resumed [ 610.591368][ T30] audit: type=1800 audit(4294967551.433:16): pid=24239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2574" name="discovery_nqn" dev="configfs" ino=86670 res=0 errno=0 [ 611.195505][T24239] syz.8.2574 (24239) used greatest stack depth: 17560 bytes left [ 613.455507][T24328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2584'. [ 614.138888][ T30] audit: type=1800 audit(4294967554.992:17): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2585" name="features" dev="configfs" ino=86914 res=0 errno=0 [ 614.401356][T24347] FAULT_INJECTION: forcing a failure. [ 614.401356][T24347] name failslab, interval 1, probability 0, space 0, times 0 [ 614.482852][T24347] CPU: 0 UID: 0 PID: 24347 Comm: syz.1.2588 Tainted: G U L syzkaller #0 PREEMPT(full) [ 614.482879][T24347] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 614.482885][T24347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 614.482894][T24347] Call Trace: [ 614.482900][T24347] [ 614.482906][T24347] dump_stack_lvl+0x100/0x190 [ 614.482934][T24347] should_fail_ex.cold+0x5/0xa [ 614.482952][T24347] should_failslab+0xc2/0x120 [ 614.482970][T24347] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 614.482994][T24347] ? sk_prot_alloc+0x60/0x2a0 [ 614.483015][T24347] sk_prot_alloc+0x60/0x2a0 [ 614.483034][T24347] sk_alloc+0x36/0xe80 [ 614.483056][T24347] rxrpc_create+0x116/0x8d0 [ 614.483082][T24347] __sock_create+0x339/0x860 [ 614.483104][T24347] __sys_socket+0x14d/0x260 [ 614.483124][T24347] ? __pfx___sys_socket+0x10/0x10 [ 614.483148][T24347] __x64_sys_socket+0x72/0xb0 [ 614.483167][T24347] ? lockdep_hardirqs_on+0x78/0x100 [ 614.483183][T24347] do_syscall_64+0x106/0xf80 [ 614.483197][T24347] ? clear_bhb_loop+0x40/0x90 [ 614.483216][T24347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.483231][T24347] RIP: 0033:0x7fe454b9c819 [ 614.483246][T24347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.483260][T24347] RSP: 002b:00007fe452df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 614.483276][T24347] RAX: ffffffffffffffda RBX: 00007fe454e15fa0 RCX: 00007fe454b9c819 [ 614.483287][T24347] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 614.483296][T24347] RBP: 00007fe454c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 614.483305][T24347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.483314][T24347] R13: 00007fe454e16038 R14: 00007fe454e15fa0 R15: 00007ffd1df041e8 [ 614.483333][T24347] [ 615.540363][T24397] loop1: detected capacity change from 0 to 8 [ 617.235464][T24466] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 617.295629][T24466] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 617.665955][T24508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2606'. [ 617.941830][T24534] random: crng reseeded on system resumption [ 618.133270][T24534] hub 1-0:1.0: USB hub found [ 618.157850][T24534] hub 1-0:1.0: 1 port detected [ 618.546536][ T30] audit: type=1804 audit(4294967559.414:18): pid=24572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2611" name="/newroot/sys/kernel/tracing/trace_marker_raw" dev="tracefs" ino=3227 res=1 errno=0 [ 620.885802][ T30] audit: type=1800 audit(4294967561.777:19): pid=24635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2618" name="discovery_nqn" dev="configfs" ino=87753 res=0 errno=0 [ 622.071663][T24659] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 622.089922][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.099118][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.239551][T24660] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 622.542856][T24660] CIFS mount error: No usable UNC path provided in device string! [ 622.542856][T24660] [ 622.625504][T24660] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 623.116511][ T30] audit: type=1800 audit(4294967564.018:20): pid=24721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2627" name="dbroot" dev="configfs" ino=87897 res=0 errno=0 [ 623.704952][T24755] FAULT_INJECTION: forcing a failure. [ 623.704952][T24755] name failslab, interval 1, probability 0, space 0, times 0 [ 623.800760][T24755] CPU: 0 UID: 0 PID: 24755 Comm: syz.7.2629 Tainted: G U L syzkaller #0 PREEMPT(full) [ 623.800790][T24755] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 623.800796][T24755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 623.800806][T24755] Call Trace: [ 623.800812][T24755] [ 623.800819][T24755] dump_stack_lvl+0x100/0x190 [ 623.800848][T24755] should_fail_ex.cold+0x5/0xa [ 623.800868][T24755] should_failslab+0xc2/0x120 [ 623.800886][T24755] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 623.800910][T24755] ? alloc_empty_file+0x55/0x1c0 [ 623.800941][T24755] alloc_empty_file+0x55/0x1c0 [ 623.800962][T24755] alloc_file_pseudo+0x13a/0x230 [ 623.800983][T24755] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 623.801004][T24755] ? alloc_fd+0x476/0x790 [ 623.801026][T24755] sock_alloc_file+0x50/0x210 [ 623.801043][T24755] __sys_socket+0x1c0/0x260 [ 623.801063][T24755] ? __pfx___sys_socket+0x10/0x10 [ 623.801089][T24755] __x64_sys_socket+0x72/0xb0 [ 623.801108][T24755] ? lockdep_hardirqs_on+0x78/0x100 [ 623.801125][T24755] do_syscall_64+0x106/0xf80 [ 623.801140][T24755] ? clear_bhb_loop+0x40/0x90 [ 623.801159][T24755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.801186][T24755] RIP: 0033:0x7f59afd9c819 [ 623.801200][T24755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.801216][T24755] RSP: 002b:00007f59adfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 623.801232][T24755] RAX: ffffffffffffffda RBX: 00007f59b0015fa0 RCX: 00007f59afd9c819 [ 623.801243][T24755] RDX: 00000000000000ab RSI: 0000000000080003 RDI: 0000000000000011 [ 623.801253][T24755] RBP: 00007f59afe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 623.801262][T24755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.801272][T24755] R13: 00007f59b0016038 R14: 00007f59b0015fa0 R15: 00007ffc2c40c998 [ 623.801292][T24755] [ 624.130701][T24715] netlink: 186 bytes leftover after parsing attributes in process `syz.8.2626'. [ 624.691836][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2632'. [ 626.431165][T24809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 626.465700][T24809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 626.514660][T24809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 626.610618][T24809] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 626.652765][T24809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 626.697343][T24809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 626.716155][T24809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 626.817386][T24809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 626.850658][T24809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 626.937605][T24809] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 626.992865][T24809] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 627.031755][T24809] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 627.117391][T24809] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 627.161792][T24809] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 627.175562][T24809] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 627.949789][T22521] Bluetooth: hci1: command 0x0406 tx timeout [ 627.960592][T24892] netlink: 302 bytes leftover after parsing attributes in process `syz.6.2642'. [ 628.506925][T22521] Bluetooth: hci3: command 0x0c1a tx timeout [ 628.513024][T22521] Bluetooth: hci4: command 0x0c1a tx timeout [ 628.591463][T22521] Bluetooth: hci5: command 0x0c1a tx timeout [ 628.668608][T22521] Bluetooth: hci0: command 0x0c1a tx timeout [ 628.746042][T22521] Bluetooth: hci2: command 0x0c1a tx timeout [ 628.985264][T22521] Bluetooth: hci6: command 0x0c1a tx timeout [ 629.143629][T22521] Bluetooth: hci7: command 0x0c1a tx timeout [ 629.378378][T24953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2648'. [ 630.010727][T24982] ubi3: attaching mtd1 [ 630.015363][T24982] ubi3: attaching mtd1 [ 630.053368][T24982] ubi3: attaching mtd1 [ 630.057599][T24982] ubi3: attaching mtd1 [ 630.128516][T24982] ubi3: attaching mtd1 [ 630.140510][T24982] ubi3: attaching mtd1 [ 630.144745][T24982] ubi3: attaching mtd1 [ 630.225878][T24982] ubi3: attaching mtd1 [ 630.253207][T24982] ubi3: attaching mtd1 [ 630.279231][T24982] ubi3: attaching mtd1 [ 630.310937][T24982] ubi3: attaching mtd1 [ 630.340076][T24982] ubi3: attaching mtd1 [ 630.364605][T24982] ubi3: attaching mtd1 [ 630.382166][T24982] ubi3: attaching mtd1 [ 630.424143][T24982] ubi3: attaching mtd1 [ 630.442333][T24982] ubi3: attaching mtd1 [ 630.463264][T24982] ubi3: attaching mtd1 [ 630.495827][T24982] ubi3: attaching mtd1 [ 630.532489][T24982] ubi3: attaching mtd1 [ 630.545045][T24982] ubi3: attaching mtd1 [ 630.556945][T24982] ubi3: attaching mtd1 [ 630.567639][T24982] ubi3: attaching mtd1 [ 630.580130][T24982] ubi3: attaching mtd1 [ 630.594555][T24982] ubi3: attaching mtd1 [ 630.617460][T24982] ubi3: attaching mtd1 [ 630.633165][T24982] ubi3: attaching mtd1 [ 630.643134][T24982] ubi3: attaching mtd1 [ 630.683254][T24982] ubi3: attaching mtd1 [ 630.711263][T24982] ubi3: attaching mtd1 [ 630.729716][T24982] ubi3: attaching mtd1 [ 630.748711][T24982] ubi3: attaching mtd1 [ 630.814880][T22521] Bluetooth: hci2: command 0x0c1a tx timeout [ 631.053433][T22521] Bluetooth: hci6: command 0x0c1a tx timeout [ 631.214801][T22521] Bluetooth: hci7: command 0x0c1a tx timeout [ 631.579531][T25120] usb usb3: usbfs: process 25120 (syz.6.2658) did not claim interface 0 before use [ 631.918086][T20708] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 631.935038][T20708] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 631.943549][T20708] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 631.972188][T20708] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 631.980822][T20708] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 632.661376][T25131] chnl_net:caif_netlink_parms(): no params data found [ 632.853554][T25187] Invalid ELF header magic: != ELF [ 632.892554][T20708] Bluetooth: hci2: command 0x0c1a tx timeout [ 632.993216][T25131] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.056964][T25131] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.083856][T25131] bridge_slave_0: entered allmulticast mode [ 633.105254][T25131] bridge_slave_0: entered promiscuous mode [ 633.132361][T20708] Bluetooth: hci6: command 0x0c1a tx timeout [ 633.140965][T25131] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.167931][T25131] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.192367][T25131] bridge_slave_1: entered allmulticast mode [ 633.213608][T25131] bridge_slave_1: entered promiscuous mode [ 633.284491][T20708] Bluetooth: hci7: command 0x0c1a tx timeout [ 633.346980][T25131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.379113][T25131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.518157][T25131] team0: Port device team_slave_0 added [ 633.556656][T25131] team0: Port device team_slave_1 added [ 633.673894][T25131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.700083][T25131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.820112][T25131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.869640][T25131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.876607][T25131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.974371][T25131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.998454][T20708] Bluetooth: hci8: command tx timeout [ 634.129547][T25131] hsr_slave_0: entered promiscuous mode [ 634.150461][T25131] hsr_slave_1: entered promiscuous mode [ 634.156660][T25131] debugfs: 'hsr0' already exists in 'hsr' [ 634.204549][T25131] Cannot create hsr debugfs directory [ 634.854369][T25454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2670'. [ 634.925155][T25131] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 634.954957][T20708] Bluetooth: hci2: command 0x0c1a tx timeout [ 634.970887][T25131] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 635.002686][T25131] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 635.035972][T25131] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 635.211541][T25131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.232871][T25131] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.258368][T22572] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.265601][T22572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.412621][T22572] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.419804][T22572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.070605][T20708] Bluetooth: hci8: command tx timeout [ 636.090051][T25131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.290097][ T30] audit: type=1800 audit(4294967577.267:21): pid=25516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2677" name="discovery_nqn" dev="configfs" ino=90116 res=0 errno=0 [ 636.881401][T25131] veth0_vlan: entered promiscuous mode [ 636.940451][T25131] veth1_vlan: entered promiscuous mode [ 637.021262][T25131] veth0_macvtap: entered promiscuous mode [ 637.099289][T25131] veth1_macvtap: entered promiscuous mode [ 637.253702][T25131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.293809][T25131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.376214][T20684] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.412742][T20684] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.518668][T20684] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.542920][T20684] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.921490][T25567] Invalid ELF header magic: != ELF [ 637.962312][T20684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.009807][T20684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.131581][T20642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.140860][T20708] Bluetooth: hci8: command tx timeout [ 638.161502][T20642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.557529][T25592] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2682'. [ 639.358191][T25645] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2686'. [ 639.409494][T25646] zram0: detected capacity change from 0 to 16 [ 639.795544][T25648] Process accounting paused [ 640.030196][ T30] audit: type=1326 audit(4294967581.026:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25653 comm="syz.9.2688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6051b9c819 code=0x0 [ 640.206363][T20708] Bluetooth: hci8: command tx timeout [ 640.820827][T25713] random: crng reseeded on system resumption [ 640.991821][T25693] sp0: Synchronizing with TNC [ 642.456284][ T30] audit: type=1800 audit(4294967583.459:23): pid=25889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2698" name="discovery_nqn" dev="configfs" ino=91175 res=0 errno=0 [ 643.361596][T22521] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 643.375919][T22521] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 643.384880][T22521] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 643.394781][T22521] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 643.405541][T22521] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 644.244461][ T30] audit: type=1800 audit(4294967585.248:24): pid=26019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2705" name="discovery_nqn" dev="configfs" ino=91441 res=0 errno=0 [ 644.317082][T25921] chnl_net:caif_netlink_parms(): no params data found [ 644.635520][T25921] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.680168][T25921] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.716287][T25921] bridge_slave_0: entered allmulticast mode [ 644.740887][T25921] bridge_slave_0: entered promiscuous mode [ 644.779476][T25921] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.853249][T25921] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.860531][T25921] bridge_slave_1: entered allmulticast mode [ 644.918835][T25921] bridge_slave_1: entered promiscuous mode [ 645.046519][T26101] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2708'. [ 645.081868][T25921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.146440][T25921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.421169][T25921] team0: Port device team_slave_0 added [ 645.444085][T25921] team0: Port device team_slave_1 added [ 645.459840][T20708] Bluetooth: hci9: command tx timeout [ 645.619489][T25921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.626492][T25921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.801766][T25921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.862856][T25921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.909830][T25921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.016207][T26176] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 646.032474][T25921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.288443][T25921] hsr_slave_0: entered promiscuous mode [ 646.337287][T25921] hsr_slave_1: entered promiscuous mode [ 646.369625][T25921] debugfs: 'hsr0' already exists in 'hsr' [ 646.395250][T25921] Cannot create hsr debugfs directory [ 646.590454][T26193] random: crng reseeded on system resumption [ 646.695361][T26207] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2715'. [ 646.949033][T25921] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.444652][T25921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.530576][T20708] Bluetooth: hci9: command tx timeout [ 647.641957][T25921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.773933][T26289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.797695][T25921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.820477][T26289] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.868212][T26289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.913274][T26289] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 647.921750][T25921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.961835][T26289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 648.010413][T26289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 648.068952][T26289] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 648.135794][T26289] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 648.197718][T26289] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 648.249820][T26289] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 648.351982][T25921] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 648.370993][T26289] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 648.406367][T25921] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 648.503308][T25921] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 648.556689][T26289] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 648.585734][T25921] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 648.625907][T26289] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 648.752962][T26289] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 648.900966][T25921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.975936][T25921] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.043764][T22573] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.050949][T22573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.130838][T22573] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.138097][T22573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.345330][T25921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.479576][ T30] audit: type=1800 audit(4294967590.525:25): pid=26344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2720" name="discovery_nqn" dev="configfs" ino=92273 res=0 errno=0 [ 649.795495][T26357] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2722'. [ 649.836229][T22521] Bluetooth: hci4: command 0x0c1a tx timeout [ 649.836270][T22521] Bluetooth: hci1: command 0x0406 tx timeout [ 649.918006][T20708] Bluetooth: hci5: command 0x0c1a tx timeout [ 649.918047][T20708] Bluetooth: hci3: command 0x0c1a tx timeout [ 649.999866][T22521] Bluetooth: hci0: command 0x0c1a tx timeout [ 650.074156][T25921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.077035][T22521] Bluetooth: hci6: command 0x0c1a tx timeout [ 650.077074][T22521] Bluetooth: hci2: command 0x0c1a tx timeout [ 650.157370][T20708] Bluetooth: hci7: command 0x0c1a tx timeout [ 650.234107][T20708] Bluetooth: hci8: command 0x0c1a tx timeout [ 650.348355][T25921] veth0_vlan: entered promiscuous mode [ 650.352792][T25921] veth1_vlan: entered promiscuous mode [ 650.421917][ T30] audit: type=1800 audit(4294967591.460:26): pid=26388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2723" name="discovery_nqn" dev="configfs" ino=92386 res=0 errno=0 [ 650.556974][T25921] veth0_macvtap: entered promiscuous mode [ 650.559801][T25921] veth1_macvtap: entered promiscuous mode [ 650.610721][T25921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.637329][T20708] Bluetooth: hci9: command 0x0419 tx timeout [ 650.643502][T25921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.647400][T24519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.647446][T24519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.647481][T24519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.647518][T24519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.872420][T20572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.872441][T20572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.946872][T20642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.946892][T20642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.445812][ T30] audit: type=1800 audit(4294967592.496:27): pid=26414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2726" name="discovery_nqn" dev="configfs" ino=92886 res=0 errno=0 [ 651.476362][T26416] random: crng reseeded on system resumption [ 651.555723][T26416] hub 1-0:1.0: USB hub found [ 651.564331][T26416] hub 1-0:1.0: 1 port detected [ 651.892217][T26431] block2mtd: illegal erase size [ 652.303392][T20708] Bluetooth: hci8: command 0x0c1a tx timeout [ 652.701177][T20708] Bluetooth: hci9: command 0x0419 tx timeout [ 653.067491][T26472] [U] [ 653.070224][T26472] [U] [ 653.072993][T26472] [U] [ 653.075687][T26472] [U] [ 653.272909][T26472] [U] [ 653.275614][T26472] [U] [ 653.278363][T26472] [U] [ 653.281055][T26472] [U] [ 653.474354][T26472] [U] [ 653.477084][T26472] [U] [ 653.479829][T26472] [U] [ 653.482500][T26472] [U] [ 653.620438][T26472] [U] [ 653.623209][T26472] [U] [ 653.625927][T26472] [U] [ 653.628629][T26472] [U] [ 653.669904][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2735'. [ 653.791006][T26472] [U] [ 653.941029][T26551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2736'. [ 654.372879][T20708] Bluetooth: hci8: command 0x0c1a tx timeout [ 654.775023][T20708] Bluetooth: hci9: command 0x0419 tx timeout [ 654.883562][T26616] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2738'. [ 654.992094][T26616] veth0_macvtap: left promiscuous mode [ 655.019084][T26616] macvtap0: entered promiscuous mode [ 655.061761][T26616] macvtap0: entered allmulticast mode [ 655.856947][T26659] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 656.839908][T20708] Bluetooth: hci9: command 0x0419 tx timeout [ 657.813418][T26718] FAULT_INJECTION: forcing a failure. [ 657.813418][T26718] name fail_futex, interval 1, probability 0, space 0, times 0 [ 657.968510][T26718] CPU: 0 UID: 0 PID: 26718 Comm: syz.2.2746 Tainted: G U L syzkaller #0 PREEMPT(full) [ 657.968540][T26718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 657.968546][T26718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 657.968557][T26718] Call Trace: [ 657.968563][T26718] [ 657.968570][T26718] dump_stack_lvl+0x100/0x190 [ 657.968599][T26718] should_fail_ex.cold+0x5/0xa [ 657.968619][T26718] get_futex_key+0x1d2/0x1620 [ 657.968641][T26718] ? __pfx_get_futex_key+0x10/0x10 [ 657.968668][T26718] futex_wake+0xea/0x530 [ 657.968693][T26718] ? __pfx_futex_wake+0x10/0x10 [ 657.968718][T26718] ? putname+0xb1/0x110 [ 657.968735][T26718] ? kmem_cache_free+0x124/0x6a0 [ 657.968760][T26718] do_futex+0x32b/0x350 [ 657.968780][T26718] ? __pfx_do_futex+0x10/0x10 [ 657.968798][T26718] ? __pfx_do_sys_openat2+0x10/0x10 [ 657.968824][T26718] __x64_sys_futex+0x34f/0x4d0 [ 657.968845][T26718] ? __x64_sys_openat+0x12d/0x210 [ 657.968865][T26718] ? __pfx___x64_sys_futex+0x10/0x10 [ 657.968895][T26718] do_syscall_64+0x106/0xf80 [ 657.968911][T26718] ? clear_bhb_loop+0x40/0x90 [ 657.968931][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.968949][T26718] RIP: 0033:0x7fd0afd9c819 [ 657.968964][T26718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.968979][T26718] RSP: 002b:00007fd0b0c940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 657.968994][T26718] RAX: ffffffffffffffda RBX: 00007fd0b0015fa8 RCX: 00007fd0afd9c819 [ 657.969004][T26718] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0b0015fac [ 657.969014][T26718] RBP: 00007fd0b0015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 657.969023][T26718] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 657.969031][T26718] R13: 00007fd0b0016038 R14: 00007ffd60c95550 R15: 00007ffd60c95638 [ 657.969051][T26718] [ 659.164578][T26755] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 663.189090][T26922] FAULT_INJECTION: forcing a failure. [ 663.189090][T26922] name fail_futex, interval 1, probability 0, space 0, times 0 [ 663.366866][T26923] FAULT_INJECTION: forcing a failure. [ 663.366866][T26923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.528656][T26922] CPU: 0 UID: 0 PID: 26922 Comm: syz.6.2761 Tainted: G U L syzkaller #0 PREEMPT(full) [ 663.528685][T26922] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 663.528691][T26922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 663.528700][T26922] Call Trace: [ 663.528706][T26922] [ 663.528712][T26922] dump_stack_lvl+0x100/0x190 [ 663.528740][T26922] should_fail_ex.cold+0x5/0xa [ 663.528760][T26922] get_futex_key+0x1d2/0x1620 [ 663.528782][T26922] ? __pfx_get_futex_key+0x10/0x10 [ 663.528807][T26922] futex_wake+0xea/0x530 [ 663.528829][T26922] ? __pfx___mm_populate+0x10/0x10 [ 663.528851][T26922] ? __pfx_futex_wake+0x10/0x10 [ 663.528882][T26922] do_futex+0x32b/0x350 [ 663.528902][T26922] ? __pfx_do_futex+0x10/0x10 [ 663.528920][T26922] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.528946][T26922] __x64_sys_futex+0x34f/0x4d0 [ 663.528967][T26922] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 663.528984][T26922] ? __pfx___x64_sys_futex+0x10/0x10 [ 663.529011][T26922] do_syscall_64+0x106/0xf80 [ 663.529027][T26922] ? clear_bhb_loop+0x40/0x90 [ 663.529045][T26922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.529060][T26922] RIP: 0033:0x7ff18939c819 [ 663.529074][T26922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.529096][T26922] RSP: 002b:00007ff1875ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 663.529111][T26922] RAX: ffffffffffffffda RBX: 00007ff189616188 RCX: 00007ff18939c819 [ 663.529122][T26922] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff18961618c [ 663.529131][T26922] RBP: 00007ff189616180 R08: 0000000000000000 R09: 0000000000000000 [ 663.529140][T26922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.529149][T26922] R13: 00007ff189616218 R14: 00007fffcbdd2be0 R15: 00007fffcbdd2cc8 [ 663.529168][T26922] [ 663.947851][T26923] CPU: 0 UID: 0 PID: 26923 Comm: syz.8.2760 Tainted: G U L syzkaller #0 PREEMPT(full) [ 663.947882][T26923] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 663.947889][T26923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 663.947899][T26923] Call Trace: [ 663.947905][T26923] [ 663.947912][T26923] dump_stack_lvl+0x100/0x190 [ 663.947942][T26923] should_fail_ex.cold+0x5/0xa [ 663.947962][T26923] _copy_from_iter+0x1f4/0x1690 [ 663.947986][T26923] ? policy_nodemask+0xed/0x4f0 [ 663.948004][T26923] ? __pfx__copy_from_iter+0x10/0x10 [ 663.948025][T26923] ? alloc_pages_mpol+0x25a/0x550 [ 663.948048][T26923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 663.948069][T26923] copy_page_from_iter+0xde/0x180 [ 663.948092][T26923] anon_pipe_write+0xae4/0x1d40 [ 663.948116][T26923] ? __pfx_anon_pipe_write+0x10/0x10 [ 663.948135][T26923] ? __pfx_autoremove_wake_function+0x10/0x10 [ 663.948155][T26923] ? bpf_lsm_file_permission+0x9/0x10 [ 663.948170][T26923] ? security_file_permission+0x76/0x210 [ 663.948191][T26923] ? rw_verify_area+0xce/0x6d0 [ 663.948215][T26923] vfs_write+0x6ac/0x1070 [ 663.948231][T26923] ? __pfx_anon_pipe_write+0x10/0x10 [ 663.948249][T26923] ? __pfx_vfs_write+0x10/0x10 [ 663.948262][T26923] ? find_held_lock+0x2b/0x80 [ 663.948289][T26923] ksys_write+0x1f8/0x250 [ 663.948304][T26923] ? __pfx_ksys_write+0x10/0x10 [ 663.948325][T26923] do_syscall_64+0x106/0xf80 [ 663.948341][T26923] ? clear_bhb_loop+0x40/0x90 [ 663.948360][T26923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.948376][T26923] RIP: 0033:0x7fc5a039c819 [ 663.948391][T26923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.948406][T26923] RSP: 002b:00007fc59e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 663.948422][T26923] RAX: ffffffffffffffda RBX: 00007fc5a0616090 RCX: 00007fc5a039c819 [ 663.948432][T26923] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 663.948441][T26923] RBP: 00007fc5a0432c91 R08: 0000000000000000 R09: 0000000000000000 [ 663.948450][T26923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.948458][T26923] R13: 00007fc5a0616128 R14: 00007fc5a0616090 R15: 00007ffccca646f8 [ 663.948479][T26923] [ 667.111921][T27069] Unable to find swap-space signature [ 667.374937][T27102] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2770'. [ 667.436709][T27102] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2770'. [ 667.479871][T27102] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2770'. [ 668.093319][T27127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2771'. [ 669.346980][T27179] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 669.784312][ T30] audit: type=1800 audit(4294967610.931:28): pid=27190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2778" name="discovery_nqn" dev="configfs" ino=94538 res=0 errno=0 [ 669.892035][T27191] Process accounting resumed [ 671.878953][T20708] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18 [ 671.891402][T20708] Bluetooth: hci9: Invalid handle: 0x3a4a > 0x0eff [ 671.938788][T27283] Invalid ELF header magic: != ELF [ 674.327064][T27397] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2799'. [ 676.082554][T27467] futex_wake_op: syz.9.2804 tries to shift op by -2048; fix this program [ 676.192916][T27467] futex_wake_op: syz.9.2804 tries to shift op by -2048; fix this program [ 677.018686][T27510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2808'. [ 677.084178][T27513] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 677.163749][T27510] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.226373][T27510] bridge_slave_1 (unregistering): left allmulticast mode [ 677.265570][T27510] bridge_slave_1 (unregistering): left promiscuous mode [ 677.301752][T27510] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.006893][T27513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 678.071012][T27513] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 678.077052][T27513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 678.148748][T27513] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 678.198735][T27513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 678.204766][T27513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 678.234327][T27513] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 678.261924][T27513] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 678.278634][T27513] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 678.301182][T27513] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 679.441774][T22521] Bluetooth: hci1: command 0x0406 tx timeout [ 679.875080][T27629] FAULT_INJECTION: forcing a failure. [ 679.875080][T27629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 679.936071][T27629] CPU: 0 UID: 0 PID: 27629 Comm: syz.2.2824 Tainted: G U L syzkaller #0 PREEMPT(full) [ 679.936101][T27629] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 679.936107][T27629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 679.936116][T27629] Call Trace: [ 679.936122][T27629] [ 679.936128][T27629] dump_stack_lvl+0x100/0x190 [ 679.936157][T27629] should_fail_ex.cold+0x5/0xa [ 679.936173][T27629] ? prepare_alloc_pages+0x16d/0x5f0 [ 679.936194][T27629] should_fail_alloc_page+0xeb/0x140 [ 679.936213][T27629] prepare_alloc_pages+0x1f0/0x5f0 [ 679.936234][T27629] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 679.936264][T27629] ? __lock_acquire+0x4a5/0x2630 [ 679.936287][T27629] ? __lock_acquire+0x4a5/0x2630 [ 679.936306][T27629] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 679.936334][T27629] ? __lock_acquire+0x4a5/0x2630 [ 679.936362][T27629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 679.936379][T27629] ? policy_nodemask+0xed/0x4f0 [ 679.936398][T27629] alloc_pages_mpol+0x1fb/0x550 [ 679.936415][T27629] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 679.936432][T27629] ? __kernel_text_address+0xd/0x30 [ 679.936454][T27629] ? unwind_get_return_address+0x59/0xa0 [ 679.936475][T27629] folio_alloc_mpol_noprof+0x36/0x340 [ 679.936496][T27629] vma_alloc_folio_noprof+0xed/0x1d0 [ 679.936516][T27629] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 679.936535][T27629] ? rcu_read_unlock+0x2d/0xb0 [ 679.936557][T27629] ? rcu_read_unlock+0x2d/0xb0 [ 679.936579][T27629] ? __lock_acquire+0x4a5/0x2630 [ 679.936601][T27629] do_wp_page+0xf28/0x4e90 [ 679.936625][T27629] ? __pfx_do_wp_page+0x10/0x10 [ 679.936645][T27629] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 679.936673][T27629] __handle_mm_fault+0x1ace/0x2b60 [ 679.936698][T27629] ? mt_find+0x45e/0x8e0 [ 679.936716][T27629] ? __pfx___handle_mm_fault+0x10/0x10 [ 679.936736][T27629] ? __pfx_mt_find+0x10/0x10 [ 679.936763][T27629] ? find_vma+0xbf/0x140 [ 679.936778][T27629] ? __pfx_find_vma+0x10/0x10 [ 679.936795][T27629] handle_mm_fault+0x36d/0xa20 [ 679.936821][T27629] do_user_addr_fault+0x74c/0x12f0 [ 679.936842][T27629] exc_page_fault+0x6f/0xd0 [ 679.936858][T27629] asm_exc_page_fault+0x26/0x30 [ 679.936873][T27629] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 679.936894][T27629] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f [ 679.936909][T27629] RSP: 0018:ffffc90000127948 EFLAGS: 00050206 [ 679.936922][T27629] RAX: 0000000000000069 RBX: 0000000000000005 RCX: 0000000000000005 [ 679.936930][T27629] RDX: 0000000000000001 RSI: ffff888060f22035 RDI: 0000200000008180 [ 679.936940][T27629] RBP: ffff88803d884000 R08: 0000000000000000 R09: ffffed100c1e4407 [ 679.936950][T27629] R10: ffff888060f22039 R11: 0000000000000000 R12: ffff888060f22035 [ 679.936966][T27629] R13: 0000000000000000 R14: 0000200000008180 R15: 0000000000000005 [ 679.936985][T27629] _copy_to_iter+0x4c5/0x1720 [ 679.937010][T27629] ? __pfx__copy_to_iter+0x10/0x10 [ 679.937028][T27629] ? devinfo_show+0x70/0x110 [ 679.937048][T27629] ? devinfo_next+0x4e/0x70 [ 679.937067][T27629] ? devinfo_stop+0x9/0x10 [ 679.937084][T27629] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 679.937116][T27629] seq_read_iter+0x691/0x1270 [ 679.937142][T27629] ? __pfx_aa_file_perm+0x10/0x10 [ 679.937169][T27629] proc_reg_read_iter+0x11b/0x310 [ 679.937194][T27629] do_iter_readv_writev+0x60d/0x920 [ 679.937220][T27629] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 679.937248][T27629] ? rw_verify_area+0xce/0x6d0 [ 679.937272][T27629] vfs_readv+0x4d3/0x8d0 [ 679.937300][T27629] ? __pfx_vfs_readv+0x10/0x10 [ 679.937337][T27629] ? __fget_files+0x21f/0x3d0 [ 679.937357][T27629] ? do_preadv+0x1ac/0x270 [ 679.937378][T27629] do_preadv+0x1ac/0x270 [ 679.937402][T27629] ? __pfx_do_preadv+0x10/0x10 [ 679.937430][T27629] do_syscall_64+0x106/0xf80 [ 679.937445][T27629] ? clear_bhb_loop+0x40/0x90 [ 679.937463][T27629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.937478][T27629] RIP: 0033:0x7fd0afd9c819 [ 679.937491][T27629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.937505][T27629] RSP: 002b:00007fd0b0c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 679.937519][T27629] RAX: ffffffffffffffda RBX: 00007fd0b0016090 RCX: 00007fd0afd9c819 [ 679.937528][T27629] RDX: 0000000000000026 RSI: 0000200000009180 RDI: 0000000000000008 [ 679.937537][T27629] RBP: 00007fd0afe32c91 R08: 0000000000000005 R09: 0000000000000000 [ 679.937546][T27629] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 679.937555][T27629] R13: 00007fd0b0016128 R14: 00007fd0b0016090 R15: 00007ffd60c95638 [ 679.937575][T27629] [ 680.031623][T27638] misc userio: Invalid payload size [ 680.078800][T20708] Bluetooth: hci4: command 0x0c1a tx timeout [ 680.078841][T22521] Bluetooth: hci3: command 0x0c1a tx timeout [ 680.158360][T22521] Bluetooth: hci5: command 0x0c1a tx timeout [ 680.240464][T20708] Bluetooth: hci2: command 0x0c1a tx timeout [ 680.240500][T20708] Bluetooth: hci0: command 0x0c1a tx timeout [ 680.240541][T22521] Bluetooth: hci6: command 0x0c1a tx timeout [ 680.322544][T20577] Bluetooth: hci8: command 0x0c1a tx timeout [ 680.322576][T20577] Bluetooth: hci7: command 0x0c1a tx timeout [ 680.322612][T22521] Bluetooth: hci9: command 0x0419 tx timeout [ 683.190261][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.196700][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.185924][T27754] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 684.816303][T27790] netlink: 54 bytes leftover after parsing attributes in process `syz.2.2843'. [ 685.603123][T27810] zswap: compressor not available [ 686.867365][T27939] FAULT_INJECTION: forcing a failure. [ 686.867365][T27939] name failslab, interval 1, probability 0, space 0, times 0 [ 686.917046][T27939] CPU: 0 UID: 0 PID: 27939 Comm: syz.8.2851 Tainted: G U L syzkaller #0 PREEMPT(full) [ 686.917075][T27939] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 686.917082][T27939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 686.917093][T27939] Call Trace: [ 686.917099][T27939] [ 686.917106][T27939] dump_stack_lvl+0x100/0x190 [ 686.917135][T27939] should_fail_ex.cold+0x5/0xa [ 686.917155][T27939] ? tomoyo_encode2+0xfb/0x3c0 [ 686.917176][T27939] should_failslab+0xc2/0x120 [ 686.917194][T27939] __kmalloc_noprof+0xe0/0x850 [ 686.917218][T27939] ? d_absolute_path+0x136/0x1b0 [ 686.917242][T27939] tomoyo_encode2+0xfb/0x3c0 [ 686.917267][T27939] tomoyo_encode+0x29/0x50 [ 686.917287][T27939] tomoyo_realpath_from_path+0x18c/0x690 [ 686.917324][T27939] tomoyo_path_number_perm+0x23c/0x580 [ 686.917343][T27939] ? tomoyo_path_number_perm+0x22e/0x580 [ 686.917364][T27939] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 686.917391][T27939] ? do_raw_spin_lock+0x128/0x260 [ 686.917423][T27939] ? find_held_lock+0x2b/0x80 [ 686.917438][T27939] ? __pfx_d_add+0x10/0x10 [ 686.917456][T27939] ? d_alloc+0x176/0x1e0 [ 686.917472][T27939] ? current_check_access_path+0x281/0x460 [ 686.917495][T27939] ? __pfx_current_check_access_path+0x10/0x10 [ 686.917516][T27939] ? simple_lookup+0x105/0x1d0 [ 686.917534][T27939] tomoyo_path_mknod+0x164/0x190 [ 686.917549][T27939] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 686.917565][T27939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 686.917584][T27939] security_path_mknod+0x161/0x300 [ 686.917608][T27939] filename_mknodat+0x241/0x7f0 [ 686.917628][T27939] ? __pfx_filename_mknodat+0x10/0x10 [ 686.917645][T27939] ? strncpy_from_user+0x19d/0x2d0 [ 686.917677][T27939] ? do_getname+0x191/0x390 [ 686.917700][T27939] __x64_sys_mknod+0x8f/0xc0 [ 686.917719][T27939] do_syscall_64+0x106/0xf80 [ 686.917734][T27939] ? clear_bhb_loop+0x40/0x90 [ 686.917753][T27939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.917769][T27939] RIP: 0033:0x7fc5a039c819 [ 686.917784][T27939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.917799][T27939] RSP: 002b:00007fc59e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 686.917815][T27939] RAX: ffffffffffffffda RBX: 00007fc5a0616090 RCX: 00007fc5a039c819 [ 686.917826][T27939] RDX: 00000000fffffffa RSI: 00000000000000ca RDI: 0000200000001040 [ 686.917836][T27939] RBP: 00007fc5a0432c91 R08: 0000000000000000 R09: 0000000000000000 [ 686.917846][T27939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.917856][T27939] R13: 00007fc5a0616128 R14: 00007fc5a0616090 R15: 00007ffccca646f8 [ 686.917877][T27939] [ 686.920309][T27939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 687.679192][T27975] FAULT_INJECTION: forcing a failure. [ 687.679192][T27975] name failslab, interval 1, probability 0, space 0, times 0 [ 687.785063][T27975] CPU: 0 UID: 0 PID: 27975 Comm: syz.6.2853 Tainted: G U L syzkaller #0 PREEMPT(full) [ 687.785093][T27975] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 687.785099][T27975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 687.785110][T27975] Call Trace: [ 687.785126][T27975] [ 687.785134][T27975] dump_stack_lvl+0x100/0x190 [ 687.785164][T27975] should_fail_ex.cold+0x5/0xa [ 687.785184][T27975] should_failslab+0xc2/0x120 [ 687.785213][T27975] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 687.785238][T27975] ? __pmd_alloc+0xbf/0x950 [ 687.785261][T27975] __pmd_alloc+0xbf/0x950 [ 687.785283][T27975] ? mt_find+0x687/0x8e0 [ 687.785301][T27975] huge_pte_alloc+0x5ee/0x730 [ 687.785324][T27975] hugetlb_fault+0x363/0x1450 [ 687.785347][T27975] ? __pfx_hugetlb_fault+0x10/0x10 [ 687.785375][T27975] ? find_vma+0xbf/0x140 [ 687.785405][T27975] ? __pfx_find_vma+0x10/0x10 [ 687.785423][T27975] handle_mm_fault+0x5f1/0xa20 [ 687.785448][T27975] do_user_addr_fault+0x74c/0x12f0 [ 687.785471][T27975] exc_page_fault+0x6f/0xd0 [ 687.785487][T27975] asm_exc_page_fault+0x26/0x30 [ 687.785512][T27975] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 687.785548][T27975] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 [ 687.785564][T27975] RSP: 0018:ffffc900043a7d30 EFLAGS: 00050202 [ 687.785578][T27975] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 687.785587][T27975] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900043a7da0 [ 687.785597][T27975] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000874fb4 [ 687.785618][T27975] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 687.785627][T27975] R13: ffffc900043a7da0 R14: 0000000000000000 R15: 0000000000000000 [ 687.785646][T27975] _copy_from_user+0x98/0xd0 [ 687.785669][T27975] do_sock_getsockopt+0x30b/0x3d0 [ 687.785690][T27975] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 687.785718][T27975] __sys_getsockopt+0x133/0x1d0 [ 687.785747][T27975] ? __x64_sys_getsockopt+0xbd/0x160 [ 687.785770][T27975] __x64_sys_getsockopt+0xbd/0x160 [ 687.785793][T27975] ? do_syscall_64+0x95/0xf80 [ 687.785808][T27975] ? lockdep_hardirqs_on+0x78/0x100 [ 687.785832][T27975] do_syscall_64+0x106/0xf80 [ 687.785847][T27975] ? clear_bhb_loop+0x40/0x90 [ 687.785866][T27975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.785882][T27975] RIP: 0033:0x7ff18939c819 [ 687.785896][T27975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.785911][T27975] RSP: 002b:00007ff1875ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 687.785925][T27975] RAX: ffffffffffffffda RBX: 00007ff189615fa0 RCX: 00007ff18939c819 [ 687.785936][T27975] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 687.785944][T27975] RBP: 00007ff189432c91 R08: 0000000000000000 R09: 0000000000000000 [ 687.785953][T27975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.785963][T27975] R13: 00007ff189616038 R14: 00007ff189615fa0 R15: 00007fffcbdd2cc8 [ 687.785984][T27975] [ 692.291292][T28238] cougar: G6 mapped to F18 [ 692.365348][T28235] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2867'. [ 694.516246][T28301] __vm_enough_memory: pid: 28301, comm: syz.2.2870, bytes: 4398046511104 not enough memory for the allocation [ 694.656048][T28351] FAULT_INJECTION: forcing a failure. [ 694.656048][T28351] name failslab, interval 1, probability 0, space 0, times 0 [ 694.762666][T28351] CPU: 0 UID: 0 PID: 28351 Comm: syz.9.2875 Tainted: G U L syzkaller #0 PREEMPT(full) [ 694.762695][T28351] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 694.762701][T28351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 694.762712][T28351] Call Trace: [ 694.762718][T28351] [ 694.762724][T28351] dump_stack_lvl+0x100/0x190 [ 694.762754][T28351] should_fail_ex.cold+0x5/0xa [ 694.762783][T28351] ? snd_pcm_plugin_build+0x64/0x650 [ 694.762805][T28351] should_failslab+0xc2/0x120 [ 694.762824][T28351] __kmalloc_noprof+0xe0/0x850 [ 694.762853][T28351] snd_pcm_plugin_build+0x64/0x650 [ 694.762877][T28351] snd_pcm_plugin_build_mulaw+0x280/0x760 [ 694.762900][T28351] ? __pfx_mulaw_decode+0x10/0x10 [ 694.762923][T28351] ? __pfx_snd_pcm_plugin_build_mulaw+0x10/0x10 [ 694.762948][T28351] ? snd_pcm_hw_params+0x262/0x1cb0 [ 694.762975][T28351] snd_pcm_plug_format_plugins+0xbdd/0x1430 [ 694.763000][T28351] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 694.763024][T28351] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 694.763051][T28351] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 694.763081][T28351] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 694.763101][T28351] ? locks_remove_posix+0xff/0x500 [ 694.763120][T28351] ? __pfx___mutex_lock+0x10/0x10 [ 694.763148][T28351] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 694.763170][T28351] snd_pcm_oss_sync+0x265/0x840 [ 694.763194][T28351] snd_pcm_oss_release+0x238/0x300 [ 694.763214][T28351] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 694.763234][T28351] __fput+0x3ff/0xb40 [ 694.763260][T28351] task_work_run+0x150/0x240 [ 694.763285][T28351] ? __pfx_task_work_run+0x10/0x10 [ 694.763313][T28351] exit_to_user_mode_loop+0x100/0x4a0 [ 694.763335][T28351] do_syscall_64+0x668/0xf80 [ 694.763350][T28351] ? clear_bhb_loop+0x40/0x90 [ 694.763369][T28351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.763385][T28351] RIP: 0033:0x7f6051b9c819 [ 694.763406][T28351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.763422][T28351] RSP: 002b:00007f60529c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 694.763438][T28351] RAX: 0000000000000000 RBX: 00007f6051e16180 RCX: 00007f6051b9c819 [ 694.763448][T28351] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000002 [ 694.763458][T28351] RBP: 00007f6051c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 694.763467][T28351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.763477][T28351] R13: 00007f6051e16218 R14: 00007f6051e16180 R15: 00007ffd61117ec8 [ 694.763498][T28351] [ 696.666491][T28435] ovs_: entered promiscuous mode [ 698.186598][T28494] FAULT_INJECTION: forcing a failure. [ 698.186598][T28494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.358560][T28494] CPU: 0 UID: 0 PID: 28494 Comm: syz.8.2886 Tainted: G U L syzkaller #0 PREEMPT(full) [ 698.358590][T28494] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 698.358597][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.358607][T28494] Call Trace: [ 698.358614][T28494] [ 698.358621][T28494] dump_stack_lvl+0x100/0x190 [ 698.358650][T28494] should_fail_ex.cold+0x5/0xa [ 698.358671][T28494] _copy_from_iter+0x1f4/0x1690 [ 698.358695][T28494] ? policy_nodemask+0xed/0x4f0 [ 698.358719][T28494] ? __pfx__copy_from_iter+0x10/0x10 [ 698.358741][T28494] ? alloc_pages_mpol+0x25a/0x550 [ 698.358759][T28494] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 698.358781][T28494] copy_page_from_iter+0xde/0x180 [ 698.358804][T28494] anon_pipe_write+0xae4/0x1d40 [ 698.358828][T28494] ? __pfx_anon_pipe_write+0x10/0x10 [ 698.358846][T28494] ? __pfx_autoremove_wake_function+0x10/0x10 [ 698.358866][T28494] ? bpf_lsm_file_permission+0x9/0x10 [ 698.358881][T28494] ? security_file_permission+0x76/0x210 [ 698.358902][T28494] ? rw_verify_area+0xce/0x6d0 [ 698.358926][T28494] vfs_write+0x6ac/0x1070 [ 698.358942][T28494] ? __pfx_anon_pipe_write+0x10/0x10 [ 698.358960][T28494] ? __pfx_vfs_write+0x10/0x10 [ 698.358973][T28494] ? find_held_lock+0x2b/0x80 [ 698.359000][T28494] ksys_write+0x1f8/0x250 [ 698.359016][T28494] ? __pfx_ksys_write+0x10/0x10 [ 698.359036][T28494] do_syscall_64+0x106/0xf80 [ 698.359052][T28494] ? clear_bhb_loop+0x40/0x90 [ 698.359071][T28494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.359087][T28494] RIP: 0033:0x7fc5a039c819 [ 698.359101][T28494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.359116][T28494] RSP: 002b:00007fc59e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 698.359131][T28494] RAX: ffffffffffffffda RBX: 00007fc5a0616090 RCX: 00007fc5a039c819 [ 698.359142][T28494] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 698.359151][T28494] RBP: 00007fc5a0432c91 R08: 0000000000000000 R09: 0000000000000000 [ 698.359160][T28494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.359169][T28494] R13: 00007fc5a0616128 R14: 00007fc5a0616090 R15: 00007ffccca646f8 [ 698.359190][T28494] [ 699.893706][T28595] FAULT_INJECTION: forcing a failure. [ 699.893706][T28595] name failslab, interval 1, probability 0, space 0, times 0 [ 699.928055][T28595] CPU: 0 UID: 0 PID: 28595 Comm: syz.6.2889 Tainted: G U L syzkaller #0 PREEMPT(full) [ 699.928085][T28595] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 699.928092][T28595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 699.928102][T28595] Call Trace: [ 699.928108][T28595] [ 699.928114][T28595] dump_stack_lvl+0x100/0x190 [ 699.928142][T28595] should_fail_ex.cold+0x5/0xa [ 699.928162][T28595] should_failslab+0xc2/0x120 [ 699.928179][T28595] __kmalloc_cache_noprof+0x7a/0x6f0 [ 699.928200][T28595] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 699.928225][T28595] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 699.928246][T28595] ? lockdep_hardirqs_on+0x78/0x100 [ 699.928263][T28595] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 699.928284][T28595] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 699.928303][T28595] ? kfree+0x1f6/0x6b0 [ 699.928326][T28595] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 699.928354][T28595] ? snd_pcm_oss_sync+0x243/0x840 [ 699.928374][T28595] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 699.928398][T28595] ? __pfx___mutex_lock+0x10/0x10 [ 699.928433][T28595] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 699.928456][T28595] snd_pcm_oss_sync+0x265/0x840 [ 699.928480][T28595] snd_pcm_oss_release+0x238/0x300 [ 699.928501][T28595] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 699.928522][T28595] __fput+0x3ff/0xb40 [ 699.928546][T28595] task_work_run+0x150/0x240 [ 699.928569][T28595] ? __pfx_task_work_run+0x10/0x10 [ 699.928597][T28595] exit_to_user_mode_loop+0x100/0x4a0 [ 699.928620][T28595] do_syscall_64+0x668/0xf80 [ 699.928635][T28595] ? clear_bhb_loop+0x40/0x90 [ 699.928653][T28595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.928669][T28595] RIP: 0033:0x7ff18939c819 [ 699.928684][T28595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.928698][T28595] RSP: 002b:00007ff1875ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 699.928713][T28595] RAX: 0000000000000000 RBX: 00007ff189615fa0 RCX: 00007ff18939c819 [ 699.928723][T28595] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 699.928731][T28595] RBP: 00007ff189432c91 R08: 0000000000000000 R09: 0000000000000000 [ 699.928741][T28595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.928750][T28595] R13: 00007ff189616038 R14: 00007ff189615fa0 R15: 00007fffcbdd2cc8 [ 699.928770][T28595] [ 700.250406][T28595] Process accounting paused [ 704.806243][T28820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2903'. [ 704.856099][T28926] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2908'. [ 705.567738][T28941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 705.601853][T28941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 705.653159][T28941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 705.690670][T28941] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 705.733161][T28941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 705.733329][T28941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 705.733463][T28941] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 705.733600][T28941] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 705.733734][T28941] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 705.733868][T28941] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 706.108520][T28991] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2912'. [ 707.217490][T22521] Bluetooth: hci1: command 0x0406 tx timeout [ 707.403567][T29014] usbip-vudc usbip-vudc.0: gadget not bound [ 707.615667][T22521] Bluetooth: hci4: command 0x0c1a tx timeout [ 707.694947][T22521] Bluetooth: hci5: command 0x0c1a tx timeout [ 707.701019][T22521] Bluetooth: hci3: command 0x0c1a tx timeout [ 707.774907][T20708] Bluetooth: hci8: command 0x0c1a tx timeout [ 707.781750][T20577] Bluetooth: hci7: command 0x0c1a tx timeout [ 707.788788][T20708] Bluetooth: hci6: command 0x0c1a tx timeout [ 707.796478][T20577] Bluetooth: hci2: command 0x0c1a tx timeout [ 707.802600][T20577] Bluetooth: hci0: command 0x0c1a tx timeout [ 707.808815][T22521] Bluetooth: hci9: command 0x0419 tx timeout [ 707.831855][T29055] random: crng reseeded on system resumption [ 707.854639][T29064] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2919'. [ 707.957803][T29050] FAULT_INJECTION: forcing a failure. [ 707.957803][T29050] name failslab, interval 1, probability 0, space 0, times 0 [ 708.006384][T29077] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2920'. [ 708.061244][T29050] CPU: 0 UID: 0 PID: 29050 Comm: syz.9.2917 Tainted: G U L syzkaller #0 PREEMPT(full) [ 708.061273][T29050] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 708.061280][T29050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.061290][T29050] Call Trace: [ 708.061297][T29050] [ 708.061303][T29050] dump_stack_lvl+0x100/0x190 [ 708.061331][T29050] should_fail_ex.cold+0x5/0xa [ 708.061352][T29050] should_failslab+0xc2/0x120 [ 708.061370][T29050] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 708.061395][T29050] ? __alloc_skb+0x140/0x710 [ 708.061420][T29050] __alloc_skb+0x140/0x710 [ 708.061441][T29050] ? __alloc_skb+0x5b7/0x710 [ 708.061470][T29050] ? __pfx___alloc_skb+0x10/0x10 [ 708.061494][T29050] ? if_nlmsg_size+0x5f6/0xd20 [ 708.061513][T29050] rtmsg_ifinfo_build_skb+0x81/0x260 [ 708.061534][T29050] rtmsg_ifinfo+0xa4/0x1b0 [ 708.061554][T29050] register_netdevice+0x1b79/0x2210 [ 708.061575][T29050] ? __pfx_register_netdevice+0x10/0x10 [ 708.061596][T29050] __ip_tunnel_create+0x52b/0x670 [ 708.061614][T29050] ? __pfx___ip_tunnel_create+0x10/0x10 [ 708.061629][T29050] ? net_generic+0xea/0x2a0 [ 708.061650][T29050] ip_tunnel_init_net+0x230/0x780 [ 708.061669][T29050] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 708.061692][T29050] ? __kmalloc_noprof+0x320/0x850 [ 708.061716][T29050] ? __pfx_ipgre_init_net+0x10/0x10 [ 708.061738][T29050] ops_init+0x1e2/0x5f0 [ 708.061755][T29050] setup_net+0x118/0x3a0 [ 708.061771][T29050] ? __pfx_setup_net+0x10/0x10 [ 708.061785][T29050] ? lockdep_init_map_type+0x5c/0x250 [ 708.061807][T29050] ? mutex_init_lockep+0x110/0x150 [ 708.061831][T29050] copy_net_ns+0x46f/0x7c0 [ 708.061850][T29050] create_new_namespaces+0x3ea/0xac0 [ 708.061872][T29050] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 708.061891][T29050] ksys_unshare+0x473/0xad0 [ 708.061912][T29050] ? __pfx_ksys_unshare+0x10/0x10 [ 708.061941][T29050] __x64_sys_unshare+0x31/0x40 [ 708.061960][T29050] do_syscall_64+0x106/0xf80 [ 708.061975][T29050] ? clear_bhb_loop+0x40/0x90 [ 708.061994][T29050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.062010][T29050] RIP: 0033:0x7f6051b9c819 [ 708.062024][T29050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.062039][T29050] RSP: 002b:00007f60529e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 708.062055][T29050] RAX: ffffffffffffffda RBX: 00007f6051e16090 RCX: 00007f6051b9c819 [ 708.062066][T29050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 708.062076][T29050] RBP: 00007f6051c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 708.062085][T29050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.062095][T29050] R13: 00007f6051e16128 R14: 00007f6051e16090 R15: 00007ffd61117ec8 [ 708.062116][T29050] [ 708.698431][T29064] veth1_macvtap: left promiscuous mode [ 709.613542][T29178] ima: policy update failed [ 709.655511][ T30] audit: type=1802 audit(4294967651.008:29): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2924" res=0 errno=0 [ 709.691324][T29171] syz.6.2924 (29171): /proc/29170/oom_adj is deprecated, please use /proc/29170/oom_score_adj instead. [ 709.919606][T29215] netlink: del zone limit has 4 unknown bytes [ 710.190575][T29211] nbd: must specify a device to reconfigure [ 710.618618][T29234] netlink: ct family unspecified [ 710.974381][T29235] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2930'. [ 713.781254][T29332] FAULT_INJECTION: forcing a failure. [ 713.781254][T29332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.806418][T19322] NFSD: Failed to start, no listeners configured. [ 713.881726][T29332] CPU: 0 UID: 0 PID: 29332 Comm: syz.9.2940 Tainted: G U L syzkaller #0 PREEMPT(full) [ 713.881754][T29332] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 713.881760][T29332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 713.881769][T29332] Call Trace: [ 713.881774][T29332] [ 713.881780][T29332] dump_stack_lvl+0x100/0x190 [ 713.881808][T29332] should_fail_ex.cold+0x5/0xa [ 713.881827][T29332] _copy_from_iter+0x1f4/0x1690 [ 713.881852][T29332] ? __pfx__copy_from_iter+0x10/0x10 [ 713.881880][T29332] copy_page_from_iter+0xde/0x180 [ 713.881902][T29332] anon_pipe_write+0xae4/0x1d40 [ 713.881927][T29332] ? __pfx_anon_pipe_write+0x10/0x10 [ 713.881944][T29332] ? __pfx_autoremove_wake_function+0x10/0x10 [ 713.881964][T29332] ? bpf_lsm_file_permission+0x9/0x10 [ 713.881979][T29332] ? security_file_permission+0x76/0x210 [ 713.882000][T29332] ? rw_verify_area+0xce/0x6d0 [ 713.882024][T29332] vfs_write+0x6ac/0x1070 [ 713.882040][T29332] ? __pfx_anon_pipe_write+0x10/0x10 [ 713.882058][T29332] ? __pfx_vfs_write+0x10/0x10 [ 713.882071][T29332] ? find_held_lock+0x2b/0x80 [ 713.882097][T29332] ksys_write+0x1f8/0x250 [ 713.882113][T29332] ? __pfx_ksys_write+0x10/0x10 [ 713.882133][T29332] do_syscall_64+0x106/0xf80 [ 713.882149][T29332] ? clear_bhb_loop+0x40/0x90 [ 713.882168][T29332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.882184][T29332] RIP: 0033:0x7f6051b9c819 [ 713.882197][T29332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.882211][T29332] RSP: 002b:00007f60529e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 713.882227][T29332] RAX: ffffffffffffffda RBX: 00007f6051e16090 RCX: 00007f6051b9c819 [ 713.882237][T29332] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 713.882246][T29332] RBP: 00007f6051c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 713.882255][T29332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.882264][T29332] R13: 00007f6051e16128 R14: 00007f6051e16090 R15: 00007ffd61117ec8 [ 713.882284][T29332] [ 715.929823][T29450] kexec: Could not allocate control_code_buffer [ 717.130171][T29522] FAULT_INJECTION: forcing a failure. [ 717.130171][T29522] name failslab, interval 1, probability 0, space 0, times 0 [ 717.271155][T29522] CPU: 0 UID: 0 PID: 29522 Comm: syz.2.2951 Tainted: G U L syzkaller #0 PREEMPT(full) [ 717.271185][T29522] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 717.271191][T29522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.271201][T29522] Call Trace: [ 717.271207][T29522] [ 717.271213][T29522] dump_stack_lvl+0x100/0x190 [ 717.271243][T29522] should_fail_ex.cold+0x5/0xa [ 717.271262][T29522] should_failslab+0xc2/0x120 [ 717.271280][T29522] __kmalloc_cache_noprof+0x7a/0x6f0 [ 717.271301][T29522] ? dropmon_net_event+0x15d/0x360 [ 717.271328][T29522] dropmon_net_event+0x15d/0x360 [ 717.271352][T29522] notifier_call_chain+0x99/0x420 [ 717.271377][T29522] call_netdevice_notifiers_info+0xbe/0x110 [ 717.271397][T29522] register_netdevice+0x16e6/0x2210 [ 717.271417][T29522] ? __pfx_register_netdevice+0x10/0x10 [ 717.271439][T29522] __ip_tunnel_create+0x52b/0x670 [ 717.271456][T29522] ? __pfx___ip_tunnel_create+0x10/0x10 [ 717.271471][T29522] ? net_generic+0xea/0x2a0 [ 717.271491][T29522] ip_tunnel_init_net+0x230/0x780 [ 717.271510][T29522] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 717.271531][T29522] ? __kmalloc_noprof+0x320/0x850 [ 717.271556][T29522] ? __pfx_ipgre_init_net+0x10/0x10 [ 717.271578][T29522] ops_init+0x1e2/0x5f0 [ 717.271596][T29522] setup_net+0x118/0x3a0 [ 717.271611][T29522] ? __pfx_setup_net+0x10/0x10 [ 717.271625][T29522] ? lockdep_init_map_type+0x5c/0x250 [ 717.271646][T29522] ? mutex_init_lockep+0x110/0x150 [ 717.271670][T29522] copy_net_ns+0x46f/0x7c0 [ 717.271689][T29522] create_new_namespaces+0x3ea/0xac0 [ 717.271720][T29522] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 717.271739][T29522] ksys_unshare+0x473/0xad0 [ 717.271761][T29522] ? __pfx_ksys_unshare+0x10/0x10 [ 717.271788][T29522] __x64_sys_unshare+0x31/0x40 [ 717.271806][T29522] do_syscall_64+0x106/0xf80 [ 717.271821][T29522] ? clear_bhb_loop+0x40/0x90 [ 717.271840][T29522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.271855][T29522] RIP: 0033:0x7fd0afd9c819 [ 717.271870][T29522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.271885][T29522] RSP: 002b:00007fd0b0c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 717.271900][T29522] RAX: ffffffffffffffda RBX: 00007fd0b0015fa0 RCX: 00007fd0afd9c819 [ 717.271911][T29522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 717.271921][T29522] RBP: 00007fd0afe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 717.271930][T29522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.271940][T29522] R13: 00007fd0b0016038 R14: 00007fd0b0015fa0 R15: 00007ffd60c95638 [ 717.271961][T29522] [ 718.740231][T29607] Invalid ELF header magic: != ELF [ 719.798127][ T30] audit: type=1800 audit(4294967661.201:30): pid=29643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2959" name="members" dev="configfs" ino=99901 res=0 errno=0 [ 720.064299][T29643] zswap: compressor not available [ 720.273236][T29647] zswap: compressor /sys/ker not available [ 720.302216][T29653] FAULT_INJECTION: forcing a failure. [ 720.302216][T29653] name failslab, interval 1, probability 0, space 0, times 0 [ 720.469515][T29653] CPU: 0 UID: 0 PID: 29653 Comm: syz.6.2962 Tainted: G U L syzkaller #0 PREEMPT(full) [ 720.469546][T29653] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 720.469552][T29653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 720.469562][T29653] Call Trace: [ 720.469567][T29653] [ 720.469574][T29653] dump_stack_lvl+0x100/0x190 [ 720.469602][T29653] should_fail_ex.cold+0x5/0xa [ 720.469622][T29653] should_failslab+0xc2/0x120 [ 720.469640][T29653] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 720.469655][T29653] ? kstrdup_const+0x63/0x80 [ 720.469671][T29653] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 720.469698][T29653] kstrdup+0x51/0xe0 [ 720.469713][T29653] kstrdup_const+0x63/0x80 [ 720.469728][T29653] kvasprintf_const+0x10f/0x1a0 [ 720.469749][T29653] kobject_set_name_vargs+0x5a/0x140 [ 720.469770][T29653] dev_set_name+0xc7/0x100 [ 720.469793][T29653] ? __pfx_dev_set_name+0x10/0x10 [ 720.469814][T29653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 720.469833][T29653] ? lockdep_init_map_type+0x5c/0x250 [ 720.469854][T29653] ? __init_waitqueue_head+0xca/0x150 [ 720.469882][T29653] netdev_register_kobject+0xc5/0x3d0 [ 720.469902][T29653] register_netdevice+0x12e0/0x2210 [ 720.469922][T29653] ? __pfx_register_netdevice+0x10/0x10 [ 720.469945][T29653] __ip_tunnel_create+0x52b/0x670 [ 720.469962][T29653] ? __pfx___ip_tunnel_create+0x10/0x10 [ 720.469976][T29653] ? net_generic+0xea/0x2a0 [ 720.469996][T29653] ip_tunnel_init_net+0x230/0x780 [ 720.470015][T29653] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 720.470036][T29653] ? __kmalloc_noprof+0x320/0x850 [ 720.470061][T29653] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 720.470084][T29653] ops_init+0x1e2/0x5f0 [ 720.470101][T29653] setup_net+0x118/0x3a0 [ 720.470117][T29653] ? __pfx_setup_net+0x10/0x10 [ 720.470131][T29653] ? lockdep_init_map_type+0x5c/0x250 [ 720.470151][T29653] ? mutex_init_lockep+0x110/0x150 [ 720.470175][T29653] copy_net_ns+0x46f/0x7c0 [ 720.470193][T29653] create_new_namespaces+0x3ea/0xac0 [ 720.470215][T29653] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 720.470234][T29653] ksys_unshare+0x473/0xad0 [ 720.470255][T29653] ? __pfx_ksys_unshare+0x10/0x10 [ 720.470285][T29653] __x64_sys_unshare+0x31/0x40 [ 720.470304][T29653] do_syscall_64+0x106/0xf80 [ 720.470320][T29653] ? clear_bhb_loop+0x40/0x90 [ 720.470340][T29653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.470356][T29653] RIP: 0033:0x7ff18939c819 [ 720.470370][T29653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.470385][T29653] RSP: 002b:00007ff1875ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 720.470402][T29653] RAX: ffffffffffffffda RBX: 00007ff189615fa0 RCX: 00007ff18939c819 [ 720.470413][T29653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 720.470423][T29653] RBP: 00007ff189432c91 R08: 0000000000000000 R09: 0000000000000000 [ 720.470433][T29653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.470442][T29653] R13: 00007ff189616038 R14: 00007ff189615fa0 R15: 00007fffcbdd2cc8 [ 720.470463][T29653] [ 721.729209][T29681] vivid-007: ================= START STATUS ================= [ 721.738025][T29681] vivid-007: Generate PTS: true [ 721.757732][T29681] vivid-007: Generate SCR: true [ 721.772265][T29681] tpg source WxH: 320x240 (Y'CbCr) [ 721.795180][T29681] tpg field: 1 [ 721.798584][T29681] tpg crop: (0,0)/320x240 [ 721.824098][T29681] tpg compose: (0,0)/320x240 [ 721.828721][T29681] tpg colorspace: 8 [ 721.858618][T29681] tpg transfer function: 0/0 [ 721.880746][T29681] tpg Y'CbCr encoding: 0/0 [ 721.908456][T29681] tpg quantization: 0/0 [ 721.970710][T29681] tpg RGB range: 0/2 [ 721.974661][T29681] vivid-007: ================== END STATUS ================== [ 722.834697][T29731] netlink: 'syz.8.2968': attribute type 33 has an invalid length. [ 725.035950][T29804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 725.082492][T29810] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2978'. [ 725.112888][T29810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.133496][T29804] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 725.162377][T29810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.218639][T29804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 725.271489][T29804] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 725.351637][T29804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 725.399376][T29804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 725.441600][T29804] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 725.489260][T29804] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 725.504422][T29804] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 725.519199][T29804] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 725.840871][ T31] INFO: task syz-executor:20329 blocked for more than 143 seconds. [ 725.849002][ T31] Tainted: G U L syzkaller #0 [ 725.871341][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 725.898413][ T31] task:syz-executor state:D stack:23896 pid:20329 tgid:20329 ppid:1 task_flags:0x400140 flags:0x00080002 [ 725.952290][ T31] Call Trace: [ 725.970670][ T31] [ 725.984456][ T31] __schedule+0xfee/0x6120 [ 726.014726][ T31] ? __lock_acquire+0x4a5/0x2630 [ 726.029521][ T31] ? __pfx___schedule+0x10/0x10 [ 726.054627][ T31] ? find_held_lock+0x2b/0x80 [ 726.083486][ T31] ? schedule+0x2bf/0x390 [ 726.102191][ T31] schedule+0xdd/0x390 [ 726.120675][ T31] schedule_preempt_disabled+0x13/0x30 [ 726.146899][ T31] __mutex_lock+0xc9a/0x1b90 [ 726.174491][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 726.199703][ T31] ? __lock_acquire+0x4a5/0x2630 [ 726.223738][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 726.245080][ T31] ? net_generic+0xea/0x2a0 [ 726.272210][ T31] ? net_generic+0xea/0x2a0 [ 726.292316][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 726.315328][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 726.348669][ T31] nfsd_umount+0x3b/0x60 [ 726.376906][ T31] deactivate_locked_super+0xc1/0x1b0 [ 726.405619][ T31] deactivate_super+0xe7/0x110 [ 726.424754][ T31] cleanup_mnt+0x21f/0x450 [ 726.444559][ T31] task_work_run+0x150/0x240 [ 726.469414][ T31] ? __pfx_task_work_run+0x10/0x10 [ 726.506135][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 726.522411][ T31] do_syscall_64+0x668/0xf80 [ 726.558698][ T31] ? clear_bhb_loop+0x40/0x90 [ 726.563419][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.616739][ T31] RIP: 0033:0x7fa6e6b9da57 [ 726.628543][ T31] RSP: 002b:00007ffca3ddd408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 726.673763][ T31] RAX: 0000000000000000 RBX: 00007fa6e6c32048 RCX: 00007fa6e6b9da57 [ 726.732191][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca3ddd4c0 [ 726.758082][ T31] RBP: 00007ffca3ddd4c0 R08: 00007ffca3dde4c0 R09: 00000000ffffffff [ 726.845443][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca3dde550 [ 726.905794][ T31] R13: 00007fa6e6c32048 R14: 000000000008bba3 R15: 00007ffca3dde590 [ 726.913837][ T31] [ 726.955348][ T31] INFO: task syz.3.2380:20894 blocked for more than 164 seconds. [ 726.963128][ T31] Tainted: G U L syzkaller #0 [ 727.011549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.042440][T29063] Bluetooth: hci1: command 0x0406 tx timeout [ 727.064833][ T31] task:syz.3.2380 state:D stack:26344 pid:20894 tgid:20890 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 727.090243][ T31] Call Trace: [ 727.093558][ T31] [ 727.096861][ T31] __schedule+0xfee/0x6120 [ 727.101287][ T31] ? __lock_acquire+0x4a5/0x2630 [ 727.108863][ T31] ? __pfx___schedule+0x10/0x10 [ 727.113997][ T31] ? find_held_lock+0x2b/0x80 [ 727.118701][ T31] ? schedule+0x2bf/0x390 [ 727.123047][ T31] schedule+0xdd/0x390 [ 727.127744][ T31] schedule_preempt_disabled+0x13/0x30 [ 727.133234][ T31] __mutex_lock+0xc9a/0x1b90 [ 727.140684][ T31] ? expkey_flush+0x18/0x90 [ 727.145583][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 727.150618][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 727.158316][ T31] ? _raw_spin_unlock+0x28/0x50 [ 727.163223][ T31] ? __pfx_cache_clean+0x10/0x10 [ 727.168719][ T31] ? __pfx___might_resched+0x10/0x10 [ 727.174780][ T31] ? __pfx_expkey_flush+0x10/0x10 [ 727.184329][ T31] ? expkey_flush+0x18/0x90 [ 727.188863][ T31] expkey_flush+0x18/0x90 [ 727.193201][ T31] write_flush.isra.0+0x2af/0x3d0 [ 727.198618][T29063] Bluetooth: hci4: command 0x0c1a tx timeout [ 727.209636][ T31] ? __pfx_write_flush.isra.0+0x10/0x10 [ 727.217447][ T31] ? __pfx___might_resched+0x10/0x10 [ 727.222797][ T31] ? iovec_from_user+0xda/0x140 [ 727.228060][ T31] ? __pfx_write_flush_procfs+0x10/0x10 [ 727.233802][ T31] proc_reg_write+0x240/0x330 [ 727.239350][ T31] ? __pfx_proc_reg_write+0x10/0x10 [ 727.246974][ T31] vfs_writev+0x5ea/0xe10 [ 727.251322][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 727.256517][ T31] ? do_writev+0x13e/0x340 [ 727.260956][ T31] do_writev+0x13e/0x340 [ 727.267194][ T31] ? __pfx_do_writev+0x10/0x10 [ 727.272145][ T31] do_syscall_64+0x106/0xf80 [ 727.277006][T29063] Bluetooth: hci5: command 0x0c1a tx timeout [ 727.288236][T21273] Bluetooth: hci3: command 0x0c1a tx timeout [ 727.294872][ T31] ? clear_bhb_loop+0x40/0x90 [ 727.299561][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.305806][ T31] RIP: 0033:0x7ff358d9c819 [ 727.310242][ T31] RSP: 002b:00007ff359cc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 727.318947][ T31] RAX: ffffffffffffffda RBX: 00007ff359016090 RCX: 00007ff358d9c819 [ 727.329582][ T31] RDX: 000000000000000a RSI: 0000200000000240 RDI: 0000000000000005 [ 727.337773][ T31] RBP: 00007ff358e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 727.346786][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.355405][T29063] Bluetooth: hci0: command 0x0c1a tx timeout [ 727.368087][ T31] R13: 00007ff359016128 R14: 00007ff359016090 R15: 00007ffe6be8b168 [ 727.378606][ T31] [ 727.435371][T29063] Bluetooth: hci6: command 0x0c1a tx timeout [ 727.450119][T21273] Bluetooth: hci2: command 0x0c1a tx timeout [ 727.463011][ T31] INFO: task syz.0.2484:22461 blocked for more than 144 seconds. [ 727.470784][ T31] Tainted: G U L syzkaller #0 [ 727.513359][T29063] Bluetooth: hci9: command 0x0419 tx timeout [ 727.519394][T29063] Bluetooth: hci8: command 0x0c1a tx timeout [ 727.526895][T21273] Bluetooth: hci7: command 0x0c1a tx timeout [ 727.553960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.606220][ T31] task:syz.0.2484 state:D stack:27352 pid:22461 tgid:22460 ppid:19356 task_flags:0x400140 flags:0x00080002 [ 727.658163][ T31] Call Trace: [ 727.671026][ T31] [ 727.674037][ T31] __schedule+0xfee/0x6120 [ 727.678551][ T31] ? __lock_acquire+0x4a5/0x2630 [ 727.746725][ T31] ? __pfx___schedule+0x10/0x10 [ 727.770563][ T31] ? find_held_lock+0x2b/0x80 [ 727.775309][ T31] ? schedule+0x2bf/0x390 [ 727.779640][ T31] schedule+0xdd/0x390 [ 727.831868][ T31] schedule_preempt_disabled+0x13/0x30 [ 727.837372][ T31] __mutex_lock+0xc9a/0x1b90 [ 727.873634][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 727.879218][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 727.954808][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 727.969474][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 727.975270][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 728.037976][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 728.052691][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 728.058571][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 728.075334][ T31] ? rcu_is_watching+0x12/0xc0 [ 728.080490][ T31] ? trace_kmalloc+0x101/0x130 [ 728.085268][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 728.091885][ T31] ? __nla_parse+0x40/0x60 [ 728.100902][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 728.107896][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 728.115207][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 728.123173][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 728.129492][ T31] ? genl_get_cmd+0x3ef/0x720 [ 728.134171][ T31] ? bpf_lsm_capable+0x9/0x10 [ 728.139453][ T31] ? security_capable+0x80/0x260 [ 728.144402][ T31] genl_rcv_msg+0x560/0x800 [ 728.149246][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 728.155093][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 728.161770][ T31] netlink_rcv_skb+0x159/0x420 [ 728.166537][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 728.175104][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 728.181195][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 728.186485][ T31] genl_rcv+0x28/0x40 [ 728.190798][ T31] netlink_unicast+0x5aa/0x870 [ 728.195564][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 728.205185][ T31] netlink_sendmsg+0x8b0/0xda0 [ 728.210404][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.215700][ T31] ? __import_iovec+0x1d2/0x640 [ 728.221065][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 728.226837][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 728.234519][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.240109][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 728.245512][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 728.251464][ T31] ___sys_sendmsg+0x190/0x1e0 [ 728.257056][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.262651][ T31] __sys_sendmsg+0x170/0x220 [ 728.267442][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.273006][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 728.280874][ T31] do_syscall_64+0x106/0xf80 [ 728.285483][ T31] ? clear_bhb_loop+0x40/0x90 [ 728.291883][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.298730][ T31] RIP: 0033:0x7f5e5059c819 [ 728.307404][ T31] RSP: 002b:00007f5e5148d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.316224][ T31] RAX: ffffffffffffffda RBX: 00007f5e50815fa0 RCX: 00007f5e5059c819 [ 728.324637][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000002 [ 728.332870][ T31] RBP: 00007f5e50632c91 R08: 0000000000000000 R09: 0000000000000000 [ 728.343367][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.351639][ T31] R13: 00007f5e50816038 R14: 00007f5e50815fa0 R15: 00007ffe6a2c3498 [ 728.360975][ T31] [ 728.426828][ T31] [ 728.426828][ T31] Showing all locks held in the system: [ 728.449795][ T31] 3 locks held by kworker/0:0/9: [ 728.454882][ T31] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 728.476258][ T31] #1: ffffc900000e7d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 728.490627][ T31] #2: ffff88806b9d6240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 728.501093][ T31] 1 lock held by khungtaskd/31: [ 728.513971][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 728.524221][ T31] 2 locks held by getty/5582: [ 728.529179][ T31] #0: ffff8880333e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 728.539413][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 728.551345][ T31] 2 locks held by syz.2.2313/19322: [ 728.556837][ T31] #0: ffffffff906c3230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 728.565854][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 728.578767][ T31] 2 locks held by syz-executor/20329: [ 728.584172][ T31] #0: ffff88807e8220e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 728.594913][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 728.604763][ T31] 3 locks held by kworker/u11:1/20609: [ 728.615097][ T31] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 728.630544][ T31] #1: ffffc9000518fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 728.641339][ T31] #2: ffffffff90616ee8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 728.650930][ T31] 2 locks held by syz.3.2380/20894: [ 728.656441][ T31] #0: ffff88802920a420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 728.666466][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 728.675345][ T31] 2 locks held by syz-executor/21270: [ 728.681076][ T31] #0: ffff88803e3500e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 728.694569][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 728.704465][ T31] 2 locks held by syz.0.2484/22461: [ 728.714183][ T31] #0: ffffffff906c3230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 728.722696][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 728.733045][ T31] 2 locks held by syz.5.2499/22578: [ 728.742199][ T31] #0: ffffffff906c3230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 728.750654][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 728.761195][ T31] 2 locks held by syz-executor/23259: [ 728.767618][ T31] #0: ffff888034c460e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 728.778203][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 728.788096][ T31] 2 locks held by syz.2.2954/29585: [ 728.793287][ T31] #0: ffff8880405ce0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 728.807203][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 728.821880][ T31] 1 lock held by syz.6.2980/29829: [ 728.827256][ T31] #0: ffffffff8e7f3180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 728.837509][ T31] 2 locks held by syz.9.2981/29833: [ 728.842735][ T31] #0: ffffffff90616ee8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 728.855638][ T31] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 728.866208][ T31] 1 lock held by syz.8.2982/29839: [ 728.872126][ T31] #0: ffffffff90616ee8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 728.926187][ T31] [ 728.928544][ T31] ============================================= [ 728.928544][ T31] [ 728.957579][ T31] NMI backtrace for cpu 0 [ 728.957599][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 728.957622][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 728.957628][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 728.957636][ T31] Call Trace: [ 728.957642][ T31] [ 728.957649][ T31] dump_stack_lvl+0x100/0x190 [ 728.957677][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 728.957702][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 728.957726][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 728.957750][ T31] sys_info+0x141/0x190 [ 728.957767][ T31] watchdog+0xd25/0x1050 [ 728.957788][ T31] ? __pfx_watchdog+0x10/0x10 [ 728.957803][ T31] ? __kthread_parkme+0x18c/0x230 [ 728.957823][ T31] ? kthread+0x13a/0x450 [ 728.957842][ T31] ? __pfx_watchdog+0x10/0x10 [ 728.957856][ T31] kthread+0x370/0x450 [ 728.957875][ T31] ? __pfx_kthread+0x10/0x10 [ 728.957896][ T31] ret_from_fork+0x754/0xd80 [ 728.957920][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 728.957944][ T31] ? __switch_to+0x7b4/0x1120 [ 728.957961][ T31] ? __pfx_kthread+0x10/0x10 [ 728.957983][ T31] ret_from_fork_asm+0x1a/0x30 [ 728.958008][ T31] [ 729.299556][T24532] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.312232][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 729.319102][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 729.329802][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 729.334984][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 729.345038][ T31] Call Trace: [ 729.348314][ T31] [ 729.351231][ T31] dump_stack_lvl+0x100/0x190 [ 729.355910][ T31] vpanic+0x552/0x970 [ 729.359886][ T31] ? __pfx_vpanic+0x10/0x10 [ 729.364378][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 729.370536][ T31] panic+0xd1/0xe0 [ 729.374253][ T31] ? __pfx_panic+0x10/0x10 [ 729.378661][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 729.384809][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 729.390956][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 729.397114][ T31] ? watchdog.cold+0x198/0x1ca [ 729.401973][ T31] ? watchdog+0xd35/0x1050 [ 729.406386][ T31] watchdog.cold+0x1a9/0x1ca [ 729.410983][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.415663][ T31] ? __kthread_parkme+0x18c/0x230 [ 729.420698][ T31] ? kthread+0x13a/0x450 [ 729.424931][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.429592][ T31] kthread+0x370/0x450 [ 729.433677][ T31] ? __pfx_kthread+0x10/0x10 [ 729.438279][ T31] ret_from_fork+0x754/0xd80 [ 729.442904][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 729.448115][ T31] ? __switch_to+0x7b4/0x1120 [ 729.452797][ T31] ? __pfx_kthread+0x10/0x10 [ 729.457398][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.462165][ T31] [ 729.465237][ T31] Kernel Offset: disabled [ 729.469556][ T31] Rebooting in 86400 seconds..