last executing test programs: 3m32.176385153s ago: executing program 0 (id=908): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m30.479700787s ago: executing program 0 (id=913): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x6}, @NL802154_ATTR_PEER={0x4}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) socket(0xa, 0x1, 0x100) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r3, 0x9210642d, 0xc5) setsockopt$auto_SO_MARK(r3, 0x2c5d, 0x24, &(0x7f0000000580)='{\\#\x00', 0x80000000) close_range$auto(0x2, 0x8, 0x0) 3m29.448911124s ago: executing program 0 (id=916): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r0, 0x6, 0x2b, 0x0, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000040)='/wys/kernel/ru_gen\x00\x00\x00\x00\x00\x00\x00\x00', 0x1003) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x18, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xb, 0x4cbd5d) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) setsockopt$auto(r1, 0x10000000084, 0x22, 0x0, 0x10) 3m28.638271018s ago: executing program 0 (id=917): mq_open$auto(0x0, 0xdd1, 0x8, 0x0) mq_notify$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x401870cb, r1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) r2 = eventfd$auto(0x80) read$auto(r2, 0x0, 0xcc9c) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r3, 0x0, 0x2b6) r4 = open(0x0, 0x62240, 0x154) execveat$auto(r4, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) 3m26.097186923s ago: executing program 0 (id=921): madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) r2 = socket(0x2, 0x3, 0xa) pipe2$auto(0x0, 0x80) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b75, r2, 0x6) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x5, 0x400008, 0x8, 0x9b72, 0x2, 0x7aa8f4c7) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) write$auto(0xffffffffffffffff, &(0x7f0000000000)='/dev/audio1\x00', 0x4) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) 3m23.915671936s ago: executing program 0 (id=927): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 3m8.640543145s ago: executing program 32 (id=927): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m43.654563267s ago: executing program 3 (id=1004): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r2, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0xfffffc01, 0x4, &(0x7f00000002c0)="9cb0e925b6c933c1e84975dc16630bb8b0f266d7793d8229a9d6a5dfa1591faeb97caa277628e870ede4c8395f417b1d493e45805b63a07812b75f6cd4492fdea991c15d4023d9c188cadd85207071510b6e83adfd4a4c3357c9090be67ea8", 0x9) prctl$auto_PR_PAC_GET_ENABLED_KEYS(0x3d, 0x1, 0xb82, 0xff, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) 2m40.16500441s ago: executing program 3 (id=1008): madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7aa8f4c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) write$auto(r2, &(0x7f0000000000)='/dev/audio1\x00', 0x4) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x200000000006, 0x8) 2m38.221516858s ago: executing program 3 (id=1012): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x5, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2085c2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/cpumask_isolated\x00', 0x80100, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000002000, 0x100000004, 0x8, 0x0, 0xfffffffffffffff8, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) 2m35.843575708s ago: executing program 3 (id=1016): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) lsm_set_self_attr$auto(0x8, &(0x7f0000000040)={0x6, 0xc7b, 0x2, 0xa5, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb6f9f33d5342ed76cc5453f8e8634458e6bf54825f7be456def0174640630a68b450b159e0d65748bb3538e"}, 0x6, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) 2m33.738048866s ago: executing program 3 (id=1019): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) r1 = socketpair$auto(0xb, 0x2, 0xfffffff9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r2) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000f97298a5241095d1fce08ebc00a5f6af6899878e49a7c085cfb0d38f32ed44a0894ccec7ff840b032295c53a3ccea333c0f079fa828152907d96b7647bcd2a31f07398a279753d8e2226567d948822e990e7fc9ca4fa72a4f3905286f1e22e177798301a9254f22734267bc9a37c7dc13865fca1352abbf8768dc1cc7423d208d9c10b4f4ec132a92dfb778f91003cfe9daaa93fe10d53c240abd50096dbda872284edb3dac7d97689e85eeb3d693d203ccb92de3e", @ANYRES16=r3, @ANYBLOB="090f2abd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20942, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) gettid() write$auto_snd_pcm_oss_f_reg_pcm_oss(r4, &(0x7f0000000080)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0xfffffffffffffffc) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x45, 0x40000000007) semctl$auto_GETPID(0xb3fb, 0x1, 0xb, 0x400) 2m29.876317222s ago: executing program 3 (id=1026): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) 2m14.577984913s ago: executing program 33 (id=1026): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) 1m51.790423166s ago: executing program 2 (id=1076): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x52141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0xee01, 0x0) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x0, 0x9) socket(0x2, 0x801, 0x106) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x101082, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x20) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge0/locktime\x00', 0x101202, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bridge_slave_1/ra_defrtr_metric\x00', 0x101242, 0x0) sendfile$auto(r5, r4, 0x0, 0x47) prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008013, r0, 0x1) ioctl$auto(0xffffffffffffffff, 0xab02, 0xffffffffffffffff) socket(0x10, 0x4, 0x100) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000002c0)="d05d6f2f716f74230faba010656e878f1af86cd29108de4bf8bb61f80c2d38d4a7038ba0c7c51f76e06d4a15ba90d087513109136561924733c1d54fc9a8f5ee48b052879f664c3f8328365e88c643d7de7d513c46d805b3", 0x5) 1m48.743608224s ago: executing program 2 (id=1082): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0xd0080, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/10/smp_affinity\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) pread64$auto(r2, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)="1a38") socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x20200, 0x15) 1m46.340406315s ago: executing program 2 (id=1085): r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r3, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109500, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0xffdffffffffffffc, 0x200006, 0x0) setresuid$auto(0x2, 0x7, 0x8080) socket(0x2b, 0x2, 0x20a) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x200300, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x8080, 0x0) 1m44.236743293s ago: executing program 2 (id=1089): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x4c041) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x21, 0x10d, "fd5736a95c80db53e7c4aadb2715ac2f8807943d1727244eba33fc42fe"}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x404, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x20040, 0x0) fsopen$auto(0x0, 0x1) 1m42.953282206s ago: executing program 2 (id=1090): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) shmdt$auto(0x0) unshare$auto(0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x81) getsockopt$auto(r4, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01092700000000000000000000ffff7f00000114000c00fe80000000000000000000001100000e00"/54], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m41.62671024s ago: executing program 2 (id=1094): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r5) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) mmap$auto(0x0, 0x46, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x22, 0x5, 0x400, 0x0) setsockopt$auto(0x3, 0x10f, 0x7f, 0x0, 0x14) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 1m37.3004942s ago: executing program 4 (id=1102): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x180, 0x0) select$auto(0x4, &(0x7f0000000000)={[0x60ad, 0x3, 0x2, 0x7, 0x8, 0x3, 0x7, 0xce, 0x2, 0xc87, 0x2, 0x4, 0x9, 0x2, 0xffff, 0x5]}, &(0x7f0000000100)={[0x5, 0x1, 0x8, 0x8, 0x6, 0x9, 0x0, 0x5, 0xf8, 0xffffffffffff402e, 0x800, 0x60000000, 0x40, 0x4, 0x87, 0x4]}, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xe43, 0xd, 0x10400, 0xe, 0x4, 0x80000000, 0xffffffffffffffff, [0x0, 0x0, 0x20000000], {0x5, 0x6, 0x8c48, 0x2a3, 0x100, 0x7ffffffb, 0x100101, 0x6, 0x9340}, {0xf8, 0x1, 0x1001, 0x1, 0x9, 0x40, 0x76c5, 0x8, 0x9}}) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(r0, 0x6, 0x3, 0x0, 0x401) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x4063c2, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0xc801) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x40}}, 0x54) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) getsockopt$auto(r3, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x7ffe) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) clock_nanosleep$auto(0x7, 0x7fff, &(0x7f0000000000)={0x5, 0x5}, 0x0) write$auto(r4, 0x0, 0x81) r5 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0xaa080, 0x0) pread64$auto(r5, 0x0, 0x3c02, 0x100007) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r6 = ioctl$auto_TUNSETPERSIST(r2, 0x400454cb, &(0x7f0000000180)=0x8a) read$auto_ima_measurements_ops_ima_fs(r6, &(0x7f00000001c0)=""/199, 0xc7) 1m35.714752681s ago: executing program 4 (id=1105): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x64102, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x3, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x0, 0x0, 0xe, 0x22002, 0x200, 0x0, 0x84}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 1m34.217952914s ago: executing program 4 (id=1107): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000009862dfb9f3d9f46ac9b65c3b101397246d04697a2c7896deac816148ef91732ec8ae51d505a2886d308fff735b6e63f659a124273180e411", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000006, 0x100000000, 0x0, 0x6, 0x2) bind$auto(0xffffffffffffffff, 0x0, 0x7fffffff) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0x1ffb, 0x8, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000001, 0x9d8d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0xc) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'macvlan1\x00'}) shmctl$auto_SHM_LOCK(0x3ff, 0xb, &(0x7f0000000600)={{0x3, 0xee01, 0xee00, 0x6, 0x40, 0x9, 0x7}, 0x7a0d, 0x15, 0x6, 0x6, @inferred, @raw=0x7, 0x2, 0x0, &(0x7f0000000400)="aa6b9cdbbed2d0e3a1437df6c366b5cb89e83f107a1543783b093e6c50a0dc876b2911a8b1fbe976d5c67d7da64334f9e36a8a7dc1b0fd6f188b44d4bc8daef4ca1f390ca33615abc3d1a95fa5d911ad1567de77a6e64e55b1ae09c9b6ae1eab386f7571d6f7c298a7c9f62b813c30a92b0873c3eefac903b432c365b40f50a2bc31ef5be1596fd8b4cbe565201a6ada952696159a4cb0ed5d3e4e4a6d54d8ade8b91fd4b7a32c69d212367daba373bd9ea5b08743ca9f86f54f9dd1", &(0x7f0000000500)="daecfe3a7599e7d067d4f1b0858cd2723fd3744d519a61e007118356d826ae2e6ccd220cddb61b799ba7f42046df10c291efd830a464a07d4698319fcf05e4af2fe20079b22e35c0131330379a967cb5e7c21cdd156eca22d8bfc933f0398745b03bc61e3f2035d4f8be61faa26513625e6e65ab2ef49c53ac0edeeb8d44da851bdec73f521061dd3bc26c7e3bd4e7e9156d44c3f258a2baa1ee6ad9702d8b3c81ee2ecbcd5641de91a6562eab097f108a8f9a6993ceb28725db9be28e7187c88c5b3137cf2f0f434d9917fa6b565ff127717d3784876276f07ca973c0bbf25b804e324e2ac4e14967d2bb20cc08"}) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x40) 1m33.757854635s ago: executing program 1 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0x7ff, 0x8000, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) open(0x0, 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x8, 0xd, 0x7fffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x3, 0x80000000, 0x5f, 0x7ffffffd, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x814) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 1m32.013348933s ago: executing program 1 (id=1110): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) socket(0x2, 0x1, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r4, 0x5646, r4) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000280)=""/40, 0x28) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r3, 0x0, r3, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r5, 0x5457, 0xd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2511000000a3002a00221ada28c3b835ac22c9b00bfd5894dca7ed19c82e324edbb5dec7289433783809e7692cdc8b70348d4980009499f433a7f57c95279dd2f6114495580c2740d7ac0ffeac969a8ac19fa27d50ca2fe215e2f7bb9fdda4377076d1587807cf6d419d45e665031c12784793f345375f76b3413e50acdc8fdf7186893d701e1a6f3f2a94fd921137d651a30c0e2f1399694a65614814fae66807b99f30922bb6fe70fbc727000800c3000300000005003e00c11d82b4630535483ce6e1"], 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x840) socket(0x1d, 0x2, 0x3) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r6, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) 1m31.847561044s ago: executing program 4 (id=1111): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) r1 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8030000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fddbdf250c0000000500120008000000b9032e8008004a004100000008000000", @ANYRES32=0x0, @ANYBLOB="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"/933], 0x3d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x88001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f00000002c0)="f618de", 0x3) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x100, 0x400008, 0x3, 0x10, 0x2, 0xfffffffffffffffb) kexec_load$auto(0x80000100008, 0x0, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@isdn={0x22, 0xf3, 0x6, 0xf9, 0x4}, 0x10) unshare$auto(0x40000080) io_uring_setup$auto(0x4c2, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001100)=""/4105, 0x1009) pwrite64$auto(0xffffffffffffffff, 0x0, 0x1, 0x27) 1m30.246826501s ago: executing program 4 (id=1113): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nfs\x00\"p\x17\x9b\xdd\xb4\xed\xb9\xb0\xc7@\xd0_\xf9\xa1\x17tP\x86\xb1,\x93\x87\xae\x03\x8a\xc4\xb5q\xd4\x8c\xc3\xa2?\xe7\xf4\xb2\xd4\xe1\x93A+\xe9\x8d\xc9\xac9|\xc7\t\xff\'\xaa\xac|\xaa\x85\xa9\xd4j\x12\xca\xfe', 0x6, &(0x7f00000004c0)="77bec3605f85e082fbcf491e2b3b12fde18109d1f64859f820ba86bbb7abcf4c75f53e3ecb7fd57568") ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x9, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80080) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x4, 0x8000) ioctl$auto_BLKSSZGET(r5, 0x1268, 0x0) 1m30.244719668s ago: executing program 1 (id=1114): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r0 = ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000540)={0x2, &(0x7f0000000500)={0xa7, 0xf3, 0x1, @raw=0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r3, @ANYBLOB="38df14f698f9fa936f37db4171a4e378b2b02cca032ac36b187536206ed0bf68e0b62c5dd6164c54bfc950d0db8994e4b80ec8ec92b7d1076af4344d9724ea3823929f5850779c3434b297695e2889727bce7a085e017e027b9e98be0d0000440799b7c72e23ffac3dff1282b2b8d9cec9a13dd2a2476991a694e98c16551ce2a1d0a2cf1da448f3a3ccdf5a7a8179ee2f8abacf29e8cb095e21b455e256a6d5bfff32e67aa2bb609b989e9574b373ffaa4300b976f0f69a7f59f1c3dbd4edff6e574695fd471b83a6a922b042589e6845566fa965a3f1642c7ad156d691f80f2c68dc6332587fd7eaf781c925748db9cf03f141941bfe2d2093b98a1e63d337dc15d69a05c7f754ecbde1eeeca6c6c01fd43b6c2519c3b6e0910629add3b181e879c773"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002cbd7000fcdbdf25030000001c00018008000100000200000800010001000000080001000500000044000180080001000000000008000200818100000800020001f8ffff080001004f0e00bfea1800419e08bdfe8b89d2000800010001000000502fe021ee08"], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clock_adjtime$auto(0x1, &(0x7f0000000280)={0xfff, 0x0, 0x6fe, 0x40004, 0x7, 0x4, 0x8227, 0x0, 0x2, 0x0, 0x8, {0x7, 0x800}, 0x101, 0xf8, 0xa, 0xd94, 0x0, 0x1, 0x4382, 0x6, 0xa9, 0xfffffffffffffff6, 0xfffffffe}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/sysname\x00', 0x80002, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x9}, 0xb) write$auto(r4, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r6, 0x0, 0xfffffdef) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r7, &(0x7f0000000040)="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", 0x4b8) 1m28.419050851s ago: executing program 1 (id=1116): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) sendfile$auto(r3, r3, 0x0, 0xcd) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000008c0)=""/61, 0x3d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) memfd_create$auto(0x0, 0xe) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x1206c2, 0x0) write$auto(r6, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r7, 0x5425, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r8, 0x5408, 0x0) mremap$auto(0x200000, 0x7, 0x3fd6, 0x3, 0x20000000) 1m27.971623269s ago: executing program 4 (id=1117): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ipvlan0/temp_valid_lft\x00', 0x2000, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x801, 0x100) ioctl$auto(0x3, 0x894b, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(r0, 0x0, 0x1ff) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x1a4) read$auto(r3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x123240, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 1m26.959278523s ago: executing program 1 (id=1119): mmap$auto(0xfffffffffffffffc, 0x4021009, 0x7fff, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) capset$auto(0x0, &(0x7f0000000080)={0x9, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) writev$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x8802, 0x0) write$auto(r0, &(0x7f0000000140)='\x91[', 0x6) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fanotify_init$auto(0x602, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x165282, 0xe1d2b27bdc14aad9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x6, 0x2, "020000000000"}, 0x3ffff) write$auto_kmsg_fops_printk(r1, &(0x7f00000002c0)="3cf28b93891ad1ee39ef3700921c0900000000000000fd288499c5325908e75ca66ab7316de9259162f4fe94506201c79342fadfdbc0d100000000000000000000003845e799443bb112ee5100", 0x19) mkdir$auto(0x0, 0x8001) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, 0x0, 0x0, 0x339, 0x0) userfaultfd$auto(0x1) 1m26.411641233s ago: executing program 34 (id=1094): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r5) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) mmap$auto(0x0, 0x46, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x22, 0x5, 0x400, 0x0) setsockopt$auto(0x3, 0x10f, 0x7f, 0x0, 0x14) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 1m25.865877906s ago: executing program 1 (id=1121): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r0, 0xc, &(0x7f0000000080)='*fK\x00\x00\xd3\x04\xd3\xe8\x8bP\xfb\xd4\xe1p\x01\xb2\xef\xdco\x81\xf7t\x1d\xe2\x8a\xcb1)9\xf0\x0f\"\xcc,\xa8\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) quotactl_fd$auto(r1, 0x4, 0xffffffffffffffff, 0x0) setpgid$auto(0x0, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) capget$auto(0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x3, 0xd6000000) setreuid$auto(0x2, 0x87) r3 = timerfd_create$auto(0x9, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000000c0), r3) 1m12.439053053s ago: executing program 35 (id=1117): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ipvlan0/temp_valid_lft\x00', 0x2000, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x801, 0x100) ioctl$auto(0x3, 0x894b, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(r0, 0x0, 0x1ff) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x1a4) read$auto(r3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x123240, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 1m10.41557638s ago: executing program 36 (id=1121): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r0, 0xc, &(0x7f0000000080)='*fK\x00\x00\xd3\x04\xd3\xe8\x8bP\xfb\xd4\xe1p\x01\xb2\xef\xdco\x81\xf7t\x1d\xe2\x8a\xcb1)9\xf0\x0f\"\xcc,\xa8\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) quotactl_fd$auto(r1, 0x4, 0xffffffffffffffff, 0x0) setpgid$auto(0x0, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) capget$auto(0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x3, 0xd6000000) setreuid$auto(0x2, 0x87) r3 = timerfd_create$auto(0x9, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000000c0), r3) 38.207855187s ago: executing program 6 (id=1193): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309, 0x0) read$auto_clk_dump_fops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) 34.128380175s ago: executing program 6 (id=1202): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/net/snmp\x00', 0x101100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/103, 0x67) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) unshare$auto(0x40000080) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000280)="978693dc87b1c1fd2f1eb908a830a927", 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 29.592732492s ago: executing program 6 (id=1208): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7fb, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/midi2\x00', 0x4000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x5, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0005, 0xb) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptybd\x00', 0x6202, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) mmap$auto(0x7, 0x400008, 0xcf, 0x15, r1, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1fc, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0x3, 0x1, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) 27.929709129s ago: executing program 6 (id=1212): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff0500090001000000"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4db0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffc]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r4, 0x0, 0x594c, 0x9fffffffd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r6, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 25.99099013s ago: executing program 6 (id=1216): mmap$auto(0xfffffffffffffffc, 0x4021009, 0x7fff, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) capset$auto(0x0, &(0x7f0000000080)={0x9, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) writev$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x8802, 0x0) write$auto(r0, &(0x7f0000000140)='\x91[', 0x6) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fanotify_init$auto(0x602, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x165282, 0xe1d2b27bdc14aad9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x6, 0x2, "020000000000"}, 0x3ffff) mkdir$auto(0x0, 0x8001) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, 0x0, 0x0, 0x339, 0x0) userfaultfd$auto(0x1) 24.628179973s ago: executing program 6 (id=1218): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r3 = socket(0xa, 0x2, 0x88) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r3, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) close_range$auto(0x2, 0x8, 0x0) 19.664604654s ago: executing program 7 (id=1227): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) epoll_create$auto(0x4) socket(0x1, 0x80003, 0x300) 17.643512358s ago: executing program 7 (id=1231): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) unshare$auto(0x40000080) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x8001, 0x7fffffff, 0x5, 0x18, r1, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x20200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/vulnerabilities/mmio_stale_data\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) ioctl$auto(0x20000000000003, 0x8947, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) 16.215689187s ago: executing program 7 (id=1235): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2c0880, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x0, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0xf, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x7, 0x75, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) r4 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 15.673064101s ago: executing program 8 (id=1236): mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x8801) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2c, 0x3, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x6c0902, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x101202, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) recvmmsg$auto(0x3, 0x0, 0xfff, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) 14.329643576s ago: executing program 8 (id=1237): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 14.329304265s ago: executing program 5 (id=1238): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRES32, @ANYBLOB="0c00290084660000000000008d1083b7312d58c5ebaf487bb998f3418a8151bb07f2443548e4f835120dabebd9cfacb4df6c09d5c51d5a796dcd884b3e930a755c3e6e9a8bf602ba954dddf50ba937da8e0eb88ee25349d036733e829ade17deaae15e1e9298ffa9cd09d12467d4b27c2248f3edabe64261dd558c1b9e518a124437c3303efdaea14284ea051911d982703916a3f34e0c89480014f473c0ff7dc811d675c55aafeab4d5d79dd93004732cfecf02265e2993274e159f1788f1f775bbefa7dc340bd198fa7cfeb7b5eee7dae5e118a7f160e9e3f016e93bc1cf8d297c2528030dee4f73abb51c22b64bbc744da934cb7396ef4d43cef20800a100", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r6, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf251d0000004301188014002100fc0200000000000000000000000000003600bd0068f76224d76fcedd858a40d2e4daac3a906310b4882866e15a38c714c9301ed5c7bc670cf749f0cdf4d958ac4a46c983cc4f0000018afb34431813703fe999e41360aa2f78624f27b11e5a80a7355d38b6a4c7eca4adda34ea7b2c60ffec2b34de68f8ff238429af8ce6285ab588c4cbe1d1b9824702b1b3566b51eb0437240289d7fdcbf3ef53cadf457e49070342cb80a88f3f14dca7b272e3137c4e10ce76365024e974704d9a5595511d1f39495f2163c2230d709bd2265fdf2d1186082017d28e03ab27269c84a9209ad6f713d57101963260539b122401c9b87400fb6d4b3bc1372583932e221d8f717a5356013ff43bd8a3750baecad4d4d3deafe0a6cf783bfeaedc61d5f02142c3cd9d90bd596f2170c6488482f92288f2c3490acdd285c57f422cb30008000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0xa, 0x0) 11.73889342s ago: executing program 8 (id=1239): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008050}, 0x80) 11.022896589s ago: executing program 5 (id=1240): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0x400064c8, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) setpriority$auto_PRIO_USER(0x2, 0x0, 0x3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x20000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') unshare$auto(0xa0e3) 10.720066488s ago: executing program 8 (id=1241): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x6, 0xffff, 0x6, 0x8032d4, 0x10000, 0x7fffffff) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x40054) socket$nl_generic(0x10, 0x3, 0x10) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc0c00, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r4, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/buffer_percent\x00', 0xbc102, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0x91) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x2, 0xf2cf, 0x4, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x3ff}) timer_gettime$auto(0x4, &(0x7f00000001c0)={{0xc, 0x6}, {0x6, 0xd}}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) 10.640292942s ago: executing program 7 (id=1242): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x404080, 0x0) write$auto(r0, 0x0, 0x7ef) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/116, 0x74) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) socket(0x28, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x3, 0xd, 0x1d, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x7f, 0x3, 0x1, 0x9, 0x1, 0x400000]}, 0x0) write$auto(r2, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1\x05\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x89C:\xc3\xcbx*=\x12\xb4q\xeeC\x81\n\\_\x04D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\x9e\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x0, 0x6d3e, 0x9, 0x8cec, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) fchownat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) 10.064319198s ago: executing program 5 (id=1243): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r2, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0xfffffc01, 0x4, &(0x7f00000002c0)="9cb0e925b6c933c1e84975dc16630bb8b0f266d7793d8229a9d6a5dfa1591faeb97caa277628e870ede4c8395f417b1d493e45805b63a07812b75f6cd4492fdea991c15d4023d9c188cadd85207071510b6e83adfd4a4c3357c9090be67ea8", 0x9) prctl$auto_PR_PAC_GET_ENABLED_KEYS(0x3d, 0x1, 0xb82, 0xff, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) 9.445241129s ago: executing program 37 (id=1218): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r3 = socket(0xa, 0x2, 0x88) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r3, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.487888772s ago: executing program 9 (id=1244): r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) getsockopt$auto_SO_TXREHASH(r0, 0xced5, 0x4a, &(0x7f0000000080)='/dev/kvm\x00', &(0x7f0000000180)=0x7) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mlock$auto(0x1, 0x6) mbind$auto(0x80000000, 0x100000004, 0x5, 0x0, 0x2, 0x80000005) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x2, 0x5, 0x0) 4.487066818s ago: executing program 7 (id=1252): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 2.627599764s ago: executing program 9 (id=1245): mmap$auto(0x8000000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3f, 0x8, 0x0, 0xb906, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0xa, 0x80000, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) write$auto(0xffffffffffffffff, 0x0, 0x98c7) connect$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/interrupts\x00', 0x1a9a42, 0x0) 2.626856879s ago: executing program 8 (id=1254): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x801, 0x6) setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0xf0}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x2, 0x2003f2, 0x15) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000001c0), r4) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x1a2f42, 0x0) 2.622731094s ago: executing program 5 (id=1255): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x46, 0x0, "bdadcc2dd04f9f2614055bc65da4f014eecee16b30577a4d6167fed4b351b01d7a1bf0270ce8c9537a669af2a87abf9057570de8d1373b5e4fc959be811b82c9d656"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r2, 0x0, 0x3) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x25c000, 0x14) r4 = fcntl$auto(r3, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) 2.40999732s ago: executing program 7 (id=1246): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/0/smp_affinity\x00', 0x38282, 0x0) pread64$auto(r0, 0x0, 0x7, 0xffff) mmap$auto(0x0, 0x3, 0x6, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0xbe, &(0x7f0000000200)=@link_detach={r1}, 0x26) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r4 = socket(0x9, 0x2, 0x4) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x9) socket(0x3, 0x4, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/block/loop11/queue/stable_writes\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0x40000df, 0x9b72, r2, 0x8001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x1a, 0x2, 0x0) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf25040000001c000180040003000800010005000000080001000500000004000300862e75d7d3e50e7023333d18bc515aa61efbfb17f43097a34c2f0aff90f8479b9518c1198c36f7eb4dbcdbc626de7af668efd863e8b17edc64a4f25c56cbd06f9331973e11b8dfb8513387a305496ffbd911ebbc13ed13c306ca4cddc6ae3f16af35210a333d2e0fbda3dc20543a3def0bf2c8cfc1bac1eca641f9d04b385ec9de30fd57f8ee30655478cc63f6b6e6e74bdcfe77ec3fa1f3b7f83d4e8b5049529b59b26b4ebfe4999b7402496125a7dfd85f8fa3b6a3950d506d1b2e181d2746028f0f6bc1e0bf2df980e4fb68febb3a061618f19f763a32d2d1ffcb22c93b09e762463af356d4b9dbdddbf4a7c9d5bf6dec49a61fa430e8600d27222c7c2fdd6352f5f3e6760e882d5f4be8eeb6a4a0ade15633"], 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) mmap$auto(0xfeffffffffffffff, 0xa00006, 0x4, 0x13, r3, 0x300000000005) r7 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r7) 1.63417795s ago: executing program 5 (id=1247): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) write$auto(r0, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) read$auto(0x3, 0x0, 0x80) sendfile$auto(r4, r4, 0x0, 0x5) socket(0x2, 0x3, 0xff) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) 263.088405ms ago: executing program 8 (id=1250): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r0, 0x4) r3 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) r4 = geteuid() keyctl$auto(0x1e, r4, r4, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={0x0, 0x12c0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0xac, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1000}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e213626609002100b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}]}, 0xac}, 0x1, 0x68, 0x0, 0x24040084}, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x20000) unshare$auto(0x20000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) 0s ago: executing program 9 (id=1251): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008050}, 0x80) kernel console output (not intermixed with test programs): ute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.975871][ T8431] Call Trace: [ 242.975880][ T8431] [ 242.975891][ T8431] dump_stack_lvl+0x16c/0x1f0 [ 242.975932][ T8431] should_fail_ex+0x512/0x640 [ 242.975973][ T8431] get_futex_key+0x1d0/0x1560 [ 242.976009][ T8431] ? __pfx_get_futex_key+0x10/0x10 [ 242.976036][ T8431] ? rcu_is_watching+0x12/0xc0 [ 242.976063][ T8431] ? kfree+0x24f/0x4d0 [ 242.976085][ T8431] ? bpf_lsm_file_permission+0x9/0x10 [ 242.976121][ T8431] ? security_file_permission+0x71/0x210 [ 242.976164][ T8431] futex_wake+0xea/0x530 [ 242.976201][ T8431] ? __lock_acquire+0x62e/0x1ce0 [ 242.976243][ T8431] ? __pfx_futex_wake+0x10/0x10 [ 242.976280][ T8431] ? __pfx_vfs_writev+0x10/0x10 [ 242.976322][ T8431] do_futex+0x1e3/0x350 [ 242.976355][ T8431] ? __pfx_do_futex+0x10/0x10 [ 242.976397][ T8431] __x64_sys_futex+0x1e0/0x4c0 [ 242.976434][ T8431] ? __pfx___x64_sys_futex+0x10/0x10 [ 242.976468][ T8431] ? __pfx_do_writev+0x10/0x10 [ 242.976506][ T8431] do_syscall_64+0xcd/0x490 [ 242.976542][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.976568][ T8431] RIP: 0033:0x7f990dd8ebe9 [ 242.976588][ T8431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.976613][ T8431] RSP: 002b:00007f990eb9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 242.976638][ T8431] RAX: ffffffffffffffda RBX: 00007f990dfb5fa8 RCX: 00007f990dd8ebe9 [ 242.976655][ T8431] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f990dfb5fac [ 242.976670][ T8431] RBP: 00007f990dfb5fa0 R08: 00007f990eb9b000 R09: 0000000000000000 [ 242.976688][ T8431] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 242.976703][ T8431] R13: 00007f990dfb6038 R14: 00007ffedc47d4a0 R15: 00007ffedc47d588 [ 242.976737][ T8431] [ 244.230696][ T8457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.698'. [ 244.474656][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 244.591053][ T8457] team0 (unregistering): Port device team_slave_0 removed [ 244.619092][ T8457] team0 (unregistering): Port device team_slave_1 removed [ 244.708430][ T8460] HfR: entered promiscuous mode [ 244.719442][ T8461] HfR: left promiscuous mode [ 244.875795][ T8463] HfR: entered promiscuous mode [ 245.291328][ T8472] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 245.342830][ T8472] FAULT_INJECTION: forcing a failure. [ 245.342830][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 245.389243][ T8475] serio: Serial port pty6 [ 245.395911][ T8472] CPU: 0 UID: 0 PID: 8472 Comm: syz.0.701 Not tainted syzkaller #0 PREEMPT(full) [ 245.395938][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.395948][ T8472] Call Trace: [ 245.395953][ T8472] [ 245.395959][ T8472] dump_stack_lvl+0x16c/0x1f0 [ 245.395983][ T8472] should_fail_ex+0x512/0x640 [ 245.396004][ T8472] ? __kmalloc_noprof+0xbf/0x510 [ 245.396028][ T8472] ? __netlink_kernel_create+0x17f/0x750 [ 245.396048][ T8472] should_failslab+0xc2/0x120 [ 245.396068][ T8472] __kmalloc_noprof+0xd2/0x510 [ 245.396089][ T8472] __netlink_kernel_create+0x17f/0x750 [ 245.396110][ T8472] ? __pfx___netlink_kernel_create+0x10/0x10 [ 245.396134][ T8472] ? __pfx_genl_pernet_init+0x10/0x10 [ 245.396154][ T8472] genl_pernet_init+0xbd/0x170 [ 245.396175][ T8472] ? __pfx_genl_pernet_init+0x10/0x10 [ 245.396195][ T8472] ? lockdep_init_map_type+0x5c/0x280 [ 245.396214][ T8472] ? __pfx_genl_rcv+0x10/0x10 [ 245.396233][ T8472] ? __pfx_genl_bind+0x10/0x10 [ 245.396252][ T8472] ? __pfx_genl_unbind+0x10/0x10 [ 245.396270][ T8472] ? __pfx_genl_release+0x10/0x10 [ 245.396290][ T8472] ? debug_mutex_init+0x37/0x70 [ 245.396306][ T8472] ops_init+0x1e2/0x5f0 [ 245.396328][ T8472] setup_net+0x10f/0x380 [ 245.396345][ T8472] ? lockdep_init_map_type+0x5c/0x280 [ 245.396365][ T8472] ? __pfx_setup_net+0x10/0x10 [ 245.396384][ T8472] ? debug_mutex_init+0x37/0x70 [ 245.396400][ T8472] copy_net_ns+0x2a6/0x5f0 [ 245.396423][ T8472] create_new_namespaces+0x3ea/0xa90 [ 245.396444][ T8472] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 245.396462][ T8472] ksys_unshare+0x45b/0xa40 [ 245.396482][ T8472] ? __pfx_ksys_unshare+0x10/0x10 [ 245.396501][ T8472] ? xfd_validate_state+0x61/0x180 [ 245.396527][ T8472] __x64_sys_unshare+0x31/0x40 [ 245.396546][ T8472] do_syscall_64+0xcd/0x490 [ 245.396566][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.396580][ T8472] RIP: 0033:0x7fc2d058ebe9 [ 245.396593][ T8472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.396607][ T8472] RSP: 002b:00007fc2d14ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 245.396624][ T8472] RAX: ffffffffffffffda RBX: 00007fc2d07b5fa0 RCX: 00007fc2d058ebe9 [ 245.396640][ T8472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 245.396653][ T8472] RBP: 00007fc2d0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 245.396666][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.396680][ T8472] R13: 00007fc2d07b6038 R14: 00007fc2d07b5fa0 R15: 00007ffc348806a8 [ 245.396712][ T8472] [ 246.276936][ T8481] netlink: 330 bytes leftover after parsing attributes in process `syz.3.703'. [ 248.448008][ T8506] netlink: 338 bytes leftover after parsing attributes in process `syz.3.709'. [ 248.458757][ T8516] ======================================================= [ 248.458757][ T8516] WARNING: The mand mount option has been deprecated and [ 248.458757][ T8516] and is ignored by this kernel. Remove the mand [ 248.458757][ T8516] option from the mount to silence this warning. [ 248.458757][ T8516] ======================================================= [ 248.530325][ T8506] netlink: 338 bytes leftover after parsing attributes in process `syz.3.709'. [ 248.559268][ T8506] netlink: 290 bytes leftover after parsing attributes in process `syz.3.709'. [ 248.570797][ T8506] veth0_macvtap: left promiscuous mode [ 248.602560][ T8506] netlink: 290 bytes leftover after parsing attributes in process `syz.3.709'. [ 248.664891][ T8506] veth0_macvtap: entered promiscuous mode [ 249.651413][ T8528] netlink: 330 bytes leftover after parsing attributes in process `syz.3.713'. [ 249.672859][ T8528] net veth1_virt_wifi : renamed from virt_wifi0 [ 249.877502][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 251.163615][ T8555] FAULT_INJECTION: forcing a failure. [ 251.163615][ T8555] name failslab, interval 1, probability 0, space 0, times 0 [ 251.211156][ T8555] CPU: 1 UID: 0 PID: 8555 Comm: syz.0.719 Not tainted syzkaller #0 PREEMPT(full) [ 251.211192][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.211207][ T8555] Call Trace: [ 251.211217][ T8555] [ 251.211227][ T8555] dump_stack_lvl+0x16c/0x1f0 [ 251.211265][ T8555] should_fail_ex+0x512/0x640 [ 251.211302][ T8555] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 251.211340][ T8555] should_failslab+0xc2/0x120 [ 251.211374][ T8555] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 251.211414][ T8555] ? d_lookup+0xe7/0x190 [ 251.211453][ T8555] ? alloc_inode+0xc3/0x240 [ 251.211495][ T8555] alloc_inode+0xc3/0x240 [ 251.211533][ T8555] new_inode+0x22/0x1c0 [ 251.211574][ T8555] binderfs_create_file+0xb2/0x3b0 [ 251.211614][ T8555] binderfs_fill_super+0xa18/0x1360 [ 251.211654][ T8555] ? __pfx_binderfs_fill_super+0x10/0x10 [ 251.211717][ T8555] ? shrinker_register+0x1a8/0x260 [ 251.211752][ T8555] ? sget_fc+0x808/0xc20 [ 251.211779][ T8555] ? apparmor_capable+0x114/0x1d0 [ 251.211807][ T8555] ? __pfx_set_anon_super_fc+0x10/0x10 [ 251.211835][ T8555] ? __pfx_binderfs_fill_super+0x10/0x10 [ 251.211866][ T8555] get_tree_nodev+0xdd/0x190 [ 251.211898][ T8555] vfs_get_tree+0x8b/0x340 [ 251.211923][ T8555] vfs_cmd_create+0xd7/0x2a0 [ 251.211959][ T8555] __do_sys_fsconfig+0x7b8/0xbe0 [ 251.211997][ T8555] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 251.212050][ T8555] do_syscall_64+0xcd/0x490 [ 251.212088][ T8555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.212115][ T8555] RIP: 0033:0x7fc2d058ebe9 [ 251.212136][ T8555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.212161][ T8555] RSP: 002b:00007fc2d14ab038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 251.212186][ T8555] RAX: ffffffffffffffda RBX: 00007fc2d07b5fa0 RCX: 00007fc2d058ebe9 [ 251.212204][ T8555] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000001 [ 251.212219][ T8555] RBP: 00007fc2d0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 251.212235][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.212252][ T8555] R13: 00007fc2d07b6038 R14: 00007fc2d07b5fa0 R15: 00007ffc348806a8 [ 251.212289][ T8555] [ 253.619201][ T8582] netlink: 342 bytes leftover after parsing attributes in process `syz.1.724'. [ 254.656255][ T8590] FAULT_INJECTION: forcing a failure. [ 254.656255][ T8590] name failslab, interval 1, probability 0, space 0, times 0 [ 254.675086][ T8590] CPU: 1 UID: 0 PID: 8590 Comm: syz.1.727 Not tainted syzkaller #0 PREEMPT(full) [ 254.675125][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.675141][ T8590] Call Trace: [ 254.675151][ T8590] [ 254.675161][ T8590] dump_stack_lvl+0x16c/0x1f0 [ 254.675201][ T8590] should_fail_ex+0x512/0x640 [ 254.675236][ T8590] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 254.675272][ T8590] should_failslab+0xc2/0x120 [ 254.675306][ T8590] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 254.675336][ T8590] ? __kernfs_new_node+0xd2/0x8e0 [ 254.675375][ T8590] __kernfs_new_node+0xd2/0x8e0 [ 254.675424][ T8590] ? __pfx___kernfs_new_node+0x10/0x10 [ 254.675466][ T8590] ? find_held_lock+0x2b/0x80 [ 254.675494][ T8590] ? kernfs_root+0xee/0x2a0 [ 254.675533][ T8590] kernfs_new_node+0x13c/0x1e0 [ 254.675576][ T8590] __kernfs_create_file+0x53/0x350 [ 254.675607][ T8590] sysfs_add_file_mode_ns+0x207/0x3c0 [ 254.675648][ T8590] internal_create_group+0x578/0xf30 [ 254.675691][ T8590] ? __pfx_internal_create_group+0x10/0x10 [ 254.675739][ T8590] sysfs_slab_add+0x1a3/0x1e0 [ 254.675770][ T8590] do_kmem_cache_create+0x529/0x720 [ 254.675801][ T8590] ? __kmem_cache_create_args+0x205/0x390 [ 254.675835][ T8590] __kmem_cache_create_args+0x225/0x390 [ 254.675868][ T8590] mon_text_open+0x313/0x4f0 [ 254.675898][ T8590] ? __pfx_mon_text_open+0x10/0x10 [ 254.675924][ T8590] ? __debugfs_file_get+0x1fe/0x840 [ 254.675964][ T8590] ? __pfx_mon_text_ctor+0x10/0x10 [ 254.675992][ T8590] ? __pfx_apparmor_file_open+0x10/0x10 [ 254.676019][ T8590] ? lockdown_is_locked_down+0x3f/0x130 [ 254.676044][ T8590] ? bpf_lsm_locked_down+0x9/0x10 [ 254.676074][ T8590] ? __pfx_mon_text_open+0x10/0x10 [ 254.676100][ T8590] full_proxy_open_regular+0x1b6/0x360 [ 254.676129][ T8590] do_dentry_open+0x982/0x1530 [ 254.676162][ T8590] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 254.676196][ T8590] vfs_open+0x82/0x3f0 [ 254.676239][ T8590] path_openat+0x1de4/0x2cb0 [ 254.676282][ T8590] ? __pfx_path_openat+0x10/0x10 [ 254.676323][ T8590] do_filp_open+0x20b/0x470 [ 254.676354][ T8590] ? __pfx_do_filp_open+0x10/0x10 [ 254.676418][ T8590] ? alloc_fd+0x471/0x7d0 [ 254.676457][ T8590] do_sys_openat2+0x11b/0x1d0 [ 254.676496][ T8590] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.676537][ T8590] ? __pfx___might_resched+0x10/0x10 [ 254.676574][ T8590] __x64_sys_openat+0x174/0x210 [ 254.676612][ T8590] ? __pfx___x64_sys_openat+0x10/0x10 [ 254.676666][ T8590] do_syscall_64+0xcd/0x490 [ 254.676702][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.676726][ T8590] RIP: 0033:0x7f8cc598ebe9 [ 254.676747][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.676773][ T8590] RSP: 002b:00007f8cc3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.676797][ T8590] RAX: ffffffffffffffda RBX: 00007f8cc5bb5fa0 RCX: 00007f8cc598ebe9 [ 254.676813][ T8590] RDX: 0000000000101080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 254.676830][ T8590] RBP: 00007f8cc5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 254.676846][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.676860][ T8590] R13: 00007f8cc5bb6038 R14: 00007f8cc5bb5fa0 R15: 00007ffeb4df0ac8 [ 254.676895][ T8590] [ 255.028829][ T8590] SLUB: Unable to add cache mon_text_ffff888032eab000 to sysfs [ 255.194482][ T8596] FAULT_INJECTION: forcing a failure. [ 255.194482][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 255.426538][ T8596] CPU: 0 UID: 0 PID: 8596 Comm: syz.0.728 Not tainted syzkaller #0 PREEMPT(full) [ 255.426580][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.426597][ T8596] Call Trace: [ 255.426607][ T8596] [ 255.426621][ T8596] dump_stack_lvl+0x16c/0x1f0 [ 255.426660][ T8596] should_fail_ex+0x512/0x640 [ 255.426696][ T8596] ? fs_reclaim_acquire+0xae/0x150 [ 255.426737][ T8596] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 255.426775][ T8596] should_failslab+0xc2/0x120 [ 255.426809][ T8596] __kmalloc_noprof+0xd2/0x510 [ 255.426848][ T8596] tomoyo_realpath_from_path+0xc2/0x6e0 [ 255.426889][ T8596] ? tomoyo_profile+0x47/0x60 [ 255.426916][ T8596] tomoyo_path_perm+0x274/0x460 [ 255.426942][ T8596] ? tomoyo_path_perm+0x260/0x460 [ 255.426973][ T8596] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 255.427019][ T8596] ? do_raw_spin_lock+0x12c/0x2b0 [ 255.427056][ T8596] ? find_held_lock+0x2b/0x80 [ 255.427111][ T8596] ? __pfx_current_check_access_path+0x10/0x10 [ 255.427152][ T8596] ? simple_lookup+0x105/0x1d0 [ 255.427182][ T8596] ? lookup_one_qstr_excl+0xb3/0x250 [ 255.427225][ T8596] tomoyo_path_symlink+0x97/0xe0 [ 255.427266][ T8596] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 255.427303][ T8596] ? find_held_lock+0x2b/0x80 [ 255.427327][ T8596] ? __might_fault+0xe3/0x190 [ 255.427363][ T8596] security_path_symlink+0x152/0x2e0 [ 255.427396][ T8596] do_symlinkat+0x10d/0x310 [ 255.427431][ T8596] ? __pfx_do_symlinkat+0x10/0x10 [ 255.427464][ T8596] ? getname_flags.part.0+0x1c5/0x550 [ 255.427501][ T8596] ? do_execveat_common.isra.0+0x4c6/0x610 [ 255.427538][ T8596] __x64_sys_symlinkat+0x93/0xc0 [ 255.427583][ T8596] do_syscall_64+0xcd/0x490 [ 255.427623][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.427655][ T8596] RIP: 0033:0x7fc2d058ebe9 [ 255.427677][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.427703][ T8596] RSP: 002b:00007fc2d14ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 255.427729][ T8596] RAX: ffffffffffffffda RBX: 00007fc2d07b5fa0 RCX: 00007fc2d058ebe9 [ 255.427748][ T8596] RDX: 0000200000000040 RSI: ffffffffffffff9c RDI: 0000200000000000 [ 255.427765][ T8596] RBP: 00007fc2d0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 255.427782][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.427799][ T8596] R13: 00007fc2d07b6038 R14: 00007fc2d07b5fa0 R15: 00007ffc348806a8 [ 255.427835][ T8596] [ 255.696808][ T8596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.807225][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.813575][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.228310][ T8640] serio: Serial port pty6 [ 261.747689][ T8674] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 264.287170][ T8710] random: crng reseeded on system resumption [ 264.749172][ T8714] FAULT_INJECTION: forcing a failure. [ 264.749172][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 264.814502][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.3.755 Not tainted syzkaller #0 PREEMPT(full) [ 264.814539][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.814555][ T8714] Call Trace: [ 264.814565][ T8714] [ 264.814575][ T8714] dump_stack_lvl+0x16c/0x1f0 [ 264.814616][ T8714] should_fail_ex+0x512/0x640 [ 264.814660][ T8714] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 264.814697][ T8714] should_failslab+0xc2/0x120 [ 264.814748][ T8714] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 264.814780][ T8714] ? __kernfs_new_node+0xd2/0x8e0 [ 264.814819][ T8714] __kernfs_new_node+0xd2/0x8e0 [ 264.814858][ T8714] ? __pfx___kernfs_new_node+0x10/0x10 [ 264.814900][ T8714] ? find_held_lock+0x2b/0x80 [ 264.814928][ T8714] ? kernfs_root+0xee/0x2a0 [ 264.814967][ T8714] kernfs_new_node+0x13c/0x1e0 [ 264.815011][ T8714] __kernfs_create_file+0x53/0x350 [ 264.815043][ T8714] sysfs_add_file_mode_ns+0x207/0x3c0 [ 264.815083][ T8714] internal_create_group+0x578/0xf30 [ 264.815127][ T8714] ? __pfx_internal_create_group+0x10/0x10 [ 264.815176][ T8714] sysfs_slab_add+0x1a3/0x1e0 [ 264.815208][ T8714] do_kmem_cache_create+0x529/0x720 [ 264.815240][ T8714] ? __kmem_cache_create_args+0x205/0x390 [ 264.815274][ T8714] __kmem_cache_create_args+0x225/0x390 [ 264.815307][ T8714] mon_text_open+0x313/0x4f0 [ 264.815338][ T8714] ? __pfx_mon_text_open+0x10/0x10 [ 264.815365][ T8714] ? __debugfs_file_get+0x1fe/0x840 [ 264.815405][ T8714] ? __pfx_mon_text_ctor+0x10/0x10 [ 264.815432][ T8714] ? __pfx_apparmor_file_open+0x10/0x10 [ 264.815464][ T8714] ? lockdown_is_locked_down+0x3f/0x130 [ 264.815489][ T8714] ? bpf_lsm_locked_down+0x9/0x10 [ 264.815519][ T8714] ? __pfx_mon_text_open+0x10/0x10 [ 264.815547][ T8714] full_proxy_open_regular+0x1b6/0x360 [ 264.815579][ T8714] do_dentry_open+0x982/0x1530 [ 264.815612][ T8714] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 264.815646][ T8714] vfs_open+0x82/0x3f0 [ 264.815700][ T8714] path_openat+0x1de4/0x2cb0 [ 264.815744][ T8714] ? __pfx_path_openat+0x10/0x10 [ 264.815787][ T8714] do_filp_open+0x20b/0x470 [ 264.815819][ T8714] ? __pfx_do_filp_open+0x10/0x10 [ 264.815877][ T8714] ? alloc_fd+0x471/0x7d0 [ 264.815915][ T8714] do_sys_openat2+0x11b/0x1d0 [ 264.815955][ T8714] ? __pfx_do_sys_openat2+0x10/0x10 [ 264.815995][ T8714] ? __pfx___might_resched+0x10/0x10 [ 264.816032][ T8714] __x64_sys_openat+0x174/0x210 [ 264.816072][ T8714] ? __pfx___x64_sys_openat+0x10/0x10 [ 264.816127][ T8714] do_syscall_64+0xcd/0x490 [ 264.816165][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.816192][ T8714] RIP: 0033:0x7f990dd8ebe9 [ 264.816214][ T8714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.816239][ T8714] RSP: 002b:00007f990eb9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 264.816265][ T8714] RAX: ffffffffffffffda RBX: 00007f990dfb5fa0 RCX: 00007f990dd8ebe9 [ 264.816283][ T8714] RDX: 0000000000101080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 264.816300][ T8714] RBP: 00007f990de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 264.816316][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.816332][ T8714] R13: 00007f990dfb6038 R14: 00007f990dfb5fa0 R15: 00007ffedc47d588 [ 264.816368][ T8714] [ 265.184917][ T8714] SLUB: Unable to add cache mon_text_ffff888033b58c00 to sysfs [ 267.898664][ T8752] FAULT_INJECTION: forcing a failure. [ 267.898664][ T8752] name failslab, interval 1, probability 0, space 0, times 0 [ 267.911816][ T8752] CPU: 0 UID: 0 PID: 8752 Comm: syz.2.764 Not tainted syzkaller #0 PREEMPT(full) [ 267.911837][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.911847][ T8752] Call Trace: [ 267.911853][ T8752] [ 267.911858][ T8752] dump_stack_lvl+0x16c/0x1f0 [ 267.911882][ T8752] should_fail_ex+0x512/0x640 [ 267.911903][ T8752] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 267.911920][ T8752] should_failslab+0xc2/0x120 [ 267.911939][ T8752] __kmalloc_cache_noprof+0x6a/0x3e0 [ 267.911953][ T8752] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 267.911967][ T8752] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 267.911981][ T8752] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 267.911998][ T8752] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 267.912015][ T8752] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 267.912030][ T8752] ? __asan_memset+0x23/0x50 [ 267.912042][ T8752] ? calc_src_frames.isra.0+0x187/0x1d0 [ 267.912057][ T8752] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 267.912076][ T8752] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 267.912099][ T8752] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 267.912128][ T8752] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 267.912144][ T8752] snd_pcm_oss_sync+0x32e/0x840 [ 267.912169][ T8752] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 267.912183][ T8752] snd_pcm_oss_release+0x28b/0x310 [ 267.912199][ T8752] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 267.912214][ T8752] __fput+0x402/0xb70 [ 267.912239][ T8752] task_work_run+0x14d/0x240 [ 267.912261][ T8752] ? __pfx_task_work_run+0x10/0x10 [ 267.912282][ T8752] ? __pfx___do_sys_close_range+0x10/0x10 [ 267.912298][ T8752] ? syscall_user_dispatch+0x78/0x140 [ 267.912323][ T8752] exit_to_user_mode_loop+0xeb/0x110 [ 267.912344][ T8752] do_syscall_64+0x3f6/0x490 [ 267.912365][ T8752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.912379][ T8752] RIP: 0033:0x7fe10e18ebe9 [ 267.912391][ T8752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.912405][ T8752] RSP: 002b:00007fe10f08e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 267.912419][ T8752] RAX: 0000000000000000 RBX: 00007fe10e3b5fa0 RCX: 00007fe10e18ebe9 [ 267.912428][ T8752] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 267.912436][ T8752] RBP: 00007fe10e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 267.912444][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.912452][ T8752] R13: 00007fe10e3b6038 R14: 00007fe10e3b5fa0 R15: 00007ffd4fd0e098 [ 267.912470][ T8752] [ 269.098007][ T8764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.218531][ T8808] Console: switching to colour VGA+ 80x25 [ 272.762365][ T8808] Console: switching to colour frame buffer device 128x48 [ 274.300776][ T8832] FAULT_INJECTION: forcing a failure. [ 274.300776][ T8832] name failslab, interval 1, probability 0, space 0, times 0 [ 274.338513][ T8832] CPU: 1 UID: 0 PID: 8832 Comm: syz.0.781 Not tainted syzkaller #0 PREEMPT(full) [ 274.338538][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.338547][ T8832] Call Trace: [ 274.338552][ T8832] [ 274.338558][ T8832] dump_stack_lvl+0x16c/0x1f0 [ 274.338584][ T8832] should_fail_ex+0x512/0x640 [ 274.338605][ T8832] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 274.338622][ T8832] should_failslab+0xc2/0x120 [ 274.338641][ T8832] __kmalloc_cache_noprof+0x6a/0x3e0 [ 274.338656][ T8832] ? percpu_ref_init+0xec/0x410 [ 274.338674][ T8832] ? __pfx_blkg_release+0x10/0x10 [ 274.338696][ T8832] percpu_ref_init+0xec/0x410 [ 274.338713][ T8832] ? kasan_save_track+0x14/0x30 [ 274.338730][ T8832] blkg_alloc+0xea/0xb00 [ 274.338759][ T8832] blkcg_init_disk+0x51/0x160 [ 274.338776][ T8832] __alloc_disk_node+0x299/0x640 [ 274.338798][ T8832] __blk_mq_alloc_disk+0x89/0x120 [ 274.338818][ T8832] loop_add+0x490/0xb70 [ 274.338835][ T8832] ? __pfx_loop_add+0x10/0x10 [ 274.338862][ T8832] ? find_held_lock+0x2b/0x80 [ 274.338879][ T8832] loop_control_ioctl+0x13e/0x630 [ 274.338894][ T8832] ? __pfx_loop_control_ioctl+0x10/0x10 [ 274.338913][ T8832] ? __pfx_loop_control_ioctl+0x10/0x10 [ 274.338929][ T8832] __x64_sys_ioctl+0x18e/0x210 [ 274.338952][ T8832] do_syscall_64+0xcd/0x490 [ 274.338973][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.338988][ T8832] RIP: 0033:0x7fc2d058ebe9 [ 274.339000][ T8832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.339023][ T8832] RSP: 002b:00007fc2d14ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.339038][ T8832] RAX: ffffffffffffffda RBX: 00007fc2d07b5fa0 RCX: 00007fc2d058ebe9 [ 274.339048][ T8832] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 274.339057][ T8832] RBP: 00007fc2d0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 274.339066][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.339074][ T8832] R13: 00007fc2d07b6038 R14: 00007fc2d07b5fa0 R15: 00007ffc348806a8 [ 274.339093][ T8832] [ 274.555525][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.810842][ T8830] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000780 pfn:0x78000 [ 274.867234][ T8830] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 274.897642][ T8830] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 274.924374][ T8830] raw: ffff888078000780 ffff88803128a800 00000001ffffffff 0000000000000000 [ 274.982205][ T8830] page dumped because: unmovable page [ 275.009144][ T8830] page_owner tracks the page as allocated [ 275.031707][ T8830] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 8384, tgid 8376 (syz.3.681), ts 238828404118, free_ts 231625049560 [ 275.207504][ T8830] post_alloc_hook+0x1c0/0x230 [ 275.265426][ T8830] get_page_from_freelist+0x132b/0x38e0 [ 275.314323][ T8830] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 275.383885][ T8830] __alloc_pages_noprof+0xb/0x1b0 [ 275.443152][ T8830] pcpu_populate_chunk+0x110/0xb00 [ 275.576638][ T8830] pcpu_alloc_noprof+0x86a/0x1470 [ 275.684915][ T8830] bpf_map_alloc_percpu+0x9a/0x4b0 [ 275.830764][ T8830] htab_map_alloc+0x10ca/0x1570 [ 275.835672][ T8830] map_create+0x58f/0x1f80 [ 275.840308][ T8830] __sys_bpf+0x44d2/0x4de0 [ 275.844819][ T8830] __x64_sys_bpf+0x78/0xc0 [ 275.849371][ T8830] do_syscall_64+0xcd/0x490 [ 275.854596][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.860672][ T8830] page last free pid 5949 tgid 5949 stack trace: [ 275.867103][ T8830] __free_frozen_pages+0x7d5/0x10f0 [ 275.872466][ T8830] pcpu_free_pages.constprop.0+0x126/0x210 [ 275.878415][ T8830] pcpu_balance_workfn+0x26b/0xe00 [ 275.888607][ T8830] process_one_work+0x9cf/0x1b70 [ 275.893633][ T8830] worker_thread+0x6c8/0xf10 [ 275.938769][ T8830] kthread+0x3c5/0x780 [ 275.942954][ T8830] ret_from_fork+0x5d4/0x6f0 [ 275.947580][ T8830] ret_from_fork_asm+0x1a/0x30 [ 276.826860][ T8858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.788'. [ 276.863922][ T8858] FAULT_INJECTION: forcing a failure. [ 276.863922][ T8858] name fail_futex, interval 1, probability 0, space 0, times 0 [ 276.895844][ T8858] CPU: 0 UID: 0 PID: 8858 Comm: syz.0.788 Not tainted syzkaller #0 PREEMPT(full) [ 276.895881][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.895897][ T8858] Call Trace: [ 276.895907][ T8858] [ 276.895918][ T8858] dump_stack_lvl+0x16c/0x1f0 [ 276.895959][ T8858] should_fail_ex+0x512/0x640 [ 276.896001][ T8858] get_futex_key+0x1d0/0x1560 [ 276.896039][ T8858] ? __pfx_get_futex_key+0x10/0x10 [ 276.896069][ T8858] ? futex_private_hash_put+0x176/0x300 [ 276.896110][ T8858] futex_wake+0xea/0x530 [ 276.896142][ T8858] ? futex_wait+0x120/0x380 [ 276.896177][ T8858] ? __pfx_futex_wake+0x10/0x10 [ 276.896214][ T8858] ? get_filter+0x146/0x1b0 [ 276.896244][ T8858] ? __pfx_get_filter+0x10/0x10 [ 276.896284][ T8858] do_futex+0x1e3/0x350 [ 276.896317][ T8858] ? __pfx_do_futex+0x10/0x10 [ 276.896359][ T8858] __x64_sys_futex+0x1e0/0x4c0 [ 276.896397][ T8858] ? __pfx___x64_sys_futex+0x10/0x10 [ 276.896429][ T8858] ? __sys_getsockopt+0x144/0x1b0 [ 276.896473][ T8858] do_syscall_64+0xcd/0x490 [ 276.896510][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.896537][ T8858] RIP: 0033:0x7fc2d058ebe9 [ 276.896556][ T8858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.896583][ T8858] RSP: 002b:00007fc2d14ab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 276.896608][ T8858] RAX: ffffffffffffffda RBX: 00007fc2d07b5fa8 RCX: 00007fc2d058ebe9 [ 276.896626][ T8858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc2d07b5fac [ 276.896643][ T8858] RBP: 00007fc2d07b5fa0 R08: 00007fc2d14ac000 R09: 0000000000000000 [ 276.896660][ T8858] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 276.896675][ T8858] R13: 00007fc2d07b6038 R14: 00007ffc348805c0 R15: 00007ffc348806a8 [ 276.896710][ T8858] [ 278.496535][ T8864] ima: policy update failed [ 278.533576][ T30] audit: type=1802 audit(1756424228.446:7): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.790" res=0 errno=0 [ 279.971487][ T8861] kexec: Could not allocate control_code_buffer [ 280.430609][ T8905] FAULT_INJECTION: forcing a failure. [ 280.430609][ T8905] name failslab, interval 1, probability 0, space 0, times 0 [ 280.511418][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.0.798 Not tainted syzkaller #0 PREEMPT(full) [ 280.511458][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.511473][ T8905] Call Trace: [ 280.511483][ T8905] [ 280.511493][ T8905] dump_stack_lvl+0x16c/0x1f0 [ 280.511540][ T8905] should_fail_ex+0x512/0x640 [ 280.511578][ T8905] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 280.511614][ T8905] should_failslab+0xc2/0x120 [ 280.511648][ T8905] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 280.511680][ T8905] ? mem_cgroup_css_alloc+0x5c/0x1e80 [ 280.511716][ T8905] mem_cgroup_css_alloc+0x5c/0x1e80 [ 280.511757][ T8905] cgroup_apply_control_enable+0x4b0/0xbb0 [ 280.511811][ T8905] cgroup_mkdir+0x5e7/0x11f0 [ 280.511855][ T8905] ? __pfx_cgroup_mkdir+0x10/0x10 [ 280.511893][ T8905] kernfs_iop_mkdir+0x10e/0x190 [ 280.511928][ T8905] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 280.511962][ T8905] vfs_mkdir+0x590/0x8c0 [ 280.511991][ T8905] do_mkdirat+0x304/0x3e0 [ 280.512024][ T8905] ? __pfx_do_mkdirat+0x10/0x10 [ 280.512059][ T8905] ? getname_flags.part.0+0x1c5/0x550 [ 280.512097][ T8905] __x64_sys_mkdir+0xef/0x140 [ 280.512136][ T8905] do_syscall_64+0xcd/0x490 [ 280.512174][ T8905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.512200][ T8905] RIP: 0033:0x7fc2d058ebe9 [ 280.512221][ T8905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.512247][ T8905] RSP: 002b:00007fc2d14ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 280.512272][ T8905] RAX: ffffffffffffffda RBX: 00007fc2d07b5fa0 RCX: 00007fc2d058ebe9 [ 280.512289][ T8905] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 280.512305][ T8905] RBP: 00007fc2d0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 280.512321][ T8905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.512336][ T8905] R13: 00007fc2d07b6038 R14: 00007fc2d07b5fa0 R15: 00007ffc348806a8 [ 280.512377][ T8905] [ 281.621437][ C1] sd 0:0:1:0: [sda] tag#6591 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 281.631907][ C1] sd 0:0:1:0: [sda] tag#6591 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 281.720844][ T8923] FAULT_INJECTION: forcing a failure. [ 281.720844][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 281.758060][ T8923] CPU: 0 UID: 0 PID: 8923 Comm: syz.3.801 Not tainted syzkaller #0 PREEMPT(full) [ 281.758096][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.758111][ T8923] Call Trace: [ 281.758121][ T8923] [ 281.758131][ T8923] dump_stack_lvl+0x16c/0x1f0 [ 281.758169][ T8923] should_fail_ex+0x512/0x640 [ 281.758192][ T8923] ? fs_reclaim_acquire+0xae/0x150 [ 281.758216][ T8923] should_failslab+0xc2/0x120 [ 281.758235][ T8923] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 281.758252][ T8923] ? security_inode_alloc+0x3b/0x2b0 [ 281.758271][ T8923] security_inode_alloc+0x3b/0x2b0 [ 281.758287][ T8923] inode_init_always_gfp+0xce4/0x1030 [ 281.758306][ T8923] alloc_inode+0x86/0x240 [ 281.758327][ T8923] new_inode+0x22/0x1c0 [ 281.758348][ T8923] bdev_alloc+0x2b/0x420 [ 281.758365][ T8923] __alloc_disk_node+0x116/0x640 [ 281.758387][ T8923] __blk_mq_alloc_disk+0x89/0x120 [ 281.758406][ T8923] loop_add+0x490/0xb70 [ 281.758428][ T8923] ? __pfx_loop_add+0x10/0x10 [ 281.758458][ T8923] ? find_held_lock+0x2b/0x80 [ 281.758475][ T8923] loop_control_ioctl+0x13e/0x630 [ 281.758491][ T8923] ? __pfx_loop_control_ioctl+0x10/0x10 [ 281.758509][ T8923] ? __pfx_loop_control_ioctl+0x10/0x10 [ 281.758526][ T8923] __x64_sys_ioctl+0x18e/0x210 [ 281.758549][ T8923] do_syscall_64+0xcd/0x490 [ 281.758569][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.758584][ T8923] RIP: 0033:0x7f990dd8ebe9 [ 281.758596][ T8923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.758610][ T8923] RSP: 002b:00007f990eb9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.758624][ T8923] RAX: ffffffffffffffda RBX: 00007f990dfb5fa0 RCX: 00007f990dd8ebe9 [ 281.758633][ T8923] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 281.758642][ T8923] RBP: 00007f990de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.758651][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.758660][ T8923] R13: 00007f990dfb6038 R14: 00007f990dfb5fa0 R15: 00007ffedc47d588 [ 281.758678][ T8923] [ 284.428371][ T8951] kexec: Could not allocate control_code_buffer [ 284.489277][ T8960] netlink: 25520 bytes leftover after parsing attributes in process `syz.2.811'. [ 284.542113][ T8960] netlink: zone id is out of range [ 284.559345][ T8960] netlink: zone id is out of range [ 284.572917][ T8960] netlink: zone id is out of range [ 284.583017][ T8960] netlink: zone id is out of range [ 284.588684][ T8960] netlink: zone id is out of range [ 284.595373][ T8960] netlink: zone id is out of range [ 285.355401][ T8972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.814'. [ 285.461139][ T8975] FAULT_INJECTION: forcing a failure. [ 285.461139][ T8975] name failslab, interval 1, probability 0, space 0, times 0 [ 285.483726][ T8975] CPU: 0 UID: 0 PID: 8975 Comm: syz.3.814 Not tainted syzkaller #0 PREEMPT(full) [ 285.483748][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.483758][ T8975] Call Trace: [ 285.483763][ T8975] [ 285.483769][ T8975] dump_stack_lvl+0x16c/0x1f0 [ 285.483794][ T8975] should_fail_ex+0x512/0x640 [ 285.483815][ T8975] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 285.483847][ T8975] should_failslab+0xc2/0x120 [ 285.483879][ T8975] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 285.483910][ T8975] ? proc_alloc_inode+0x25/0x200 [ 285.483944][ T8975] ? __pfx_proc_alloc_inode+0x10/0x10 [ 285.483973][ T8975] proc_alloc_inode+0x25/0x200 [ 285.484001][ T8975] alloc_inode+0x64/0x240 [ 285.484036][ T8975] new_inode+0x22/0x1c0 [ 285.484068][ T8975] ? proc_lookup_de+0x201/0x360 [ 285.484107][ T8975] proc_get_inode+0x1d/0x780 [ 285.484142][ T8975] proc_lookup_de+0x236/0x360 [ 285.484183][ T8975] proc_lookup+0xcf/0x110 [ 285.484228][ T8975] proc_root_lookup+0x3b/0x70 [ 285.484265][ T8975] __lookup_slow+0x24e/0x460 [ 285.484304][ T8975] ? __pfx___lookup_slow+0x10/0x10 [ 285.484364][ T8975] ? lookup_fast+0x156/0x610 [ 285.484395][ T8975] walk_component+0x353/0x5b0 [ 285.484426][ T8975] link_path_walk+0x627/0xe20 [ 285.484473][ T8975] path_openat+0x1b0/0x2cb0 [ 285.484502][ T8975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.484542][ T8975] ? __pfx_path_openat+0x10/0x10 [ 285.484583][ T8975] do_filp_open+0x20b/0x470 [ 285.484615][ T8975] ? __pfx_do_filp_open+0x10/0x10 [ 285.484673][ T8975] ? alloc_fd+0x471/0x7d0 [ 285.484711][ T8975] do_sys_openat2+0x11b/0x1d0 [ 285.484750][ T8975] ? __pfx_do_sys_openat2+0x10/0x10 [ 285.484804][ T8975] __x64_sys_openat+0x174/0x210 [ 285.484844][ T8975] ? __pfx___x64_sys_openat+0x10/0x10 [ 285.484899][ T8975] do_syscall_64+0xcd/0x490 [ 285.484938][ T8975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.484964][ T8975] RIP: 0033:0x7f990dd8ebe9 [ 285.484986][ T8975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.485012][ T8975] RSP: 002b:00007f990eb79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 285.485037][ T8975] RAX: ffffffffffffffda RBX: 00007f990dfb6090 RCX: 00007f990dd8ebe9 [ 285.485054][ T8975] RDX: 0000000000048041 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 285.485072][ T8975] RBP: 00007f990de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 285.485088][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.485104][ T8975] R13: 00007f990dfb6128 R14: 00007f990dfb6090 R15: 00007ffedc47d588 [ 285.485140][ T8975] [ 286.042980][ T8981] random: crng reseeded on system resumption [ 287.791136][ T9004] FAULT_INJECTION: forcing a failure. [ 287.791136][ T9004] name failslab, interval 1, probability 0, space 0, times 0 [ 287.859764][ T9004] CPU: 0 UID: 0 PID: 9004 Comm: syz.3.822 Not tainted syzkaller #0 PREEMPT(full) [ 287.859787][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.859797][ T9004] Call Trace: [ 287.859803][ T9004] [ 287.859809][ T9004] dump_stack_lvl+0x16c/0x1f0 [ 287.859833][ T9004] should_fail_ex+0x512/0x640 [ 287.859853][ T9004] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 287.859872][ T9004] should_failslab+0xc2/0x120 [ 287.859891][ T9004] __kmalloc_cache_node_noprof+0x6d/0x420 [ 287.859908][ T9004] ? __alloc_disk_node+0x5a/0x640 [ 287.859930][ T9004] __alloc_disk_node+0x5a/0x640 [ 287.859951][ T9004] __blk_mq_alloc_disk+0x89/0x120 [ 287.859971][ T9004] loop_add+0x490/0xb70 [ 287.859987][ T9004] ? __pfx_loop_add+0x10/0x10 [ 287.860014][ T9004] ? find_held_lock+0x2b/0x80 [ 287.860041][ T9004] loop_control_ioctl+0x13e/0x630 [ 287.860057][ T9004] ? __pfx_loop_control_ioctl+0x10/0x10 [ 287.860075][ T9004] ? __pfx_loop_control_ioctl+0x10/0x10 [ 287.860092][ T9004] __x64_sys_ioctl+0x18e/0x210 [ 287.860117][ T9004] do_syscall_64+0xcd/0x490 [ 287.860137][ T9004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.860152][ T9004] RIP: 0033:0x7f990dd8ebe9 [ 287.860164][ T9004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.860178][ T9004] RSP: 002b:00007f990eb9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.860193][ T9004] RAX: ffffffffffffffda RBX: 00007f990dfb5fa0 RCX: 00007f990dd8ebe9 [ 287.860202][ T9004] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 287.860210][ T9004] RBP: 00007f990de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 287.860218][ T9004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.860226][ T9004] R13: 00007f990dfb6038 R14: 00007f990dfb5fa0 R15: 00007ffedc47d588 [ 287.860246][ T9004] [ 290.386642][ T9038] serio: Serial port ttyS0 [ 292.242536][ T9054] kexec: Could not allocate control_code_buffer [ 293.773200][ T30] audit: type=1326 audit(1756427312.718:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.1.840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cc598ebe9 code=0x0 [ 294.736043][ T9087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.841'. [ 295.157103][ T9087] team0: Port device team_slave_1 removed [ 297.742867][ T9120] zswap: compressor not available [ 298.027343][ T9132] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 304.185265][ T9200] vxcan0: entered allmulticast mode [ 304.606207][ T9205] lo: entered allmulticast mode [ 304.671211][ T9207] netlink: 29 bytes leftover after parsing attributes in process `syz.2.866'. [ 304.886134][ T9209] lo: left allmulticast mode [ 305.255042][ T51] Bluetooth: hci2: unexpected event 0x16 length: 440 > 6 [ 306.136641][ T9234] FAULT_INJECTION: forcing a failure. [ 306.136641][ T9234] name failslab, interval 1, probability 0, space 0, times 0 [ 306.384791][ T9234] CPU: 0 UID: 0 PID: 9234 Comm: syz.2.874 Not tainted syzkaller #0 PREEMPT(full) [ 306.384829][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.384844][ T9234] Call Trace: [ 306.384853][ T9234] [ 306.384864][ T9234] dump_stack_lvl+0x16c/0x1f0 [ 306.384903][ T9234] should_fail_ex+0x512/0x640 [ 306.384939][ T9234] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 306.384975][ T9234] should_failslab+0xc2/0x120 [ 306.385008][ T9234] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 306.385038][ T9234] ? _raw_spin_unlock+0x28/0x50 [ 306.385066][ T9234] ? alloc_inode+0xc3/0x240 [ 306.385107][ T9234] alloc_inode+0xc3/0x240 [ 306.385143][ T9234] new_inode+0x22/0x1c0 [ 306.385181][ T9234] simple_fill_super+0x306/0x720 [ 306.385222][ T9234] ? __pfx_nfsd_fill_super+0x10/0x10 [ 306.385254][ T9234] nfsd_fill_super+0x90/0x530 [ 306.385284][ T9234] ? __pfx_set_anon_super_fc+0x10/0x10 [ 306.385311][ T9234] ? __pfx_nfsd_fill_super+0x10/0x10 [ 306.385340][ T9234] get_tree_keyed+0x10e/0x1d0 [ 306.385371][ T9234] vfs_get_tree+0x8b/0x340 [ 306.385395][ T9234] path_mount+0x1513/0x2000 [ 306.385442][ T9234] ? __pfx_path_mount+0x10/0x10 [ 306.385479][ T9234] ? kmem_cache_free+0x2d1/0x4d0 [ 306.385507][ T9234] ? putname+0x154/0x1a0 [ 306.385546][ T9234] ? putname+0x154/0x1a0 [ 306.385583][ T9234] ? __x64_sys_mount+0x28d/0x310 [ 306.385614][ T9234] __x64_sys_mount+0x28d/0x310 [ 306.385647][ T9234] ? __pfx___x64_sys_mount+0x10/0x10 [ 306.385691][ T9234] do_syscall_64+0xcd/0x490 [ 306.385727][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.385753][ T9234] RIP: 0033:0x7fe10e18ebe9 [ 306.385774][ T9234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.385800][ T9234] RSP: 002b:00007fe10f08e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.385825][ T9234] RAX: ffffffffffffffda RBX: 00007fe10e3b5fa0 RCX: 00007fe10e18ebe9 [ 306.385843][ T9234] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 306.385861][ T9234] RBP: 00007fe10e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 306.385877][ T9234] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 306.385893][ T9234] R13: 00007fe10e3b6038 R14: 00007fe10e3b5fa0 R15: 00007ffd4fd0e098 [ 306.385929][ T9234] [ 307.216872][ T9249] FAULT_INJECTION: forcing a failure. [ 307.216872][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 307.248921][ T9249] CPU: 1 UID: 0 PID: 9249 Comm: syz.3.876 Not tainted syzkaller #0 PREEMPT(full) [ 307.248959][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.248976][ T9249] Call Trace: [ 307.248985][ T9249] [ 307.248996][ T9249] dump_stack_lvl+0x16c/0x1f0 [ 307.249036][ T9249] should_fail_ex+0x512/0x640 [ 307.249071][ T9249] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 307.249107][ T9249] should_failslab+0xc2/0x120 [ 307.249142][ T9249] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 307.249171][ T9249] ? __proc_create+0xc3/0x8e0 [ 307.249207][ T9249] ? __proc_create+0x2ce/0x8e0 [ 307.249248][ T9249] __proc_create+0x2ce/0x8e0 [ 307.249285][ T9249] ? __pfx___proc_create+0x10/0x10 [ 307.249319][ T9249] ? proc_register+0x30f/0x5f0 [ 307.249370][ T9249] ? _raw_write_unlock+0x28/0x50 [ 307.249408][ T9249] proc_create_reg+0x7d/0x180 [ 307.249450][ T9249] proc_create_net_data+0x8e/0x1c0 [ 307.249491][ T9249] ? __pfx_proc_create_net_data+0x10/0x10 [ 307.249528][ T9249] ? __pfx_proc_create_net_data+0x10/0x10 [ 307.249567][ T9249] ? __kasan_kmalloc+0xaa/0xb0 [ 307.249602][ T9249] ip_vs_conn_net_init+0xc8/0x200 [ 307.249634][ T9249] __ip_vs_init+0x27d/0x520 [ 307.249664][ T9249] ? __pfx___ip_vs_init+0x10/0x10 [ 307.249692][ T9249] ops_init+0x1e2/0x5f0 [ 307.249731][ T9249] setup_net+0x10f/0x380 [ 307.249764][ T9249] ? lockdep_init_map_type+0x5c/0x280 [ 307.249800][ T9249] ? __pfx_setup_net+0x10/0x10 [ 307.249837][ T9249] ? debug_mutex_init+0x37/0x70 [ 307.249867][ T9249] copy_net_ns+0x2a6/0x5f0 [ 307.249909][ T9249] create_new_namespaces+0x3ea/0xa90 [ 307.249952][ T9249] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 307.249985][ T9249] ksys_unshare+0x45b/0xa40 [ 307.250021][ T9249] ? __pfx_ksys_unshare+0x10/0x10 [ 307.250058][ T9249] ? xfd_validate_state+0x61/0x180 [ 307.250106][ T9249] __x64_sys_unshare+0x31/0x40 [ 307.250140][ T9249] do_syscall_64+0xcd/0x490 [ 307.250178][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.250204][ T9249] RIP: 0033:0x7f990dd8ebe9 [ 307.250225][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.250250][ T9249] RSP: 002b:00007f990eb9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 307.250275][ T9249] RAX: ffffffffffffffda RBX: 00007f990dfb5fa0 RCX: 00007f990dd8ebe9 [ 307.250292][ T9249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 307.250308][ T9249] RBP: 00007f990de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 307.250324][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.250339][ T9249] R13: 00007f990dfb6038 R14: 00007f990dfb5fa0 R15: 00007ffedc47d588 [ 307.250384][ T9249] [ 308.013652][ T9264] Console: switching to colour VGA+ 80x25 [ 309.846926][ T9291] warning: `syz.1.884' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 309.911762][ T9291] program syz.1.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.574603][ T30] audit: type=1326 audit(6051394625.518:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.2.886" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe10e18ebe9 code=0x0 [ 310.969832][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.976332][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.023019][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.030599][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.083392][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.103617][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.135043][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.142975][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.306722][ T30] audit: type=1800 audit(6051394627.248:10): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=24499 res=0 errno=0 [ 312.496055][ T9340] FAULT_INJECTION: forcing a failure. [ 312.496055][ T9340] name failslab, interval 1, probability 0, space 0, times 0 [ 312.564747][ T9340] CPU: 0 UID: 0 PID: 9340 Comm: syz.0.891 Not tainted syzkaller #0 PREEMPT(full) [ 312.564768][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.564778][ T9340] Call Trace: [ 312.564783][ T9340] [ 312.564789][ T9340] dump_stack_lvl+0x16c/0x1f0 [ 312.564813][ T9340] should_fail_ex+0x512/0x640 [ 312.564834][ T9340] ? __kvmalloc_node_noprof+0x124/0x620 [ 312.564853][ T9340] should_failslab+0xc2/0x120 [ 312.564872][ T9340] __kvmalloc_node_noprof+0x137/0x620 [ 312.564888][ T9340] ? bucket_table_alloc.isra.0+0x83/0x460 [ 312.564912][ T9340] ? bucket_table_alloc.isra.0+0x83/0x460 [ 312.564931][ T9340] bucket_table_alloc.isra.0+0x83/0x460 [ 312.564952][ T9340] rhashtable_init_noprof+0x41a/0x7e0 [ 312.564971][ T9340] ? kasan_save_track+0x14/0x30 [ 312.564988][ T9340] ? __pfx_seg6_net_init+0x10/0x10 [ 312.565017][ T9340] seg6_net_init+0x109/0x1c0 [ 312.565040][ T9340] ops_init+0x1e2/0x5f0 [ 312.565063][ T9340] setup_net+0x10f/0x380 [ 312.565081][ T9340] ? lockdep_init_map_type+0x5c/0x280 [ 312.565103][ T9340] ? __pfx_setup_net+0x10/0x10 [ 312.565124][ T9340] ? debug_mutex_init+0x37/0x70 [ 312.565140][ T9340] copy_net_ns+0x2a6/0x5f0 [ 312.565163][ T9340] create_new_namespaces+0x3ea/0xa90 [ 312.565185][ T9340] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 312.565202][ T9340] ksys_unshare+0x45b/0xa40 [ 312.565222][ T9340] ? __pfx_ksys_unshare+0x10/0x10 [ 312.565244][ T9340] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 312.565268][ T9340] __x64_sys_unshare+0x31/0x40 [ 312.565286][ T9340] do_syscall_64+0xcd/0x490 [ 312.565306][ T9340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.565321][ T9340] RIP: 0033:0x7fc2d058ebe9 [ 312.565333][ T9340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.565347][ T9340] RSP: 002b:00007fc2d14ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 312.565361][ T9340] RAX: ffffffffffffffda RBX: 00007fc2d07b5fa0 RCX: 00007fc2d058ebe9 [ 312.565370][ T9340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 312.565378][ T9340] RBP: 00007fc2d0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 312.565387][ T9340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.565395][ T9340] R13: 00007fc2d07b6038 R14: 00007fc2d07b5fa0 R15: 00007ffc348806a8 [ 312.565414][ T9340] [ 313.975779][ T9357] netlink: 186 bytes leftover after parsing attributes in process `syz.2.895'. [ 317.214613][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.221103][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.830976][ T9417] vivid-003: ================= START STATUS ================= [ 318.869163][ T9417] vivid-003: Radio HW Seek Mode: Bounded [ 318.876669][ T9417] vivid-003: Radio Programmable HW Seek: false [ 318.883418][ T9417] vivid-003: RDS Rx I/O Mode: Block I/O [ 318.889483][ T9417] vivid-003: Generate RBDS Instead of RDS: false [ 318.896156][ T9417] vivid-003: RDS Reception: true [ 318.905884][ T9417] vivid-003: RDS Program Type: 0 inactive [ 318.912076][ T9417] vivid-003: RDS PS Name: inactive [ 318.920358][ T9417] vivid-003: RDS Radio Text: inactive [ 318.927346][ T9417] vivid-003: RDS Traffic Announcement: false inactive [ 318.937507][ T9417] vivid-003: RDS Traffic Program: false inactive [ 318.944222][ T9417] vivid-003: RDS Music: false inactive [ 318.950152][ T9417] vivid-003: ================== END STATUS ================== [ 319.616906][ T9421] bond0: option all_slaves_active: invalid value () [ 321.040669][ T9436] 0x000200000001-0xa29656a63616329 : "" [ 321.046446][ T9436] mtd: partition "" is out of reach -- disabled [ 321.105906][ T9436] ftl_cs: FTL header not found. [ 323.105736][ T9466] sd 0:0:1:0: PR command failed: 1026 [ 323.159638][ T9466] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 323.389504][ T9466] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 326.768115][ T9496] ima: policy update failed [ 326.850691][ T9501] netlink: 25 bytes leftover after parsing attributes in process `syz.2.923'. [ 326.870526][ T30] audit: type=1802 audit(6051394641.798:11): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.923" res=0 errno=0 [ 328.769073][ T9523] ubi0: attaching mtd0 [ 328.797815][ T9523] ubi0: scanning is finished [ 328.862804][ T9523] ubi0: empty MTD device detected [ 329.372506][ T9523] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 329.380273][ T9523] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 329.406601][ T9523] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 329.418167][ T9523] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 329.432488][ T9523] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 329.485602][ T9523] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 329.581608][ T9523] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 270198957 [ 329.636594][ T9523] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 329.658730][ T9532] ubi0: background thread "ubi_bgt0d" started, PID 9532 [ 332.711737][ T9560] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 333.592965][ T9568] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 334.825244][ T9587] syz.3.941 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 334.882358][ T9591] random: crng reseeded on system resumption [ 335.606669][ T9594] can: request_module (can-proto-3) failed. [ 336.297267][ T9608] FAULT_INJECTION: forcing a failure. [ 336.297267][ T9608] name failslab, interval 1, probability 0, space 0, times 0 [ 336.333324][ T9608] CPU: 1 UID: 0 PID: 9608 Comm: syz.2.944 Not tainted syzkaller #0 PREEMPT(full) [ 336.333362][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.333378][ T9608] Call Trace: [ 336.333387][ T9608] [ 336.333398][ T9608] dump_stack_lvl+0x16c/0x1f0 [ 336.333439][ T9608] should_fail_ex+0x512/0x640 [ 336.333475][ T9608] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 336.333510][ T9608] should_failslab+0xc2/0x120 [ 336.333549][ T9608] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 336.333582][ T9608] ? do_epoll_ctl+0x1170/0x3790 [ 336.333618][ T9608] do_epoll_ctl+0x1170/0x3790 [ 336.333664][ T9608] ? __pfx_do_epoll_ctl+0x10/0x10 [ 336.333690][ T9608] ? find_held_lock+0x2b/0x80 [ 336.333715][ T9608] ? __might_fault+0xe3/0x190 [ 336.333744][ T9608] ? __might_fault+0xe3/0x190 [ 336.333787][ T9608] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 336.333814][ T9608] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 336.333844][ T9608] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 336.333884][ T9608] do_syscall_64+0xcd/0x490 [ 336.333921][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.333947][ T9608] RIP: 0033:0x7fe10e18ebe9 [ 336.333968][ T9608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.333993][ T9608] RSP: 002b:00007fe10f08e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 336.334018][ T9608] RAX: ffffffffffffffda RBX: 00007fe10e3b5fa0 RCX: 00007fe10e18ebe9 [ 336.334035][ T9608] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 336.334051][ T9608] RBP: 00007fe10e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 336.334067][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.334082][ T9608] R13: 00007fe10e3b6038 R14: 00007fe10e3b5fa0 R15: 00007ffd4fd0e098 [ 336.334117][ T9608] [ 336.536583][ T9608] netlink: 326 bytes leftover after parsing attributes in process `syz.2.944'. [ 339.451731][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.951'. [ 339.469090][ T9639] veth0_macvtap: left promiscuous mode [ 340.492448][ T9659] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 341.718110][ T9661] kexec: Could not allocate control_code_buffer [ 342.234334][ T9668] FAULT_INJECTION: forcing a failure. [ 342.234334][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 342.247158][ T9668] CPU: 1 UID: 0 PID: 9668 Comm: syz.3.955 Not tainted syzkaller #0 PREEMPT(full) [ 342.247193][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.247209][ T9668] Call Trace: [ 342.247218][ T9668] [ 342.247228][ T9668] dump_stack_lvl+0x16c/0x1f0 [ 342.247270][ T9668] should_fail_ex+0x512/0x640 [ 342.247304][ T9668] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 342.247335][ T9668] ? __pfx_mon_text_open+0x10/0x10 [ 342.247362][ T9668] should_failslab+0xc2/0x120 [ 342.247396][ T9668] __kmalloc_cache_noprof+0x6a/0x3e0 [ 342.247423][ T9668] ? lockdep_init_map_type+0x5c/0x280 [ 342.247456][ T9668] ? mon_text_open+0xd5/0x4f0 [ 342.247487][ T9668] ? __pfx_mon_text_open+0x10/0x10 [ 342.247515][ T9668] mon_text_open+0xd5/0x4f0 [ 342.247544][ T9668] ? __pfx_mon_text_open+0x10/0x10 [ 342.247571][ T9668] ? __debugfs_file_get+0x1fe/0x840 [ 342.247608][ T9668] ? __pfx___debugfs_file_get+0x10/0x10 [ 342.247647][ T9668] ? __pfx_apparmor_file_open+0x10/0x10 [ 342.247674][ T9668] ? lockdown_is_locked_down+0x3f/0x130 [ 342.247699][ T9668] ? bpf_lsm_locked_down+0x9/0x10 [ 342.247729][ T9668] ? __pfx_mon_text_open+0x10/0x10 [ 342.247755][ T9668] full_proxy_open_regular+0x1b6/0x360 [ 342.247784][ T9668] do_dentry_open+0x982/0x1530 [ 342.247817][ T9668] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 342.247850][ T9668] vfs_open+0x82/0x3f0 [ 342.247890][ T9668] path_openat+0x1de4/0x2cb0 [ 342.247935][ T9668] ? __pfx_path_openat+0x10/0x10 [ 342.247974][ T9668] do_filp_open+0x20b/0x470 [ 342.248006][ T9668] ? __pfx_do_filp_open+0x10/0x10 [ 342.248063][ T9668] ? alloc_fd+0x471/0x7d0 [ 342.248101][ T9668] do_sys_openat2+0x11b/0x1d0 [ 342.248148][ T9668] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.248208][ T9668] __x64_sys_openat+0x174/0x210 [ 342.248249][ T9668] ? __pfx___x64_sys_openat+0x10/0x10 [ 342.248303][ T9668] do_syscall_64+0xcd/0x490 [ 342.248341][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.248367][ T9668] RIP: 0033:0x7f990dd8ebe9 [ 342.248388][ T9668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.248413][ T9668] RSP: 002b:00007f990eb58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 342.248437][ T9668] RAX: ffffffffffffffda RBX: 00007f990dfb6180 RCX: 00007f990dd8ebe9 [ 342.248455][ T9668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 342.248472][ T9668] RBP: 00007f990de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 342.248489][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.248504][ T9668] R13: 00007f990dfb6218 R14: 00007f990dfb6180 R15: 00007ffedc47d588 [ 342.248539][ T9668] [ 343.525122][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.566016][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.578706][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.588266][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.598991][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.588266][ T9685] chnl_net:caif_netlink_parms(): no params data found [ 345.083824][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.128727][ T9685] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.152189][ T9685] bridge_slave_0: entered allmulticast mode [ 345.201033][ T9685] bridge_slave_0: entered promiscuous mode [ 345.231269][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.241267][ T9685] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.248445][ T9685] bridge_slave_1: entered allmulticast mode [ 345.260596][ T9685] bridge_slave_1: entered promiscuous mode [ 345.678790][ T5186] Bluetooth: hci4: command tx timeout [ 345.873028][ T9685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.952187][ T9685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.304734][ T9685] team0: Port device team_slave_0 added [ 346.374998][ T9685] team0: Port device team_slave_1 added [ 346.684067][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.721668][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.783643][ T9685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.797736][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.805454][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.842868][ T9685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.388808][ T9685] hsr_slave_0: entered promiscuous mode [ 347.417213][ T9685] hsr_slave_1: entered promiscuous mode [ 347.452740][ T9685] debugfs: 'hsr0' already exists in 'hsr' [ 347.468767][ T9685] Cannot create hsr debugfs directory [ 347.758685][ T5186] Bluetooth: hci4: command tx timeout [ 348.517123][ T9685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.651138][ T9685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.756906][ T9685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 348.790115][ T9685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.031535][ T9744] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 349.645635][ T9685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.705703][ T9685] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.830765][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.837931][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.850964][ T5186] Bluetooth: hci4: command tx timeout [ 349.868154][ T9745] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 349.889863][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.896975][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.825585][ T9772] Invalid ELF header magic: != ELF [ 351.872858][ T9685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.920286][ T5186] Bluetooth: hci4: command tx timeout [ 351.972251][ T9776] random: crng reseeded on system resumption [ 353.021586][ T9685] veth0_vlan: entered promiscuous mode [ 353.065649][ T9685] veth1_vlan: entered promiscuous mode [ 353.239046][ T9685] veth0_macvtap: entered promiscuous mode [ 353.264137][ T9685] veth1_macvtap: entered promiscuous mode [ 353.411258][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.479216][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.556778][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.596309][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.614396][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.737974][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.207260][ T9795] netlink: 25520 bytes leftover after parsing attributes in process `syz.3.973'. [ 354.265871][ T9795] netlink: zone id is out of range [ 354.300840][ T9795] netlink: zone id is out of range [ 354.359378][ T9795] netlink: zone id is out of range [ 354.384178][ T9795] netlink: zone id is out of range [ 354.406824][ T9795] netlink: zone id is out of range [ 354.418834][ T9795] netlink: zone id is out of range [ 354.424028][ T9795] netlink: zone id is out of range [ 354.429474][ T9795] netlink: zone id is out of range [ 354.434637][ T9795] netlink: zone id is out of range [ 354.440209][ T9795] netlink: zone id is out of range [ 354.510804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.560998][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.844057][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.865078][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.224251][ T9806] random: crng reseeded on system resumption [ 356.084982][ T9822] FAULT_INJECTION: forcing a failure. [ 356.084982][ T9822] name failslab, interval 1, probability 0, space 0, times 0 [ 356.097862][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz.1.979 Not tainted syzkaller #0 PREEMPT(full) [ 356.097897][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.097914][ T9822] Call Trace: [ 356.097930][ T9822] [ 356.097940][ T9822] dump_stack_lvl+0x16c/0x1f0 [ 356.097980][ T9822] should_fail_ex+0x512/0x640 [ 356.098016][ T9822] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 356.098046][ T9822] ? __pfx_mon_text_open+0x10/0x10 [ 356.098075][ T9822] should_failslab+0xc2/0x120 [ 356.098110][ T9822] __kmalloc_cache_noprof+0x6a/0x3e0 [ 356.098138][ T9822] ? mon_text_open+0x1cb/0x4f0 [ 356.098174][ T9822] ? __pfx_mon_text_open+0x10/0x10 [ 356.098201][ T9822] mon_text_open+0x1cb/0x4f0 [ 356.098230][ T9822] ? __pfx_mon_text_open+0x10/0x10 [ 356.098257][ T9822] ? __debugfs_file_get+0x1fe/0x840 [ 356.098296][ T9822] ? __pfx___debugfs_file_get+0x10/0x10 [ 356.098334][ T9822] ? __pfx_apparmor_file_open+0x10/0x10 [ 356.098361][ T9822] ? lockdown_is_locked_down+0x3f/0x130 [ 356.098386][ T9822] ? bpf_lsm_locked_down+0x9/0x10 [ 356.098415][ T9822] ? __pfx_mon_text_open+0x10/0x10 [ 356.098441][ T9822] full_proxy_open_regular+0x1b6/0x360 [ 356.098471][ T9822] do_dentry_open+0x982/0x1530 [ 356.098505][ T9822] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 356.098538][ T9822] vfs_open+0x82/0x3f0 [ 356.098582][ T9822] path_openat+0x1de4/0x2cb0 [ 356.098625][ T9822] ? __pfx_path_openat+0x10/0x10 [ 356.098665][ T9822] do_filp_open+0x20b/0x470 [ 356.098696][ T9822] ? __pfx_do_filp_open+0x10/0x10 [ 356.098752][ T9822] ? alloc_fd+0x471/0x7d0 [ 356.098789][ T9822] do_sys_openat2+0x11b/0x1d0 [ 356.098827][ T9822] ? __pfx_do_sys_openat2+0x10/0x10 [ 356.098880][ T9822] __x64_sys_openat+0x174/0x210 [ 356.098927][ T9822] ? __pfx___x64_sys_openat+0x10/0x10 [ 356.098982][ T9822] do_syscall_64+0xcd/0x490 [ 356.099022][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.099049][ T9822] RIP: 0033:0x7f8cc598ebe9 [ 356.099070][ T9822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.099095][ T9822] RSP: 002b:00007f8cc3791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.099119][ T9822] RAX: ffffffffffffffda RBX: 00007f8cc5bb6270 RCX: 00007f8cc598ebe9 [ 356.099137][ T9822] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 356.099154][ T9822] RBP: 00007f8cc5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 356.099170][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.099186][ T9822] R13: 00007f8cc5bb6308 R14: 00007f8cc5bb6270 R15: 00007ffeb4df0ac8 [ 356.099222][ T9822] [ 356.354721][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.407115][ T9816] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 356.407115][ T9816] The task syz.3.977 (9816) triggered the difference, watch for misbehavior. [ 356.907320][ T9829] random: crng reseeded on system resumption [ 357.694419][ T9842] random: crng reseeded on system resumption [ 358.066960][ T9843] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4096.0.0), cmd(5) [ 358.645071][ T9850] ceph: Failed to parse sending metrics switch value '' [ 359.459950][ T9863] FAULT_INJECTION: forcing a failure. [ 359.459950][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 359.493772][ T9863] CPU: 0 UID: 0 PID: 9863 Comm: syz.1.986 Not tainted syzkaller #0 PREEMPT(full) [ 359.493807][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.493823][ T9863] Call Trace: [ 359.493833][ T9863] [ 359.493842][ T9863] dump_stack_lvl+0x16c/0x1f0 [ 359.493882][ T9863] should_fail_ex+0x512/0x640 [ 359.493919][ T9863] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 359.493950][ T9863] should_failslab+0xc2/0x120 [ 359.493993][ T9863] __kmalloc_cache_noprof+0x6a/0x3e0 [ 359.494017][ T9863] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 359.494044][ T9863] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 359.494070][ T9863] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 359.494096][ T9863] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 359.494126][ T9863] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 359.494152][ T9863] ? __asan_memset+0x23/0x50 [ 359.494175][ T9863] ? calc_src_frames.isra.0+0x187/0x1d0 [ 359.494202][ T9863] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 359.494240][ T9863] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 359.494271][ T9863] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 359.494301][ T9863] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 359.494317][ T9863] snd_pcm_oss_sync+0x32e/0x840 [ 359.494333][ T9863] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 359.494347][ T9863] snd_pcm_oss_release+0x28b/0x310 [ 359.494362][ T9863] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 359.494376][ T9863] __fput+0x402/0xb70 [ 359.494399][ T9863] task_work_run+0x14d/0x240 [ 359.494422][ T9863] ? __pfx_task_work_run+0x10/0x10 [ 359.494443][ T9863] ? __pfx___do_sys_close_range+0x10/0x10 [ 359.494459][ T9863] ? syscall_user_dispatch+0x78/0x140 [ 359.494484][ T9863] exit_to_user_mode_loop+0xeb/0x110 [ 359.494504][ T9863] do_syscall_64+0x3f6/0x490 [ 359.494525][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.494539][ T9863] RIP: 0033:0x7f8cc598ebe9 [ 359.494552][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.494566][ T9863] RSP: 002b:00007f8cc3bd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 359.494580][ T9863] RAX: 0000000000000000 RBX: 00007f8cc5bb6090 RCX: 00007f8cc598ebe9 [ 359.494589][ T9863] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 359.494597][ T9863] RBP: 00007f8cc5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 359.494606][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.494614][ T9863] R13: 00007f8cc5bb6128 R14: 00007f8cc5bb6090 R15: 00007ffeb4df0ac8 [ 359.494633][ T9863] [ 364.140086][ T9907] FAULT_INJECTION: forcing a failure. [ 364.140086][ T9907] name failslab, interval 1, probability 0, space 0, times 0 [ 364.186677][ T9907] CPU: 1 UID: 0 PID: 9907 Comm: syz.2.994 Not tainted syzkaller #0 PREEMPT(full) [ 364.186715][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.186730][ T9907] Call Trace: [ 364.186740][ T9907] [ 364.186750][ T9907] dump_stack_lvl+0x16c/0x1f0 [ 364.186788][ T9907] should_fail_ex+0x512/0x640 [ 364.186822][ T9907] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 364.186860][ T9907] should_failslab+0xc2/0x120 [ 364.186893][ T9907] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 364.186927][ T9907] ? trace_kmem_cache_alloc+0x28/0xc0 [ 364.186963][ T9907] ? key_alloc+0xc4d/0x1330 [ 364.187003][ T9907] kmemdup_noprof+0x29/0x60 [ 364.187034][ T9907] key_alloc+0xc4d/0x1330 [ 364.187081][ T9907] ? __pfx_key_alloc+0x10/0x10 [ 364.187111][ T9907] ? __asan_memcpy+0x3c/0x60 [ 364.187147][ T9907] keyring_alloc+0x44/0xc0 [ 364.187187][ T9907] keyctl_get_persistent+0x750/0x8c0 [ 364.187227][ T9907] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 364.187268][ T9907] ? __x64_sys_futex+0x1e0/0x4c0 [ 364.187299][ T9907] ? __x64_sys_futex+0x1e9/0x4c0 [ 364.187334][ T9907] ? xfd_validate_state+0x61/0x180 [ 364.187378][ T9907] __do_sys_keyctl+0x1a9/0x590 [ 364.187409][ T9907] do_syscall_64+0xcd/0x490 [ 364.187447][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.187472][ T9907] RIP: 0033:0x7fe10e18ebe9 [ 364.187493][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.187519][ T9907] RSP: 002b:00007fe10f08e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 364.187545][ T9907] RAX: ffffffffffffffda RBX: 00007fe10e3b5fa0 RCX: 00007fe10e18ebe9 [ 364.187573][ T9907] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000016 [ 364.187591][ T9907] RBP: 00007fe10e211e19 R08: 0000000000000001 R09: 0000000000000000 [ 364.187608][ T9907] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 364.187625][ T9907] R13: 00007fe10e3b6038 R14: 00007fe10e3b5fa0 R15: 00007ffd4fd0e098 [ 364.187662][ T9907] [ 364.510385][ T9928] FAULT_INJECTION: forcing a failure. [ 364.510385][ T9928] name failslab, interval 1, probability 0, space 0, times 0 [ 364.523103][ T9928] CPU: 1 UID: 0 PID: 9928 Comm: syz.1.998 Not tainted syzkaller #0 PREEMPT(full) [ 364.523125][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.523134][ T9928] Call Trace: [ 364.523140][ T9928] [ 364.523146][ T9928] dump_stack_lvl+0x16c/0x1f0 [ 364.523170][ T9928] should_fail_ex+0x512/0x640 [ 364.523190][ T9928] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 364.523208][ T9928] should_failslab+0xc2/0x120 [ 364.523226][ T9928] __kmalloc_cache_noprof+0x6a/0x3e0 [ 364.523242][ T9928] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 364.523268][ T9928] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 364.523286][ T9928] ? trace_contention_end+0xdd/0x130 [ 364.523307][ T9928] ? __mutex_lock+0x1c5/0x1060 [ 364.523325][ T9928] ? kasan_quarantine_put+0x10a/0x240 [ 364.523341][ T9928] ? lockdep_hardirqs_on+0x7c/0x110 [ 364.523361][ T9928] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 364.523377][ T9928] ? __pfx___mutex_lock+0x10/0x10 [ 364.523394][ T9928] ? tomoyo_path_number_perm+0x295/0x580 [ 364.523416][ T9928] ? __lock_acquire+0xb97/0x1ce0 [ 364.523439][ T9928] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 364.523457][ T9928] snd_pcm_oss_get_formats+0x7e/0x340 [ 364.523470][ T9928] ? find_held_lock+0x2b/0x80 [ 364.523484][ T9928] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 364.523497][ T9928] ? __might_fault+0x13b/0x190 [ 364.523520][ T9928] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 364.523535][ T9928] ? find_held_lock+0x2b/0x80 [ 364.523548][ T9928] ? hook_file_ioctl_common+0x145/0x410 [ 364.523567][ T9928] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 364.523583][ T9928] ? __fget_files+0x20e/0x3c0 [ 364.523602][ T9928] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 364.523617][ T9928] __x64_sys_ioctl+0x18e/0x210 [ 364.523640][ T9928] do_syscall_64+0xcd/0x490 [ 364.523661][ T9928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.523675][ T9928] RIP: 0033:0x7f8cc598ebe9 [ 364.523689][ T9928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.523702][ T9928] RSP: 002b:00007f8cc3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.523716][ T9928] RAX: ffffffffffffffda RBX: 00007f8cc5bb5fa0 RCX: 00007f8cc598ebe9 [ 364.523726][ T9928] RDX: 0000200000000180 RSI: 00000000c0045005 RDI: 0000000000000009 [ 364.523734][ T9928] RBP: 00007f8cc5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 364.523743][ T9928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.523751][ T9928] R13: 00007f8cc5bb6038 R14: 00007f8cc5bb5fa0 R15: 00007ffeb4df0ac8 [ 364.523771][ T9928] [ 372.483648][T10015] random: crng reseeded on system resumption [ 372.778265][ T30] audit: type=1800 audit(6051394687.618:12): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1008" name="dbroot" dev="configfs" ino=29274 res=0 errno=0 [ 372.812544][T10022] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 372.812544][T10022] program syz.2.1011 not setting count and/or reply_len properly [ 373.951631][T10038] bond0: option all_slaves_active: invalid value () [ 374.334760][T10040] FAULT_INJECTION: forcing a failure. [ 374.334760][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 374.384887][T10040] CPU: 0 UID: 0 PID: 10040 Comm: syz.1.1013 Not tainted syzkaller #0 PREEMPT(full) [ 374.384909][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.384930][T10040] Call Trace: [ 374.384938][T10040] [ 374.384944][T10040] dump_stack_lvl+0x16c/0x1f0 [ 374.384968][T10040] should_fail_ex+0x512/0x640 [ 374.384989][T10040] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 374.385006][T10040] should_failslab+0xc2/0x120 [ 374.385025][T10040] __kmalloc_cache_noprof+0x6a/0x3e0 [ 374.385040][T10040] ? do_eventfd+0x67/0x2c0 [ 374.385063][T10040] do_eventfd+0x67/0x2c0 [ 374.385081][T10040] ? rcu_is_watching+0x12/0xc0 [ 374.385096][T10040] __x64_sys_eventfd+0x32/0x50 [ 374.385116][T10040] do_syscall_64+0xcd/0x490 [ 374.385136][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.385150][T10040] RIP: 0033:0x7f8cc598ebe9 [ 374.385162][T10040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.385176][T10040] RSP: 002b:00007f8cc3bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 374.385190][T10040] RAX: ffffffffffffffda RBX: 00007f8cc5bb5fa0 RCX: 00007f8cc598ebe9 [ 374.385199][T10040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 374.385207][T10040] RBP: 00007f8cc5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 374.385215][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.385223][T10040] R13: 00007f8cc5bb6038 R14: 00007f8cc5bb5fa0 R15: 00007ffeb4df0ac8 [ 374.385241][T10040] [ 377.907218][T10081] Invalid ELF header magic: != ELF [ 378.644606][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650943][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.458249][T10100] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 381.326927][T10114] blktrace: Concurrent blktraces are not allowed on ram7 [ 381.619668][T10102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 383.238057][T10139] vivid-007: ================= START STATUS ================= [ 383.245969][T10139] vivid-007: Generate PTS: true [ 383.251114][T10139] vivid-007: Generate SCR: true [ 383.256917][T10139] tpg source WxH: 320x240 (Y'CbCr) [ 383.262120][T10139] tpg field: 1 [ 383.265475][T10139] tpg crop: (0,0)/320x240 [ 383.296068][T10139] tpg compose: (0,0)/320x240 [ 383.339890][T10139] tpg colorspace: 8 [ 383.347801][T10139] tpg transfer function: 0/0 [ 383.357981][T10139] tpg Y'CbCr encoding: 0/0 [ 383.367177][T10139] tpg quantization: 0/0 [ 383.408930][T10139] tpg RGB range: 0/2 [ 383.412856][T10139] vivid-007: ================== END STATUS ================== [ 383.849226][T10140] can: request_module (can-proto-3) failed. [ 383.883892][T10148] block nbd9: NBD_DISCONNECT [ 386.401868][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1034'. [ 386.959756][T10171] team0: Port device team_slave_1 removed [ 389.009394][T10195] random: crng reseeded on system resumption [ 389.975429][T10202] can: request_module (can-proto-3) failed. [ 391.200929][T10215] blktrace: Concurrent blktraces are not allowed on ram7 [ 393.776067][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 395.776216][T10252] random: crng reseeded on system resumption [ 396.207158][T10259] ubi: mtd0 is already attached to ubi0 [ 396.213940][T10259] ubi0: detaching mtd0 [ 396.224904][T10259] ubi0: mtd0 is detached [ 396.413431][T10252] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1047'. [ 398.355613][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.364299][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.372224][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.380226][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.389551][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.815994][ T30] audit: type=1800 audit(6051394714.738:13): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1055" name="features" dev="configfs" ino=31100 res=0 errno=0 [ 399.836422][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.898450][T10282] chnl_net:caif_netlink_parms(): no params data found [ 400.478816][ T5186] Bluetooth: hci5: command tx timeout [ 401.067040][T10318] can: request_module (can-proto-3) failed. [ 401.254755][T10282] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.328832][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.336039][T10282] bridge_slave_0: entered allmulticast mode [ 401.421088][T10282] bridge_slave_0: entered promiscuous mode [ 401.466001][T10282] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.480452][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.513931][T10282] bridge_slave_1: entered allmulticast mode [ 401.525985][T10282] bridge_slave_1: entered promiscuous mode [ 401.644279][T10282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.671396][T10282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.885013][T10282] team0: Port device team_slave_0 added [ 401.915068][T10282] team0: Port device team_slave_1 added [ 402.190548][T10282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.258874][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.285084][T10282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.298026][T10282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.316077][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.350895][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 402.374269][T10282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.558876][ T5186] Bluetooth: hci5: command tx timeout [ 402.719636][T10282] hsr_slave_0: entered promiscuous mode [ 402.726212][T10282] hsr_slave_1: entered promiscuous mode [ 402.759454][T10282] debugfs: 'hsr0' already exists in 'hsr' [ 402.765266][T10282] Cannot create hsr debugfs directory [ 404.400838][T10282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 404.487462][T10282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 404.639149][ T5186] Bluetooth: hci5: command tx timeout [ 404.696782][T10282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 404.932429][T10282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 405.543985][T10282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.624972][T10282] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.762601][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.769789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.842781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.849980][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.731982][ T5186] Bluetooth: hci5: command tx timeout [ 408.054817][T10378] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f829 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 408.070426][T10378] Call Trace: [ 408.073721][T10378] [ 408.076668][T10378] mce_cpu_restart+0x98/0xb0 [ 408.081278][T10378] ? __pfx_mce_cpu_restart+0x10/0x10 [ 408.086586][T10378] smp_call_function_many_cond+0x1227/0x1600 [ 408.092593][T10378] ? __pfx_mce_cpu_restart+0x10/0x10 [ 408.097896][T10378] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 408.103704][T10378] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 408.110053][T10378] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 408.116060][T10378] ? __pfx_mce_cpu_restart+0x10/0x10 [ 408.121339][T10378] on_each_cpu_cond_mask+0x40/0x90 [ 408.126447][T10378] set_bank+0x240/0x3a0 [ 408.130596][T10378] ? __pfx_set_bank+0x10/0x10 [ 408.135268][T10378] ? __pfx_set_bank+0x10/0x10 [ 408.139936][T10378] dev_attr_store+0x58/0x80 [ 408.144431][T10378] ? __pfx_dev_attr_store+0x10/0x10 [ 408.149617][T10378] sysfs_kf_write+0xf2/0x150 [ 408.154204][T10378] kernfs_fop_write_iter+0x354/0x510 [ 408.159483][T10378] ? __pfx_sysfs_kf_write+0x10/0x10 [ 408.164692][T10378] vfs_write+0x7d0/0x11d0 [ 408.169035][T10378] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 408.174833][T10378] ? __pfx___mutex_lock+0x10/0x10 [ 408.179855][T10378] ? __pfx_vfs_write+0x10/0x10 [ 408.184628][T10378] ksys_write+0x12a/0x250 [ 408.188948][T10378] ? __pfx_ksys_write+0x10/0x10 [ 408.193796][T10378] do_syscall_64+0xcd/0x490 [ 408.198302][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.204185][T10378] RIP: 0033:0x7f210cd8ebe9 [ 408.208603][T10378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.228230][T10378] RSP: 002b:00007f210dbef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.236634][T10378] RAX: ffffffffffffffda RBX: 00007f210cfb6090 RCX: 00007f210cd8ebe9 [ 408.244597][T10378] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000002 [ 408.252558][T10378] RBP: 00007f210ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 408.260519][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.268477][T10378] R13: 00007f210cfb6128 R14: 00007f210cfb6090 R15: 00007ffed4a8b938 [ 408.276447][T10378] [ 408.288052][T10282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.333813][T10378] zswap: compressor not available [ 410.050943][T10282] veth0_vlan: entered promiscuous mode [ 410.071454][T10282] veth1_vlan: entered promiscuous mode [ 410.152697][T10282] veth0_macvtap: entered promiscuous mode [ 410.161702][T10282] veth1_macvtap: entered promiscuous mode [ 410.237015][T10282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.491461][T10282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.556383][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.567556][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.611507][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.623868][T10406] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 410.869155][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.965704][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.036949][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.140339][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.148197][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.209701][T10407] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 414.373301][T10429] random: crng reseeded on system resumption [ 415.626591][T10433] zswap: compressor not available [ 418.395761][T10457] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 418.461113][T10449] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 418.475527][T10449] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 418.705813][T10449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.793444][T10449] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 419.720448][T10449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.848814][T10449] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 419.946163][T10449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.975738][T10449] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 420.186343][T10449] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 420.192735][T10449] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 420.478752][ T5186] Bluetooth: hci0: command 0x0406 tx timeout [ 420.632771][T10483] tipc: Started in network mode [ 420.633940][T10449] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 420.638001][T10483] tipc: Node identity ee00, cluster identity 4711 [ 420.666353][T10483] tipc: Node number set to 60928 [ 420.719413][ T5186] Bluetooth: hci1: command 0x0406 tx timeout [ 420.997310][T10449] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 421.010611][T10449] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 421.112538][T10449] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 421.789680][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 421.998777][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 422.267473][ T5186] Bluetooth: hci4: command 0x0c1a tx timeout [ 422.566366][ T5186] Bluetooth: hci0: command 0x0406 tx timeout [ 422.809431][ T5186] Bluetooth: hci1: command 0x0406 tx timeout [ 422.907067][T10506] FAULT_INJECTION: forcing a failure. [ 422.907067][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 422.921400][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.1.1081 Not tainted syzkaller #0 PREEMPT(full) [ 422.921436][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.921451][T10506] Call Trace: [ 422.921460][T10506] [ 422.921470][T10506] dump_stack_lvl+0x16c/0x1f0 [ 422.921509][T10506] should_fail_ex+0x512/0x640 [ 422.921543][T10506] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 422.921578][T10506] should_failslab+0xc2/0x120 [ 422.921610][T10506] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 422.921640][T10506] ? alloc_empty_file+0x55/0x1e0 [ 422.921681][T10506] alloc_empty_file+0x55/0x1e0 [ 422.921719][T10506] path_openat+0xda/0x2cb0 [ 422.921747][T10506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.921785][T10506] ? __pfx_path_openat+0x10/0x10 [ 422.921827][T10506] do_filp_open+0x20b/0x470 [ 422.921859][T10506] ? __pfx_do_filp_open+0x10/0x10 [ 422.921914][T10506] ? alloc_fd+0x471/0x7d0 [ 422.921951][T10506] do_sys_openat2+0x11b/0x1d0 [ 422.921989][T10506] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.922039][T10506] __x64_sys_openat+0x174/0x210 [ 422.922078][T10506] ? __pfx___x64_sys_openat+0x10/0x10 [ 422.922129][T10506] do_syscall_64+0xcd/0x490 [ 422.922166][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.922192][T10506] RIP: 0033:0x7f8cc598ebe9 [ 422.922212][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.922236][T10506] RSP: 002b:00007f8cc3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.922261][T10506] RAX: ffffffffffffffda RBX: 00007f8cc5bb5fa0 RCX: 00007f8cc598ebe9 [ 422.922278][T10506] RDX: 0000000000101041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 422.922295][T10506] RBP: 00007f8cc5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 422.922310][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.922326][T10506] R13: 00007f8cc5bb6038 R14: 00007f8cc5bb5fa0 R15: 00007ffeb4df0ac8 [ 422.922358][T10506] [ 423.039715][ T5186] Bluetooth: hci5: command 0x0c1a tx timeout [ 423.308796][T10510] random: crng reseeded on system resumption [ 423.839240][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 424.082093][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 424.319087][ T5186] Bluetooth: hci4: command 0x0c1a tx timeout [ 425.198830][ T5186] Bluetooth: hci5: command 0x0c1a tx timeout [ 425.404860][T10534] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 426.220382][T10535] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 426.398696][ T5186] Bluetooth: hci4: command 0x0c1a tx timeout [ 426.748114][T10548] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 427.288636][ T5186] Bluetooth: hci5: command 0x0c1a tx timeout [ 428.615777][T10565] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 429.017161][T10570] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 429.178049][T10574] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 429.702761][T10575] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 433.718954][T10637] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 434.316678][T10638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 434.623262][T10643] Invalid ELF header magic: != ELF [ 439.683688][T10692] vivid-007: ================= START STATUS ================= [ 439.712101][T10692] vivid-007: Generate PTS: true [ 439.722514][T10692] vivid-007: Generate SCR: true [ 439.727390][T10692] tpg source WxH: 320x240 (Y'CbCr) [ 439.743777][T10692] tpg field: 1 [ 439.747191][T10692] tpg crop: (0,0)/320x240 [ 439.762968][T10692] tpg compose: (0,0)/320x240 [ 439.768680][T10692] tpg colorspace: 8 [ 439.772483][T10692] tpg transfer function: 0/0 [ 439.777054][T10692] tpg Y'CbCr encoding: 0/0 [ 439.808150][T10692] tpg quantization: 0/0 [ 439.858646][T10692] tpg RGB range: 0/2 [ 439.883528][T10692] vivid-007: ================== END STATUS ================== [ 440.088635][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.094926][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.418834][T10704] can: request_module (can-proto-3) failed. [ 440.584124][T10697] random: crng reseeded on system resumption [ 441.332890][T10719] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 441.473629][T10721] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 441.927861][T10722] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 444.786619][T10751] ACPI: Can not change Invalid GPE/Fixed Event status [ 445.919753][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 445.930448][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 445.938961][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 445.947088][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.961046][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 446.254203][T10762] chnl_net:caif_netlink_parms(): no params data found [ 446.436942][T10762] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.453092][T10762] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.473811][T10762] bridge_slave_0: entered allmulticast mode [ 446.503615][T10762] bridge_slave_0: entered promiscuous mode [ 446.517166][T10762] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.526320][T10762] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.536784][T10762] bridge_slave_1: entered allmulticast mode [ 446.547959][T10762] bridge_slave_1: entered promiscuous mode [ 446.716116][T10762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.743842][T10762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.982297][T10762] team0: Port device team_slave_0 added [ 447.028230][T10762] team0: Port device team_slave_1 added [ 447.094892][T10762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.102109][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.128380][T10762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.141131][T10762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.148088][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.177611][T10762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.276508][T10762] hsr_slave_0: entered promiscuous mode [ 447.297716][T10762] hsr_slave_1: entered promiscuous mode [ 447.304808][T10762] debugfs: 'hsr0' already exists in 'hsr' [ 447.316104][T10762] Cannot create hsr debugfs directory [ 447.756767][T10762] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 447.768269][T10762] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 447.780701][T10762] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 447.793013][T10762] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 448.000516][ T5186] Bluetooth: hci6: command tx timeout [ 448.014950][T10762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.068459][T10762] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.095045][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.102251][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.148088][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.155322][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.789869][T10762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.451828][T10762] veth0_vlan: entered promiscuous mode [ 449.542681][T10762] veth1_vlan: entered promiscuous mode [ 449.598062][T10762] veth0_macvtap: entered promiscuous mode [ 449.620195][T10762] veth1_macvtap: entered promiscuous mode [ 449.703417][T10762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.731638][T10762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.763045][ T1162] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.777666][ T1162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.786537][ T1162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.798124][ T1162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.818342][T10800] blktrace: Concurrent blktraces are not allowed on ram7 [ 450.020792][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.033034][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.079712][ T5186] Bluetooth: hci6: command tx timeout [ 450.145994][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.172076][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.321504][T10805] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1120'. [ 452.159378][ T5186] Bluetooth: hci6: command tx timeout [ 453.748774][T10834] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 454.238862][ T5186] Bluetooth: hci6: command tx timeout [ 454.356358][T10838] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 458.345278][T10872] vivid-007: ================= START STATUS ================= [ 458.353369][T10872] vivid-007: Generate PTS: true [ 458.358224][T10872] vivid-007: Generate SCR: true [ 458.363467][T10872] tpg source WxH: 320x240 (Y'CbCr) [ 458.369576][T10872] tpg field: 1 [ 458.372945][T10872] tpg crop: (0,0)/320x240 [ 458.379065][T10872] tpg compose: (0,0)/320x240 [ 458.389150][T10872] tpg colorspace: 8 [ 458.392962][T10872] tpg transfer function: 0/0 [ 458.413718][T10872] tpg Y'CbCr encoding: 0/0 [ 458.424024][T10872] tpg quantization: 0/0 [ 458.458674][T10872] tpg RGB range: 0/2 [ 458.462605][T10872] vivid-007: ================== END STATUS ================== [ 458.910845][T10880] can: request_module (can-proto-3) failed. [ 459.349872][T10883] zswap: compressor not available [ 460.185185][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 460.200360][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 460.230326][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 460.240005][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 460.284331][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 460.954033][T10891] chnl_net:caif_netlink_parms(): no params data found [ 461.672377][T10891] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.702795][T10891] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.776787][T10891] bridge_slave_0: entered allmulticast mode [ 461.816360][T10891] bridge_slave_0: entered promiscuous mode [ 461.910021][T10891] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.917356][T10891] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.968923][T10891] bridge_slave_1: entered allmulticast mode [ 461.976749][T10891] bridge_slave_1: entered promiscuous mode [ 462.052938][ T5186] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 462.095311][ T5186] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 462.104792][ T5186] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 462.114837][ T5186] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 462.123385][ T5186] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 462.281880][T10891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.326885][T10891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.328825][ T5186] Bluetooth: hci7: command tx timeout [ 462.587382][T10891] team0: Port device team_slave_0 added [ 462.604712][T10891] team0: Port device team_slave_1 added [ 462.896816][T10891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.903894][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.929956][T10891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.975264][T10910] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 462.998385][T10891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.016292][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.083976][T10891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.528874][T10891] hsr_slave_0: entered promiscuous mode [ 463.535532][T10891] hsr_slave_1: entered promiscuous mode [ 463.551129][T10891] debugfs: 'hsr0' already exists in 'hsr' [ 463.557786][T10891] Cannot create hsr debugfs directory [ 463.693314][T10926] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:7 is already present [ 464.172486][ T5186] Bluetooth: hci8: command tx timeout [ 464.215693][T10911] chnl_net:caif_netlink_parms(): no params data found [ 464.400163][ T5186] Bluetooth: hci7: command tx timeout [ 465.312098][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.330524][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.337816][T10911] bridge_slave_0: entered allmulticast mode [ 465.357421][T10911] bridge_slave_0: entered promiscuous mode [ 465.571031][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.578132][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.649531][T10911] bridge_slave_1: entered allmulticast mode [ 465.709095][T10911] bridge_slave_1: entered promiscuous mode [ 465.736883][T10891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 465.962084][T10891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 465.997667][T10891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 466.054963][T10911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.079566][T10891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 466.127907][T10911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.243790][ T5186] Bluetooth: hci8: command tx timeout [ 466.339739][T10911] team0: Port device team_slave_0 added [ 466.366275][T10911] team0: Port device team_slave_1 added [ 466.479184][ T5186] Bluetooth: hci7: command tx timeout [ 466.540967][T10911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.557410][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.633743][T10911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.674527][T10911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.712577][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.837873][T10911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.986403][T10911] hsr_slave_0: entered promiscuous mode [ 467.003729][T10955] random: crng reseeded on system resumption [ 467.027126][T10911] hsr_slave_1: entered promiscuous mode [ 467.049831][T10911] debugfs: 'hsr0' already exists in 'hsr' [ 467.067893][T10911] Cannot create hsr debugfs directory [ 467.793607][T10891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.954771][T10891] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.007532][T10962] Invalid ELF header magic: != ELF [ 468.175351][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.182531][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.272204][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.279428][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.292594][T10911] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 468.330100][ T5186] Bluetooth: hci8: command tx timeout [ 468.366033][T10911] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 468.437457][T10911] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 468.504049][T10911] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 468.558830][ T5186] Bluetooth: hci7: command tx timeout [ 468.722933][T10891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.121213][T10911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.134188][ T5186] Bluetooth: hci5: unexpected event 0x16 length: 440 > 6 [ 469.271951][T10911] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.332304][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.339532][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.377250][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.384468][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.439193][T10985] vxcan0: entered allmulticast mode [ 469.597977][T10891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.357210][T10911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.398892][ T5186] Bluetooth: hci8: command tx timeout [ 470.837941][T10891] veth0_vlan: entered promiscuous mode [ 470.891796][T10891] veth1_vlan: entered promiscuous mode [ 470.945643][T10891] veth0_macvtap: entered promiscuous mode [ 471.050367][T10891] veth1_macvtap: entered promiscuous mode [ 471.193502][T10891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.225720][T10891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.259896][ T1162] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.321045][ T1162] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.434185][ T1111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.455604][ T1111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.616959][T10911] veth0_vlan: entered promiscuous mode [ 471.642489][T10911] veth1_vlan: entered promiscuous mode [ 471.775043][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.797301][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.927081][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.969094][T10911] veth0_macvtap: entered promiscuous mode [ 471.996242][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.013407][T10911] veth1_macvtap: entered promiscuous mode [ 472.148070][T10911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.206216][T10911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.306966][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.334673][ T2903] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.419833][ T2903] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.465962][ T2903] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.875360][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.928758][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.102076][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.149321][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.078151][T11047] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 474.138113][T11049] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1158'. [ 474.962569][T11050] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 477.378285][T11082] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1163'. [ 477.419107][T11075] zswap: compressor not available [ 478.094407][T11094] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 479.341372][T11110] random: crng reseeded on system resumption [ 479.883383][T11119] bond0: option all_slaves_active: invalid value () [ 480.719369][T11126] program syz.6.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.742742][T11134] net_ratelimit: 63 callbacks suppressed [ 481.742802][T11134] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 482.889169][ T5186] Bluetooth: hci5: unexpected event 0x1d length: 10 > 5 [ 483.502027][T11149] FAULT_INJECTION: forcing a failure. [ 483.502027][T11149] name fail_futex, interval 1, probability 0, space 0, times 0 [ 483.539160][T11149] CPU: 0 UID: 0 PID: 11149 Comm: syz.5.1175 Not tainted syzkaller #0 PREEMPT(full) [ 483.539181][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.539190][T11149] Call Trace: [ 483.539196][T11149] [ 483.539201][T11149] dump_stack_lvl+0x16c/0x1f0 [ 483.539226][T11149] should_fail_ex+0x512/0x640 [ 483.539248][T11149] get_futex_key+0xff0/0x1560 [ 483.539268][T11149] ? __pfx_get_futex_key+0x10/0x10 [ 483.539285][T11149] ? __mutex_trylock_common+0xe9/0x250 [ 483.539308][T11149] futex_wake+0xea/0x530 [ 483.539329][T11149] ? __pfx_futex_wake+0x10/0x10 [ 483.539356][T11149] do_futex+0x1e3/0x350 [ 483.539374][T11149] ? __pfx_do_futex+0x10/0x10 [ 483.539389][T11149] ? __might_fault+0xe3/0x190 [ 483.539410][T11149] mm_release+0x24e/0x300 [ 483.539427][T11149] do_exit+0x68e/0x2bf0 [ 483.539450][T11149] ? __pfx_do_exit+0x10/0x10 [ 483.539468][T11149] ? do_raw_spin_lock+0x12c/0x2b0 [ 483.539488][T11149] ? find_held_lock+0x2b/0x80 [ 483.539504][T11149] do_group_exit+0xd3/0x2a0 [ 483.539523][T11149] get_signal+0x2673/0x26d0 [ 483.539546][T11149] ? __pfx_get_signal+0x10/0x10 [ 483.539561][T11149] ? do_futex+0x122/0x350 [ 483.539578][T11149] ? __pfx_do_futex+0x10/0x10 [ 483.539596][T11149] arch_do_signal_or_restart+0x8f/0x790 [ 483.539615][T11149] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 483.539638][T11149] ? xfd_validate_state+0x61/0x180 [ 483.539658][T11149] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 483.539681][T11149] exit_to_user_mode_loop+0x84/0x110 [ 483.539702][T11149] do_syscall_64+0x3f6/0x490 [ 483.539722][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.539736][T11149] RIP: 0033:0x7f118c78ebe9 [ 483.539748][T11149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.539770][T11149] RSP: 002b:00007f118d6dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 483.539783][T11149] RAX: fffffffffffffe00 RBX: 00007f118c9b5fa8 RCX: 00007f118c78ebe9 [ 483.539792][T11149] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f118c9b5fa8 [ 483.539800][T11149] RBP: 00007f118c9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 483.539809][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.539817][T11149] R13: 00007f118c9b6038 R14: 00007ffc5a316ff0 R15: 00007ffc5a3170d8 [ 483.539835][T11149] [ 483.779637][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.211088][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1181'. [ 486.327024][T11194] FAULT_INJECTION: forcing a failure. [ 486.327024][T11194] name failslab, interval 1, probability 0, space 0, times 0 [ 486.379001][T11194] CPU: 0 UID: 0 PID: 11194 Comm: syz.7.1181 Not tainted syzkaller #0 PREEMPT(full) [ 486.379037][T11194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.379053][T11194] Call Trace: [ 486.379062][T11194] [ 486.379070][T11194] dump_stack_lvl+0x16c/0x1f0 [ 486.379095][T11194] should_fail_ex+0x512/0x640 [ 486.379115][T11194] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 486.379136][T11194] should_failslab+0xc2/0x120 [ 486.379155][T11194] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 486.379173][T11194] ? __d_alloc+0x32/0xae0 [ 486.379194][T11194] __d_alloc+0x32/0xae0 [ 486.379213][T11194] d_alloc_parallel+0x111/0x1480 [ 486.379241][T11194] ? __lock_acquire+0xb97/0x1ce0 [ 486.379259][T11194] ? __pfx_d_alloc_parallel+0x10/0x10 [ 486.379282][T11194] ? lockdep_init_map_type+0x5c/0x280 [ 486.379302][T11194] ? lockdep_init_map_type+0x5c/0x280 [ 486.379324][T11194] __lookup_slow+0x193/0x460 [ 486.379345][T11194] ? __pfx___lookup_slow+0x10/0x10 [ 486.379378][T11194] ? lookup_fast+0x156/0x610 [ 486.379395][T11194] walk_component+0x353/0x5b0 [ 486.379411][T11194] link_path_walk+0x627/0xe20 [ 486.379432][T11194] path_openat+0x1b0/0x2cb0 [ 486.379447][T11194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.379468][T11194] ? __pfx_path_openat+0x10/0x10 [ 486.379489][T11194] do_filp_open+0x20b/0x470 [ 486.379506][T11194] ? __pfx_do_filp_open+0x10/0x10 [ 486.379536][T11194] ? alloc_fd+0x471/0x7d0 [ 486.379566][T11194] do_sys_openat2+0x11b/0x1d0 [ 486.379590][T11194] ? __pfx_do_sys_openat2+0x10/0x10 [ 486.379619][T11194] __x64_sys_openat+0x174/0x210 [ 486.379642][T11194] ? __pfx___x64_sys_openat+0x10/0x10 [ 486.379672][T11194] do_syscall_64+0xcd/0x490 [ 486.379693][T11194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.379706][T11194] RIP: 0033:0x7f7a5038ebe9 [ 486.379719][T11194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.379733][T11194] RSP: 002b:00007f7a5127e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.379748][T11194] RAX: ffffffffffffffda RBX: 00007f7a505b6090 RCX: 00007f7a5038ebe9 [ 486.379757][T11194] RDX: 0000000000048041 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 486.379766][T11194] RBP: 00007f7a50411e19 R08: 0000000000000000 R09: 0000000000000000 [ 486.379775][T11194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.379784][T11194] R13: 00007f7a505b6128 R14: 00007f7a505b6090 R15: 00007ffe1975a9f8 [ 486.379803][T11194] [ 486.632326][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.602540][T11230] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 489.358543][T11239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 490.893596][T11264] queue_state_write: operation too long [ 490.918799][T11264] queue_state_write: use 'run', 'start' or 'kick' [ 491.645939][T11279] vivid-003: ================= START STATUS ================= [ 491.653911][T11279] vivid-003: Radio HW Seek Mode: Bounded [ 491.659704][T11279] vivid-003: Radio Programmable HW Seek: false [ 491.665914][T11279] vivid-003: RDS Rx I/O Mode: Block I/O [ 491.671580][T11279] vivid-003: Generate RBDS Instead of RDS: false [ 491.677963][T11279] vivid-003: RDS Reception: true [ 491.683493][T11279] vivid-003: RDS Program Type: 0 inactive [ 491.689322][T11279] vivid-003: RDS PS Name: inactive [ 491.694589][T11279] vivid-003: RDS Radio Text: inactive [ 491.700237][T11279] vivid-003: RDS Traffic Announcement: false inactive [ 491.707061][T11279] vivid-003: RDS Traffic Program: false inactive [ 491.713507][T11279] vivid-003: RDS Music: false inactive [ 491.719244][T11279] vivid-003: ================== END STATUS ================== [ 492.191026][T11288] random: crng reseeded on system resumption [ 493.416522][T11298] can: request_module (can-proto-3) failed. [ 493.491537][T11302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1192'. [ 493.973671][T11302] team0: Port device team_slave_1 removed [ 494.055067][ T30] audit: type=1800 audit(6051394808.998:14): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1193" name="members" dev="configfs" ino=36821 res=0 errno=0 [ 494.825661][T11336] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 494.967752][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1198'. [ 495.265944][T11339] veth0_macvtap: left promiscuous mode [ 496.939015][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1201'. [ 497.210018][ T30] audit: type=1800 audit(6051394812.138:15): pid=11375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1200" name="members" dev="configfs" ino=37900 res=0 errno=0 [ 501.524012][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535673][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.125490][T11486] ACPI: Can not change Invalid GPE/Fixed Event status [ 508.504404][T11509] Invalid ELF header magic: != ELF [ 511.771524][ T9514] svc: failed to register nfsdv3 RPC service (errno 512). [ 511.793840][ T9514] svc: failed to register nfsaclv3 RPC service (errno 512). [ 512.600878][ T30] audit: type=1800 audit(6051394827.548:16): pid=11547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1228" name="features" dev="configfs" ino=38957 res=0 errno=0 [ 513.628484][T11550] sd 0:0:1:0: PR command failed: 1026 [ 513.909202][T11550] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 513.945533][T11550] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 520.717875][T11578] kexec: Could not allocate control_code_buffer [ 522.992919][T11639] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 523.004869][T11639] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 523.013350][T11639] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 523.067169][T11639] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 523.075042][T11639] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 523.803495][T11637] chnl_net:caif_netlink_parms(): no params data found [ 524.304995][T11637] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.316844][T11637] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.328207][T11637] bridge_slave_0: entered allmulticast mode [ 524.343857][T11637] bridge_slave_0: entered promiscuous mode [ 524.356305][T11637] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.367292][T11637] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.391770][T11637] bridge_slave_1: entered allmulticast mode [ 524.410637][T11637] bridge_slave_1: entered promiscuous mode [ 524.477588][T11637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.506180][T11637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.554894][T11637] team0: Port device team_slave_0 added [ 524.564997][T11637] team0: Port device team_slave_1 added [ 524.630301][T11637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.637288][T11637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.674073][T11637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.695315][T11637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.706567][T11637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.733508][T11637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.792543][T11637] hsr_slave_0: entered promiscuous mode [ 524.801642][T11637] hsr_slave_1: entered promiscuous mode [ 524.811340][T11637] debugfs: 'hsr0' already exists in 'hsr' [ 524.817099][T11637] Cannot create hsr debugfs directory [ 525.121054][ T51] Bluetooth: hci9: command tx timeout [ 525.204939][T11637] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 525.234105][T11637] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 525.254491][T11637] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 525.276723][T11637] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 525.472826][T11637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.501334][T11637] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.527462][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.534665][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.571871][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.579089][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.646837][T11637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.965089][T11637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.417753][T11637] veth0_vlan: entered promiscuous mode [ 526.433226][T11637] veth1_vlan: entered promiscuous mode [ 526.492164][T11637] veth0_macvtap: entered promiscuous mode [ 526.512669][T11637] veth1_macvtap: entered promiscuous mode [ 526.560914][T11637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.586414][T11637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.607655][ T1162] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.636145][ T1162] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.660559][ T1162] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.686279][ T1162] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.832090][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.855133][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.914645][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.930005][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.198725][ T51] Bluetooth: hci9: command tx timeout [ 529.035974][T11678] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 529.279963][ T51] Bluetooth: hci9: command tx timeout [ 529.994018][T11696] FAULT_INJECTION: forcing a failure. [ 529.994018][T11696] name failslab, interval 1, probability 0, space 0, times 0 [ 530.050680][T11696] CPU: 0 UID: 0 PID: 11696 Comm: syz.5.1247 Not tainted syzkaller #0 PREEMPT(full) [ 530.050703][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.050713][T11696] Call Trace: [ 530.050718][T11696] [ 530.050724][T11696] dump_stack_lvl+0x16c/0x1f0 [ 530.050750][T11696] should_fail_ex+0x512/0x640 [ 530.050770][T11696] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 530.050788][T11696] should_failslab+0xc2/0x120 [ 530.050807][T11696] __kmalloc_cache_noprof+0x6a/0x3e0 [ 530.050822][T11696] ? do_eventfd+0x67/0x2c0 [ 530.050844][T11696] do_eventfd+0x67/0x2c0 [ 530.050862][T11696] ? rcu_is_watching+0x12/0xc0 [ 530.050877][T11696] __x64_sys_eventfd+0x32/0x50 [ 530.050897][T11696] do_syscall_64+0xcd/0x490 [ 530.050917][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.050931][T11696] RIP: 0033:0x7f118c78ebe9 [ 530.050943][T11696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.050957][T11696] RSP: 002b:00007f118d6dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 530.050972][T11696] RAX: ffffffffffffffda RBX: 00007f118c9b5fa0 RCX: 00007f118c78ebe9 [ 530.050982][T11696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 530.050990][T11696] RBP: 00007f118c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 530.050998][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.051006][T11696] R13: 00007f118c9b6038 R14: 00007f118c9b5fa0 R15: 00007ffc5a3170d8 [ 530.051024][T11696] [ 531.364506][ T51] Bluetooth: hci9: command tx timeout [ 531.599711][ T31] INFO: task syz.3.1026:10120 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 531.649611][ T31] Not tainted syzkaller #0 [ 531.673411][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.830995][T11705] caif:caif_disconnect_client(): nothing to disconnect [ 531.849112][ T31] task:syz.3.1026 state:D stack:25512 pid:10120 tgid:10119 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 531.908647][ T31] Call Trace: [ 531.912111][ T31] [ 531.915069][ T31] __schedule+0x1190/0x5de0 [ 531.935525][ T31] ? __pfx___schedule+0x10/0x10 [ 531.940618][ T31] ? find_held_lock+0x2b/0x80 [ 531.945422][ T31] ? schedule+0x2d7/0x3a0 [ 531.955053][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.974376][ T31] schedule+0xe7/0x3a0 [ 531.979844][ T31] schedule_preempt_disabled+0x13/0x30 [ 531.985351][ T31] __mutex_lock+0x81b/0x1060 [ 531.996820][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 532.069968][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 532.098857][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 532.118707][ T31] ? net_generic+0xea/0x2a0 [ 532.134219][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 532.140218][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 532.145809][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 532.158623][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.167409][ T31] ? rcu_is_watching+0x12/0xc0 [ 532.182031][ T31] ? bpf_lsm_capable+0x9/0x10 [ 532.186902][ T31] ? security_capable+0x7e/0x260 [ 532.208890][ T31] genl_rcv_msg+0x55c/0x800 [ 532.213579][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.223107][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 532.358882][ T31] netlink_rcv_skb+0x155/0x420 [ 532.401890][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.447233][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.481602][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 532.551883][ T31] genl_rcv+0x28/0x40 [ 532.555942][ T31] netlink_unicast+0x5aa/0x870 [ 532.593578][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 532.698710][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 532.704760][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 532.776320][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 532.781251][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.787132][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 532.795057][ T31] ____sys_sendmsg+0xa95/0xc70 [ 532.799906][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 532.805363][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.818871][ T31] ___sys_sendmsg+0x134/0x1d0 [ 532.823602][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.828929][ T31] __sys_sendmsg+0x16d/0x220 [ 532.833579][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.838733][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 532.843710][ T31] do_syscall_64+0xcd/0x490 [ 532.848240][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.858666][ T31] RIP: 0033:0x7f990dd8ebe9 [ 532.863084][ T31] RSP: 002b:00007f990eb9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.873091][ T31] RAX: ffffffffffffffda RBX: 00007f990dfb5fa0 RCX: 00007f990dd8ebe9 [ 532.884322][ T31] RDX: 0000000000040010 RSI: 00002000000000c0 RDI: 0000000000000006 [ 532.893656][ T31] RBP: 00007f990de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 532.908716][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.916989][ T31] R13: 00007f990dfb6038 R14: 00007f990dfb5fa0 R15: 00007ffedc47d588 [ 532.925439][ T31] [ 532.929190][ T31] [ 532.929190][ T31] Showing all locks held in the system: [ 532.937057][ T31] 4 locks held by rcu_exp_gp_kthr/18: [ 532.993188][ T31] #0: ffff8880b843a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 533.021752][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 533.056104][ T31] #2: ffff88807db80a28 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb7/0x1870 [ 533.128266][ T31] #3: ffff8880b843a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 533.145093][ T31] 1 lock held by khungtaskd/31: [ 533.156604][ T31] #0: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 533.167594][ T31] 2 locks held by kworker/u8:3/49: [ 533.194250][ T31] #0: ffff8881462b5948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 533.248636][ T31] #1: ffffc90000b97d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 533.284570][ T31] 4 locks held by kworker/u8:5/154: [ 533.302856][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 533.339976][ T31] #1: ffffc90002e57d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 533.358165][ T31] #2: ffffffff903708d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 533.368732][ T31] #3: ffffffff90386bc8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 533.377879][ T31] 2 locks held by kworker/u9:1/5186: [ 533.389005][ T31] #0: ffff8880264b8948 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 533.412370][ T31] #1: ffffc9000ef2fd10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 533.428425][ T31] 5 locks held by udevd/5236: [ 533.436322][ T31] 2 locks held by kworker/u9:2/5865: [ 533.454406][ T31] #0: ffff888026409148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 533.474115][ T31] #1: ffffc90003dffd10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 533.487400][ T31] 2 locks held by syz-executor/5873: [ 533.498865][ T31] #0: ffff888079eb00e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 533.524092][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 533.538264][ T31] 2 locks held by syz.0.927/9514: [ 533.547896][ T31] #0: ffffffff9042a090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.566677][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 533.577904][ T31] 2 locks held by syz-executor/9685: [ 533.584033][ T31] #0: ffff88807cb2a0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 533.594798][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 533.605416][ T31] 2 locks held by syz.3.1026/10120: [ 533.615173][ T31] #0: ffffffff9042a090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.630790][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 533.646447][ T31] 2 locks held by syz.2.1094/10589: [ 533.654209][ T31] #0: ffff88807cbe60e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 533.666334][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 533.685535][ T31] 2 locks held by syz-executor/10762: [ 533.691962][ T31] #0: ffff8880693fc0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 533.708676][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 533.722878][ T31] 4 locks held by syz-executor/10891: [ 533.728277][ T31] #0: ffff88802c4a4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 533.742708][ T31] #1: ffff88802c4a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 533.755665][ T31] #2: ffffffff905eec28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 533.772573][ T31] #3: ffff88804b193b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 533.786697][ T31] 1 lock held by syz.8.1250/11718: [ 533.796943][ T31] #0: ffffffff8e5cc638 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 533.812131][ T31] 3 locks held by syz.9.1251/11714: [ 533.819346][ T31] #0: ffff888032184dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 533.832343][ T31] #1: ffff8880321840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 533.849712][ T31] #2: ffffffff905eec28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 533.866122][ T31] [ 533.868480][ T31] ============================================= [ 533.868480][ T31] [ 533.900305][ T31] NMI backtrace for cpu 1 [ 533.900326][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 533.900354][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.900368][ T31] Call Trace: [ 533.900376][ T31] [ 533.900385][ T31] dump_stack_lvl+0x116/0x1f0 [ 533.900421][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 533.900443][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 533.900472][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 533.900507][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 533.900541][ T31] watchdog+0xf0e/0x1260 [ 533.900579][ T31] ? __pfx_watchdog+0x10/0x10 [ 533.900609][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.900640][ T31] ? __kthread_parkme+0x19e/0x250 [ 533.900671][ T31] ? __pfx_watchdog+0x10/0x10 [ 533.900702][ T31] kthread+0x3c5/0x780 [ 533.900735][ T31] ? __pfx_kthread+0x10/0x10 [ 533.900769][ T31] ? rcu_is_watching+0x12/0xc0 [ 533.900793][ T31] ? __pfx_kthread+0x10/0x10 [ 533.900826][ T31] ret_from_fork+0x5d4/0x6f0 [ 533.900859][ T31] ? __pfx_kthread+0x10/0x10 [ 533.900892][ T31] ret_from_fork_asm+0x1a/0x30 [ 533.900936][ T31] [ 533.900944][ T31] Sending NMI from CPU 1 to CPUs 0: [ 534.025485][ C0] NMI backtrace for cpu 0 [ 534.025504][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 534.025536][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.025553][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 534.025599][ C0] RIP: 0010:__orc_find+0x6c/0xf0 [ 534.025626][ C0] Code: 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 <0f> b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 [ 534.025652][ C0] RSP: 0018:ffffc90000007988 EFLAGS: 00000a02 [ 534.025672][ C0] RAX: ffffffff914f52a8 RBX: ffffffff90c63bc8 RCX: dffffc0000000000 [ 534.025690][ C0] RDX: 1ffffffff218c779 RSI: 0000000000000003 RDI: ffffffff90c63b8c [ 534.025707][ C0] RBP: ffffffff90c63bc4 R08: ffffffff914f5314 R09: 0000000000000000 [ 534.025724][ C0] R10: 0000000000000005 R11: 0000000000012069 R12: ffffffff90c63bd0 [ 534.025740][ C0] R13: ffffffff822069ca R14: ffffffff90c63b8c R15: ffffffff90c63bc0 [ 534.025758][ C0] FS: 0000000000000000(0000) GS:ffff8881246c3000(0000) knlGS:0000000000000000 [ 534.025782][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.025799][ C0] CR2: 0000200000336000 CR3: 0000000032128000 CR4: 00000000003526f0 [ 534.025816][ C0] Call Trace: [ 534.025824][ C0] [ 534.025836][ C0] ? kasan_save_free_info+0x3a/0x60 [ 534.025879][ C0] unwind_next_frame+0x2ec/0x20a0 [ 534.025905][ C0] ? kasan_save_free_info+0x3b/0x60 [ 534.025948][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 534.025980][ C0] arch_stack_walk+0x94/0x100 [ 534.026010][ C0] ? kasan_save_free_info+0x3b/0x60 [ 534.026054][ C0] stack_trace_save+0x8e/0xc0 [ 534.026082][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 534.026112][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 534.026149][ C0] kasan_save_stack+0x33/0x60 [ 534.026178][ C0] ? kasan_save_stack+0x33/0x60 [ 534.026206][ C0] ? kasan_save_track+0x14/0x30 [ 534.026234][ C0] ? kasan_save_free_info+0x3b/0x60 [ 534.026307][ C0] kasan_save_track+0x14/0x30 [ 534.026336][ C0] kasan_save_free_info+0x3b/0x60 [ 534.026376][ C0] __kasan_slab_free+0x60/0x70 [ 534.026407][ C0] kmem_cache_free+0x2d1/0x4d0 [ 534.026436][ C0] ? rcu_core+0x799/0x1530 [ 534.026460][ C0] ? rcu_core+0x797/0x1530 [ 534.026481][ C0] rcu_core+0x799/0x1530 [ 534.026504][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 534.026539][ C0] ? __pfx_rcu_core+0x10/0x10 [ 534.026564][ C0] ? mark_held_locks+0x49/0x80 [ 534.026598][ C0] handle_softirqs+0x219/0x8e0 [ 534.026631][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 534.026660][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 534.026694][ C0] ? nsim_dev_trap_report_work+0x8b5/0xcf0 [ 534.026735][ C0] do_softirq+0xb2/0xf0 [ 534.026763][ C0] [ 534.026770][ C0] [ 534.026779][ C0] __local_bh_enable_ip+0x100/0x120 [ 534.026809][ C0] nsim_dev_trap_report_work+0x8b5/0xcf0 [ 534.026859][ C0] process_one_work+0x9cf/0x1b70 [ 534.026904][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 534.026940][ C0] ? __pfx_process_one_work+0x10/0x10 [ 534.026986][ C0] ? assign_work+0x1a0/0x250 [ 534.027025][ C0] worker_thread+0x6c8/0xf10 [ 534.027054][ C0] ? __pfx_worker_thread+0x10/0x10 [ 534.027095][ C0] kthread+0x3c5/0x780 [ 534.027133][ C0] ? __pfx_kthread+0x10/0x10 [ 534.027170][ C0] ? rcu_is_watching+0x12/0xc0 [ 534.027196][ C0] ? __pfx_kthread+0x10/0x10 [ 534.027233][ C0] ret_from_fork+0x5d4/0x6f0 [ 534.027276][ C0] ? __pfx_kthread+0x10/0x10 [ 534.027313][ C0] ret_from_fork_asm+0x1a/0x30 [ 534.027353][ C0] [ 534.432738][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 534.439635][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 534.448759][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.458820][ T31] Call Trace: [ 534.462088][ T31] [ 534.465003][ T31] dump_stack_lvl+0x3d/0x1f0 [ 534.469585][ T31] vpanic+0x6e8/0x7a0 [ 534.473554][ T31] ? __pfx_vpanic+0x10/0x10 [ 534.478044][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 534.483927][ T31] panic+0xca/0xd0 [ 534.487654][ T31] ? __pfx_panic+0x10/0x10 [ 534.492070][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 534.497467][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 534.503608][ T31] ? watchdog+0xd78/0x1260 [ 534.508015][ T31] ? watchdog+0xd6b/0x1260 [ 534.512422][ T31] watchdog+0xd89/0x1260 [ 534.516659][ T31] ? __pfx_watchdog+0x10/0x10 [ 534.521338][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 534.526532][ T31] ? __kthread_parkme+0x19e/0x250 [ 534.531573][ T31] ? __pfx_watchdog+0x10/0x10 [ 534.536246][ T31] kthread+0x3c5/0x780 [ 534.540318][ T31] ? __pfx_kthread+0x10/0x10 [ 534.544929][ T31] ? rcu_is_watching+0x12/0xc0 [ 534.549704][ T31] ? __pfx_kthread+0x10/0x10 [ 534.554313][ T31] ret_from_fork+0x5d4/0x6f0 [ 534.558929][ T31] ? __pfx_kthread+0x10/0x10 [ 534.563541][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.568338][ T31] [ 534.571600][ T31] Kernel Offset: disabled [ 534.575919][ T31] Rebooting in 86400 seconds..