last executing test programs: 6m28.377949467s ago: executing program 32 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x8f4d, 0x9) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x703, 0x70bd27, 0x25dfd9fc}, 0xfffffffffffffcdb}, 0x1, 0x0, 0x0, 0x880}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4c848) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r5, 0x0, 0x14) r6 = pipe$auto(0x0) write$auto(r6, 0x0, 0x109) unshare$auto(0x40000080) read$auto_tracing_iter_fops_trace(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) 2m39.401629765s ago: executing program 4 (id=2328): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x280880, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0xa, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x3, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x4, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0xa, 0x10006, 0x80, 0xfff, 0x0, 0xe, 0x22002, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) r3 = socket(0xa, 0x1, 0x100) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r4, 0xab00, r3) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000010c0), r1) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$auto(0xffffffffffffffff, 0x402, 0xffffffffffffffff) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video24\x00', 0x802, 0x0) 2m36.709839699s ago: executing program 4 (id=2331): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0xc0040, 0x0) (async) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START(r0, 0x54a0, 0x0) (async) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r1, &(0x7f0000000080)=""/228, 0xe4) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x400000000008) (async, rerun: 32) r3 = set_tid_address$auto(&(0x7f0000000180)=0xc) (rerun: 32) prctl$auto_SIGCONT(0x0, 0x12, r3, 0x3, 0x6) 2m35.532119556s ago: executing program 3 (id=2332): socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x48050) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f00000002c0)='\xb4\xdem\x8a', 0x163fdb7e) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x2, 0xffff, 0xfffd, 0x6498, @raw=0x71, @inferred=r1}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) write$auto(r2, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd12\x00', 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0x100082) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bpq5/queues/rx-0/rps_cpus\x00', 0x20702, 0x0) read$auto(r3, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0x18, 0x1, 0x6) socket(0xa, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="29ab2400fc63c9bf5e000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00c8a910", @ANYRES16=0x0, @ANYBLOB="02022dbd7000fedbdf25590000000500a300020000006100ac00847076c55c7a103ff29fc43340c8c5dc43b2da648a6ec0e4e529e346dc61ae645e338454caf8b4fe6732dbd4d4a671faeb4fdfc08c489200d068da43fe46e6a0806030d291431de2d5650243a19ef3d4c8359686f852a5f3dc5f8693bd00000008007e0006000000"], 0x88}, 0x1, 0x0, 0x0, 0x881}, 0x4000) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) 2m34.295697914s ago: executing program 4 (id=2334): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r0, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r1, 0x7003, 0x0) ioctl$auto_RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x4, 0x9, 0x7, 0x5, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0xf, 0xa, 0xf) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$auto(r2, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/\xdc\xe2dio1\x00', 0x100000a3da) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 2m33.960923778s ago: executing program 33 (id=2298): mmap$auto(0x0, 0x2020009, 0x3, 0xffffffffffffff90, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video12\x00', 0x48c240, 0x0) epoll_create$auto(0x4) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_nsim_nexthop_bucket_activity_fops_fib(r0, &(0x7f00000000c0)="6addcaa7a653efa0120c31578c53beec9379e02783ba7f0215325de9a3ce474cd06cbdc8dcaa078d51ffa9bab0f8", 0x2e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x200005, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x1c6}, 0x102) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0xffffffffffffffff, 0x2004, 0x8, 0x8, 0xae85, 0x66b, 0x5, 0x7ff}, 0x6f4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) 2m33.879282822s ago: executing program 3 (id=2336): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="080028bd7000fddbdf2503000000080006", @ANYRES16=0x0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysinfo$auto(0x0) r4 = socket(0xa, 0x801, 0x100) setsockopt$auto(r4, 0x6, 0x2, 0x0, 0xfb3) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r2, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m32.914678773s ago: executing program 4 (id=2337): mmap$auto(0x1a8, 0x100000000, 0x3, 0xeb4, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={"813ff8bbbbb64a596e54514c951578b978c2df3689aac85884d756cec2287dcf", 0x7, 0x5, 0x6, 0x7c, 0x4, 0x0}) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cpu/1/msr\x00', 0x4c02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x0) io_uring_setup$auto(0x6, 0x0) pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0x75, r0, 0x8000) pipe2$auto(0x0, 0x81) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x109c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @raw=0xdda7, 0x1}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000180)=@task_fd_query={r1, r2, 0x5, 0xfffffff9, 0x5, 0x6, r0, 0x7, 0x1ff}, 0x6) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000040), 0x12, 0x0, 0xa, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) write$auto(0x3, 0x0, 0xfdef) mknod$auto(0x0, 0x1081, 0x3) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) open(0x0, 0xa61c2, 0x84) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_RTC_PARAM_GET(r5, 0x40187013, 0x0) 2m32.488959792s ago: executing program 3 (id=2338): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) (async) recvmmsg$auto(r0, 0x0, 0x10000, 0xc, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0x2c, 0x1, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) (async) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r1, 0x7) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0xa, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) (async) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x28800, 0x0) mmap$auto(0x0, 0x2, 0x5, 0xeb1, r2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2m31.275357809s ago: executing program 3 (id=2340): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4001af84, 0x0) brk$auto(0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r1, 0x0, 0x3e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = socket(0x10, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x1, &(0x7f0000000140)={&(0x7f0000000040), 0x81}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0) 2m30.178417583s ago: executing program 3 (id=2341): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000180)='nfsd\x00\xb3SMP\a\xa0\xc5\x02\x8e\x97M&\xfb\x93C\x11\xf1\xec:\x1d\x06\x03\xf1P\x94d\xdcn\x01\a;r\x8c+\x93\x84B\x18\x81\xb9\x1cx1\x88\x92\x9d\xb6\x01b\xd7mU\x15\xf8l\x8d\x80\xb0\x85\xb9U\xf4\x12l\xd1h\x18+,\xfa&\xd2g\x86\xae\xe4IB\xab+\xad.\x87an\x9b\x8a\xd0\x02\x9b\x90\a\xb0\x94\xec\x02\xb2\x1d\xe8u\xeb\xaa\x88\x97\x7f\"\xdfo\xa3o\"\xf0Ra\xaf\x11\xdb\xb9\x9bW\xae\xe2\xff\xdc\x92\xb7\xaa\xc0\xf5', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48c8bb0000adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @integer=@value=[0x6, 0xffff, 0x8, 0x5, 0x9, 0x7, 0x4, 0x787bdadb, 0x100000000, 0x6, 0x9, 0xc, 0x3, 0xb5, 0x9, 0x1a84, 0x2, 0xab, 0x7, 0x59d447c7, 0x4, 0x5, 0x6, 0x7fffffffffffffff, 0xbf, 0x8, 0x8, 0x7f, 0x7fffffff, 0xfff, 0x5, 0x0, 0xb, 0x3ff, 0x8, 0x6f5993bc, 0x100, 0x40, 0x6, 0x7, 0x0, 0x1, 0x7, 0x3, 0x3, 0x8, 0x7c8cec60, 0x7, 0xb, 0x9, 0x1, 0xfffffffffffffff7, 0x4, 0xfffffffffffffff7, 0x1, 0x7, 0x28, 0x4, 0x3, 0x8000000000000000, 0x93c, 0x10000, 0x5, 0x2, 0xffffffffffff93bb, 0x9, 0xcccf, 0x0, 0x0, 0x8, 0x0, 0x9, 0x7, 0x6, 0x3000000, 0x6, 0x800000000000000, 0xcc, 0x9, 0x1, 0x0, 0x8, 0x7, 0x2, 0x8, 0x89, 0xfcb7, 0xfffffffffffffff7, 0x4, 0x7, 0x9, 0x10, 0xfffffffffffffff8, 0x81, 0x4, 0x8, 0x8, 0x6, 0x6, 0x2, 0x5, 0xfffffffffffffff7, 0x1e, 0x8, 0x1ff, 0x3ff, 0xc, 0x4, 0x5, 0x5, 0xa6f2, 0xb125, 0xfffffffffffff802, 0xffffffffffffff4d, 0x3, 0x3, 0x1, 0x6, 0x4, 0x100000001, 0x5, 0x4, 0x60dd, 0x7, 0x7, 0x9, 0x2, 0xb], "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m30.010876119s ago: executing program 3 (id=2342): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socket(0x15, 0x4, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pidfd_open$auto(0x0, 0xfbd) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x84d, 0x2000d, 0x4000000000df, 0x19, 0x1, 0x8000) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) r2 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$auto_UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, &(0x7f0000000280)=0x5) mmap$auto(0x9, 0x7, 0x3, 0x8010, r2, 0x8004) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20002, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) io_uring_setup$auto(0x59, 0x0) bpf$auto(0x10, 0x0, 0x40) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x840, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) syz_genetlink_get_family_id$auto_vdpa(0x0, 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2040050) 2m17.827015301s ago: executing program 34 (id=2337): mmap$auto(0x1a8, 0x100000000, 0x3, 0xeb4, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={"813ff8bbbbb64a596e54514c951578b978c2df3689aac85884d756cec2287dcf", 0x7, 0x5, 0x6, 0x7c, 0x4, 0x0}) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cpu/1/msr\x00', 0x4c02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x0) io_uring_setup$auto(0x6, 0x0) pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0x75, r0, 0x8000) pipe2$auto(0x0, 0x81) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x109c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @raw=0xdda7, 0x1}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000180)=@task_fd_query={r1, r2, 0x5, 0xfffffff9, 0x5, 0x6, r0, 0x7, 0x1ff}, 0x6) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000040), 0x12, 0x0, 0xa, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) write$auto(0x3, 0x0, 0xfdef) mknod$auto(0x0, 0x1081, 0x3) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) open(0x0, 0xa61c2, 0x84) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_RTC_PARAM_GET(r5, 0x40187013, 0x0) 2m14.730458839s ago: executing program 35 (id=2342): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socket(0x15, 0x4, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pidfd_open$auto(0x0, 0xfbd) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x84d, 0x2000d, 0x4000000000df, 0x19, 0x1, 0x8000) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) r2 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$auto_UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, &(0x7f0000000280)=0x5) mmap$auto(0x9, 0x7, 0x3, 0x8010, r2, 0x8004) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20002, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) io_uring_setup$auto(0x59, 0x0) bpf$auto(0x10, 0x0, 0x40) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x840, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) syz_genetlink_get_family_id$auto_vdpa(0x0, 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2040050) 1m29.002191467s ago: executing program 6 (id=2514): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x400, 0x0) ioctl$auto_TIOCGEXCL2(r1, 0x80045440, &(0x7f0000000040)=0x9c8) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2, 0x4, 0x8}, 0x4, 0x5) (async) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x2, 0x4, 0x8}, 0x4, 0x5) io_uring_setup$auto(0xffffffff, &(0x7f00000000c0)={0x7, 0x3, 0x7fffffff, 0x8, 0x6, 0x9, r2, [0x4, 0x101, 0x80000000], {0x9, 0x9, 0x40d, 0x6, 0x1, 0x1, 0x7378, 0x7fff, 0x7}, {0x1, 0x9, 0xe9, 0x1, 0x0, 0xfffffff6, 0x7ff, 0x2c}}) sendfile$auto(r0, 0x3, 0x0, 0x7) 1m28.764208919s ago: executing program 6 (id=2515): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x28, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x1c, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0xf6}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) shmdt$auto(0x0) unshare$auto(0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x81) getsockopt$auto(r4, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, 0x0, 0x0) 1m26.065361897s ago: executing program 6 (id=2519): r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) select$auto(0x8, 0x0, 0x0, &(0x7f0000000240)={[0xe, 0x91e3, 0xb, 0xc, 0x0, 0xf58, 0x4, 0x4412d, 0x8, 0x0, 0x4, 0xf, 0x8000000000000, 0x84c, 0x1, 0x7]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) sysfs$auto(0x2, 0x200000001d, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x7}, 0x38) 1m25.150369518s ago: executing program 6 (id=2524): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0x2, 0xfffffff6, 0x939, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(r0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x40000) socket(0x23, 0x80000, 0x4071) mmap$auto(0xa00, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m24.153035015s ago: executing program 6 (id=2527): prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4000000072aa59b45dae855eb1c939c3150ef18cf7167c629c092be48b0734ab3caf3fd7a4c3a17384b11f0f346c8c6f0c8a39d0dc45e2d42bc7aa8270374ca0e878913be6f12f7a7bac", @ANYRESDEC=r0, @ANYBLOB="000228bd06000000df251b0000000019001f00d54179bb7e8a9dd08217bc128ec9057dcc86f39df90000000800151040000000"], 0x40}, 0x1, 0x0, 0x0, 0x4c001}, 0x80) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="32bb67fb34234af6df2506000000080004001d0008b267fb2a86b8efac2e040f249592c30085050000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xa, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x51b880, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x21a482, 0x0) socket(0xa, 0x5, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xf5~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x01\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Be\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x803, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000001580)='LnAY\xef\x1c\xcb\x1c\xae)\x13\xf7J1\xa8\x90<\xb9x\xae\x0e\xbe\x158\x81\xd4\xd0\x81KO./p\xc1\x81\x1d^\b\xb7do\xb0\xc1/\xdct\xd6@\x84\xcfJ\xd6\x90\xb4\xf6\x03\x94@\x1f\xbc\xe9\xf6\x10Pm\xabt\xdcP\xbb}F\x9e\x8f\x9b\r\xe2A\xa73\xccp\xbf\f\xd9\x0e\x10>\xfe\x86\xb9\xa3\xb6\ad\xab\x18\xffc\rD+J^\xea\x01^\xc2\x96{\x81\x7f@\xb8\x0e\x80\x85\x93\x93\x85Y\x06\xf7t\xe1\x02<\xce@\xda=.\xf8S\xd5\xd8[GF\x93\xc7\xaa/#\xe0%*C\x1a_\x85\xe1*\xdf\xc2\xc6\"\xda \xa7\x1e\xae\x96YH\x87j\xa8\xf1\xed\x0f\xb5)N\xa9\xe8\x8f\xb0vN\x8f\xffv\xa5bTmx\xb1\xf7\xae\xb9\xcc\xcd\n\xf6\x90\x93\x19$F\xa5\xa3\xcf\'\xf3\x9c\xcd\xe3\xc5\xff\x8a\xe6\xd9\x95\x05>\xfc\x87\xf6\x8a\xb5\a\r\xde\x11\x8ay\xfe\x83\xec\xf2I\x13>\xf2\xf5^\x88C\xe5\x12\xea\xdfYi*Q0lN\f\xd9i\xb6\x0f\x13\xb14r\x1e\x98+\x04\xce\x85q\xaa\xec\xb9\xefTv\x1fr2\xff\xaa\xaf\x84\xdb', 0x200081) close_range$auto(0x2, r0, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x72, 0x4, 0x308, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000002c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ff691741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b505c7f04f5f7a39aaee1b99"}}}, 0x8, &(0x7f0000000580)={{0x80c, 0xc}, {0x3ebdf443, 0x2}, 0x0, 0x1, 0x5, 0xa, 0xfffffffffffff5a2, 0x3ff, 0x412, 0x2, 0x7, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x7fff) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x77b601, 0x0) mmap$auto(0xffff, 0x9, 0x5, 0x8000000008011, 0xffffffffffffffff, 0x7fff) 1m21.849296882s ago: executing program 6 (id=2533): madvise$auto(0x4728, 0x2000040080000004, 0xd) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) setsockopt$auto(0x3, 0x10000000084, 0x20020, 0x0, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x41, 0xffffffff, 0x0, 0x1, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x58803, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7850cfa8}, 0x400000007) r4 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0xfffffffffffffffe, 0xfff, 0xffb, 0x8000000008011, r4, 0x2) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) getsockopt$auto_SO_PEERGROUPS(r2, 0x8, 0x3b, &(0x7f0000000080)='/dev/cec8\x00', &(0x7f0000000100)=0x8) madvise$auto(0x0, 0x10003, 0x100) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x9001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) 1m18.903807772s ago: executing program 1 (id=2540): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x1003, 0x401, 0x0) unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000000)=0x81) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x3, 0x3a) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000010c0)=""/22, 0x16) 1m18.139628897s ago: executing program 1 (id=2543): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0x0) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250c000000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r3 = socket(0x1a, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r4, 0x28000) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$auto(0x3, 0x0, 0x1) r5 = socket(0xa, 0x2, 0x0) fadvise64$auto_POSIX_FADV_WILLNEED(r3, 0x7fff, 0x0, 0x3) setsockopt$auto(r5, 0x0, 0x30, 0x0, 0x568) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'wlan1\x00'}) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x494300, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x106) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x3, 0xd3592caa, 0x0, 0x1) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd11/sched/queued\x00', 0xa000, 0x0) 1m16.409638491s ago: executing program 1 (id=2546): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x107, 0xd, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x8000000000003, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x3, 0x6]}, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x741000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) msgctl$auto_MSG_STAT_ANY(0x37c0548e, 0xd, &(0x7f0000000340)={{0x5d, 0x0, 0x0, 0x2, 0x2, 0x9, 0x3}, &(0x7f00000001c0)=0x6, &(0x7f0000000280)=0xf, 0x0, 0x1ff, 0x7ff, 0x21, 0x7ff, 0x7bf0, 0x7, 0x8f7, @raw=0x7, @inferred=0xffffffffffffffff}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x2b0, r6, 0x1b, 0x70bd25, 0x25dfdbff, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x280, 0x3, 0x0, 0x1, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid=r8}]}, @nested={0x26f, 0xd5, 0x0, 0x1, [@nested={0x1a1, 0x144, 0x0, 0x1, [@generic="3d3a2d1df740fb49a230007b4475c8726e1a959f4523fc1fabed7d2a2e71895b3c6b5c1aa20c232240f12e56096ea140be529b7ea1ddbb1c61eb9be6fe9da0e9c10102a97eadfb69f7e468a6f0495695b4e3bba1ab2f0d2481458df5bfe580f070a1c98d60a5ececd9be413bfc74145eb00757e3b6216b2ef12e14b345a6919c783f99e69b48d4587834e382d27306e9851546b94e3dc59c0ceeb802845df1ad0dfe81d0e7de6a3fa5e9a5e105301a", @nested={0x4, 0x146}, @nested={0x4, 0xca}, @nested={0x4, 0x50}, @generic="758d4712d2fa9fb3c4eb6b92a878c42c8e15891897f0e46707a7789ef5c94c962e92ee857c7b90979a4cbf7c2184dda642384c109f918b636d13441f8aee296ed8626fec908612705d24a7af457aba68b43d811e1e45e9aae6493784e21128df5be29e79eb3d8bc828fab8d55dfd6154200b0b0a1e5b92b7294fa49e69183f872acf08fc61ba3f90b46460f1fc11b50a071452f678670756846fef02ff", @generic="738a0ad8ea9e1405a6a4cda9a9ea65256d5a97f7ffbaf90aec7bc6bb914304728bbd3349deac3f35094592964ea909627cfb3d44dd6f87398ec58694052bdf673cccc20270"]}, @generic="af446d0517a02997307d3a59a9db8ff0d2e9442fa730a57d45f72daac26e664728b459ee3659b9c12c5cda3298f01b0809172cbeaf336efa1b36422f3a7960dc8529e4a6bfb2d37890a37f95d7a1bb5f8aa86714e5622cdf86af479537ec95b18edb42e18c52f0587ca51ee0a8225267908f7203f3af0f1ddb1044962166d34f8e84a50a437abe568375f3a5106d7c09e40ab3eb2f63b37b5cf28f9a51004e79a14ea6526da4220f034603ea3f0cf8da28646a2c4aaa4c384e1524558481b2", @typed={0x8, 0x58, 0x0, 0x0, @uid=r7}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x1) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 1m14.864494032s ago: executing program 1 (id=2552): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = prctl$auto_PR_SET_MM_START_CODE(0x4d1, 0x1, 0xffffffffffffffff, 0x9, 0x4) getdents64$auto(r0, &(0x7f00000000c0)={0xb81b, 0x0, 0x200, 0x9, "19cc50d0b86e2e471536fbf8"}, 0x401) ioctl$auto(0x1, 0x541b, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000001f40), 0x2040, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r1, 0x2, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate$auto(r3, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r6 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r6, 0x4c80, 0xfffffffffffffffd) 1m14.398563156s ago: executing program 1 (id=2562): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000280)="3c56e86300") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) recvmsg$auto(r1, 0x0, 0xe) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) (async) semget$auto(0x0, 0x13c, 0x1ff) (async, rerun: 32) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80040, 0x0) (rerun: 32) lseek$auto(r2, 0x7fffffffffffffff, 0x3) (async) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r3, 0x4004510f, &(0x7f0000000280)="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") (async, rerun: 64) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{r3, &(0x7f0000000180)="c9291b9759c55a3a5e042379fa38edf4f183bcb1333a08", 0x4, &(0x7f00000001c0)="602cf406ad8aa778ed7c5b2bbae306083b389958952a7c3465dd7820bc6337c196c2e3e5a967b1c55be943635ac598146d6f7a1c2b60d4a06d26c9a02f3fb991b4ef345d82f964f892a08f6e989e208e242022720fa886014f76ff621f135f692d852044ecca49a80c78c965fb35d73621196f3a687c1e1afecbfb11fbc0e12365033013ca02950e1e32ff9f01c3a0b5bd5b7e2ecf1e143cc76cb50d0e9d6aec3f57dfd4", 0x4, &(0x7f0000000380)="8eaaf201e425008b6ab803ec3bcdae79dbaf92d5594c6d3d75b6e84859a0f932ecf4f3870881d54ec5adf8758135e073093310fbf9766eed6e84b19234623a327cbba5a34abb45738ad9b6e582cb75ebae15b4fd5db55896e8881886ba9cc1ff603421cd7a9f", &(0x7f0000000400)=0x80000000}, {[0xfff, 0x8a35, 0xfffffff9, 0x9f9]}, 0x5, 0x9, &(0x7f0000000440)="43e0a3c075fac5419b871bca753fa1f384ef12a083100c887bed601aedf59cf44e9c7fac071d14a0fb"}) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r6, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan1\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000001780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0110000", @ANYRES16=r6, @ANYBLOB="00082cbd7000fcdbdf250f000000050010000a00000008000300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x11a0}, 0x1, 0x0, 0x0, 0x40002}, 0x4) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff9, 0x14}, &(0x7f0000000100)={0xa, 0x1}) (async, rerun: 32) semtimedop$auto(0x0, &(0x7f0000000000)={0x81, 0x0, 0x36ec}, 0x1, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) (async) ustat$auto(0x1, &(0x7f0000000180)={0x5f6a, 0x2, "f42c4dc26a01", "2356fc45145b"}) (async) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0x7f, 0x0, 0x8, 0x1, @relative_fd, 0xd}, 0x92) r8 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) open_by_handle_at$auto(r8, &(0x7f0000000080)={0x8, 0x100fe, "9700000000000000"}, 0x2) 1m13.786949298s ago: executing program 1 (id=2555): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x2}, 0x9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000280)={0x362, 0x0, r0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, 0xffffffffffffffff, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) prctl$auto(0x8, 0x7, 0x0, 0x5, 0x800809) process_vm_writev$auto(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4, 0x6) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) keyctl$auto(0x16, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) fcntl$auto(r4, 0x0, 0xa8) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000000)={@siginfo_0_0={0x1ff, 0x10000, 0xff, @_kill={0x0, 0xffffffffffffffff}}}, 0x24, &(0x7f0000000100)={{0x1ff, 0x8}, {0x6, 0x100000001}, 0xfffffffffffffe88, 0x0, 0xa0000, 0x100, 0x2, 0xad44de4, 0xa1, 0x8, 0x1, 0x5, 0x200, 0x919d, 0x3ff}) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={"082699b6be391e4fd86416170c53cb07419f4e9dea446a2598baa50ba85c9e45", 0x62, 0x5, 0x0, 0x17a, 0x1, 0xffffffffffffffff}) 1m6.866859708s ago: executing program 36 (id=2533): madvise$auto(0x4728, 0x2000040080000004, 0xd) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) setsockopt$auto(0x3, 0x10000000084, 0x20020, 0x0, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x41, 0xffffffff, 0x0, 0x1, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x58803, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7850cfa8}, 0x400000007) r4 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0xfffffffffffffffe, 0xfff, 0xffb, 0x8000000008011, r4, 0x2) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) getsockopt$auto_SO_PEERGROUPS(r2, 0x8, 0x3b, &(0x7f0000000080)='/dev/cec8\x00', &(0x7f0000000100)=0x8) madvise$auto(0x0, 0x10003, 0x100) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x9001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) 58.693695522s ago: executing program 37 (id=2555): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x2}, 0x9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000280)={0x362, 0x0, r0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, 0xffffffffffffffff, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) prctl$auto(0x8, 0x7, 0x0, 0x5, 0x800809) process_vm_writev$auto(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4, 0x6) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) keyctl$auto(0x16, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) fcntl$auto(r4, 0x0, 0xa8) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000000)={@siginfo_0_0={0x1ff, 0x10000, 0xff, @_kill={0x0, 0xffffffffffffffff}}}, 0x24, &(0x7f0000000100)={{0x1ff, 0x8}, {0x6, 0x100000001}, 0xfffffffffffffe88, 0x0, 0xa0000, 0x100, 0x2, 0xad44de4, 0xa1, 0x8, 0x1, 0x5, 0x200, 0x919d, 0x3ff}) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={"082699b6be391e4fd86416170c53cb07419f4e9dea446a2598baa50ba85c9e45", 0x62, 0x5, 0x0, 0x17a, 0x1, 0xffffffffffffffff}) 51.110742199s ago: executing program 8 (id=2622): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) mq_timedsend$auto(r1, &(0x7f0000000080)='/dev/kmsg\x00', 0x8, 0x8000, &(0x7f0000000180)={0x2, 0x8000000000000000}) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000) unlink$auto(&(0x7f0000000040)='./file0\x00') execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x1000000000000003, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x0) unshare$auto(0x40000080) r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) readv$auto(r4, &(0x7f00000001c0)={0x0, 0x1}, 0xfffff7fffffffffd) madvise$auto(0x0, 0xffffffffffff0001, 0x200) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r5 = fcntl$auto_F_GETOWN(r2, 0x9, 0xa) r6 = set_tid_address$auto(&(0x7f0000000280)=0x5) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x7, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x45, 0xfffc, 0x8c2, @inferred=r5, @inferred=r6}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 48.545450067s ago: executing program 8 (id=2634): close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x3, 0x10) (async) socket(0x25, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) mmap$auto(0x0, 0x8001, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) 48.315720186s ago: executing program 8 (id=2628): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4001af84, 0x0) brk$auto(0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r1, 0x0, 0x3e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = socket(0x10, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x48080, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f00000002c0)) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x1, &(0x7f0000000140)={&(0x7f0000000040), 0x81}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 47.323490147s ago: executing program 9 (id=2598): signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_l2tp(0x0, r1) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002cbd7000ffdbdf2502000000060002000400000005000d000200000006001d00010000000800", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x340000000000) write$auto(0x3, 0x0, 0xfffffdef) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r3) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000003f00)={0x1b9c, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x191, 0x4, 0x0, 0x1, [@generic="5e6c9f84d6a3ec8603f6d36eebc9ad31595fe89429b55e9eb5c27da95dfd9a42ade0b8311fd278493290395c86456ecab3d841e3021a6e00c0df7b3e36ef6de60d00000000000000599855fd70dcb369708ea4c2587a5e2ac0d964b97b190a6a7caa3031e575a79d9fbf628f987617781c1538350671088b894f992228938a88405658184ca917aa2c8e3d748600000000000000000000007777a2f1769ee0be5b71b9572cfadf1e777d3b9e048ea1ef161c5d1c6a1084f16339765103df03a822ed4159a7761a990baa60a49033d64f28b9be895bfe0b089f0b8b4aae1453614e5ff885d3182314ce27f8c237f7805a9cd66bd8e9022321ad1e15ac179d76dd1a545371d306e5b12a11d8632fbe9702743235f30064ca309d080553d89b30589b38d5a55e596d52a7d7c806cbd850d2ac7a15053487984cc0545c700202d1b63d63ee4c43d4c13a4a5c6e5b380742", @generic="8e1c3d18df62176a748d51876cc7a1ad37c6f93876cbdc9759ed78998b013463687169baa2a463cfa5c1c694c40897469d8e20ec59aad81efa859ba7e271"]}, @TIPC_NLA_NODE={0x1b8, 0x6, 0x0, 0x1, [@generic="5f91c612125864c4a56d22a626ac633837d0c85580dbb72c8b7693b957fa41f2634f284a700041b15a50cae60a06eeb4557199533e3d78fdc4b66ae008b41cae6db81d9ff78af39ad3a90b2da6edc70b7b92788e648fae62a387b7864906b02e169a9f7ca93317d44dfe6e069f248310b9cc09270a209053fa2d1a59ddcdaa4df68d8b06e954968876a24377b9a36582d903b29e04a6d522d7450162fad49e1db4ac5490fcd17514e4adfcd2d27f4cdcbacc171fd993ca7b6c9e307eeac7d6a7e74045f4", @nested={0xef, 0x11b, 0x0, 0x1, [@typed={0x67, 0xe1, 0x0, 0x0, @binary="d10d8ae60899d703d7f52165fbbfe7f14d599bd9fbfd74deda232934c7ab91fb2b82d03a1d24952f54df2b7ee1eb98439708e5eed5ae0c525c7ee368c6845ac36ddfc500f8a268db884d60db78003220e2f3b0b0670de73b83cfbe2d88d8f171c1ffe7"}, @generic="b88f50264a8f3886aefa062bd0c93fa4c13357b564d0f3a7caf1225e4c598da3c8009cdb861473701b2d2573b8b7975e3c28d9f558ed995b855190421e587d2633a6d0f5811541f240a632005359666ec660e6161daf07fde1ca6ba3c7239acf607f56ec77ece796b1bbbabc371c1f83a6aa886b8cad20", @nested={0xc, 0xec, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0x84}]}]}]}, @TIPC_NLA_LINK={0x183a, 0x4, 0x0, 0x1, [@nested={0x1513, 0x142, 0x0, 0x1, [@generic="bfa083cf7a587482f9f1c29dd0147e87e17de2acec3f226661bcd47e9c1a426856ae854f7278ae5fff4e19aaa6fe4099f9e93028511871efcce9d059791e1c91c13d6ecda1fa04240bcfd7ee57d28121dd1684b67f0e5ec303fa2535f070f130d15509d44c5f3cfea8cccff7207b9b71cafa5b1cee45dfd058aedb1c4b4c4467b7a1f879715f5ecde0c16b5f71f0daa8bf12a4b533bae2628090986aaf3da2ad14912486266919e3070f260a368bb740658709680520ff4011fc50453a0b2285174ed9655b33cc47d17a30d522330ada107499dede98863eb6d5b5bbdc7aab935e0f833861c1ed98c68b53a5ce40d99af2628e", @nested={0x4, 0xac}, @nested={0x4, 0xd0}, @nested={0x4, 0x1b}, @nested={0x4, 0x7e}, @nested={0x13f3, 0x23, 0x0, 0x1, [@nested={0x7a, 0x14c, 0x0, 0x1, [@generic="e8ec1fba8fe33604f7ddb5a0121f87bfefa4c54ad0979a69b75dca84714953a9e1fd8fff7233f2405f3b399494c37e9ff15ef3b4191b8311ef2adae9b6e6e53b0c0de1cafc17ceebf3eb68fb70c700ce9ff805ddc6f21cad1a17d9de5e2cd9bf6009fa7a4388ed3d2f54ea910ae4", @nested={0x4, 0x9f}, @nested={0x4, 0x9}]}, @nested={0x45, 0x93, 0x0, 0x1, [@generic="2c20c73049ba654bb3871391d9df60be27120f8bc4976ae653c166e1db66a4a5ccd02fab7170d169dc487abb067ec8e913eb54ac1539604bc48aa67ccf8f89decb"]}, @generic="58ed7f249a9f5b37e044768adc2d672dade620342b529ea4a8b83f6013a98ed110e10bf8073ccfa9b61cadb57b9e08e8417aaa07ce87747040f7fa870cdc9714c94349763478bc65a90cf3684245c51d62e1a4cb7c6c3e7fb036161fed53c635bcc537139d56b4b382897cc42cdc5cd0c4dd07ae80aaafd8026c7eb8b1a7e859fec379b27f3208", @nested={0x9e, 0x114, 0x0, 0x1, [@generic="b63c0fb3ecdc684deccf4938615083a6526872b646cc3bc8e64643f85c3e5a9f6988ed00208cb0a59890a218066cacf1b53afb82bb6957da0363e394f5691546f0cf61642a652172a708453f55b00254a6c4ecd194344f0ad91150a64a8582bd57f6c3639d75d646ac554e2ed9f922a4c8985c5c971eb57fe7474a000bbc4fa62e0473e94d0230ad110f4da4c4efd9b9c7413858d176c63d1e4f"]}, @typed={0xc, 0x130, 0x0, 0x0, @u64=0x7}, @typed={0x16, 0xa0, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x1ca, 0x97, 0x0, 0x1, [@typed={0x14, 0x122, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xfd, 0x9f, 0x0, 0x0, @binary="493459c4c77018ed673ffd4fcaa3d2aefac6833bbb65fbf43149b2c4cda97c6eee2671fd116a6e3b9755049cc1d57961e021b6f1aecc814f063e0856b73774e1eb8987216c985e41110b4973e4d2e7169a9448b606dd22439df0e459cede0d91b815f72b57fd85b6937c2ca3cf2320f4ca25531f185fa20f58a8f801fe46da8776644e9b17e4c25703cee9b4840ac57c24c8686fe532fbd1149c962e06ec2b86f9d8c7c717f8630e0aa5cb3f5e6c0e09877de7370e882c38e2cfc63c3c6b073893473d2fd60d9658936c15e743735c78b361418fb8849f1b36aa7ff82bc78bd27410ed8eb92f91d0404028b46c6b980082ef71b6ea0ccccf16"}, @nested={0x4, 0x3a}, @generic="de80cddcd7805610f0d990b361639cb8bab474afc5173c0b49591e47a0c0adb5f1437edf938edc793832ce30a54e34acb950435ef6250dfd13c273a989fe86e8b82eb9a3f3999d30707a6b5cd8f3913e52dddb6ee31564075a081911dcf6ee8b9a96dd91f96d2163e3fba035e70616237e0c41d966c106ed39665b58ff4db2486189eb46fb132609e72bb9fcc9c3b0c09fee808d80e67ca26cd3c8c7f13a2ae286fe685156eb1a4b6fd05d37b9be"]}, @generic="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"]}, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x4, 0x122}]}, @typed={0x8, 0x26, 0x0, 0x0, @pid}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x8}, @nested={0x8, 0xb5, 0x0, 0x1, [@nested={0x4, 0x10f}]}, @nested={0x228, 0x6c, 0x0, 0x1, [@nested={0x4, 0x140}, @nested={0x4, 0xdc}, @generic="7e667c1bcb6671d949335a47c2ee88eb04746e0cc78555db403150c0936d73d0ff06a270889c414947e51b459165f86cfc474469402c04dc1e9640793cab75847c0b64ab7f4255554d2c6ebe9b31fb9d26a1cc2d96d8475212e677ffbea0d79c41b56d", @nested={0x4, 0x118}, @generic="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", @nested={0x4, 0x14f}, @generic="48224d48644f69514465c36b749db355307ed6058238f19802aca170040cc116302a3c7f913a0aa7f41b2a228a51b95aa2ed48cc2d9bf86528fba4fa05333e9dd0af41556e7ae96307d2f8dbce09337771ba804ab360a9e471018d8cf82155595116fdf06ef885a566bd7d97a4c59d0c8e266927ff220ff65e613b1ee267b9e15dc1f6902f27f601a9bc8a868fb3719412718ab1e47a40ab198efbea7fdd3f0c7d43d6c0b21a31a0f94798213e63009a67066bd50101"]}, @generic="72c8e4dbea9d92c4c63fede836c2ab13862d2ba2047f4ee4b39833f3e659fa52479f3bf887c5afad14635ac464e3e4df2e7fd5c7f739e9c44137c7773572cb7fa741f609ac113cc89edebfcbd2e19962d7fcc6a71c408e4990a9b9a97e4941e201b416f000a5035311e7e371db5802ee9c72cb5d472bc863205e68a17f3c6d3d08015177fb7a8a8a819a971cede2146f7c28f909d37eccfa5013064ec3a81d3c2b0b", @generic="09088ca6d1e3a71ff6ddcfa48e74a293af1936662974c11e5831b4c46d4625a3887e7a40fa22c9e5ab769b50eb0d1ce30efe660f24501b8649cc9627"]}]}, 0x1b9c}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 46.959750103s ago: executing program 8 (id=2630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) 46.725842978s ago: executing program 8 (id=2631): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r0, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r1, 0x7003, 0x0) ioctl$auto_RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x4, 0x9, 0x7, 0x5, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0xf, 0xa, 0xf) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$auto(r2, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/\xdc\xe2dio1\x00', 0x100000a3da) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 45.778336007s ago: executing program 9 (id=2635): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) sched_setaffinity$auto(0x0, 0xcf51, &(0x7f00000000c0)=0xfffffffffffffffd) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) 45.692320596s ago: executing program 8 (id=2636): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_BLKTRACETEARDOWN2(r0, 0x1276, 0x0) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (rerun: 64) madvise$auto(0x2, 0x80, 0x1) (async, rerun: 32) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) (async, rerun: 32) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) signalfd$auto(r1, &(0x7f0000000040)={0x6}, 0xfffffffffffffff8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/1/node\x00', 0x404880, 0x0) (async) ioctl$auto_SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000180)) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r2, 0x7fff, 0x44, &(0x7f0000000200)='}\x89],[.\x00', 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x2, 0x801, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r3, 0x3, 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0xf4, 0x0, 0xff, 0x6, 0x8, 0x0, 0x10, 0x0, 0x2, 0xbf, 0x1f6a, {0x0, 0x3}, 0x9, 0x1, 0x2, 0x6, 0x0, 0x8, 0x545, 0xffffffffffffffff, 0x0, 0x8}) ioctl$auto(0x3, 0x40085400, 0x38) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000003c0)={{0x1, 0xfffffffe, 0x10001, 0x3}, 0x101, 0x4, 0x8001, "1b2be85a6b6d7d3340b7aa99dad2fe2d68f658f3bf0b9c0500"}) unshare$auto(0x20000080) (async) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$auto(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) sendmmsg$auto(0x3, 0x0, 0xee8c, 0x4) 45.508735544s ago: executing program 9 (id=2639): mkdir$auto(&(0x7f0000000080)='./cgroup\x00', 0x8005) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000380)='nfsd\x00Oqz\xfa:\x8b\xa2\xf0V\x03\xe7]Gx\rX\xaf\xfd;K\xef\xf7l\xc5m\xc8;\x98X\x9e\xce\x14\x85if1xx\xce\\\x9f,E\x80\x95\xbc\xbf\"\xad%\x9c\x81\'4F.\xdc\xcd\xb2\x98\xa2\xd6\xfd\xcb\xd8\xa2\xf7\x91K&~\xdaf6\xb5J\xee\xe1[\xeb\f\xe2\x8c\xcc;\x80\x81\v\x05\x03\xfa% |\xb2\x96(\xba\xcf\x10{NU\xeer\xc9z\xed\x16\xd9\xf8\xb1\xd4&N\xdf\xa7\x8a\xe5\xe8\x9b,$\xbf\x15*\xedIa\x91s6>\xa3\xeb\xc2\x81\xcd\xcf\x84P\xed\x87\xef)\xb4\xf9M#\x18W\xf7\x9a\xb1\xcf\x9d\x9a4\xcb\b\x95\x7f\\;\x8c\x9c\x85Hf\xd0\x94A`\x9d\xa1\x10\xdb\xd9\x89a.\xae\xe7\x85$\x93e\xd6U\xe11\xafl$\xc2\xc1\xa9\x93\xb8\x98\x97\f\xc1(%\b\x17{\x99\x04R\x81\xdbO\"\x9ad\xbeb\x00\xee&q\xda=\xf9\x96\xdeAT\xd3\xe7\xd4K\xe8\x10\xb1*\xcaE\xf6\x19\xf8\x15\xd1\xf4eD\f\xb5\xdaFI\x94\x046\xfa\x7f\xfcC\xf8\xf2\x14+E?\xb2y\x91\xfc\xe2\xeb7\x97\xef\x1f\xe5\x89', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x248c0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{@inferred, 0x7, 0x9, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2f008b48a8a57689adcc1ca6d2cbfa93b50590c9"}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) madvise$auto(0x5, 0x400, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) memfd_create$auto(&(0x7f0000000100)='\x00', 0x5) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r3, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fchdir$auto(0xffffffffffffffff) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) 30.685669551s ago: executing program 38 (id=2636): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_BLKTRACETEARDOWN2(r0, 0x1276, 0x0) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (rerun: 64) madvise$auto(0x2, 0x80, 0x1) (async, rerun: 32) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) (async, rerun: 32) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) signalfd$auto(r1, &(0x7f0000000040)={0x6}, 0xfffffffffffffff8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/1/node\x00', 0x404880, 0x0) (async) ioctl$auto_SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000180)) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r2, 0x7fff, 0x44, &(0x7f0000000200)='}\x89],[.\x00', 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x2, 0x801, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r3, 0x3, 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0xf4, 0x0, 0xff, 0x6, 0x8, 0x0, 0x10, 0x0, 0x2, 0xbf, 0x1f6a, {0x0, 0x3}, 0x9, 0x1, 0x2, 0x6, 0x0, 0x8, 0x545, 0xffffffffffffffff, 0x0, 0x8}) ioctl$auto(0x3, 0x40085400, 0x38) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000003c0)={{0x1, 0xfffffffe, 0x10001, 0x3}, 0x101, 0x4, 0x8001, "1b2be85a6b6d7d3340b7aa99dad2fe2d68f658f3bf0b9c0500"}) unshare$auto(0x20000080) (async) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$auto(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) sendmmsg$auto(0x3, 0x0, 0xee8c, 0x4) 29.955389013s ago: executing program 39 (id=2639): mkdir$auto(&(0x7f0000000080)='./cgroup\x00', 0x8005) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000380)='nfsd\x00Oqz\xfa:\x8b\xa2\xf0V\x03\xe7]Gx\rX\xaf\xfd;K\xef\xf7l\xc5m\xc8;\x98X\x9e\xce\x14\x85if1xx\xce\\\x9f,E\x80\x95\xbc\xbf\"\xad%\x9c\x81\'4F.\xdc\xcd\xb2\x98\xa2\xd6\xfd\xcb\xd8\xa2\xf7\x91K&~\xdaf6\xb5J\xee\xe1[\xeb\f\xe2\x8c\xcc;\x80\x81\v\x05\x03\xfa% |\xb2\x96(\xba\xcf\x10{NU\xeer\xc9z\xed\x16\xd9\xf8\xb1\xd4&N\xdf\xa7\x8a\xe5\xe8\x9b,$\xbf\x15*\xedIa\x91s6>\xa3\xeb\xc2\x81\xcd\xcf\x84P\xed\x87\xef)\xb4\xf9M#\x18W\xf7\x9a\xb1\xcf\x9d\x9a4\xcb\b\x95\x7f\\;\x8c\x9c\x85Hf\xd0\x94A`\x9d\xa1\x10\xdb\xd9\x89a.\xae\xe7\x85$\x93e\xd6U\xe11\xafl$\xc2\xc1\xa9\x93\xb8\x98\x97\f\xc1(%\b\x17{\x99\x04R\x81\xdbO\"\x9ad\xbeb\x00\xee&q\xda=\xf9\x96\xdeAT\xd3\xe7\xd4K\xe8\x10\xb1*\xcaE\xf6\x19\xf8\x15\xd1\xf4eD\f\xb5\xdaFI\x94\x046\xfa\x7f\xfcC\xf8\xf2\x14+E?\xb2y\x91\xfc\xe2\xeb7\x97\xef\x1f\xe5\x89', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x248c0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{@inferred, 0x7, 0x9, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2f008b48a8a57689adcc1ca6d2cbfa93b50590c9"}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) madvise$auto(0x5, 0x400, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) memfd_create$auto(&(0x7f0000000100)='\x00', 0x5) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r3, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fchdir$auto(0xffffffffffffffff) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) 28.411025649s ago: executing program 7 (id=2690): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x180, 0x0) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) keyctl$auto(0x2, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x7) r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r6, 0x0, 0x1) epoll_ctl$auto(r5, 0xfffffeff, r5, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r4, 0x40045702, &(0x7f0000000000)=0x8) pread64$auto(r0, 0x0, 0x100000001, 0x9) 27.926115195s ago: executing program 7 (id=2691): close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) pidfd_open$auto(0x1, 0x0) (async) socket(0x2, 0x3, 0x100) r0 = socket(0xa, 0x2, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="94a9f33a", @ANYRES8=r0, @ANYRESOCT=r1], 0x1ac}}, 0x20040005) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0x466, 0x1, 0x52, 0x5, 0x1, 0x44, 0x4, 0x8, 0x100000004}}) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) (async) write$auto(0x3, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/out_tc_occ_max\x00', 0x0, 0x0) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/maps\x00', 0x40000, 0x0) ioctl$auto(0x3, 0x40104d09, 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) 27.383714526s ago: executing program 7 (id=2693): mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r1, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="10e6ffffff101600"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r4) (async) r6 = socket(0x10, 0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0xfffffffffffffff9, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8000000000000002, 0x5, 0x7fffffff, 0x7, 0x7, 0x0, 0x61, 0x40000103}) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYBLOB='*\x00', @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) (rerun: 64) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd703af9dbdf250f00000008001a00fed7ec1e74122ffbd81195b51df17d5c1ed85b8f5cf22caca64e3c1ddd6d5c79a3a7f3877c9ab11544f74d2b2dde0b943f16759dbd7b82ec9c15fd8f9da8d27b325052c7f68b6151a7873ae6f1d3f9a0ff3ba6a2c99fa148c2cad791edfd042b3a22dabe9147487f6a9f9d69487639c5d1e743c1c54db16862ad7b594fb48433f2d58fa8bf1ff84415172f941d43f526a9c17851170721a9e65c951f43b8343ecfcd764fce88c2d124066833e635b4b793a7db32806d121f4b8d97124dfb63b6218face26da8ac7b9880db051fe340b575dbee9cada2c548434938", @ANYRES32=r8, @ANYBLOB='\b\x00<\x00\b\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) (async) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r5, 0x10, 0x70bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1c, r3, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000de94e0e308000000203127ea4310aaf324a71a2d9171c63d25d3e780fcad7456724252855e2ebf2ecc2cc2d80bb5e6bf13475cfbda4e567ef782c2b549a1c9a59ba65e328838cf3eff357c138d678436968707763f83c73e1ddb83f14da82dc993eb47cb35e783ff0c5423c839d6eedfac06eefee04ed261cc4e5ade8a9486cad7c590c0f788db2768e7d05f99b150430c0be6c24bfacaa8f4d4f7d43e210f643f6567c8fe762f87879f7fb6c1a56df0784d05376b", @ANYRESHEX, @ANYBLOB="100029bd7000ffdbdf25030000001400028008009000ac1414bb0800f9800400fb80", @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000005) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) r9 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) ioctl$auto(r9, 0x7, r9) mmap$auto(0x6265, 0xffff, 0x100002, 0x9000000eb1, 0xffffffffffffffff, 0x0) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x8, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfe70, 0x4, 0x400, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x100000000000]}, 0x1fe, 0xd) (async) r10 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r10, 0xfffffffffffffd03, &(0x7f00000001c0)) (async) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) 26.961184534s ago: executing program 7 (id=2694): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c6, 0x1e2) close_range$auto(r0, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x100000000, 0x20009, 0x5c, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01f446fa002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 26.447853153s ago: executing program 7 (id=2696): r0 = socket(0x2, 0x4, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@HWSIM_ATTR_CHANNELS={0x8, 0x9, 0xfff}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x81c}, @HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0xfb, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xeb8f669b69dd7f06) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r4, 0x11) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x200, 0x4, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x230000, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) tkill$auto(r4, 0x7) 25.842311777s ago: executing program 7 (id=2697): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x4, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r3) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/neigh/veth1/unres_qlen\x00', 0x382, 0x0) sendfile$auto(r5, r5, 0x0, 0x200002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) r6 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x40000, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f0000000000)={r0, 0xffffff3b}) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xdb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x4040810) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r7) 10.735821311s ago: executing program 40 (id=2697): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x4, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r3) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/neigh/veth1/unres_qlen\x00', 0x382, 0x0) sendfile$auto(r5, r5, 0x0, 0x200002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) r6 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x40000, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f0000000000)={r0, 0xffffff3b}) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xdb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x4040810) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r7) 7.033554981s ago: executing program 5 (id=2735): socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="318bfd21", @ANYRES16=r2, @ANYBLOB="9bff2dbd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x55}, 0xc000) r4 = socket(0x25, 0x1, 0x0) sendto$auto(r4, 0x0, 0x0, 0x0, 0x0, 0x3) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r5, 0x1, 0x2, 0x6653) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x0, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x554, 0x7, 0xff, 0x9, 0xf, 0x1]}, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x2) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r7, &(0x7f00000001c0)="bf82d25dc33a1fdfa60037b7", 0xc) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xd0f, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mmap$auto(0x2, 0x20009, 0x4000000000df, 0x40000000000e31, 0x401, 0x8003) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x80042, 0x80, 0x31}, 0x18) 5.975919964s ago: executing program 5 (id=2740): unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async, rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async) write$auto(r0, 0x0, 0xfff) (async) write$auto(r1, 0x0, 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0600000000000000", @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf250800000018000180140002006970766c616e3100000000000000000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c38303231310008000a00ef010000"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x200006, 0x3, 0x40eb1, 0x602, 0x300000000000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1842, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r6, 0x4c00, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) (async, rerun: 64) r7 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1, 0x0) (rerun: 64) ioctl$auto(0x3, 0x4008af03, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) sysfs$auto(0x2, 0x1f, 0x0) (async) fsopen$auto(0x0, 0x1) (async) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/firmware_id\x00', 0x48000, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.103645832s ago: executing program 5 (id=2744): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r1, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) r3 = clone$auto(0x0, 0x5, &(0x7f00000000c0)=0x8, &(0x7f00000001c0)=0x3, 0x3ff) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0xc880, 0x0) kcmp$auto_KCMP_EPOLL_TFD(r2, r3, 0x7, r4, 0x6) socket(0x2, 0x3, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) read$auto(0xffffffffffffffff, 0x0, 0x2) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x3, 0x200000000000, 0x9, 0x0) r6 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xcb8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(r6, 0x5522, 0x0) madvise$auto(0x7fffffffffffffff, 0x8, 0x3) 5.025836775s ago: executing program 2 (id=2745): mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) r0 = socket(0x23, 0x80000, 0xf8) select$auto(0x0, &(0x7f0000000040)={[0x80000000000006, 0x4, 0x800000c8c1, 0x9, 0x10000000000006, 0x0, 0xb, 0x6, 0x5, 0xa, 0x5, 0x10000002, 0x45, 0x10c, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0x4000000c2}, 0x0, 0x0, 0x7ff}, 0x4}, 0x8, 0xfffffffe) 4.066764814s ago: executing program 5 (id=2748): signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x340000000000) write$auto(0x3, 0x0, 0xfffffdef) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000003f00)={0x1b9c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x191, 0x4, 0x0, 0x1, [@generic="5e6c9f84d6a3ec8603f6d36eebc9ad31595fe89429b55e9eb5c27da95dfd9a42ade0b8311fd278493290395c86456ecab3d841e3021a6e00c0df7b3e36ef6de60d00000000000000599855fd70dcb369708ea4c2587a5e2ac0d964b97b190a6a7caa3031e575a79d9fbf628f987617781c1538350671088b894f992228938a88405658184ca917aa2c8e3d748600000000000000000000007777a2f1769ee0be5b71b9572cfadf1e777d3b9e048ea1ef161c5d1c6a1084f16339765103df03a822ed4159a7761a990baa60a49033d64f28b9be895bfe0b089f0b8b4aae1453614e5ff885d3182314ce27f8c237f7805a9cd66bd8e9022321ad1e15ac179d76dd1a545371d306e5b12a11d8632fbe9702743235f30064ca309d080553d89b30589b38d5a55e596d52a7d7c806cbd850d2ac7a15053487984cc0545c700202d1b63d63ee4c43d4c13a4a5c6e5b380742", @generic="8e1c3d18df62176a748d51876cc7a1ad37c6f93876cbdc9759ed78998b013463687169baa2a463cfa5c1c694c40897469d8e20ec59aad81efa859ba7e271"]}, @TIPC_NLA_NODE={0x1b8, 0x6, 0x0, 0x1, [@generic="5f91c612125864c4a56d22a626ac633837d0c85580dbb72c8b7693b957fa41f2634f284a700041b15a50cae60a06eeb4557199533e3d78fdc4b66ae008b41cae6db81d9ff78af39ad3a90b2da6edc70b7b92788e648fae62a387b7864906b02e169a9f7ca93317d44dfe6e069f248310b9cc09270a209053fa2d1a59ddcdaa4df68d8b06e954968876a24377b9a36582d903b29e04a6d522d7450162fad49e1db4ac5490fcd17514e4adfcd2d27f4cdcbacc171fd993ca7b6c9e307eeac7d6a7e74045f4", @nested={0xef, 0x11b, 0x0, 0x1, [@typed={0x67, 0xe1, 0x0, 0x0, @binary="d10d8ae60899d703d7f52165fbbfe7f14d599bd9fbfd74deda232934c7ab91fb2b82d03a1d24952f54df2b7ee1eb98439708e5eed5ae0c525c7ee368c6845ac36ddfc500f8a268db884d60db78003220e2f3b0b0670de73b83cfbe2d88d8f171c1ffe7"}, @generic="b88f50264a8f3886aefa062bd0c93fa4c13357b564d0f3a7caf1225e4c598da3c8009cdb861473701b2d2573b8b7975e3c28d9f558ed995b855190421e587d2633a6d0f5811541f240a632005359666ec660e6161daf07fde1ca6ba3c7239acf607f56ec77ece796b1bbbabc371c1f83a6aa886b8cad20", @nested={0xc, 0xec, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0x84}]}]}]}, @TIPC_NLA_LINK={0x183a, 0x4, 0x0, 0x1, [@nested={0x1513, 0x142, 0x0, 0x1, [@generic="bfa083cf7a587482f9f1c29dd0147e87e17de2acec3f226661bcd47e9c1a426856ae854f7278ae5fff4e19aaa6fe4099f9e93028511871efcce9d059791e1c91c13d6ecda1fa04240bcfd7ee57d28121dd1684b67f0e5ec303fa2535f070f130d15509d44c5f3cfea8cccff7207b9b71cafa5b1cee45dfd058aedb1c4b4c4467b7a1f879715f5ecde0c16b5f71f0daa8bf12a4b533bae2628090986aaf3da2ad14912486266919e3070f260a368bb740658709680520ff4011fc50453a0b2285174ed9655b33cc47d17a30d522330ada107499dede98863eb6d5b5bbdc7aab935e0f833861c1ed98c68b53a5ce40d99af2628e", @nested={0x4, 0xac}, @nested={0x4, 0xd0}, @nested={0x4, 0x1b}, @nested={0x4, 0x7e}, @nested={0x13f3, 0x23, 0x0, 0x1, [@nested={0x7a, 0x14c, 0x0, 0x1, [@generic="e8ec1fba8fe33604f7ddb5a0121f87bfefa4c54ad0979a69b75dca84714953a9e1fd8fff7233f2405f3b399494c37e9ff15ef3b4191b8311ef2adae9b6e6e53b0c0de1cafc17ceebf3eb68fb70c700ce9ff805ddc6f21cad1a17d9de5e2cd9bf6009fa7a4388ed3d2f54ea910ae4", @nested={0x4, 0x9f}, @nested={0x4, 0x9}]}, @nested={0x45, 0x93, 0x0, 0x1, [@generic="2c20c73049ba654bb3871391d9df60be27120f8bc4976ae653c166e1db66a4a5ccd02fab7170d169dc487abb067ec8e913eb54ac1539604bc48aa67ccf8f89decb"]}, @generic="58ed7f249a9f5b37e044768adc2d672dade620342b529ea4a8b83f6013a98ed110e10bf8073ccfa9b61cadb57b9e08e8417aaa07ce87747040f7fa870cdc9714c94349763478bc65a90cf3684245c51d62e1a4cb7c6c3e7fb036161fed53c635bcc537139d56b4b382897cc42cdc5cd0c4dd07ae80aaafd8026c7eb8b1a7e859fec379b27f3208", @nested={0x9e, 0x114, 0x0, 0x1, [@generic="b63c0fb3ecdc684deccf4938615083a6526872b646cc3bc8e64643f85c3e5a9f6988ed00208cb0a59890a218066cacf1b53afb82bb6957da0363e394f5691546f0cf61642a652172a708453f55b00254a6c4ecd194344f0ad91150a64a8582bd57f6c3639d75d646ac554e2ed9f922a4c8985c5c971eb57fe7474a000bbc4fa62e0473e94d0230ad110f4da4c4efd9b9c7413858d176c63d1e4f"]}, @typed={0xc, 0x130, 0x0, 0x0, @u64=0x7}, @typed={0x16, 0xa0, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x1ca, 0x97, 0x0, 0x1, [@typed={0x14, 0x122, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xfd, 0x9f, 0x0, 0x0, @binary="493459c4c77018ed673ffd4fcaa3d2aefac6833bbb65fbf43149b2c4cda97c6eee2671fd116a6e3b9755049cc1d57961e021b6f1aecc814f063e0856b73774e1eb8987216c985e41110b4973e4d2e7169a9448b606dd22439df0e459cede0d91b815f72b57fd85b6937c2ca3cf2320f4ca25531f185fa20f58a8f801fe46da8776644e9b17e4c25703cee9b4840ac57c24c8686fe532fbd1149c962e06ec2b86f9d8c7c717f8630e0aa5cb3f5e6c0e09877de7370e882c38e2cfc63c3c6b073893473d2fd60d9658936c15e743735c78b361418fb8849f1b36aa7ff82bc78bd27410ed8eb92f91d0404028b46c6b980082ef71b6ea0ccccf16"}, @nested={0x4, 0x3a}, @generic="de80cddcd7805610f0d990b361639cb8bab474afc5173c0b49591e47a0c0adb5f1437edf938edc793832ce30a54e34acb950435ef6250dfd13c273a989fe86e8b82eb9a3f3999d30707a6b5cd8f3913e52dddb6ee31564075a081911dcf6ee8b9a96dd91f96d2163e3fba035e70616237e0c41d966c106ed39665b58ff4db2486189eb46fb132609e72bb9fcc9c3b0c09fee808d80e67ca26cd3c8c7f13a2ae286fe685156eb1a4b6fd05d37b9be"]}, @generic="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"]}, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x4, 0x122}]}, @typed={0x8, 0x26, 0x0, 0x0, @pid}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x8}, @nested={0x8, 0xb5, 0x0, 0x1, [@nested={0x4, 0x10f}]}, @nested={0x228, 0x6c, 0x0, 0x1, [@nested={0x4, 0x140}, @nested={0x4, 0xdc}, @generic="7e667c1bcb6671d949335a47c2ee88eb04746e0cc78555db403150c0936d73d0ff06a270889c414947e51b459165f86cfc474469402c04dc1e9640793cab75847c0b64ab7f4255554d2c6ebe9b31fb9d26a1cc2d96d8475212e677ffbea0d79c41b56d", @nested={0x4, 0x118}, @generic="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", @nested={0x4, 0x14f}, @generic="48224d48644f69514465c36b749db355307ed6058238f19802aca170040cc116302a3c7f913a0aa7f41b2a228a51b95aa2ed48cc2d9bf86528fba4fa05333e9dd0af41556e7ae96307d2f8dbce09337771ba804ab360a9e471018d8cf82155595116fdf06ef885a566bd7d97a4c59d0c8e266927ff220ff65e613b1ee267b9e15dc1f6902f27f601a9bc8a868fb3719412718ab1e47a40ab198efbea7fdd3f0c7d43d6c0b21a31a0f94798213e63009a67066bd50101"]}, @generic="72c8e4dbea9d92c4c63fede836c2ab13862d2ba2047f4ee4b39833f3e659fa52479f3bf887c5afad14635ac464e3e4df2e7fd5c7f739e9c44137c7773572cb7fa741f609ac113cc89edebfcbd2e19962d7fcc6a71c408e4990a9b9a97e4941e201b416f000a5035311e7e371db5802ee9c72cb5d472bc863205e68a17f3c6d3d08015177fb7a8a8a819a971cede2146f7c28f909d37eccfa5013064ec3a81d3c2b0b", @generic="09088ca6d1e3a71ff6ddcfa48e74a293af1936662974c11e5831b4c46d4625a3887e7a40fa22c9e5ab769b50eb0d1ce30efe660f24501b8649cc9627"]}]}, 0x1b9c}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 3.995751836s ago: executing program 2 (id=2749): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x2}, 0x9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r1, 0xffffffffffffffff, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) process_vm_writev$auto(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4, 0x6) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) keyctl$auto(0x16, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) fcntl$auto(r3, 0x0, 0xa8) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000000)={@siginfo_0_0={0x1ff, 0x10000, 0xff, @_kill={0x0, 0xffffffffffffffff}}}, 0x24, &(0x7f0000000100)={{0x1ff, 0x8}, {0x6, 0x100000001}, 0xfffffffffffffe88, 0x0, 0xa0000, 0x100, 0x2, 0xad44de4, 0xe, 0x8, 0x1, 0x5, 0x200, 0x919d, 0x3ff}) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={"082699b6be391e4fd86416170c53cb07419f4e9dea446a2598baa50ba85c9e45", 0x62, 0x5, 0x0, 0x17a, 0x1, 0xffffffffffffffff}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/fail-nth\x00', 0x10000, 0x0) 3.503833147s ago: executing program 5 (id=2750): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)=@query={@target_fd=r1, 0x1, 0x0, 0x3, 0x4, @count, 0x0, 0xfff, 0x3a6, 0x4, 0x97da}, 0xa) r2 = socket(0x2, 0xa, 0x1) r3 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r3, 0x8000) mmap$auto(0x0, 0x10, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000300)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04win\x93\xf1\x1d\x97\xa8\x89\xb2\xb4\xe03\xd7{\xc1W\xe3\x1251W/$y\xb3#\xe61D\xbc\xf95c\x99 \x88;\xfe@l<\xe0\x9d\xa5\x8d\"\xa4U\xc1\xdc\xaa\x867\x04hpbZ+\xa9M\\\x06\xe9\x94\x86\xf4m\xd54\x05\xc3\xa9\xd4\xa2\xce\xf6s2**Q\xc0\xb9\x9cHy3}]W): I\x13\x8bkQ.R7\xff:i\xf1\xe4\xc2vc\x02^[-2\xf9N\xec\xaa\'\xce|\xa6\x05\xff?\xc7\xec\xe7\xc9\x0e1\x11\xa6{\x1d+\xa06\x03\xbd\xe3\xe2Jk\x11]\xb3\x90a', 0x800, 0x0) r6 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) fcntl$auto_F_GETSIG(r6, 0xb, 0x8) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) read$auto(r5, 0x0, 0x1f40) writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7) 2.733503909s ago: executing program 0 (id=2752): r0 = socket(0x2, 0x1, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) prctl$auto(0x4e, 0x2, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0xfdd3, 0x10000000000004, 0x0, 0x8000000000000005, 0x1, 0x4000000000002bc8, 0x3, 0x5, 0x4, 0xffffffff, 0xc4e, 0x0, 0x32, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r3, 0x0, 0x100082) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400a20a00000600070000800000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00'}) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) read$auto(0x4, 0x0, 0xfdef) ioctl$auto_FS_IOC_SETFLAGS2(r3, 0x40086602, 0x0) pwrite64$auto(r3, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) 2.649302497s ago: executing program 5 (id=2753): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/sub0/xrun_injection\x00', 0x482, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=@iter_create={r0, 0xffff7fff}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x24040, 0x12, 0x29}, 0x18) close_range$auto(r2, r3, 0x2) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mtd/mtd0/flags\x00', 0x1c9440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000280)=""/250, 0xfa) umount2$auto(&(0x7f0000000040)='/proc/\x00\x18s/fs/bin\xe6mt_\xe9\xdf\xe2%\f\x16#9\x00\x00\x00\x00\x00\x00\xbe\xe6]\x01\x05\xac\xb4\x896\xd3\xe1|\x82\xa1\x7fB\x18|T\x9ev\x15\xdcEM*\t\x91\xbbb\xc9X\xee<\xc4T\xc2dRw\xb6*A\x97\xf6\xf8\xeb\a\xf9\x06\x13\xdf)0\xef\xec\x1c\xc4\xf3\x02\xdf\xeea\x95>O\xa5\x03', 0x8) r6 = socket(0xa, 0x15, 0x3a) bind$auto(r6, &(0x7f0000000040)=@generic={0xa, "2c42b4b600"}, 0x2) writev$auto(r0, &(0x7f0000000240)={0x0, 0x9}, 0xb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), r1) ioctl$auto_XFS_IOC_FREESP(r4, 0x4030580b, &(0x7f0000000440)={0xe, 0x9, 0x4, 0x7, 0x4, 0x0}) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xfc, r9, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_WPAN_PHY_CAPS={0xdd, 0x18, 0x0, 0x1, [@typed={0x8, 0xf1, 0x0, 0x0, @ipv4=@multicast2}, @generic="505b7a92d10c3b459c2d5d08ea67ee29a3238e926c56be89ffcf896cb9de72cb534c66946e51dd6de0e924ca03fb46dba071ccf1f0c407cccde5e326b034d2de50b6f2e1426d7586dfd121f7d18348b86924f3269cf989845ee38f82bd5ba69c7d6fc2ff02e71fb2099838aa3be322a7948dd11b48bd35af4d5f4ef81cfaa10e69e2d1a2e6bdf92044bfa06c5771f588e10de5326efed77d0be9c8b8039ec8ec5e3151ce88b970072231928bf075c7021350b327d9483a2e06ab48354557b057fcc73b48eff74149d0e411fac3e22a500b"]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x5) read$auto(r7, 0x0, 0x80) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r11, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) 2.496756364s ago: executing program 2 (id=2754): r0 = semctl$auto_GETPID(0xb, 0x5, 0xb, 0x8000000000000000) r1 = socketpair$auto(0x1cf9, 0x60f0, 0x6, &(0x7f0000000000)=0x11370e47) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x72c}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1ff}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) ioctl$auto_SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000180)="b907cab1e815acc4c64ec4371ccae2d4a7a4dea4618d488d365e2af2edb8c58a710c0984a2c57c3d5def692849da83b0c9e7eec28e5aeacd9d49d047cf0ef035fac7d187f2821279616ca0e61650a14c49c20b5db054a4fadabe3e7bbb8492044da7a3183470395939c4110438148904254fd4762b7726900b054fb23176c5ace1f01c0f0504bfe9a0bc5bca8c1d47283a387e51ea1a8c25451d77d7eceb58de5aa96c5510d1d1341a219c9bde9ca3aa6a6546d47bd1f4be7a82419a8de8291b0451b3bf0b659bf00d628b3556") ioctl$auto_SOUND_MIXER_READ_CAPS2(r1, 0x80044dfc, &(0x7f0000000280)="bd733440f36010ae6f7e9f77f29338b2ac077c0e25e17ddcd1b2e9342d6cd565679d037bc47be8270faa6bf1fe82cb135a2a922f688c094f343fa997202f0a7544c9c679caba6732") select$auto(0xfffffff9, &(0x7f0000000300)={[0x5, 0x6, 0x0, 0xff, 0x8000, 0xf9, 0xfffffffffffffff7, 0x9, 0xfffffffffffffffd, 0x3, 0x8, 0x9, 0x2, 0x3, 0x3, 0x4b1d]}, &(0x7f0000000380)={[0x62fb6378, 0x8, 0x6, 0x4843, 0x4, 0x39, 0x7, 0x800, 0x5, 0x1, 0xfffffffffffffff9, 0x8000, 0x1, 0xffff, 0x7, 0x4]}, &(0x7f0000000400)={[0x4, 0x0, 0x92e, 0x4, 0x400, 0x167, 0x5, 0x7, 0x100000000, 0xb, 0x7fffffff, 0x80, 0x62d1, 0xf, 0xb, 0x5]}, &(0x7f0000000480)={0x10001, 0x3ff}) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000500), r1) sendmsg$auto_NFC_CMD_START_POLL(r1, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x100, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x10}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x9}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_SE_APDU={0xa4, 0x19, "6e86e051b7fdf3f64e142c722181df858f25dd4252b188c68ab0470b823c3f7704e9174daf5c7648c5765905fe92761312fdeaef16734d735ceae2365f5dae697d94c1fc585b805132c1cd6e8db1bd53e5a9b15874a51b38ba18c0cc7e53c7a745cf8f5d684af2530498d8ddb5cce07c116e83a90b0deeb962196b07403a2a2e66843a21a3801f05be7a5eb76752f1b990d02b63034837accf192cde619fff76"}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8000}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) ioctl$auto(r1, 0x4, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'caif0\x00', 0x0}) r5 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000700)='/dev/cpu/1/msr\x00', 0x400000, 0x0) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000740)=@bpf_attr_3={0x9, 0x2, 0x100, 0x3, 0xb, 0xd, 0x80000000, 0x9, 0x7, "82807cffdeee34cbb3796483082f4501", r4, 0x4, r1, 0x2, 0x800000000000, 0xdc1c, 0xfffff182, 0x2, 0x8, 0xc, @attach_prog_fd=r1, 0x3, 0x7, 0x5, 0x72, 0x10, r1, r5}, 0x3) r9 = open$dir(&(0x7f0000000800)='./file0\x00', 0x230401, 0x5d15849268da5c0c) r10 = open$dir(&(0x7f0000000880)='./file0\x00', 0x800, 0x5) move_mount$auto(r9, &(0x7f0000000840)='./file0\x00', r10, &(0x7f00000008c0)='./file0\x00', 0x8) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x400001, 0x1) r12 = open_tree$auto(r11, &(0x7f0000000940)='./file0\x00', 0x400) sendmsg$auto_NFC_CMD_GET_SE(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r13 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000ac0), r7) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r6, &(0x7f0000000c80)={&(0x7f0000000a80), 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x140, r13, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x10001}, @HWSIM_ATTR_ADDR_RECEIVER={0x100, 0x1, "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"}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x5}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x3}, @HWSIM_ATTR_TX_INFO={0x4}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x7ff}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x4) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xcc, r14, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_FRAME_MATCH={0xa4, 0x5b, "068a6f75c0e871cc0c173245e4950247f18362865c1713467c8e03b64c1d830b67b70910f3f56369070ad7df70525779a1610e55cecfba5a3b950ea2400e5f2ce8110e73a51dc71e2114bebef6f1e104ddc79ba352ced6e0ad66d55c352526a94a4e28efc184d47963c938316add66e98bb7a7c60721d43f1facae41bdc80e8a1b5919a384048a153ef799d495462e4eefde85fba77c36a4e806dea93f09e355"}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x100000000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000c0) statx$auto(r8, &(0x7f0000000f00)='./file0\x00', 0x9, 0x7f, &(0x7f0000000f40)={0x4, 0x5, 0x8, 0x101, 0xee00, 0xffffffffffffffff, 0xe, 0x1, 0x101, 0x5, 0x3, 0x3ff, {0x2, 0xffff}, {0x6, 0x8}, {0x3, 0x8}, {0x80000001, 0x5}, 0x2, 0x0, 0x2, 0x48000, 0x2, 0x3, 0x3, 0x3, 0x5, 0x1, 0x6, 0x3, [0x14, 0x4, 0x6, 0x100000001, 0x80000000, 0x3, 0xfff, 0x6e40f2e6, 0x7fff]}) msgctl$auto(0x1, 0xb091, &(0x7f00000010c0)={{0x7, 0xee00, 0xffffffffffffffff, 0x27e4cff9, 0x3ff, 0x2, 0x9a}, &(0x7f0000001040)=0xd, &(0x7f0000001080)=0xf1, 0x6, 0xe1, 0x8000000000000001, 0x5, 0x3440, 0x6, 0x0, 0x9f30, @inferred=r0, @inferred=r0}) lstat$auto(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000001140)={0x9, 0xf, 0x8, 0xfffffe01, r15, r16, 0x0, 0x3d258000, 0xffffffffffffffff, 0x400, 0x1, 0x9, 0x9, 0x5, 0x2, 0x6, 0xd6a6}) r17 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000001240), r1) sendmsg$auto_NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r17, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x835}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xc}]}, 0x34}}, 0x20000804) getsockopt$auto_SO_ERROR(r12, 0xcfd, 0x4, &(0x7f0000001340)='nl802154\x00', &(0x7f0000001380)=0x7) ioctl$auto_BLKTRACESTOP2(0xffffffffffffffff, 0x1275, 0x0) 2.287366148s ago: executing program 2 (id=2755): socket(0xf, 0xa, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r2 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x120800, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x0, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0xb, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = inotify_init1$auto(0x401) prlimit64$auto(0x1, 0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) ioctl$auto(0xffffffffffffffff, 0xab04, 0xffffffffffffffff) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000380)={0x5, 0xe, 0xec, @lost_msgs={0x5}}) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 2.065632816s ago: executing program 0 (id=2756): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) (async) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x2, "fb2704573a53cf995e9bd50d9a038ae9ba8b6bb523af71be779551bea8bb46e0", @inferred=r0}) (async) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/devices\x00', 0x0, 0x0) preadv$auto(r3, &(0x7f0000009180)={0x0, 0x7}, 0x26, 0x800000000080, 0x5) connect$auto(r2, &(0x7f00000000c0)=@sco={0x1f, @none}, 0x400) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x18, 0x101000000000000, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) unshare$auto(0x40000080) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)="48fca9fce87c944c01b8294348d59fc327dd2324b3227bb0f3ab8cfc9f1a2af72398441d049fa2239e00db60e040770ddc585cf93134ee5ffd950b25b6d6313d0df88c656a49c19a4ccf7cfe7734be012fb567ec156663bfc910854064afb220850b0c319971b90d70332350730381dd5aeb760a16", 0x75) (async) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) (async) ioctl$auto_USB_RAW_IOCTL_EP0_READ(0xffffffffffffffff, 0xc0085504, &(0x7f0000000300)={0xc, 0x1, 0x6, "a52b41617aaf8bebe636659e2e833467a9a3c187557014c57a706f55cc8f05613fa901e1f8e4bd11c90ccecc9b7b3e80bb499f2831164bdf4388458dd3263175e06711010cdb303802dd4e993070204acb750423a0d631068ac729c7c1844d983a74ab47f64c5a6a6644d7179d7234567a3fe7e749243d86a21d283639064cfe6484f2ce72f1b52327f093a13ef1046df994aa13f1973b79c40e8e44c25b839fc250bbf7f7dc94acfc94bdbe011f840dfa04b75d4ba67ec63a61b136a5554ee0c1643500b53618dc59a48ec2f8695ab318fab4c1ec8f00000000"}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sockstat6\x00', 0x40, 0x0) pread64$auto(r5, 0x0, 0x200000000009, 0xfc) (async) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x161340, 0x130) (async) socket(0x2, 0x2, 0x88) (async) open(&(0x7f0000000100)='./file0\x00', 0x40801, 0x175) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop4/size\x00', 0x40000, 0x0) finit_module$auto(r7, 0x0, 0x3) ptrace$auto(0xd, r6, 0x4, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) 1.475831872s ago: executing program 0 (id=2757): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0x2, 0xfffffff6, 0x939, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$auto(r4, 0x10000000084, 0x12, 0x0, 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(r0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={0x0}}, 0x40000) r5 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) read$auto_ctl_device_fops_user(r5, &(0x7f0000001c80)=""/12, 0xc) socket(0x23, 0x80000, 0x4071) mmap$auto(0xa00, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.120405022s ago: executing program 2 (id=2758): personality$auto(0xfffffff9) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x10003fd6, 0x3, 0x200000) (async, rerun: 64) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (rerun: 64) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = io_uring_setup$auto(0x6, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x53, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(r3, &(0x7f0000000d80)="6de10d88f7cec70f18ba2d7c524aa4372828667613acff9df5eb86e90a86d22729e3829112a7233ca1d72e53153b55ddf9c3b214a25f2723564b090f937b8ee39900c3644820", 0x8000, 0x400, &(0x7f0000000e00)=@nl=@kern={0x10, 0x0, 0x0, 0x40000}, &(0x7f0000000e40)=0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000d40), r2) sendmsg$auto_OVS_VPORT_CMD_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}}, 0x10) (async, rerun: 32) r6 = setfsuid$auto(0xee00) (async, rerun: 32) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000020c0)={0x14cc, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x3, 0xfffffffffffff343, 0x8, 0x1, 0x5, 0x208d, 0x4, 0x9}}, @OVS_VPORT_ATTR_NAME={0x5, 0x3, '\x00'}, @OVS_VPORT_ATTR_UPCALL_STATS={0x146a, 0xa, 0x0, 0x1, [@generic="fbada8f452f516625a22f94f462e6acaf21ffffce483ec89fd8ca9de1ec302221074b93bca4534082fd8a84125d72a42e9e023ce3d069768aef579a7b80fe55cd7af808dd88b5954e9072583b393518bc0369eb7361491910ddfcdbe415b8ea024f0ee59b4bed6289141e379f7fe88fb8b7dd2e1297b7883a093d63e869bfadffa8808259799eca81172414d4bbfc45434b496f2b2833a45ce79699b38315a11a52fd6ab696299e13db679e05079f63f6116180b359a0bfb4937cb93e166", @nested={0x13a7, 0x108, 0x0, 0x1, [@nested={0xeb, 0x131, 0x0, 0x1, [@generic="bda46cdf43b159576606", @typed={0x10, 0x86, 0x0, 0x0, @str='/dev/nullb0\x00'}, @generic="59924f2eb73a81234c092160bf927b3de2ef3894d8b2fc67acadab74006827873e69b5224ac4470e3a5f8ba41aac0b83b594997c175bb6ff485f9a7bab16b2a68749f394524988df8abbc0d6953b018e37bfe3c10b4969c403aae10c088a79758fdeb68eda600afb0c260e0212e7cf8e0b0daf1bca1b2bb79b5dcbaf3010c07aa47e18b871b24376005d9d96e124efbf95f2ee789d1fa9e23a9d0e502507d0a63aca3f710a293b01e98b91ba129530646c580ee6789f2476e00f56dac298d13299a82a467e9080f3d2", @nested={0x4, 0x9}]}, @generic="c65d824ef59c6b9b7d6a4db871bfb72ff422746abf5f3e040e12560644a963d4ff2ff9a336c1d5d913580cbf9734cae9e5e6169c5fccf7df7c6792084cb266627e03c2c7cfa5ec8709e2a5a364e6fef0221ec96064ac0995c435600153b2267d18005f6a1eea24bec53afb7a41e976690442bce99d21b27295981819c382b7915b9235e317a9698170c0aa0aed625ecc92ed84efdce322eebbd60b3a8f01327f394dec95f84f1502275dc838116a0dd8e18c9be246b2e0c1fdfb20da3e7887fe932e628a3bb869b04c9793a5837ecd95f4bed8d9369f8312a6c983c70838b6", @nested={0x1024, 0xf8, 0x0, 0x1, [@nested={0x4, 0x79}, @typed={0x8, 0xcc, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0xc5}, @nested={0x4, 0xc4}, @nested={0x4, 0x125}, @typed={0x8, 0x38, 0x0, 0x0, @uid=r6}, @generic="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"]}, @typed={0x81, 0x10c, 0x0, 0x0, @binary="818359ff8b70b0b0427ca520a0ba054eeb4725eab0bfab4610ded622f6a8ac63a11f0ad9411cd0e92b9320f3d4f1fbd9ff0bfabce11fadc4fa93a5a58410a77c89108dc50f16a20a4f141bdfb82d8813f9e02b6ead4f0d622557ae10e9199220a8d65f44a584268793742911d39d3e0979e332c4fa44e28efb370bd188"}, @nested={0x130, 0x6a, 0x0, 0x1, [@nested={0x4, 0x91}, @generic="f8b2c14e523a1bdd2776905b40e9831fde6a713bf862d6f95c463778df", @generic, @generic="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", @nested={0x4, 0x124}, @typed={0x8, 0x4e, 0x0, 0x0, @fd}]}]}]}]}, 0x14cc}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r8 = set_tid_address$auto(0x0) syz_open_procfs$namespace(r8, &(0x7f0000000080)) (async) r9 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r9, 0x0, 0x800003, 0x270) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = socket(0xa, 0x801, 0x106) sendmsg$auto_IPVS_CMD_SET_CONFIG(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfe}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042d00060002000000", @ANYRES16=0x0, @ANYBLOB="2a0317f6", @ANYRES32=r8, @ANYRES64=r10, @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008180) (async, rerun: 64) shmctl$auto_SHM_STAT(0x8000, 0xd, &(0x7f0000001140)={{0x11d18f61, 0xee00, 0xee00, 0x232e, 0x9, 0x817, 0xb}, 0xdf, 0x3, 0xffffffffffff0001, 0x100000000, @raw=0x5, @raw=0x3f8, 0x4, 0x0, &(0x7f0000000080)="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", &(0x7f0000001080)="b8e2854e29c4bfa91d656420f3ec0bd98599be3d25fd1b15d1a16244aaf5a5b7d3f9c3fe1a31571c2148ee6b797e8040956484c72adea65de0c75ed150da7c87c1e640b5869b8cfd03e734986601dd780c359ab5a995db3287ab35f5491f0a098338aac742834f0a96c7c704a554395f358b634754f37cd11f8b0d766e7002eeefe7697d9a9e69d04a4da4ad7f7ede74ff008d1030b3025a07fc8fba2d93"}) (rerun: 64) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008004}, 0xc, &(0x7f0000001480)={&(0x7f00000011c0)={0x294, 0x0, 0x304, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x6}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x401}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x80}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x6d7}, @NL802154_ATTR_SEC_KEY={0x250, 0x30, 0x0, 0x1, [@typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x112, 0x0, 0x0, @uid=r6}, @typed={0x4}, @nested={0x222, 0xe3, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid=r8}, @generic="0a12a0beb1a802d404257467590f634ecbc54a7c915b597e8ae565ae2b25037bb9eb418a4335839b41bc34f6676ea227dd8a6c6a16d1e00a6a19f964385edda6a194cef94b3da50183b11069abf9552813e375cdbf19793727e6deeb73911acca44051d16320296cb71c1ae216fef228d3b1cd1a506dfbd93b9e8efc6726882b1c6ebccbd43fb9154736429da907826fbd686e67677c1980861a7c7f8cbc3bb3b4622b6956c3d25dea216e4bf223fa46345dbfaa23ce707d4f2a13447fa5164833bfa4e5079fe1cc381be66045809117ae08ce8a75a775", @nested={0x4, 0xc0}, @generic="0f2cc86650ecf37884cac266ae43f188fbbe1e7070f70c52c145003920474a4b81ff8c2392e5d2c17a90b917553c970d498b186508e656cdfc415478e76479c7d53911ec52d301f9d981916d74f59e1eb5738ebec2930be814b5a9fb6ccd76e628b20528c7c2a9fe9f794f26ce42f0a7816b0c327ebbebbec37e276742cf028c214a4f417876ffc84e8879b81de0b1357d4fb24c72a41fff3b182c4c81827e4e0051752ab0dbb609290ae472f95e038e0815c59913f71867b32bd0701340a136f31bc32cace660f6613bc5584036", @typed={0x8, 0x72, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x10c}, @nested={0x4, 0x24dd}, @generic="d76b29f8f8b7c3c0fd148a9000535f722dc75e313246c91f0fc51c1586a08961acee75127774a960ca12be2ebe4833c94ad7d8d1d7dcf0b934c502695247551818382503507215eb6da6e8476aa19174e626d4d89e1af9d4b3", @nested={0x4, 0x91}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xed9}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x54e}]}, 0x294}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) 1.045703392s ago: executing program 4 (id=2727): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, 0x4) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x4b45, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x11d, 0x0, 0x5, 0x19, r1, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(0xffffffffffffffff, 0x110, 0x9, 0xffffffffffffffff, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x8) socket(0x1e, 0x805, 0x0) unshare$auto(0x40000080) 543.885868ms ago: executing program 0 (id=2759): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0xa5b0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r2, @new_prog_fd, 0x403, @old_prog_fd=r2}, 0x8) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r4 = socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) (async) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x2000009}, 0x9}, 0x3, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x2, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC0D0p\x00', 0x40, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0x101600, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) 278.057384ms ago: executing program 0 (id=2760): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x180, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) 218.487281ms ago: executing program 0 (id=2761): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="080028bd7000fddbdf2503000000080006", @ANYRES16=0x0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysinfo$auto(0x0) r4 = socket(0xa, 0x801, 0x100) setsockopt$auto(r4, 0x6, 0x2, 0x0, 0xfb3) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r2, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 66.233503ms ago: executing program 4 (id=2762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x25, 0x1, 0x0) sendto$auto(r1, 0x0, 0x0, 0x0, 0x0, 0x3) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r2, 0x1, 0x2, 0x6653) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x8, 0xffffffffffffffff, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0xffffffffffffffff, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0xfffffffa, r0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x401, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x2, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) msgctl$auto(0x7, 0xa3, &(0x7f0000000240)={{0x8, 0xee00, 0xee01, 0x5, 0xa, 0x0, 0xfe01}, 0x0, 0x0, 0x6, 0xa, 0x6, 0x31f4, 0x51c, 0x3, 0x1, 0x3, @inferred=0xffffffffffffffff, @raw=0x8}) getpid() 0s ago: executing program 2 (id=2763): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) futex_waitv$auto(&(0x7f0000000000)={0x3ff, 0x5dd8, 0x2, 0xfff}, 0x3, 0x0, 0x0, 0x623d) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x25, 0x80000, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r1}, 0xa3) mmap$auto(0x3, 0x2020009, 0x3, 0x51, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) alarm$auto(0x3) mmap$auto(0x0, 0x8, 0xdf, 0x13, 0x2, 0x20000000008000) sysfs$auto(0xfffffff5, 0x800000000007, 0x100000) kernel console output (not intermixed with test programs): s `syz.1.1965'. [ 711.486924][T15501] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1966'. [ 715.692570][T15554] FAULT_INJECTION: forcing a failure. [ 715.692570][T15554] name failslab, interval 1, probability 0, space 0, times 0 [ 715.707370][T15554] CPU: 0 UID: 0 PID: 15554 Comm: syz.3.1975 Tainted: G U I syzkaller #0 PREEMPT(full) [ 715.707431][T15554] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 715.707448][T15554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 715.707470][T15554] Call Trace: [ 715.707482][T15554] [ 715.707496][T15554] dump_stack_lvl+0x16c/0x1f0 [ 715.707544][T15554] should_fail_ex+0x512/0x640 [ 715.707588][T15554] ? fs_reclaim_acquire+0xae/0x150 [ 715.707637][T15554] should_failslab+0xc2/0x120 [ 715.707685][T15554] kmem_cache_alloc_noprof+0x75/0x6e0 [ 715.707719][T15554] ? __pfx_map_id_range_down+0x10/0x10 [ 715.707793][T15554] ? security_inode_alloc+0x3b/0x2b0 [ 715.707851][T15554] ? security_inode_alloc+0x3b/0x2b0 [ 715.707921][T15554] security_inode_alloc+0x3b/0x2b0 [ 715.707973][T15554] inode_init_always_gfp+0xce4/0x1030 [ 715.708016][T15554] alloc_inode+0x86/0x240 [ 715.708073][T15554] new_inode+0x22/0x1c0 [ 715.708124][T15554] proc_pid_make_inode+0x22/0x160 [ 715.708171][T15554] proc_pident_instantiate+0x85/0x310 [ 715.708221][T15554] proc_pident_lookup+0x1f5/0x270 [ 715.708275][T15554] __lookup_slow+0x251/0x460 [ 715.708326][T15554] ? __pfx___lookup_slow+0x10/0x10 [ 715.708404][T15554] ? lookup_fast+0x156/0x610 [ 715.708465][T15554] walk_component+0x353/0x5b0 [ 715.708525][T15554] link_path_walk+0x511/0xe20 [ 715.708597][T15554] path_lookupat+0x15a/0x6d0 [ 715.708637][T15554] filename_lookup+0x224/0x5f0 [ 715.708676][T15554] ? __pfx_filename_lookup+0x10/0x10 [ 715.708735][T15554] ? __pfx_kfree_link+0x10/0x10 [ 715.708789][T15554] ? getname_kernel+0x52/0x370 [ 715.708838][T15554] ? __asan_memcpy+0x3c/0x60 [ 715.708880][T15554] kern_path+0x35/0x50 [ 715.708913][T15554] tomoyo_realpath_nofollow+0x87/0xf0 [ 715.708952][T15554] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 715.708987][T15554] ? tomoyo_domain+0xbb/0x150 [ 715.709038][T15554] ? tomoyo_init_request_info+0x101/0x370 [ 715.709091][T15554] tomoyo_find_next_domain+0x2a8/0x20b0 [ 715.709158][T15554] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 715.709225][T15554] tomoyo_bprm_check_security+0x12e/0x1d0 [ 715.709268][T15554] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 715.709316][T15554] security_bprm_check+0x1b9/0x1e0 [ 715.709362][T15554] bprm_execve+0x81a/0x1640 [ 715.709402][T15554] ? __pfx_bprm_execve+0x10/0x10 [ 715.709457][T15554] ? copy_string_kernel+0x460/0x520 [ 715.709501][T15554] do_execveat_common.isra.0+0x4a5/0x610 [ 715.709546][T15554] __x64_sys_execveat+0xda/0x120 [ 715.709585][T15554] do_syscall_64+0xcd/0xfa0 [ 715.709628][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.709662][T15554] RIP: 0033:0x7f4891f8eec9 [ 715.709690][T15554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.709724][T15554] RSP: 002b:00007f4892dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 715.709757][T15554] RAX: ffffffffffffffda RBX: 00007f48921e5fa0 RCX: 00007f4891f8eec9 [ 715.709782][T15554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 715.709803][T15554] RBP: 00007f4892011f91 R08: 0000000000001000 R09: 0000000000000000 [ 715.709826][T15554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.709847][T15554] R13: 00007f48921e6038 R14: 00007f48921e5fa0 R15: 00007ffed7de2318 [ 715.709896][T15554] [ 717.027046][T15583] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1979'. [ 717.688759][T15558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1972'. [ 719.266017][T15605] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1983'. [ 719.743580][T15609] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1982: bg 5: bad block bitmap checksum [ 719.772577][T15609] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 719.811376][T15609] EXT4-fs (sda1): This should not happen!! Data will be lost [ 719.811376][T15609] [ 722.093842][T15647] random: crng reseeded on system resumption [ 722.690749][T15642] ima: policy update failed [ 722.696297][ T31] audit: type=1802 audit(4294967377.094:66): pid=15642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1991" res=0 errno=0 [ 723.113906][T15660] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 723.185846][T15660] EXT4-fs (sda1): This should not happen!! Data will be lost [ 723.185846][T15660] [ 723.332654][T15660] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 723.464580][T15679] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1998'. [ 723.499763][T15660] EXT4-fs (sda1): This should not happen!! Data will be lost [ 723.499763][T15660] [ 723.517685][T15682] random: crng reseeded on system resumption [ 724.478249][T15703] random: crng reseeded on system resumption [ 725.091732][T15699] ima: policy update failed [ 725.108922][ T31] audit: type=1802 audit(4294967379.516:67): pid=15699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2002" res=0 errno=0 [ 725.513128][T15708] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 727.365960][T15753] vivid-003: ================= START STATUS ================= [ 727.374291][T15753] vivid-003: Radio HW Seek Mode: Bounded [ 727.381823][T15753] vivid-003: Radio Programmable HW Seek: false [ 727.389693][T15753] vivid-003: RDS Rx I/O Mode: Block I/O [ 727.395779][T15753] vivid-003: Generate RBDS Instead of RDS: false [ 727.412703][T15753] vivid-003: RDS Reception: true [ 727.418401][T15753] vivid-003: RDS Program Type: 0 inactive [ 727.424657][T15753] vivid-003: RDS PS Name: inactive [ 727.430060][T15753] vivid-003: RDS Radio Text: inactive [ 727.435807][T15753] vivid-003: RDS Traffic Announcement: false inactive [ 727.442678][T15753] vivid-003: RDS Traffic Program: false inactive [ 727.449214][T15753] vivid-003: RDS Music: false inactive [ 727.455160][T15753] vivid-003: ================== END STATUS ================== [ 728.586718][T15776] binder: 15774:15776 ioctl c0306201 200000000000 returned -14 [ 728.939544][T15454] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 730.375975][T15802] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 730.475151][T15802] EXT4-fs (sda1): This should not happen!! Data will be lost [ 730.475151][T15802] [ 733.028250][T15849] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2031'. [ 734.993539][T15880] FAULT_INJECTION: forcing a failure. [ 734.993539][T15880] name failslab, interval 1, probability 0, space 0, times 0 [ 735.006986][T15880] CPU: 0 UID: 0 PID: 15880 Comm: syz.3.2039 Tainted: G U I syzkaller #0 PREEMPT(full) [ 735.007043][T15880] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 735.007057][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 735.007077][T15880] Call Trace: [ 735.007089][T15880] [ 735.007103][T15880] dump_stack_lvl+0x16c/0x1f0 [ 735.007139][T15880] should_fail_ex+0x512/0x640 [ 735.007175][T15880] should_failslab+0xc2/0x120 [ 735.007208][T15880] __kmalloc_cache_noprof+0x72/0x780 [ 735.007248][T15880] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 735.007287][T15880] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 735.007323][T15880] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 735.007353][T15880] tipc_nametbl_insert_publ+0x700/0x1720 [ 735.007387][T15880] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 735.007424][T15880] ? net_generic+0xea/0x2a0 [ 735.007458][T15880] tipc_nametbl_publish+0x137/0x280 [ 735.007493][T15880] tipc_sk_publish+0x1d8/0x430 [ 735.007526][T15880] ? __pfx_tipc_sk_publish+0x10/0x10 [ 735.007560][T15880] ? __local_bh_enable_ip+0xa4/0x120 [ 735.007593][T15880] tipc_sk_bind+0x16f/0x380 [ 735.007627][T15880] tipc_bind+0x190/0x2a0 [ 735.007661][T15880] __sys_bind+0x1a7/0x260 [ 735.007713][T15880] ? __pfx___sys_bind+0x10/0x10 [ 735.007762][T15880] ? xfd_validate_state+0x61/0x180 [ 735.007796][T15880] ? __pfx_do_writev+0x10/0x10 [ 735.007826][T15880] __x64_sys_bind+0x72/0xb0 [ 735.007861][T15880] ? lockdep_hardirqs_on+0x7c/0x110 [ 735.007888][T15880] do_syscall_64+0xcd/0xfa0 [ 735.007916][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.007940][T15880] RIP: 0033:0x7f4891f8eec9 [ 735.007960][T15880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.007984][T15880] RSP: 002b:00007f4892dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 735.008006][T15880] RAX: ffffffffffffffda RBX: 00007f48921e5fa0 RCX: 00007f4891f8eec9 [ 735.008022][T15880] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000009 [ 735.008037][T15880] RBP: 00007f4892011f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.008052][T15880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.008066][T15880] R13: 00007f48921e6038 R14: 00007f48921e5fa0 R15: 00007ffed7de2318 [ 735.008098][T15880] [ 735.008108][T15880] tipc: Failed to bind to 65,0,0 [ 735.365842][T15454] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 735.669670][T15898] random: crng reseeded on system resumption [ 735.957773][T15931] zram: Added device: zram1 [ 737.845556][T16000] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 737.860151][T16000] EXT4-fs (sda1): This should not happen!! Data will be lost [ 737.860151][T16000] [ 737.913697][T15997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2048'. [ 738.417388][T15997] kfence: disabled [ 739.030643][T16033] FAULT_INJECTION: forcing a failure. [ 739.030643][T16033] name failslab, interval 1, probability 0, space 0, times 0 [ 739.046091][T16033] CPU: 1 UID: 0 PID: 16033 Comm: syz.3.2049 Tainted: G U I syzkaller #0 PREEMPT(full) [ 739.046156][T16033] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 739.046172][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.046193][T16033] Call Trace: [ 739.046206][T16033] [ 739.046218][T16033] dump_stack_lvl+0x16c/0x1f0 [ 739.046289][T16033] should_fail_ex+0x512/0x640 [ 739.046333][T16033] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 739.046385][T16033] should_failslab+0xc2/0x120 [ 739.046431][T16033] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 739.046475][T16033] ? __request_module+0x2cb/0x690 [ 739.046536][T16033] ? kstrdup+0x53/0x100 [ 739.046570][T16033] kstrdup+0x53/0x100 [ 739.046606][T16033] __request_module+0x2cb/0x690 [ 739.046669][T16033] ? __pfx___request_module+0x10/0x10 [ 739.046742][T16033] ? inode_init_always_gfp+0xd05/0x1030 [ 739.046794][T16033] __sock_create+0x5c3/0x8d0 [ 739.046855][T16033] __sys_socket+0x14d/0x260 [ 739.046908][T16033] ? __pfx___sys_socket+0x10/0x10 [ 739.046966][T16033] ? xfd_validate_state+0x61/0x180 [ 739.047015][T16033] ? __pfx___do_sys_close_range+0x10/0x10 [ 739.047062][T16033] __x64_sys_socket+0x72/0xb0 [ 739.047113][T16033] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.047149][T16033] do_syscall_64+0xcd/0xfa0 [ 739.047189][T16033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.047225][T16033] RIP: 0033:0x7f4891f8eec9 [ 739.047252][T16033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.047287][T16033] RSP: 002b:00007f4892d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 739.047321][T16033] RAX: ffffffffffffffda RBX: 00007f48921e6180 RCX: 00007f4891f8eec9 [ 739.047345][T16033] RDX: 00000000fffffff7 RSI: 0000000000000003 RDI: 0000000000000005 [ 739.047366][T16033] RBP: 00007f4892011f91 R08: 0000000000000000 R09: 0000000000000000 [ 739.047386][T16033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.047407][T16033] R13: 00007f48921e6218 R14: 00007f48921e6180 R15: 00007ffed7de2318 [ 739.047466][T16033] [ 739.254187][T16040] FAULT_INJECTION: forcing a failure. [ 739.254187][T16040] name fail_futex, interval 1, probability 0, space 0, times 0 [ 739.488505][T16040] CPU: 1 UID: 0 PID: 16040 Comm: syz.1.2052 Tainted: G U I syzkaller #0 PREEMPT(full) [ 739.488547][T16040] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 739.488557][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.488571][T16040] Call Trace: [ 739.488578][T16040] [ 739.488588][T16040] dump_stack_lvl+0x16c/0x1f0 [ 739.488619][T16040] should_fail_ex+0x512/0x640 [ 739.488655][T16040] get_futex_key+0x1d0/0x1560 [ 739.488691][T16040] ? __pfx_get_futex_key+0x10/0x10 [ 739.488749][T16040] futex_wake+0xea/0x530 [ 739.488783][T16040] ? trace_kmem_cache_alloc+0x28/0xc0 [ 739.488820][T16040] ? __pfx_futex_wake+0x10/0x10 [ 739.488863][T16040] ? errseq_sample+0x53/0x70 [ 739.488893][T16040] ? file_init_path+0x4fe/0x760 [ 739.488930][T16040] do_futex+0x1e3/0x350 [ 739.488963][T16040] ? __pfx_do_futex+0x10/0x10 [ 739.488997][T16040] ? fd_install+0x225/0x750 [ 739.489025][T16040] __x64_sys_futex+0x1e0/0x4c0 [ 739.489060][T16040] ? __sys_socket+0xac/0x260 [ 739.489097][T16040] ? __pfx___x64_sys_futex+0x10/0x10 [ 739.489133][T16040] ? xfd_validate_state+0x61/0x180 [ 739.489187][T16040] ? __pfx_do_writev+0x10/0x10 [ 739.489232][T16040] do_syscall_64+0xcd/0xfa0 [ 739.489272][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.489306][T16040] RIP: 0033:0x7efeb8b8eec9 [ 739.489333][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.489367][T16040] RSP: 002b:00007efeb9a4b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 739.489398][T16040] RAX: ffffffffffffffda RBX: 00007efeb8de6188 RCX: 00007efeb8b8eec9 [ 739.489414][T16040] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efeb8de618c [ 739.489429][T16040] RBP: 00007efeb8de6180 R08: 00007efeb9a8e000 R09: 0000000000000000 [ 739.489446][T16040] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 739.489467][T16040] R13: 00007efeb8de6218 R14: 00007ffce65f2cc0 R15: 00007ffce65f2da8 [ 739.489513][T16040] [ 740.438276][T16036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 740.463480][T16036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 740.474489][T16036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 740.485861][T16036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 740.633936][T16036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 740.662004][T16063] sd 0:0:1:0: PR command failed: 1026 [ 740.667750][T16063] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 740.674630][T16063] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 740.713476][T16053] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 740.812929][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 742.177661][T15454] Bluetooth: hci2: command 0x0c1a tx timeout [ 742.494980][T15454] Bluetooth: hci0: command 0x0c1a tx timeout [ 742.501176][T12960] Bluetooth: hci1: command 0x0c1a tx timeout [ 742.521949][T16108] random: crng reseeded on system resumption [ 742.654005][T15454] Bluetooth: hci4: command 0x0c1a tx timeout [ 744.182998][T15454] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9 [ 744.574276][T15454] Bluetooth: hci0: command 0x0c1a tx timeout [ 744.847606][T16181] Invalid ELF header magic: != ELF [ 745.523549][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 745.913039][T16210] FAULT_INJECTION: forcing a failure. [ 745.913039][T16210] name failslab, interval 1, probability 0, space 0, times 0 [ 745.976064][T16210] CPU: 1 UID: 0 PID: 16210 Comm: syz.3.2079 Tainted: G U I syzkaller #0 PREEMPT(full) [ 745.976125][T16210] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 745.976141][T16210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 745.976163][T16210] Call Trace: [ 745.976174][T16210] [ 745.976187][T16210] dump_stack_lvl+0x16c/0x1f0 [ 745.976232][T16210] should_fail_ex+0x512/0x640 [ 745.976282][T16210] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 745.976322][T16210] should_failslab+0xc2/0x120 [ 745.976369][T16210] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 745.976407][T16210] ? alloc_inode+0xc3/0x240 [ 745.976460][T16210] ? alloc_inode+0xc3/0x240 [ 745.976500][T16210] alloc_inode+0xc3/0x240 [ 745.976551][T16210] alloc_anon_inode+0x28/0x3e0 [ 745.976585][T16210] anon_inode_make_secure_inode+0x31/0x140 [ 745.976630][T16210] __anon_inode_getfile+0x1cf/0x280 [ 745.976666][T16210] ? _copy_to_user+0x48/0xd0 [ 745.976721][T16210] io_uring_setup+0x153f/0x20e0 [ 745.976762][T16210] ? __pfx_io_uring_setup+0x10/0x10 [ 745.976811][T16210] ? __pfx___might_resched+0x10/0x10 [ 745.976865][T16210] ? xfd_validate_state+0x61/0x180 [ 745.976912][T16210] ? __pfx___do_sys_close_range+0x10/0x10 [ 745.976956][T16210] __x64_sys_io_uring_setup+0xc2/0x170 [ 745.976995][T16210] do_syscall_64+0xcd/0xfa0 [ 745.977034][T16210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.977068][T16210] RIP: 0033:0x7f4891f8eec9 [ 745.977094][T16210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.977128][T16210] RSP: 002b:00007f4892dd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 745.977160][T16210] RAX: ffffffffffffffda RBX: 00007f48921e5fa0 RCX: 00007f4891f8eec9 [ 745.977182][T16210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 745.977202][T16210] RBP: 00007f4892011f91 R08: 0000000000000000 R09: 0000000000000000 [ 745.977222][T16210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.977243][T16210] R13: 00007f48921e6038 R14: 00007f48921e5fa0 R15: 00007ffed7de2318 [ 745.977297][T16210] [ 746.786744][T16219] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2083'. [ 746.890432][T16232] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 750.716723][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 750.810277][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 750.810277][ T12] [ 751.111587][T16398] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 751.224268][T16401] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.3.2102: Error -117 reading block bitmap for 5 [ 753.406948][T16492] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 753.429069][T16493] synth uevent: /devices/platform/vivid.0/media8: unknown uevent action string [ 753.444123][T16501] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 753.452837][T16493] media media8: uevent: failed to send synthetic uevent: -22 [ 753.476574][T16494] synth uevent: /devices/platform/vivid.0/media8: unknown uevent action string [ 753.484037][T16505] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 753.509363][T16494] media media8: uevent: failed to send synthetic uevent: -22 [ 754.926719][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.934625][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.860472][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806074a400: rx timeout, send abort [ 757.366263][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806074a400: abort rx timeout. Force session deactivation [ 761.108286][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 761.233321][T16750] random: crng reseeded on system resumption [ 762.935395][T16816] openvswitch: HfR: Dropping previously announced user features [ 765.485958][T16953] random: crng reseeded on system resumption [ 765.502125][T16953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2152'. [ 766.688299][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 767.580424][T17031] FAULT_INJECTION: forcing a failure. [ 767.580424][T17031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.594280][T17031] CPU: 1 UID: 0 PID: 17031 Comm: syz.3.2162 Tainted: G U I syzkaller #0 PREEMPT(full) [ 767.594339][T17031] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 767.594354][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 767.594377][T17031] Call Trace: [ 767.594388][T17031] [ 767.594403][T17031] dump_stack_lvl+0x16c/0x1f0 [ 767.594501][T17031] should_fail_ex+0x512/0x640 [ 767.594551][T17031] _copy_to_iter+0x29f/0x1710 [ 767.594604][T17031] ? chacha_block_generic+0x211/0x330 [ 767.594655][T17031] ? __pfx__copy_to_iter+0x10/0x10 [ 767.594710][T17031] ? __pfx___might_resched+0x10/0x10 [ 767.594747][T17031] ? crng_make_state+0x48e/0x6d0 [ 767.594792][T17031] get_random_bytes_user+0x17f/0x3c0 [ 767.594836][T17031] ? __pfx_get_random_bytes_user+0x10/0x10 [ 767.594873][T17031] ? do_writev+0x218/0x340 [ 767.594917][T17031] ? do_futex+0x122/0x350 [ 767.594979][T17031] ? import_ubuf+0x1b6/0x220 [ 767.595027][T17031] __x64_sys_getrandom+0x183/0x290 [ 767.595071][T17031] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 767.595137][T17031] do_syscall_64+0xcd/0xfa0 [ 767.595180][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.595217][T17031] RIP: 0033:0x7f4891f8eec9 [ 767.595247][T17031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.595282][T17031] RSP: 002b:00007f4892dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 767.595316][T17031] RAX: ffffffffffffffda RBX: 00007f48921e5fa0 RCX: 00007f4891f8eec9 [ 767.595341][T17031] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 767.595363][T17031] RBP: 00007f4892011f91 R08: 0000000000000000 R09: 0000000000000000 [ 767.595386][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.595415][T17031] R13: 00007f48921e6038 R14: 00007f48921e5fa0 R15: 00007ffed7de2318 [ 767.595462][T17031] [ 767.597847][T17031] qrtr: Invalid version 0 [ 768.853397][T17083] binder: 17080:17083 ioctl c0145401 200000000040 returned -22 [ 769.805193][T17136] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2168'. [ 769.998907][T17134] sctp: [Deprecated]: syz.3.2170 (pid 17134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.998907][T17134] Use struct sctp_sack_info instead [ 771.122758][T17192] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2176'. [ 771.592195][T17197] random: crng reseeded on system resumption [ 772.213393][T17195] ima: policy update failed [ 772.240316][ T31] audit: type=1802 audit(4294967318.320:68): pid=17195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2177" res=0 errno=0 [ 772.386909][T17204] qrtr: Invalid version 0 [ 774.882854][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2189'. [ 776.446569][T17402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2196'. [ 776.503375][T17402] hsr_slave_0: left promiscuous mode [ 776.515778][T17402] hsr_slave_1: left promiscuous mode [ 778.966101][T17473] nfs4: Unknown parameter 'nfsd' [ 778.972221][T17431] random: crng reseeded on system resumption [ 779.111017][T17466] FAULT_INJECTION: forcing a failure. [ 779.111017][T17466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 779.124767][T17466] CPU: 1 UID: 0 PID: 17466 Comm: syz.3.2203 Tainted: G U I syzkaller #0 PREEMPT(full) [ 779.124811][T17466] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 779.124822][T17466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 779.124838][T17466] Call Trace: [ 779.124864][T17466] [ 779.124879][T17466] dump_stack_lvl+0x16c/0x1f0 [ 779.124926][T17466] should_fail_ex+0x512/0x640 [ 779.124977][T17466] should_fail_alloc_page+0xe7/0x130 [ 779.125029][T17466] prepare_alloc_pages+0x3c2/0x610 [ 779.125076][T17466] ? smp_call_function_many_cond+0x457/0x1600 [ 779.125123][T17466] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 779.125174][T17466] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 779.125226][T17466] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 779.125264][T17466] ? __pfx___text_poke+0x10/0x10 [ 779.125303][T17466] ? find_held_lock+0x2b/0x80 [ 779.125350][T17466] ? static_key_slow_inc_cpuslocked+0x101/0x150 [ 779.125414][T17466] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 779.125455][T17466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 779.125517][T17466] ? policy_nodemask+0xea/0x4e0 [ 779.125568][T17466] alloc_pages_mpol+0x1fb/0x550 [ 779.125618][T17466] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 779.125678][T17466] alloc_pages_noprof+0x131/0x390 [ 779.125728][T17466] kvm_arch_vcpu_create+0x2a7/0xb20 [ 779.125777][T17466] ? lockdep_init_map_type+0x5c/0x280 [ 779.125836][T17466] kvm_vm_ioctl+0xfec/0x3fd0 [ 779.125916][T17466] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 779.125995][T17466] ? kasan_quarantine_put+0x10a/0x240 [ 779.126024][T17466] ? lockdep_hardirqs_on+0x7c/0x110 [ 779.126055][T17466] ? find_held_lock+0x2b/0x80 [ 779.126081][T17466] ? tomoyo_path_number_perm+0x295/0x580 [ 779.126126][T17466] ? tomoyo_path_number_perm+0x18d/0x580 [ 779.126168][T17466] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 779.126218][T17466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 779.126263][T17466] ? do_vfs_ioctl+0x128/0x14f0 [ 779.126300][T17466] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 779.126346][T17466] ? find_held_lock+0x2b/0x80 [ 779.126371][T17466] ? hook_file_ioctl_common+0x145/0x410 [ 779.126419][T17466] ? __fget_files+0x20e/0x3c0 [ 779.126448][T17466] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 779.126486][T17466] __x64_sys_ioctl+0x18e/0x210 [ 779.126526][T17466] do_syscall_64+0xcd/0xfa0 [ 779.126556][T17466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.126583][T17466] RIP: 0033:0x7f4891f8eec9 [ 779.126604][T17466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.126642][T17466] RSP: 002b:00007f4892dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.126671][T17466] RAX: ffffffffffffffda RBX: 00007f48921e5fa0 RCX: 00007f4891f8eec9 [ 779.126689][T17466] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 779.126704][T17466] RBP: 00007f4892011f91 R08: 0000000000000000 R09: 0000000000000000 [ 779.126721][T17466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.126736][T17466] R13: 00007f48921e6038 R14: 00007f48921e5fa0 R15: 00007ffed7de2318 [ 779.126770][T17466] [ 779.983720][T17431] Restarting kernel threads ... [ 780.201851][T17431] Done restarting kernel threads. [ 780.344327][T17401] ima: policy update failed [ 780.548574][ T31] audit: type=1802 audit(4294967326.703:69): pid=17401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2195" res=0 errno=0 [ 783.090511][T17627] bridge0: port 3(gretap0) entered blocking state [ 783.131437][T17627] bridge0: port 3(gretap0) entered disabled state [ 783.140041][T17627] gretap0: entered allmulticast mode [ 783.204612][T17627] gretap0: entered promiscuous mode [ 783.211107][T17627] bridge0: port 3(gretap0) entered blocking state [ 783.218262][T17627] bridge0: port 3(gretap0) entered forwarding state [ 783.927379][T17654] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2221'. [ 784.319454][T17668] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2222'. [ 784.349951][T17669] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 784.372115][T17657] zswap: compressor not available [ 784.417393][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'. [ 786.049811][T17735] FAULT_INJECTION: forcing a failure. [ 786.049811][T17735] name failslab, interval 1, probability 0, space 0, times 0 [ 786.111951][T17735] CPU: 0 UID: 0 PID: 17735 Comm: syz.3.2233 Tainted: G U I syzkaller #0 PREEMPT(full) [ 786.112014][T17735] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 786.112030][T17735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 786.112052][T17735] Call Trace: [ 786.112064][T17735] [ 786.112078][T17735] dump_stack_lvl+0x16c/0x1f0 [ 786.112122][T17735] should_fail_ex+0x512/0x640 [ 786.112177][T17735] ? __kmalloc_noprof+0xca/0x880 [ 786.112237][T17735] should_failslab+0xc2/0x120 [ 786.112285][T17735] __kmalloc_noprof+0xdd/0x880 [ 786.112338][T17735] ? __kernel_text_address+0xd/0x40 [ 786.112372][T17735] ? constrain_params_by_rules+0x175/0xca0 [ 786.112438][T17735] ? constrain_params_by_rules+0x175/0xca0 [ 786.112496][T17735] constrain_params_by_rules+0x175/0xca0 [ 786.112562][T17735] ? stack_trace_save+0x8e/0xc0 [ 786.112614][T17735] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 786.112682][T17735] ? __kasan_kmalloc+0xaa/0xb0 [ 786.112719][T17735] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 786.112774][T17735] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 786.112827][T17735] ? snd_pcm_oss_sync+0x1de/0x840 [ 786.112894][T17735] ? rcu_is_watching+0x12/0xc0 [ 786.112931][T17735] ? snd_interval_refine+0x2fa/0x580 [ 786.112981][T17735] snd_pcm_hw_refine+0x7de/0xad0 [ 786.113047][T17735] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 786.113121][T17735] ? __asan_memset+0x23/0x50 [ 786.113164][T17735] ? _snd_pcm_hw_param_min+0x259/0x630 [ 786.113225][T17735] snd_pcm_oss_change_params_locked+0x65e/0x3a30 [ 786.113303][T17735] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 786.113364][T17735] ? __pfx___mutex_lock+0x10/0x10 [ 786.113436][T17735] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 786.113493][T17735] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 786.113547][T17735] snd_pcm_oss_sync+0x1de/0x840 [ 786.113607][T17735] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 786.113663][T17735] snd_pcm_oss_release+0x28b/0x310 [ 786.113721][T17735] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 786.113774][T17735] __fput+0x402/0xb70 [ 786.113831][T17735] task_work_run+0x150/0x240 [ 786.113890][T17735] ? __pfx_task_work_run+0x10/0x10 [ 786.113947][T17735] ? __pfx___do_sys_close_range+0x10/0x10 [ 786.113996][T17735] exit_to_user_mode_loop+0xec/0x130 [ 786.114053][T17735] do_syscall_64+0x426/0xfa0 [ 786.114095][T17735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.114132][T17735] RIP: 0033:0x7f4891f8eec9 [ 786.114172][T17735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.114208][T17735] RSP: 002b:00007f4892db4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 786.114243][T17735] RAX: 0000000000000000 RBX: 00007f48921e6090 RCX: 00007f4891f8eec9 [ 786.114267][T17735] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 786.114289][T17735] RBP: 00007f4892011f91 R08: 0000000000000000 R09: 0000000000000000 [ 786.114311][T17735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.114334][T17735] R13: 00007f48921e6128 R14: 00007f48921e6090 R15: 00007ffed7de2318 [ 786.114381][T17735] [ 786.940434][T17776] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2235'. [ 787.858358][T17827] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2240'. [ 791.023970][T17923] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2255'. [ 791.568245][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 793.055322][T17967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2260'. [ 794.583620][T18007] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2266'. [ 794.767310][T18011] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2266'. [ 797.843884][T18048] warning: `syz.4.2273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 801.293657][T18174] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2283'. [ 806.874218][T18371] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 806.874218][T18371] program syz.1.2303 not setting count and/or reply_len properly [ 807.318200][T18376] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2303'. [ 807.518259][T18376] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2303'. [ 807.550817][T18376] netlink: 290 bytes leftover after parsing attributes in process `syz.1.2303'. [ 807.569726][T18376] netlink: 290 bytes leftover after parsing attributes in process `syz.1.2303'. [ 807.684849][T18380] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2305'. [ 807.838623][T18378] random: crng reseeded on system resumption [ 808.101252][T18360] ima: policy update failed [ 808.116525][T18386] size and base must be multiples of 4 kiB [ 808.124458][T18386] CPU: 0 UID: 0 PID: 18386 Comm: syz.1.2307 Tainted: G U I syzkaller #0 PREEMPT(full) [ 808.124519][T18386] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 808.124537][T18386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 808.124562][T18386] Call Trace: [ 808.124574][T18386] [ 808.124588][T18386] dump_stack_lvl+0x16c/0x1f0 [ 808.124634][T18386] mtrr_add+0xdf/0x110 [ 808.124685][T18386] mtrr_ioctl+0x7ef/0xcf0 [ 808.124736][T18386] ? __pfx_mtrr_ioctl+0x10/0x10 [ 808.124795][T18386] ? find_held_lock+0x2b/0x80 [ 808.124843][T18386] ? __fget_files+0x20e/0x3c0 [ 808.124880][T18386] ? __pfx_mtrr_ioctl+0x10/0x10 [ 808.124940][T18386] proc_reg_unlocked_ioctl+0x229/0x320 [ 808.124989][T18386] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 808.125043][T18386] __x64_sys_ioctl+0x18e/0x210 [ 808.125099][T18386] do_syscall_64+0xcd/0xfa0 [ 808.125141][T18386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.125177][T18386] RIP: 0033:0x7efeb8b8eec9 [ 808.125206][T18386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.125240][T18386] RSP: 002b:00007efeb9a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.125274][T18386] RAX: ffffffffffffffda RBX: 00007efeb8de5fa0 RCX: 00007efeb8b8eec9 [ 808.125297][T18386] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 808.125319][T18386] RBP: 00007efeb8c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 808.125340][T18386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.125361][T18386] R13: 00007efeb8de6038 R14: 00007efeb8de5fa0 R15: 00007ffce65f2da8 [ 808.125407][T18386] [ 808.133476][ T31] audit: type=1802 audit(4294967354.417:70): pid=18360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2302" res=0 errno=0 [ 808.464523][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2308'. [ 808.549492][T18396] hub 8-0:1.0: USB hub found [ 808.555204][T18396] hub 8-0:1.0: 1 port detected [ 811.327545][T18491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2319'. [ 811.366736][T18492] hub 8-0:1.0: USB hub found [ 811.373737][T18492] hub 8-0:1.0: 1 port detected [ 811.605179][T18519] GUP no longer grows the stack in syz.1.2320 (18519): 14000-18000 (4000) [ 811.626064][T18519] CPU: 0 UID: 0 PID: 18519 Comm: syz.1.2320 Tainted: G U I syzkaller #0 PREEMPT(full) [ 811.626125][T18519] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 811.626142][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 811.626164][T18519] Call Trace: [ 811.626176][T18519] [ 811.626190][T18519] dump_stack_lvl+0x16c/0x1f0 [ 811.626236][T18519] gup_vma_lookup+0x1d2/0x220 [ 811.626283][T18519] __get_user_pages+0x241/0x3530 [ 811.626343][T18519] ? find_held_lock+0x2b/0x80 [ 811.626393][T18519] ? __pfx___get_user_pages+0x10/0x10 [ 811.626452][T18519] get_user_pages_remote+0x243/0xab0 [ 811.626509][T18519] ? __pfx_get_user_pages_remote+0x10/0x10 [ 811.626559][T18519] ? __pfx___might_resched+0x10/0x10 [ 811.626597][T18519] ? noop_dirty_folio+0x5e/0xb0 [ 811.626644][T18519] __access_remote_vm+0x250/0xaa0 [ 811.626698][T18519] ? __pfx___access_remote_vm+0x10/0x10 [ 811.626754][T18519] mem_rw+0x20e/0x640 [ 811.626814][T18519] ? __pfx_mem_write+0x10/0x10 [ 811.626866][T18519] vfs_write+0x29d/0x11d0 [ 811.626910][T18519] ? __pfx___mutex_lock+0x10/0x10 [ 811.626952][T18519] ? __pfx_vfs_write+0x10/0x10 [ 811.627002][T18519] ? __fget_files+0x20e/0x3c0 [ 811.627049][T18519] ksys_write+0x12a/0x250 [ 811.627086][T18519] ? __pfx_ksys_write+0x10/0x10 [ 811.627137][T18519] do_syscall_64+0xcd/0xfa0 [ 811.627179][T18519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.627215][T18519] RIP: 0033:0x7efeb8b8eec9 [ 811.627242][T18519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.627275][T18519] RSP: 002b:00007efeb9a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 811.627307][T18519] RAX: ffffffffffffffda RBX: 00007efeb8de5fa0 RCX: 00007efeb8b8eec9 [ 811.627337][T18519] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 811.627365][T18519] RBP: 00007efeb8c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 811.627418][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.627440][T18519] R13: 00007efeb8de6038 R14: 00007efeb8de5fa0 R15: 00007ffce65f2da8 [ 811.627489][T18519] [ 815.864197][T18640] device-mapper: ioctl: Invalid ioctl structure: name ÿ, dev 8000010006 [ 815.952449][T18640] block nbd8: Unsupported socket: should be TCP or UNIX. [ 816.174049][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.191842][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.611705][T18692] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 820.574844][T18719] rtc_cmos 00:00: Alarms can be up to one day in the future [ 821.497867][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 821.506262][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 821.514634][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 821.522236][ T5901] rtc_cmos 00:00: Alarms can be up to one day in the future [ 821.581255][ T5901] rtc rtc0: __rtc_set_alarm: err=-22 [ 822.820719][T16762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 822.838701][T16762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 822.849456][T16762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 822.890780][T16762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 822.901108][T16762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 823.338834][T18790] random: crng reseeded on system resumption [ 823.896335][T18756] chnl_net:caif_netlink_parms(): no params data found [ 823.985209][T18770] ima: policy update failed [ 824.001049][ T31] audit: type=1802 audit(4294967370.359:71): pid=18770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2340" res=0 errno=0 [ 824.416094][T18756] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.425212][T18756] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.433297][T18756] bridge_slave_0: entered allmulticast mode [ 824.443609][T18756] bridge_slave_0: entered promiscuous mode [ 824.458766][T18756] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.466175][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.474098][T18756] bridge_slave_1: entered allmulticast mode [ 824.482815][T18756] bridge_slave_1: entered promiscuous mode [ 824.533576][T18756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.547295][T18756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.594019][T18756] team0: Port device team_slave_0 added [ 824.604036][T18756] team0: Port device team_slave_1 added [ 824.668668][T18756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.675778][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.705931][T18756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.721163][T18756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.728543][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.755299][T18756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.881502][T18756] hsr_slave_0: entered promiscuous mode [ 824.891957][T18756] hsr_slave_1: entered promiscuous mode [ 824.898528][T18756] debugfs: 'hsr0' already exists in 'hsr' [ 824.904348][T18756] Cannot create hsr debugfs directory [ 824.949328][T16762] Bluetooth: hci1: command tx timeout [ 825.408258][T18756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 825.430154][T18756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 825.442811][T18756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 825.458261][T18756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 825.593637][T18756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.628561][T18756] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.647973][T17303] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.655199][T17303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.736054][T17303] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.743273][T17303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.888272][T18756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 826.669636][T18756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.015520][T16812] Bluetooth: hci1: command tx timeout [ 827.196872][T18756] veth0_vlan: entered promiscuous mode [ 827.211502][T18756] veth1_vlan: entered promiscuous mode [ 827.243299][T18756] veth0_macvtap: entered promiscuous mode [ 827.256123][T18756] veth1_macvtap: entered promiscuous mode [ 827.278757][T18756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.297411][T18756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.316791][T17308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.327987][T17308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.338078][T17308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.350057][T17308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.433953][T17304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.443976][T17304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.479487][T17304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.488408][T17304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.780485][T19249] random: crng reseeded on system resumption [ 828.519303][T19247] ima: policy update failed [ 828.527036][ T31] audit: type=1802 audit(4294967374.923:72): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2335" res=0 errno=0 [ 829.085361][T16812] Bluetooth: hci1: command tx timeout [ 829.140758][T19269] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 829.388839][T19274] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 830.607852][T19316] random: crng reseeded on system resumption [ 830.617899][T16812] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 831.153783][T16812] Bluetooth: hci1: command tx timeout [ 831.310623][T19313] ima: policy update failed [ 831.323906][ T31] audit: type=1802 audit(4294967377.737:73): pid=19313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2354" res=0 errno=0 [ 832.004076][T19334] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2359'. [ 832.016398][T19334] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2359'. [ 834.806269][T19418] tipc: Started in network mode [ 834.811374][T19418] tipc: Node identity fe820562, cluster identity 4711 [ 834.822244][T19418] tipc: Node number set to 4269933922 [ 835.173541][T19426] random: crng reseeded on system resumption [ 835.269115][T19426] netlink: 'syz.1.2367': attribute type 1 has an invalid length. [ 835.288464][T19426] netlink: 54 bytes leftover after parsing attributes in process `syz.1.2367'. [ 835.874349][T19424] ima: policy update failed [ 835.882872][ T31] audit: type=1802 audit(4294967382.311:74): pid=19424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2367" res=0 errno=0 [ 836.192049][T19456] FAULT_INJECTION: forcing a failure. [ 836.192049][T19456] name fail_futex, interval 1, probability 0, space 0, times 0 [ 836.205069][T19456] CPU: 1 UID: 0 PID: 19456 Comm: syz.1.2370 Tainted: G U I syzkaller #0 PREEMPT(full) [ 836.205109][T19456] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 836.205119][T19456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 836.205134][T19456] Call Trace: [ 836.205143][T19456] [ 836.205153][T19456] dump_stack_lvl+0x16c/0x1f0 [ 836.205184][T19456] should_fail_ex+0x512/0x640 [ 836.205228][T19456] get_futex_key+0x1d0/0x1560 [ 836.205275][T19456] ? __pfx_get_futex_key+0x10/0x10 [ 836.205306][T19456] ? proc_sys_call_handler+0x228/0x570 [ 836.205343][T19456] ? do_raw_spin_unlock+0x172/0x230 [ 836.205386][T19456] futex_wake+0xea/0x530 [ 836.205426][T19456] ? __pfx_futex_wake+0x10/0x10 [ 836.205469][T19456] ? ksys_read+0x190/0x250 [ 836.205499][T19456] do_futex+0x1e3/0x350 [ 836.205531][T19456] ? __pfx_do_futex+0x10/0x10 [ 836.205572][T19456] __x64_sys_futex+0x1e0/0x4c0 [ 836.205606][T19456] ? fput+0x9b/0xd0 [ 836.205637][T19456] ? __pfx___x64_sys_futex+0x10/0x10 [ 836.205669][T19456] ? ksys_read+0x1ac/0x250 [ 836.205692][T19456] ? __pfx_ksys_read+0x10/0x10 [ 836.205725][T19456] do_syscall_64+0xcd/0xfa0 [ 836.205753][T19456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.205779][T19456] RIP: 0033:0x7efeb8b8eec9 [ 836.205797][T19456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.205820][T19456] RSP: 002b:00007efeb9a6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 836.205843][T19456] RAX: ffffffffffffffda RBX: 00007efeb8de6098 RCX: 00007efeb8b8eec9 [ 836.205858][T19456] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efeb8de609c [ 836.205873][T19456] RBP: 00007efeb8de6090 R08: 00007efeb9a8e000 R09: 0000000000000000 [ 836.205896][T19456] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 836.205910][T19456] R13: 00007efeb8de6128 R14: 00007ffce65f2cc0 R15: 00007ffce65f2da8 [ 836.205942][T19456] [ 836.403441][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.070719][T16762] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 837.083414][T16762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 837.094293][T16762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 837.104299][T16762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 837.112191][T16762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 837.785205][T19477] chnl_net:caif_netlink_parms(): no params data found [ 838.158616][T19477] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.165842][T19477] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.183854][T19477] bridge_slave_0: entered allmulticast mode [ 838.229252][T19477] bridge_slave_0: entered promiscuous mode [ 838.256377][T19477] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.356503][T19477] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.363845][T19477] bridge_slave_1: entered allmulticast mode [ 838.397246][T19477] bridge_slave_1: entered promiscuous mode [ 838.503076][T19477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.530288][T19477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.628176][T19477] team0: Port device team_slave_0 added [ 838.652751][T19477] team0: Port device team_slave_1 added [ 838.740943][T19477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.758236][T19477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.813844][T19477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.836665][T19477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.843902][T19477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.890691][T19477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.013398][T19477] hsr_slave_0: entered promiscuous mode [ 839.021666][T19477] hsr_slave_1: entered promiscuous mode [ 839.039623][T19477] debugfs: 'hsr0' already exists in 'hsr' [ 839.052651][T19477] Cannot create hsr debugfs directory [ 839.192037][T16812] Bluetooth: hci3: command tx timeout [ 839.304274][T19788] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input25 [ 839.638858][T19477] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 839.665290][T19477] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 839.714394][T19477] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 839.755828][T19477] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 840.134566][T19477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.232487][T19477] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.271946][T16769] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.279227][T16769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.313152][T19862] sctp: [Deprecated]: syz.5.2382 (pid 19862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 840.313152][T19862] Use struct sctp_sack_info instead [ 840.338883][T16769] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.346762][T16769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.752359][T16762] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 840.766069][T16762] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 840.783504][T16762] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 840.817935][T16762] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 840.859170][T16762] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 840.933722][T19873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2383'. [ 841.273781][T16762] Bluetooth: hci3: command tx timeout [ 842.227066][T19477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.459852][T19970] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2384'. [ 842.486125][T19970] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2384'. [ 842.525021][T19868] chnl_net:caif_netlink_parms(): no params data found [ 843.372526][T16762] Bluetooth: hci5: command tx timeout [ 843.381019][T16762] Bluetooth: hci3: command tx timeout [ 843.440970][T19868] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.448797][T19868] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.497916][T19868] bridge_slave_0: entered allmulticast mode [ 843.534654][T19868] bridge_slave_0: entered promiscuous mode [ 843.603033][T19868] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.612473][T19868] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.711529][T19868] bridge_slave_1: entered allmulticast mode [ 843.720569][T19868] bridge_slave_1: entered promiscuous mode [ 843.913494][T19868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.959271][T19868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.014088][T19477] veth0_vlan: entered promiscuous mode [ 844.033229][T19477] veth1_vlan: entered promiscuous mode [ 844.114479][T19868] team0: Port device team_slave_0 added [ 844.149217][T19868] team0: Port device team_slave_1 added [ 844.266172][T19477] veth0_macvtap: entered promiscuous mode [ 844.665721][T19868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.677369][T19868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.863566][T19868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.005578][T19477] veth1_macvtap: entered promiscuous mode [ 845.073715][T19868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.080955][T19868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.108714][T19868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.143870][T19477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.346990][T19477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.368506][T19868] hsr_slave_0: entered promiscuous mode [ 845.386293][T19868] hsr_slave_1: entered promiscuous mode [ 845.396264][T19868] debugfs: 'hsr0' already exists in 'hsr' [ 845.403669][T16812] Bluetooth: hci3: command tx timeout [ 845.404816][T20169] random: crng reseeded on system resumption [ 845.409131][T16812] Bluetooth: hci5: command tx timeout [ 845.421856][T19868] Cannot create hsr debugfs directory [ 845.488365][T17308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.504818][T17308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.549921][ T31] audit: type=1807 audit(4294967392.031:75): UNKNOWN=5ö!cÌèP[ôÊ…aIñ…5O†övks®°f²¦Ræ‰ËZœÔZcve®‚¤*UX‡$Lã¥glJbÁÚßÖïȸÝ® )/Sk+PBÉ# res=0 [ 845.586818][ T31] audit: type=1802 audit(4294967392.061:76): pid=20187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.2389" res=0 errno=0 [ 845.619589][T17308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.648419][T17308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.022691][T16760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.058166][T16760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.182331][T20157] ima: policy update failed [ 846.244748][T16873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.262665][T16873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.266166][ T31] audit: type=1802 audit(4294967392.725:77): pid=20157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2389" res=0 errno=0 [ 846.332666][T19868] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 846.388661][T20257] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2391'. [ 846.405192][T19868] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 846.429845][T20257] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2391'. [ 846.444867][T19868] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 846.541076][T19868] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 846.803752][T20278] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 846.867483][T20289] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 846.897801][T20288] netlink: 'syz.6.2394': attribute type 11 has an invalid length. [ 846.924219][T20288] netlink: 'syz.6.2394': attribute type 11 has an invalid length. [ 846.928059][T20290] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 846.950984][T19868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.958192][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2394'. [ 846.985617][T20288] netlink: 67 bytes leftover after parsing attributes in process `syz.6.2394'. [ 847.009066][T19868] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.011715][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2394'. [ 847.036944][T20288] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2394'. [ 847.049000][T16850] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.056355][T16850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.113588][T16850] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.120869][T16850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.353486][T20311] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2395'. [ 847.469208][T16812] Bluetooth: hci5: command tx timeout [ 847.921244][T19868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.161266][T20347] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 849.205866][T19868] veth0_vlan: entered promiscuous mode [ 849.297540][T20393] ptrace attach of "./syz-executor exec"[20396] was attempted by "./syz-executor exec"[20393] [ 849.355175][T19868] veth1_vlan: entered promiscuous mode [ 849.473618][T19868] veth0_macvtap: entered promiscuous mode [ 849.523436][T19868] veth1_macvtap: entered promiscuous mode [ 849.538717][T16812] Bluetooth: hci5: command tx timeout [ 849.554042][T19868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.575635][T19868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.592824][T17304] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.623797][T17304] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.709584][T17304] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.817570][T17304] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.010628][T17304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.047660][T17304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.221312][T17306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.250190][T17306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.634359][T20479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2407'. [ 851.672150][T20479] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2407'. [ 853.656452][T20537] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2412'. [ 854.646808][T20605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2417'. [ 854.906559][T20610] netlink: 'syz.1.2417': attribute type 1 has an invalid length. [ 857.215023][T20664] FAULT_INJECTION: forcing a failure. [ 857.215023][T20664] name failslab, interval 1, probability 0, space 0, times 0 [ 857.269947][T20664] CPU: 1 UID: 0 PID: 20664 Comm: syz.5.2426 Tainted: G U I syzkaller #0 PREEMPT(full) [ 857.270018][T20664] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 857.270035][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 857.270058][T20664] Call Trace: [ 857.270070][T20664] [ 857.270085][T20664] dump_stack_lvl+0x16c/0x1f0 [ 857.270132][T20664] should_fail_ex+0x512/0x640 [ 857.270174][T20664] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 857.270238][T20664] should_failslab+0xc2/0x120 [ 857.270286][T20664] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 857.270328][T20664] ? __get_vm_area_node+0x101/0x330 [ 857.270386][T20664] ? __get_vm_area_node+0x101/0x330 [ 857.270434][T20664] __get_vm_area_node+0x101/0x330 [ 857.270498][T20664] __vmalloc_node_range_noprof+0x271/0x1480 [ 857.270553][T20664] ? n_tty_open+0x1a/0x170 [ 857.270587][T20664] ? look_up_lock_class+0x59/0x150 [ 857.270639][T20664] ? n_tty_open+0x1a/0x170 [ 857.270684][T20664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 857.270733][T20664] ? look_up_lock_class+0x6b/0x150 [ 857.270781][T20664] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 857.270825][T20664] ? n_tty_open+0x1a/0x170 [ 857.270857][T20664] __vmalloc_node_noprof+0xad/0xf0 [ 857.270908][T20664] ? n_tty_open+0x1a/0x170 [ 857.270942][T20664] ? __pfx_n_tty_open+0x10/0x10 [ 857.270985][T20664] n_tty_open+0x1a/0x170 [ 857.271019][T20664] ? __pfx_n_tty_open+0x10/0x10 [ 857.271054][T20664] tty_ldisc_open+0x9c/0x120 [ 857.271103][T20664] tty_ldisc_setup+0x40/0x100 [ 857.271154][T20664] tty_init_dev.part.0+0x1ec/0x500 [ 857.271216][T20664] tty_init_dev+0x60/0x80 [ 857.271272][T20664] ? __pfx_ptmx_open+0x10/0x10 [ 857.271313][T20664] ptmx_open+0x10d/0x360 [ 857.271357][T20664] ? __pfx_ptmx_open+0x10/0x10 [ 857.271400][T20664] chrdev_open+0x231/0x6a0 [ 857.271448][T20664] ? __pfx_apparmor_file_open+0x10/0x10 [ 857.271500][T20664] ? __pfx_chrdev_open+0x10/0x10 [ 857.271547][T20664] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 857.271596][T20664] do_dentry_open+0x97f/0x1530 [ 857.271638][T20664] ? __pfx_chrdev_open+0x10/0x10 [ 857.271689][T20664] vfs_open+0x82/0x3f0 [ 857.271744][T20664] path_openat+0x1de4/0x2cb0 [ 857.271799][T20664] ? __pfx_path_openat+0x10/0x10 [ 857.271847][T20664] do_filp_open+0x20b/0x470 [ 857.271887][T20664] ? __pfx_do_filp_open+0x10/0x10 [ 857.271961][T20664] ? alloc_fd+0x471/0x7d0 [ 857.272011][T20664] do_sys_openat2+0x11b/0x1d0 [ 857.272061][T20664] ? __pfx_do_sys_openat2+0x10/0x10 [ 857.272117][T20664] ? __sys_sendmsg+0x18c/0x220 [ 857.272171][T20664] __x64_sys_openat+0x174/0x210 [ 857.272225][T20664] ? __pfx___x64_sys_openat+0x10/0x10 [ 857.272281][T20664] ? syscall_user_dispatch+0x78/0x140 [ 857.272356][T20664] do_syscall_64+0xcd/0xfa0 [ 857.272411][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.272457][T20664] RIP: 0033:0x7ff1b2f8eec9 [ 857.272486][T20664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.272522][T20664] RSP: 002b:00007ff1b3da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 857.272558][T20664] RAX: ffffffffffffffda RBX: 00007ff1b31e5fa0 RCX: 00007ff1b2f8eec9 [ 857.272583][T20664] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 857.272607][T20664] RBP: 00007ff1b3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 857.272629][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.272652][T20664] R13: 00007ff1b31e6038 R14: 00007ff1b31e5fa0 R15: 00007ffe2101bae8 [ 857.272702][T20664] [ 857.716801][T20664] syz.5.2426: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 857.732115][T20664] CPU: 1 UID: 0 PID: 20664 Comm: syz.5.2426 Tainted: G U I syzkaller #0 PREEMPT(full) [ 857.732157][T20664] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 857.732168][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 857.732184][T20664] Call Trace: [ 857.732195][T20664] [ 857.732207][T20664] dump_stack_lvl+0x16c/0x1f0 [ 857.732240][T20664] warn_alloc+0x248/0x3a0 [ 857.732268][T20664] ? __pfx_warn_alloc+0x10/0x10 [ 857.732289][T20664] ? kasan_quarantine_reduce+0x1b9/0x1e0 [ 857.732329][T20664] ? __kasan_kmalloc+0x8a/0xb0 [ 857.732359][T20664] ? __get_vm_area_node+0x208/0x330 [ 857.732401][T20664] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 857.732439][T20664] ? look_up_lock_class+0x59/0x150 [ 857.732475][T20664] ? n_tty_open+0x1a/0x170 [ 857.732507][T20664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 857.732544][T20664] ? look_up_lock_class+0x6b/0x150 [ 857.732576][T20664] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 857.732606][T20664] ? n_tty_open+0x1a/0x170 [ 857.732629][T20664] __vmalloc_node_noprof+0xad/0xf0 [ 857.732665][T20664] ? n_tty_open+0x1a/0x170 [ 857.732689][T20664] ? __pfx_n_tty_open+0x10/0x10 [ 857.732714][T20664] n_tty_open+0x1a/0x170 [ 857.732739][T20664] ? __pfx_n_tty_open+0x10/0x10 [ 857.732762][T20664] tty_ldisc_open+0x9c/0x120 [ 857.732796][T20664] tty_ldisc_setup+0x40/0x100 [ 857.732831][T20664] tty_init_dev.part.0+0x1ec/0x500 [ 857.732875][T20664] tty_init_dev+0x60/0x80 [ 857.732915][T20664] ? __pfx_ptmx_open+0x10/0x10 [ 857.732944][T20664] ptmx_open+0x10d/0x360 [ 857.732974][T20664] ? __pfx_ptmx_open+0x10/0x10 [ 857.733015][T20664] chrdev_open+0x231/0x6a0 [ 857.733045][T20664] ? __pfx_apparmor_file_open+0x10/0x10 [ 857.733085][T20664] ? __pfx_chrdev_open+0x10/0x10 [ 857.733123][T20664] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 857.733157][T20664] do_dentry_open+0x97f/0x1530 [ 857.733187][T20664] ? __pfx_chrdev_open+0x10/0x10 [ 857.733224][T20664] vfs_open+0x82/0x3f0 [ 857.733263][T20664] path_openat+0x1de4/0x2cb0 [ 857.733301][T20664] ? __pfx_path_openat+0x10/0x10 [ 857.733337][T20664] do_filp_open+0x20b/0x470 [ 857.733365][T20664] ? __pfx_do_filp_open+0x10/0x10 [ 857.733416][T20664] ? alloc_fd+0x471/0x7d0 [ 857.733449][T20664] do_sys_openat2+0x11b/0x1d0 [ 857.733485][T20664] ? __pfx_do_sys_openat2+0x10/0x10 [ 857.733524][T20664] ? __sys_sendmsg+0x18c/0x220 [ 857.733561][T20664] __x64_sys_openat+0x174/0x210 [ 857.733599][T20664] ? __pfx___x64_sys_openat+0x10/0x10 [ 857.733639][T20664] ? syscall_user_dispatch+0x78/0x140 [ 857.733690][T20664] do_syscall_64+0xcd/0xfa0 [ 857.733721][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.733747][T20664] RIP: 0033:0x7ff1b2f8eec9 [ 857.733767][T20664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.733792][T20664] RSP: 002b:00007ff1b3da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 857.733817][T20664] RAX: ffffffffffffffda RBX: 00007ff1b31e5fa0 RCX: 00007ff1b2f8eec9 [ 857.733834][T20664] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 857.733851][T20664] RBP: 00007ff1b3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 857.733866][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.733882][T20664] R13: 00007ff1b31e6038 R14: 00007ff1b31e5fa0 R15: 00007ffe2101bae8 [ 857.733916][T20664] [ 857.733926][T20664] Mem-Info: [ 858.177771][T20664] active_anon:10339 inactive_anon:11389 isolated_anon:0 [ 858.177771][T20664] active_file:20646 inactive_file:37684 isolated_file:0 [ 858.177771][T20664] unevictable:768 dirty:1111 writeback:0 [ 858.177771][T20664] slab_reclaimable:12346 slab_unreclaimable:105769 [ 858.177771][T20664] mapped:44536 shmem:5763 pagetables:1390 [ 858.177771][T20664] sec_pagetables:0 bounce:0 [ 858.177771][T20664] kernel_misc_reclaimable:0 [ 858.177771][T20664] free:1263731 free_pcp:11600 free_cma:0 [ 858.392193][T20664] Node 0 active_anon:41356kB inactive_anon:43296kB active_file:82584kB inactive_file:150600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172244kB dirty:4440kB writeback:0kB shmem:21516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:38912kB kernel_stack:13092kB pagetables:5340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 858.618126][T20664] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 858.652381][T20664] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.685508][T20664] lowmem_reserve[]: 0 2484 2485 2485 2485 [ 858.707901][T20664] Node 0 DMA32 free:1124228kB boost:0kB min:34352kB low:42940kB high:51528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41356kB inactive_anon:49572kB active_file:84632kB inactive_file:150920kB unevictable:1536kB writepending:4440kB zspages:184kB present:3129332kB managed:2543672kB mlocked:0kB bounce:0kB free_pcp:48312kB local_pcp:25636kB free_cma:0kB [ 859.055330][T20664] lowmem_reserve[]: 0 0 1 1 1 [ 859.076732][T20664] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 859.140287][T20664] lowmem_reserve[]: 0 0 0 0 0 [ 859.289555][T20664] Node 1 Normal free:3907904kB boost:0kB min:55524kB low:69404kB high:83284kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:656kB local_pcp:592kB free_cma:0kB [ 859.396825][T20664] lowmem_reserve[]: 0 0 0 0 0 [ 859.406965][T20664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 859.455392][T20664] Node 0 DMA32: 33*4kB (UE) 944*8kB (UME) 857*16kB (UME) 969*32kB (UME) 680*64kB (UME) 421*128kB (ME) 346*256kB (UME) 222*512kB (M) 96*1024kB (ME) 1*2048kB (M) 162*4096kB (UM) = 1115956kB [ 859.493116][T20686] random: crng reseeded on system resumption [ 859.506624][T20664] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 859.530408][T20664] Node 1 Normal: 198*4kB (UME) 49*8kB (UME) 11*16kB (UME) 181*32kB (UME) 104*64kB (UME) 31*128kB (UME) 10*256kB (UM) 11*512kB (UME) 3*1024kB (UM) 6*2048kB (UME) 944*4096kB (UM) = 3907952kB [ 859.557899][T20664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 859.576182][T20664] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 859.587543][T20664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 859.606411][T20664] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 859.618940][T20664] 70062 total pagecache pages [ 859.637898][T20664] 8 pages in swap cache [ 859.669992][T20664] Free swap = 124932kB [ 859.674213][T20664] Total swap = 124996kB [ 859.697573][T20664] 2097051 pages RAM [ 859.701541][T20664] 0 pages HighMem/MovableOnly [ 859.723953][T20664] 429043 pages reserved [ 859.730060][T20680] ima: policy update failed [ 859.755546][T20664] 0 pages cma reserved [ 859.766073][ T31] audit: type=1802 audit(4294967406.325:78): pid=20680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2430" res=0 errno=0 [ 859.783206][T20664] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 859.799694][T20678] tty tty1: ldisc open failed (-12), clearing slot 0 [ 859.834913][T20683] tty tty12: ldisc open failed (-12), clearing slot 11 [ 859.845549][T20688] tty tty1: ldisc open failed (-12), clearing slot 0 [ 859.852816][T20689] tty tty12: ldisc open failed (-12), clearing slot 11 [ 859.874841][T20681] tty tty1: ldisc open failed (-12), clearing slot 0 [ 861.624306][T20733] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 862.360302][T20744] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2442'. [ 863.368385][T20793] random: crng reseeded on system resumption [ 863.814390][T20793] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2441'. [ 863.970347][T20743] ima: policy update failed [ 864.067387][ T31] audit: type=1802 audit(4294967410.627:79): pid=20743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2441" res=0 errno=0 [ 865.801489][T20864] usb usb34: usbfs: process 20864 (syz.7.2453) did not claim interface 0 before use [ 865.863510][T20866] usb usb34: usbfs: process 20866 (syz.7.2453) did not claim interface 0 before use [ 866.485998][T20881] random: crng reseeded on system resumption [ 866.987398][ T31] audit: type=1800 audit(4294967413.562:80): pid=20892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2458" name="lu_gp_id" dev="configfs" ino=68854 res=0 errno=0 [ 867.214329][T20894] random: crng reseeded on system resumption [ 867.794770][T20887] ima: policy update failed [ 867.807713][ T31] audit: type=1802 audit(4294967414.407:81): pid=20887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2457" res=0 errno=0 [ 868.433679][T20930] FAULT_INJECTION: forcing a failure. [ 868.433679][T20930] name failslab, interval 1, probability 0, space 0, times 0 [ 868.453465][T20930] CPU: 0 UID: 0 PID: 20930 Comm: syz.6.2466 Tainted: G U I syzkaller #0 PREEMPT(full) [ 868.453523][T20930] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 868.453537][T20930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 868.453558][T20930] Call Trace: [ 868.453569][T20930] [ 868.453583][T20930] dump_stack_lvl+0x16c/0x1f0 [ 868.453626][T20930] should_fail_ex+0x512/0x640 [ 868.453666][T20930] ? fs_reclaim_acquire+0xae/0x150 [ 868.453739][T20930] should_failslab+0xc2/0x120 [ 868.453785][T20930] kmem_cache_alloc_noprof+0x75/0x6e0 [ 868.453818][T20930] ? __pfx_map_id_range_down+0x10/0x10 [ 868.453870][T20930] ? security_inode_alloc+0x3b/0x2b0 [ 868.453922][T20930] ? security_inode_alloc+0x3b/0x2b0 [ 868.453967][T20930] security_inode_alloc+0x3b/0x2b0 [ 868.454014][T20930] inode_init_always_gfp+0xce4/0x1030 [ 868.454056][T20930] alloc_inode+0x86/0x240 [ 868.454099][T20930] new_inode+0x22/0x1c0 [ 868.454139][T20930] ? trace_cap_capable+0x18d/0x200 [ 868.454187][T20930] shmem_get_inode+0x19a/0xfb0 [ 868.454237][T20930] ? __vm_enough_memory+0x184/0x3f0 [ 868.454284][T20930] __shmem_file_setup+0x279/0x330 [ 868.454340][T20930] shmem_zero_setup+0x93/0x1a0 [ 868.454379][T20930] __mmap_region+0x2076/0x27a0 [ 868.454417][T20930] ? __pfx___mmap_region+0x10/0x10 [ 868.454448][T20930] ? finish_task_switch.isra.0+0x21c/0xc10 [ 868.454609][T20930] ? rcu_is_watching+0x12/0xc0 [ 868.454668][T20930] ? finish_task_switch.isra.0+0x221/0xc10 [ 868.454704][T20930] ? lockdep_hardirqs_on+0x7c/0x110 [ 868.454742][T20930] ? finish_task_switch.isra.0+0x221/0xc10 [ 868.454817][T20930] ? __pfx___schedule+0x10/0x10 [ 868.454902][T20930] ? trace_cap_capable+0x18d/0x200 [ 868.454965][T20930] mmap_region+0x1ab/0x3f0 [ 868.455000][T20930] ? __get_unmapped_area+0x267/0x440 [ 868.455049][T20930] do_mmap+0xa3e/0x1210 [ 868.455100][T20930] ? __pfx_do_mmap+0x10/0x10 [ 868.455145][T20930] ? __pfx_down_write_killable+0x10/0x10 [ 868.455188][T20930] ? kmem_cache_free+0x2d4/0x6c0 [ 868.455232][T20930] vm_mmap_pgoff+0x29e/0x470 [ 868.455284][T20930] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 868.455329][T20930] ? cap_task_prctl+0x2af/0xa80 [ 868.455382][T20930] ? __x64_sys_futex+0x1e0/0x4c0 [ 868.455421][T20930] ? __x64_sys_futex+0x1e9/0x4c0 [ 868.455472][T20930] ksys_mmap_pgoff+0x7d/0x5c0 [ 868.455516][T20930] ? syscall_user_dispatch+0x78/0x140 [ 868.455576][T20930] __x64_sys_mmap+0x125/0x190 [ 868.455642][T20930] do_syscall_64+0xcd/0xfa0 [ 868.455685][T20930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.455723][T20930] RIP: 0033:0x7f863df8eec9 [ 868.455750][T20930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.455785][T20930] RSP: 002b:00007f863ed99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 868.455817][T20930] RAX: ffffffffffffffda RBX: 00007f863e1e6090 RCX: 00007f863df8eec9 [ 868.455840][T20930] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 868.455861][T20930] RBP: 00007f863e011f91 R08: 0000000000000401 R09: 0000000000008000 [ 868.455883][T20930] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 868.455904][T20930] R13: 00007f863e1e6128 R14: 00007f863e1e6090 R15: 00007ffc8564a778 [ 868.455951][T20930] [ 870.423540][T20947] kexec: Could not allocate control_code_buffer [ 870.913773][T20964] delete_channel: no stack [ 871.487080][T20962] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 871.528252][T20962] File: /dev/ram7 PID: 20962 Comm: syz.7.2472 [ 871.824076][T20962] random: crng reseeded on system resumption [ 872.192893][T20960] ima: policy update failed [ 872.207861][ T31] audit: type=1802 audit(4294967418.820:82): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2472" res=0 errno=0 [ 873.843722][T21011] random: crng reseeded on system resumption [ 874.394524][T20976] kexec: Could not allocate control_code_buffer [ 876.024762][T21040] HfR: entered promiscuous mode [ 877.159355][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 877.166075][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.851089][T21137] __vm_enough_memory: pid: 21137, comm: syz.5.2495, bytes: 4398046511104 not enough memory for the allocation [ 882.076979][T21157] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 885.297971][T21266] sd 0:0:1:0: PR command failed: 1026 [ 885.371977][T21266] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 885.417825][T21266] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 888.961163][T21489] bond0: option arp_interval: invalid value () [ 888.969134][T21489] bond0: option arp_interval: allowed values 0 - 2147483647 [ 889.628837][T21511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2531'. [ 891.851791][T21623] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2530'. [ 891.864032][T21630] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2530'. [ 893.271541][T21668] Invalid ELF header magic: != ELF [ 894.520635][T21725] random: crng reseeded on system resumption [ 894.789574][T21731] Unrecognized hibernate image header format! [ 894.814024][T21731] PM: hibernation: Image mismatch: architecture specific data [ 896.281892][T21804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2542'. [ 898.146101][T21876] random: crng reseeded on system resumption [ 900.252204][T21931] bridge0: port 3(gretap0) entered blocking state [ 900.259211][T21931] bridge0: port 3(gretap0) entered disabled state [ 900.318228][T21931] gretap0: entered allmulticast mode [ 900.431723][T21931] gretap0: entered promiscuous mode [ 900.448349][T21931] bridge0: port 3(gretap0) entered blocking state [ 900.455075][T21931] bridge0: port 3(gretap0) entered forwarding state [ 900.704031][T21931] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 901.957157][T16812] Bluetooth: hci1: SCO packet too small [ 902.306017][T16812] Bluetooth: hci5: Malformed LE Event: 0x0b [ 902.841377][T22016] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 903.870272][T22019] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 904.836225][T22108] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2567'. [ 904.850134][T22108] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2567'. [ 904.949616][T22110] random: crng reseeded on system resumption [ 904.993885][T22110] vhci_hcd: invalid port number 23 [ 904.999205][T22110] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 907.448323][T22201] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2576'. [ 907.458570][T22201] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2576'. [ 908.111416][T16762] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 908.124067][T16762] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 908.134319][T16762] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 908.146265][T16762] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 908.155363][T16762] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 908.465064][T22210] random: crng reseeded on system resumption [ 908.906182][T22211] chnl_net:caif_netlink_parms(): no params data found [ 908.910875][T22209] ima: policy update failed [ 908.922730][ T31] audit: type=1802 audit(4294967455.741:83): pid=22209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2579" res=0 errno=0 [ 909.538187][T22211] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.563524][T22211] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.582990][T22211] bridge_slave_0: entered allmulticast mode [ 909.598516][T22211] bridge_slave_0: entered promiscuous mode [ 909.623204][T22211] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.680095][T22211] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.704913][T22211] bridge_slave_1: entered allmulticast mode [ 909.729518][T22211] bridge_slave_1: entered promiscuous mode [ 909.872224][T22211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.898688][T22211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.144678][T22211] team0: Port device team_slave_0 added [ 910.176286][T22211] team0: Port device team_slave_1 added [ 910.183268][T16762] Bluetooth: hci6: command tx timeout [ 910.399208][T22211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.413087][T22211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.482925][T22211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.503717][T22211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.523517][T22211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.556143][T22211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.736972][T22211] hsr_slave_0: entered promiscuous mode [ 910.749550][T22211] hsr_slave_1: entered promiscuous mode [ 910.760578][T22211] debugfs: 'hsr0' already exists in 'hsr' [ 910.766387][T22211] Cannot create hsr debugfs directory [ 911.909554][T22211] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 911.997869][T22211] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 912.027994][T22211] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 912.072652][T22211] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 912.252292][T16762] Bluetooth: hci6: command tx timeout [ 912.497200][T22692] random: crng reseeded on system resumption [ 913.268026][T22211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.448558][T22211] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.480546][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.487959][T16802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.601998][T17304] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.609287][T17304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.841686][T22211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.853985][T22761] vivid-003: ================= START STATUS ================= [ 913.873831][T22761] vivid-003: Radio HW Seek Mode: Bounded [ 913.923925][T22761] vivid-003: Radio Programmable HW Seek: false [ 913.943362][T22761] vivid-003: RDS Rx I/O Mode: Block I/O [ 913.961180][T22761] vivid-003: Generate RBDS Instead of RDS: false [ 913.971465][T22761] vivid-003: RDS Reception: true [ 913.979245][T22761] vivid-003: RDS Program Type: 0 inactive [ 914.019120][T22761] vivid-003: RDS PS Name: inactive [ 914.036655][T22761] vivid-003: RDS Radio Text: inactive [ 914.045940][T22761] vivid-003: RDS Traffic Announcement: false inactive [ 914.056289][T22761] vivid-003: RDS Traffic Program: false inactive [ 914.069325][T22761] vivid-003: RDS Music: false inactive [ 914.079883][T22761] vivid-003: ================== END STATUS ================== [ 914.321490][T16762] Bluetooth: hci6: command tx timeout [ 914.666625][T22211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.091516][T22818] vmstat_refresh: nr_hugetlb -4608 [ 915.890625][T22211] veth0_vlan: entered promiscuous mode [ 915.996809][T22211] veth1_vlan: entered promiscuous mode [ 916.118988][T22891] random: crng reseeded on system resumption [ 916.252914][T22211] veth0_macvtap: entered promiscuous mode [ 916.264641][T22211] veth1_macvtap: entered promiscuous mode [ 916.393312][T16762] Bluetooth: hci6: command tx timeout [ 916.404113][T22211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.493088][T22211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.550046][T17304] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.573315][T17304] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.610723][T17304] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.627771][T17304] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.770392][T16812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 916.781281][T16812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 916.795645][T16812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 916.804704][T16812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 916.828615][T16812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 916.912387][T16760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.927978][T16760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.967508][T22886] ima: policy update failed [ 916.978144][ T31] audit: type=1802 audit(4294967463.833:84): pid=22886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2599" res=0 errno=0 [ 917.072190][T16760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.100604][T16760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.452253][T22900] chnl_net:caif_netlink_parms(): no params data found [ 917.708986][T22900] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.718002][T22900] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.727817][T22900] bridge_slave_0: entered allmulticast mode [ 917.739578][T22900] bridge_slave_0: entered promiscuous mode [ 917.764757][T22900] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.776421][T22900] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.790741][T22900] bridge_slave_1: entered allmulticast mode [ 917.800423][T22900] bridge_slave_1: entered promiscuous mode [ 917.924532][T22900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.950486][T22900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.084424][T22900] team0: Port device team_slave_0 added [ 918.104786][T22900] team0: Port device team_slave_1 added [ 918.184512][T23142] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2605'. [ 918.259606][T22900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.267215][T22900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.298055][T22900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.323918][T23153] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2605'. [ 918.345257][T22900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.360346][T22900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.425912][T22900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.801838][T22900] hsr_slave_0: entered promiscuous mode [ 918.819072][T22900] hsr_slave_1: entered promiscuous mode [ 918.827477][T22900] debugfs: 'hsr0' already exists in 'hsr' [ 918.833999][T22900] Cannot create hsr debugfs directory [ 918.859014][T16762] Bluetooth: hci7: command tx timeout [ 919.479782][T23278] FAULT_INJECTION: forcing a failure. [ 919.479782][T23278] name fail_futex, interval 1, probability 0, space 0, times 0 [ 919.526251][T23278] CPU: 1 UID: 0 PID: 23278 Comm: syz.7.2609 Tainted: G U I syzkaller #0 PREEMPT(full) [ 919.526310][T23278] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 919.526324][T23278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 919.526345][T23278] Call Trace: [ 919.526357][T23278] [ 919.526372][T23278] dump_stack_lvl+0x16c/0x1f0 [ 919.526421][T23278] should_fail_ex+0x512/0x640 [ 919.526470][T23278] get_futex_key+0x1d0/0x1560 [ 919.526522][T23278] ? __pfx_get_futex_key+0x10/0x10 [ 919.526572][T23278] ? __lock_acquire+0x62e/0x1ce0 [ 919.526625][T23278] futex_wake+0xea/0x530 [ 919.526683][T23278] ? __pfx_futex_wake+0x10/0x10 [ 919.526745][T23278] ? mntput_no_expire+0x14f/0xc80 [ 919.526809][T23278] do_futex+0x1e3/0x350 [ 919.526865][T23278] ? __pfx_do_futex+0x10/0x10 [ 919.526909][T23278] ? __pfx_mntput_no_expire+0x10/0x10 [ 919.526964][T23278] ? dput.part.0+0xce/0x9b0 [ 919.527011][T23278] __x64_sys_futex+0x1e0/0x4c0 [ 919.527061][T23278] ? mntput+0x6b/0x90 [ 919.527111][T23278] ? __pfx___x64_sys_futex+0x10/0x10 [ 919.527162][T23278] ? syscall_user_dispatch+0x78/0x140 [ 919.527229][T23278] do_syscall_64+0xcd/0xfa0 [ 919.527271][T23278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.527307][T23278] RIP: 0033:0x7f3ec158eec9 [ 919.527336][T23278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.527371][T23278] RSP: 002b:00007f3ec24be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 919.527406][T23278] RAX: ffffffffffffffda RBX: 00007f3ec17e6098 RCX: 00007f3ec158eec9 [ 919.527430][T23278] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ec17e609c [ 919.527454][T23278] RBP: 00007f3ec17e6090 R08: 00007f3ec24e0000 R09: 0000000000000000 [ 919.527476][T23278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.527498][T23278] R13: 00007f3ec17e6128 R14: 00007ffefa2f5020 R15: 00007ffefa2f5108 [ 919.527545][T23278] [ 920.019040][T22900] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 920.091506][T22900] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 920.217014][T22900] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 920.475559][T22900] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 920.537218][T23407] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2613'. [ 920.628198][T23394] __vm_enough_memory: pid: 23394, comm: syz.5.2612, bytes: 4398046511104 not enough memory for the allocation [ 920.927076][T16762] Bluetooth: hci7: command tx timeout [ 921.157062][T22900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.189093][T22900] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.721892][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.729210][T16802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.864984][T16802] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.872227][T16802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.148280][T22900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 922.160133][T22900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 922.802493][T22900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.006919][T16762] Bluetooth: hci7: command tx timeout [ 923.721344][T23501] random: crng reseeded on system resumption [ 924.190864][T23513] sd 0:0:1:0: PR command failed: 1026 [ 924.209898][T23513] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 924.313172][T23513] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 924.577451][T22900] veth0_vlan: entered promiscuous mode [ 924.600817][T22900] veth1_vlan: entered promiscuous mode [ 924.840117][T22900] veth0_macvtap: entered promiscuous mode [ 924.849210][T23542] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2625'. [ 924.891677][T22900] veth1_macvtap: entered promiscuous mode [ 925.070647][T16762] Bluetooth: hci7: command tx timeout [ 925.087226][T22900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.245685][T22900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.581652][T16760] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.644520][T16760] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.724289][T16760] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.738460][T16760] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.515431][T17304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.534354][T17304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.701135][T23619] random: crng reseeded on system resumption [ 926.709591][T17304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.763295][T17304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.845637][T23619] netlink: 'syz.8.2628': attribute type 1 has an invalid length. [ 926.858911][T23619] netlink: 54 bytes leftover after parsing attributes in process `syz.8.2628'. [ 927.070434][T23618] ima: policy update failed [ 927.081823][ T31] audit: type=1802 audit(4294967473.985:85): pid=23618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2628" res=0 errno=0 [ 928.110127][T23662] rtc_cmos 00:00: Alarms can be up to one day in the future [ 928.260891][T23660] random: crng reseeded on system resumption [ 928.489824][ T5915] rtc_cmos 00:00: Alarms can be up to one day in the future [ 928.497821][ T5915] rtc_cmos 00:00: Alarms can be up to one day in the future [ 928.505963][ T5915] rtc_cmos 00:00: Alarms can be up to one day in the future [ 928.538137][ T5915] rtc_cmos 00:00: Alarms can be up to one day in the future [ 928.545506][ T5915] rtc rtc0: __rtc_set_alarm: err=-22 [ 928.593947][T23673] futex_wake_op: syz.5.2633 tries to shift op by -2048; fix this program [ 928.657573][T23673] futex_wake_op: syz.5.2633 tries to shift op by -2048; fix this program [ 928.718318][T23668] ptp ptp0: guarantee physical clock free running [ 928.823017][T23654] ima: policy update failed [ 928.849979][ T31] audit: type=1802 audit(4294967475.764:86): pid=23654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2629" res=0 errno=0 [ 929.517878][T23701] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2642'. [ 929.528814][T23701] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2642'. [ 931.675164][T23773] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 931.700163][T23774] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 931.788649][T23777] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 933.075877][T23799] FAULT_INJECTION: forcing a failure. [ 933.075877][T23799] name failslab, interval 1, probability 0, space 0, times 0 [ 933.116306][T23799] CPU: 1 UID: 0 PID: 23799 Comm: syz.5.2653 Tainted: G U I syzkaller #0 PREEMPT(full) [ 933.116368][T23799] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 933.116385][T23799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 933.116408][T23799] Call Trace: [ 933.116420][T23799] [ 933.116434][T23799] dump_stack_lvl+0x16c/0x1f0 [ 933.116479][T23799] should_fail_ex+0x512/0x640 [ 933.116523][T23799] ? __kmalloc_noprof+0xca/0x880 [ 933.116583][T23799] should_failslab+0xc2/0x120 [ 933.116631][T23799] __kmalloc_noprof+0xdd/0x880 [ 933.116686][T23799] ? __register_sysctl_table+0xea2/0x1900 [ 933.116746][T23799] ? __register_sysctl_table+0xea2/0x1900 [ 933.116798][T23799] __register_sysctl_table+0xea2/0x1900 [ 933.116860][T23799] ? __pfx___register_sysctl_table+0x10/0x10 [ 933.116910][T23799] ? is_module_address+0x69/0xf0 [ 933.116969][T23799] ? register_net_sysctl_sz+0x228/0x3e0 [ 933.117019][T23799] ? __asan_memcpy+0x3c/0x60 [ 933.117059][T23799] sctp_sysctl_net_register+0x15d/0x200 [ 933.117105][T23799] ? __pfx_sctp_defaults_init+0x10/0x10 [ 933.117145][T23799] sctp_defaults_init+0x6d2/0xd90 [ 933.117187][T23799] ? __pfx_sctp_defaults_init+0x10/0x10 [ 933.117226][T23799] ops_init+0x1df/0x5f0 [ 933.117277][T23799] setup_net+0x100/0x390 [ 933.117320][T23799] ? __pfx_setup_net+0x10/0x10 [ 933.117365][T23799] ? debug_mutex_init+0x37/0x70 [ 933.117406][T23799] copy_net_ns+0x2f8/0x690 [ 933.117457][T23799] create_new_namespaces+0x3ea/0xa90 [ 933.117508][T23799] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 933.117555][T23799] ksys_unshare+0x45b/0xa40 [ 933.117601][T23799] ? __pfx_ksys_unshare+0x10/0x10 [ 933.117651][T23799] ? xfd_validate_state+0x61/0x180 [ 933.117715][T23799] __x64_sys_unshare+0x31/0x40 [ 933.117759][T23799] do_syscall_64+0xcd/0xfa0 [ 933.117799][T23799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.117832][T23799] RIP: 0033:0x7ff1b2f8eec9 [ 933.117861][T23799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.117896][T23799] RSP: 002b:00007ff1b3d85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 933.117940][T23799] RAX: ffffffffffffffda RBX: 00007ff1b31e6090 RCX: 00007ff1b2f8eec9 [ 933.117964][T23799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 933.117986][T23799] RBP: 00007ff1b3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 933.118008][T23799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.118029][T23799] R13: 00007ff1b31e6128 R14: 00007ff1b31e6090 R15: 00007ffe2101bae8 [ 933.118077][T23799] [ 933.118190][T23799] sysctl could not get directory: /net/sctp -12 [ 935.339000][T23827] FAULT_INJECTION: forcing a failure. [ 935.339000][T23827] name fail_futex, interval 1, probability 0, space 0, times 0 [ 935.354253][T23827] CPU: 0 UID: 0 PID: 23827 Comm: syz.5.2658 Tainted: G U I syzkaller #0 PREEMPT(full) [ 935.354311][T23827] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 935.354326][T23827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 935.354347][T23827] Call Trace: [ 935.354358][T23827] [ 935.354372][T23827] dump_stack_lvl+0x16c/0x1f0 [ 935.354417][T23827] should_fail_ex+0x512/0x640 [ 935.354465][T23827] get_futex_key+0x1d0/0x1560 [ 935.354518][T23827] ? __pfx_get_futex_key+0x10/0x10 [ 935.354571][T23827] ? rcu_is_watching+0x12/0xc0 [ 935.354614][T23827] futex_wake+0xea/0x530 [ 935.354667][T23827] ? sctp_setsockopt+0x41f/0xb870 [ 935.354729][T23827] ? __pfx_futex_wake+0x10/0x10 [ 935.354787][T23827] ? sctp_setsockopt+0x173/0xb870 [ 935.354848][T23827] do_futex+0x1e3/0x350 [ 935.354893][T23827] ? __pfx_do_futex+0x10/0x10 [ 935.354936][T23827] ? rcu_is_watching+0x12/0xc0 [ 935.354968][T23827] ? kfree+0x252/0x6d0 [ 935.355018][T23827] ? aa_sock_opt_perm+0xfd/0x1c0 [ 935.355065][T23827] __x64_sys_futex+0x1e0/0x4c0 [ 935.355120][T23827] ? __pfx___x64_sys_futex+0x10/0x10 [ 935.355170][T23827] ? __sys_setsockopt+0x140/0x1a0 [ 935.355220][T23827] do_syscall_64+0xcd/0xfa0 [ 935.355261][T23827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.355297][T23827] RIP: 0033:0x7ff1b2f8eec9 [ 935.355324][T23827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.355358][T23827] RSP: 002b:00007ff1b3d850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 935.355390][T23827] RAX: ffffffffffffffda RBX: 00007ff1b31e6098 RCX: 00007ff1b2f8eec9 [ 935.355412][T23827] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff1b31e609c [ 935.355434][T23827] RBP: 00007ff1b31e6090 R08: 00007ff1b3da7000 R09: 0000000000000000 [ 935.355455][T23827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.355476][T23827] R13: 00007ff1b31e6128 R14: 00007ffe2101ba00 R15: 00007ffe2101bae8 [ 935.355522][T23827] [ 935.562614][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.681129][T23828] random: crng reseeded on system resumption [ 935.728738][T23828] netlink: 'syz.7.2659': attribute type 1 has an invalid length. [ 935.736956][T23828] netlink: 54 bytes leftover after parsing attributes in process `syz.7.2659'. [ 936.146443][T23825] ima: policy update failed [ 936.161043][ T31] audit: type=1802 audit(4294967483.122:87): pid=23825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2659" res=0 errno=0 [ 936.953683][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2663'. [ 937.156462][T23854] [U] [ 937.159341][T23854] [U] [ 937.162093][T23854] [U] [ 937.164860][T23854] [U] [ 937.174046][T23854] [U] [ 937.176806][T23854] [U] [ 937.179561][T23854] [U] [ 937.182310][T23854] [U] [ 937.222906][T23854] [U] [ 937.225707][T23854] [U] [ 937.228468][T23854] [U] [ 937.231328][T23854] [U] [ 937.237443][T23854] [U] [ 937.240244][T23854] [U] [ 937.243012][T23854] [U] [ 937.245789][T23854] [U] [ 937.249824][T23854] [U] [ 937.252650][T23854] [U] [ 937.255416][T23854] [U] [ 937.258176][T23854] [U] [ 937.268595][T23854] [U] [ 937.271571][T23854] [U] [ 937.274346][T23854] [U] [ 937.277124][T23854] [U] [ 937.309298][T23854] [U] [ 937.312110][T23854] [U] [ 937.314898][T23854] [U] [ 937.317672][T23854] [U] [ 937.337133][T23854] [U] [ 937.339943][T23854] [U] [ 937.342746][T23854] [U] [ 937.345532][T23854] [U] [ 937.363000][T23854] [U] [ 937.365824][T23854] [U] [ 937.368603][T23854] [U] [ 937.371362][T23854] [U] [ 937.386889][T23854] [U] [ 937.389703][T23854] [U] [ 937.392566][T23854] [U] [ 937.395333][T23854] [U] [ 937.404447][T23854] [U] [ 937.407241][T23854] [U] [ 937.409982][T23854] [U] [ 937.412759][T23854] [U] [ 937.416990][T23854] [U] [ 937.419778][T23854] [U] [ 937.422541][T23854] [U] [ 937.425305][T23854] [U] [ 937.430222][T23854] [U] [ 937.604969][T23874] input: f¬ as /devices/virtual/input/input30 [ 937.982695][T23909] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2667'. [ 938.291592][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.298400][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.892175][T24006] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 940.046919][T24013] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 1. Contact your vendor for updates. [ 940.123421][T24017] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 1. Contact your vendor for updates. [ 940.410365][T24037] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2675'. [ 940.948660][T24063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2677'. [ 944.337852][T24177] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 944.348910][T24177] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 944.364975][T24177] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 944.407519][T24177] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 944.418662][T24177] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 944.895629][T24198] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 945.443689][T24177] Bluetooth: hci1: command 0x0406 tx timeout [ 945.582640][T24177] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 945.598122][T24177] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 945.618556][T24177] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 945.642101][T24177] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 945.651580][T24177] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 946.009548][T24173] chnl_net:caif_netlink_parms(): no params data found [ 946.179259][T24353] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2689'. [ 946.339912][T24353] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2689: iget: bad extra_isize 53923 (inode size 256) [ 946.353605][T24353] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -117 [ 946.378103][T24353] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2689: iget: bad extra_isize 53923 (inode size 256) [ 946.415126][T24353] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -117 [ 946.442353][T24173] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.454860][T24173] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.462359][T24173] bridge_slave_0: entered allmulticast mode [ 946.468767][T24353] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2689: iget: bad extra_isize 53923 (inode size 256) [ 946.469381][T24353] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -117 [ 946.469637][T24353] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2689: iget: bad extra_isize 53923 (inode size 256) [ 946.493515][T24173] bridge_slave_0: entered promiscuous mode [ 946.516629][T24173] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.536996][T24173] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.548217][T24353] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -117 [ 946.559673][T16762] Bluetooth: hci8: command tx timeout [ 946.569036][T24173] bridge_slave_1: entered allmulticast mode [ 946.575155][T24353] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -117 [ 946.585517][T24353] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 946.599229][T24173] bridge_slave_1: entered promiscuous mode [ 946.691435][T24173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.729370][T24173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.144904][T24173] team0: Port device team_slave_0 added [ 947.254288][T24173] team0: Port device team_slave_1 added [ 947.506965][T24173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.568467][T24173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.595147][T24173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.608454][T24173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.615822][T24173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.642762][T24173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.747500][T24177] Bluetooth: hci9: command tx timeout [ 947.951648][T24173] hsr_slave_0: entered promiscuous mode [ 947.970693][T24173] hsr_slave_1: entered promiscuous mode [ 947.982967][T24173] debugfs: 'hsr0' already exists in 'hsr' [ 947.990663][T24173] Cannot create hsr debugfs directory [ 948.040929][T24265] chnl_net:caif_netlink_parms(): no params data found [ 948.148643][T24680] random: crng reseeded on system resumption [ 948.622941][T24177] Bluetooth: hci8: command tx timeout [ 948.664473][T24265] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.664824][T24749] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2697'. [ 948.674966][T24265] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.698950][T24265] bridge_slave_0: entered allmulticast mode [ 948.726167][T24265] bridge_slave_0: entered promiscuous mode [ 948.787564][T24749] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.829124][T24749] bridge_slave_1 (unregistering): left allmulticast mode [ 948.838660][T24749] bridge_slave_1 (unregistering): left promiscuous mode [ 948.847181][T24749] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.928985][T24265] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.940585][T24265] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.977906][T24265] bridge_slave_1: entered allmulticast mode [ 949.000572][T24265] bridge_slave_1: entered promiscuous mode [ 949.119186][T24265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.196189][T24803] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 949.246570][T24265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.327835][T24836] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 949.331296][T24265] team0: Port device team_slave_0 added [ 949.352094][T24837] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 949.385624][T24839] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 949.421314][T24841] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 949.454740][T24845] EXT4-fs error (device sda1): xattr_find_entry:337: inode #90: comm dhcpcd: corrupted xattr entries [ 949.477842][T24265] team0: Port device team_slave_1 added [ 949.706060][T24265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.715424][T24265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.747042][T24265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.787884][T24265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.795424][T24265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.819180][T24177] Bluetooth: hci9: command tx timeout [ 949.836580][T24265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.240462][T24265] hsr_slave_0: entered promiscuous mode [ 950.247447][T24265] hsr_slave_1: entered promiscuous mode [ 950.253825][T24265] debugfs: 'hsr0' already exists in 'hsr' [ 950.260657][T24265] Cannot create hsr debugfs directory [ 950.560688][T24173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 950.592371][T24173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 950.608219][T24173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 950.642070][T24173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 950.692229][T24177] Bluetooth: hci8: command tx timeout [ 950.817342][T24265] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.996309][T24265] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.103012][T24265] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.188016][T24265] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.313807][T24173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.372647][T24173] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.440796][T17059] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.448036][T17059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.515614][T17304] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.522961][T17304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.778388][T24265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 952.224570][T24265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 952.233880][T24177] Bluetooth: hci9: command tx timeout [ 952.329523][T24265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 952.386782][T24265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 952.621529][T24265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.700259][T24265] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.729225][T17308] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.736818][T17308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.767983][T24177] Bluetooth: hci8: command tx timeout [ 952.797300][T17308] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.804510][T17308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.158935][T24173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.244711][T24173] veth0_vlan: entered promiscuous mode [ 953.262332][T24173] veth1_vlan: entered promiscuous mode [ 953.312285][T24173] veth0_macvtap: entered promiscuous mode [ 953.325422][T24173] veth1_macvtap: entered promiscuous mode [ 953.357074][T24173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.371823][T24173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.409289][T17304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.440760][T17304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.472446][T17304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.507284][T17304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.686733][T16862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.694645][T16862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.777593][T16862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.785500][T16862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.038158][T24265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.126672][T25202] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2703'. [ 954.195657][T25202] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2703'. [ 954.237520][T24265] veth0_vlan: entered promiscuous mode [ 954.277027][T24177] Bluetooth: hci9: command tx timeout [ 954.325075][T24265] veth1_vlan: entered promiscuous mode [ 954.474876][T24265] veth0_macvtap: entered promiscuous mode [ 954.500422][T24265] veth1_macvtap: entered promiscuous mode [ 954.605262][T24265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.672963][T24265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.689005][T16862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.727773][T16862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.758781][T16862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.830081][T16862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.273335][T16769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.319401][T16769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.709379][T16862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.726038][T16862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.388312][T25278] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 957.724255][T25335] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2713'. [ 957.737337][T25335] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2713'. [ 960.727859][T16762] Bluetooth: hci3: command 0x0406 tx timeout [ 962.857082][T24177] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 964.512132][T25523] zswap: compressor not available [ 964.820555][T24177] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 964.835478][T24177] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 964.854017][T24177] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 964.914875][T24177] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 964.923667][T24177] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 965.817143][T18760] Bluetooth: hci5: command 0x0406 tx timeout [ 965.890245][T25541] chnl_net:caif_netlink_parms(): no params data found [ 966.611864][T25541] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.623033][T25541] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.650590][T25541] bridge_slave_0: entered allmulticast mode [ 966.671733][T25541] bridge_slave_0: entered promiscuous mode [ 966.696128][T25541] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.705627][T25541] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.713875][T25541] bridge_slave_1: entered allmulticast mode [ 966.723075][T25541] bridge_slave_1: entered promiscuous mode [ 967.066332][T25541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.091514][T16762] Bluetooth: hci10: command tx timeout [ 967.113869][T25541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.206987][T25541] team0: Port device team_slave_0 added [ 967.230916][T25541] team0: Port device team_slave_1 added [ 967.378992][T25541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.411603][T25541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.444714][T25541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.460212][T25541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.468648][T25541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.508952][T25541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.530322][T25862] random: crng reseeded on system resumption [ 967.699156][T25541] hsr_slave_0: entered promiscuous mode [ 967.706290][T25541] hsr_slave_1: entered promiscuous mode [ 967.735497][T25541] debugfs: 'hsr0' already exists in 'hsr' [ 967.741470][T25541] Cannot create hsr debugfs directory [ 968.566111][T25541] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.686310][T25541] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.865541][T25541] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.995989][T25541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.158401][T16762] Bluetooth: hci10: command tx timeout [ 969.277671][T25541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 969.327010][T25541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 969.363983][T25541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 969.425434][T25541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 969.677943][T26069] bond0: option primary_reselect: invalid value (cover enable write trace failed, mode=0) [ 969.719395][T26069] bond0: option primary_reselect: invalid value ( (errno 9)) [ 970.025335][T25541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.069214][T25541] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.085013][T16862] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.092525][T16862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.123348][T16862] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.130564][T16862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.515107][T26115] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0x7feeab4fb pfn:0x78000 [ 970.571977][T26115] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 970.651336][T26115] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 970.691012][T26115] raw: 00000007feeab4fb 0000000000000000 0000000200000000 0000000000000000 [ 970.711065][T26115] page dumped because: unmovable page [ 970.740806][T26115] page_owner tracks the page as allocated [ 970.753954][T26115] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5825, tgid 5825 (syz-executor), ts 102246436770, free_ts 102245381282 [ 970.844242][T26115] post_alloc_hook+0x1c0/0x230 [ 970.920365][T26115] get_page_from_freelist+0x10a3/0x3a30 [ 970.956852][T26115] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 970.968567][T26115] alloc_pages_mpol+0x1fb/0x550 [ 970.999385][T26115] alloc_pages_noprof+0x131/0x390 [ 971.016901][T26115] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 971.030284][T26115] vmalloc_user_noprof+0x9e/0xe0 [ 971.042050][T26115] kcov_ioctl+0x4c/0x730 [ 971.052786][T26115] __x64_sys_ioctl+0x18e/0x210 [ 971.058267][T26115] do_syscall_64+0xcd/0xfa0 [ 971.063218][T26115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.070268][T26115] page last free pid 5825 tgid 5825 stack trace: [ 971.078073][T26115] __free_frozen_pages+0x7df/0x1160 [ 971.083752][T26115] kasan_populate_vmalloc+0x1eb/0x2d0 [ 971.109372][T26115] alloc_vmap_area+0x960/0x29e0 [ 971.125809][T26115] __get_vm_area_node+0x1ca/0x330 [ 971.138422][T26115] __vmalloc_node_range_noprof+0x271/0x1480 [ 971.157370][T26115] vmalloc_user_noprof+0x9e/0xe0 [ 971.164706][T26115] kcov_ioctl+0x4c/0x730 [ 971.169751][T26115] __x64_sys_ioctl+0x18e/0x210 [ 971.174739][T26115] do_syscall_64+0xcd/0xfa0 [ 971.181103][T26115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.238027][T16762] Bluetooth: hci10: command tx timeout [ 971.260489][T25541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.403148][T26171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 971.464549][T26175] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 971.608357][T16802] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.177358][T25541] veth0_vlan: entered promiscuous mode [ 972.233273][T25541] veth1_vlan: entered promiscuous mode [ 972.331192][T25541] veth0_macvtap: entered promiscuous mode [ 972.361185][T25541] veth1_macvtap: entered promiscuous mode [ 972.435176][T25541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.462995][T25541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.508452][T16802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.520519][T16802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.540417][T16802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.565991][T16802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.946969][T16769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.954867][T16769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.162699][T16802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.221863][T16802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.296703][T16762] Bluetooth: hci10: command tx timeout [ 974.027329][T26305] zswap: compressor not available [ 974.038602][T26306] zswap: compressor not available [ 974.661183][ T32] INFO: task syz-executor:12957 blocked for more than 143 seconds. [ 974.681932][ T32] Tainted: G U I syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 974.866539][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 974.886482][ T32] task:syz-executor state:D stack:23880 pid:12957 tgid:12957 ppid:1 task_flags:0x400140 flags:0x00080002 [ 974.899870][T26323] random: crng reseeded on system resumption [ 974.951646][ T32] Call Trace: [ 975.019253][ T32] [ 975.060286][ T32] __schedule+0x1190/0x5de0 [ 975.069994][T26323] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 975.089256][T26323] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 975.129844][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 975.145172][ T32] ? __pfx___schedule+0x10/0x10 [ 975.145426][T26323] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 975.150125][ T32] ? find_held_lock+0x2b/0x80 [ 975.207241][ T32] ? schedule+0x2d7/0x3a0 [ 975.242347][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 975.247284][T26323] PM: hibernation: Basic memory bitmaps created [ 975.274213][ T32] schedule+0xe7/0x3a0 [ 975.278385][ T32] schedule_preempt_disabled+0x13/0x30 [ 975.283906][ T32] __mutex_lock+0x818/0x1060 [ 975.398392][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 975.423549][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 975.429313][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 975.484365][ T32] ? net_generic+0xea/0x2a0 [ 975.489028][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 975.507018][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 975.602822][ T32] nfsd_umount+0x48/0xe0 [ 975.612787][ T32] deactivate_locked_super+0xc1/0x1a0 [ 975.618222][ T32] deactivate_super+0xde/0x100 [ 975.623508][ T32] cleanup_mnt+0x225/0x450 [ 975.628286][ T32] task_work_run+0x150/0x240 [ 975.642945][ T32] ? __pfx_task_work_run+0x10/0x10 [ 975.648268][ T32] ? __pfx___x64_sys_umount+0x10/0x10 [ 975.663726][ T32] exit_to_user_mode_loop+0xec/0x130 [ 975.669597][ T32] do_syscall_64+0x426/0xfa0 [ 975.702653][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.708617][ T32] RIP: 0033:0x7f4891f901f7 [ 975.724278][ T32] RSP: 002b:00007ffed7de15a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 975.733337][ T32] RAX: 0000000000000000 RBX: 00007f4892011d7d RCX: 00007f4891f901f7 [ 975.741847][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed7de1660 [ 975.750008][ T32] RBP: 00007ffed7de1660 R08: 0000000000000000 R09: 0000000000000000 [ 975.758420][ T32] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed7de26f0 [ 975.767062][ T32] R13: 00007f4892011d7d R14: 00000000000ca04f R15: 00007ffed7de2730 [ 975.775984][ T32] [ 975.779142][ T32] INFO: task syz-executor:13550 blocked for more than 144 seconds. [ 975.787190][ T32] Tainted: G U I syzkaller #0 [ 975.794019][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 975.803022][ T32] task:syz-executor state:D stack:23992 pid:13550 tgid:13550 ppid:1 task_flags:0x400140 flags:0x00080002 [ 975.815353][ T32] Call Trace: [ 975.818659][ T32] [ 975.821787][ T32] __schedule+0x1190/0x5de0 [ 975.826410][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 975.831827][ T32] ? __pfx___schedule+0x10/0x10 [ 975.837121][ T32] ? find_held_lock+0x2b/0x80 [ 975.842058][ T32] ? schedule+0x2d7/0x3a0 [ 975.848411][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 975.854183][ T32] schedule+0xe7/0x3a0 [ 975.858390][ T32] schedule_preempt_disabled+0x13/0x30 [ 975.864005][ T32] __mutex_lock+0x818/0x1060 [ 975.868658][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 975.874266][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 975.879755][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 975.884935][ T32] ? net_generic+0xea/0x2a0 [ 975.889580][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 975.895002][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 975.900297][ T32] nfsd_umount+0x48/0xe0 [ 975.904660][ T32] deactivate_locked_super+0xc1/0x1a0 [ 975.910227][ T32] deactivate_super+0xde/0x100 [ 975.915300][ T32] cleanup_mnt+0x225/0x450 [ 975.919851][ T32] task_work_run+0x150/0x240 [ 975.924785][ T32] ? __pfx_task_work_run+0x10/0x10 [ 975.930390][ T32] ? __pfx___x64_sys_umount+0x10/0x10 [ 975.936271][ T32] exit_to_user_mode_loop+0xec/0x130 [ 975.943829][ T32] do_syscall_64+0x426/0xfa0 [ 975.948499][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.954823][ T32] RIP: 0033:0x7f72f43901f7 [ 975.959288][ T32] RSP: 002b:00007fffa5890de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 975.967782][ T32] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f72f43901f7 [ 975.975937][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa5890ea0 [ 975.984168][ T32] RBP: 00007fffa5890ea0 R08: 0000000000000000 R09: 0000000000000000 [ 975.992481][ T32] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa5891f30 [ 976.000821][ T32] R13: 00007f72f4411d7d R14: 00000000000c93c8 R15: 00007fffa5891f70 [ 976.008869][ T32] [ 976.012134][ T32] [ 976.012134][ T32] Showing all locks held in the system: [ 976.086436][ T32] 1 lock held by khungtaskd/32: [ 976.138573][ T32] #0: ffffffff8e3c4320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 976.189500][ T32] 2 locks held by syz-executor/5832: [ 976.194867][ T32] #0: ffff88807c9180e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 976.239333][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 976.269063][ T32] 3 locks held by kworker/0:6/5927: [ 976.318810][ T32] 2 locks held by syz-executor/12957: [ 976.324265][ T32] #0: ffff88803400e0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 976.388446][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 976.398180][ T32] 2 locks held by syz-executor/13550: [ 976.458196][ T32] #0: ffff88804fc680e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 976.507884][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 976.517555][ T32] 5 locks held by kworker/u10:2/16769: [ 976.607309][ T32] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 976.637284][ T32] #1: ffffc900042dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 976.697664][ T32] #2: ffffffff900e7af0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 976.736641][ T32] #3: ffffffff900fdf08 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 976.756643][ T32] #4: ffffffff8e3cf8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 976.767301][ T32] 2 locks held by syz.2.2298/18322: [ 976.772572][ T32] #0: ffffffff901a1850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.782247][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 976.792990][ T32] 2 locks held by syz-executor/18756: [ 976.799967][ T32] #0: ffff88807f6880e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 976.811236][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 976.821496][ T32] 2 locks held by syz-executor/19477: [ 976.827039][ T32] #0: ffff88807f17e0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 976.837692][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 976.847828][ T32] 3 locks held by kworker/0:0/20212: [ 976.853155][ T32] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 976.864141][ T32] #1: ffffc9000b547d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 976.874059][ T32] #2: ffffffff8e3cf8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 976.884282][ T32] 2 locks held by syz-executor/22211: [ 976.889767][ T32] #0: ffff888097a480e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 976.900204][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 976.909960][ T32] 2 locks held by syz.9.2639/23686: [ 976.915309][ T32] #0: ffff888030f4c0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 976.926103][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 976.936123][ T32] 2 locks held by getty/24251: [ 976.940933][ T32] #0: ffff888030f910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 976.951804][ T32] #1: ffffc90002e922f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 976.962859][ T32] 2 locks held by syz.7.2697/24767: [ 976.971845][ T32] #0: ffffffff901a1850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.980471][ T32] #1: ffffffff8e7ec888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 976.990869][ T32] 4 locks held by syz.0.2761/26317: [ 976.996629][ T32] #0: ffff88809615cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 977.006331][ T32] #1: ffff88809615c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 977.016181][ T32] #2: ffffffff90370708 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 977.026364][ T32] #3: ffff88807acab338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 977.036094][ T32] 3 locks held by syz.4.2762/26329: [ 977.041368][ T32] #0: ffff88808eb98dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 977.051623][ T32] #1: ffff88808eb980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 977.061831][ T32] #2: ffffffff90370708 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 977.072251][ T32] 3 locks held by syz.2.2763/26327: [ 977.077576][ T32] #0: ffff88805c420dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 977.087357][ T32] #1: ffff88805c4200b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 977.097340][ T32] #2: ffffffff90370708 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 977.107533][ T32] [ 977.109898][ T32] ============================================= [ 977.109898][ T32] [ 977.120901][ T32] NMI backtrace for cpu 1 [ 977.120933][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U I syzkaller #0 PREEMPT(full) [ 977.120980][ T32] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 977.120994][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 977.121014][ T32] Call Trace: [ 977.121024][ T32] [ 977.121036][ T32] dump_stack_lvl+0x116/0x1f0 [ 977.121085][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 977.121127][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 977.121162][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 977.121210][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 977.121261][ T32] watchdog+0xf3f/0x1170 [ 977.121299][ T32] ? rcu_is_watching+0x12/0xc0 [ 977.121334][ T32] ? __pfx_watchdog+0x10/0x10 [ 977.121362][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 977.121401][ T32] ? __kthread_parkme+0x19e/0x250 [ 977.121445][ T32] ? __pfx_watchdog+0x10/0x10 [ 977.121475][ T32] kthread+0x3c2/0x780 [ 977.121524][ T32] ? __pfx_kthread+0x10/0x10 [ 977.121576][ T32] ? rcu_is_watching+0x12/0xc0 [ 977.121611][ T32] ? __pfx_kthread+0x10/0x10 [ 977.121662][ T32] ret_from_fork+0x675/0x7d0 [ 977.121711][ T32] ? __pfx_kthread+0x10/0x10 [ 977.121760][ T32] ret_from_fork_asm+0x1a/0x30 [ 977.121817][ T32] [ 977.121833][ T32] Sending NMI from CPU 1 to CPUs 0: [ 977.262080][ C0] NMI backtrace for cpu 0 [ 977.262107][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U I syzkaller #0 PREEMPT(full) [ 977.262147][ C0] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 977.262159][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 977.262175][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 977.262209][ C0] Code: b7 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 35 28 00 fb f4 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 977.262236][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c2 [ 977.262257][ C0] RAX: 00000000008f1c71 RBX: 0000000000000000 RCX: ffffffff8b61e2d9 [ 977.262275][ C0] RDX: 0000000000000000 RSI: ffffffff8daff475 RDI: ffffffff8bf1d540 [ 977.262293][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 977.262310][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 977.262327][ C0] R13: ffffffff8e097a00 R14: ffffffff908358d0 R15: 0000000000000000 [ 977.262345][ C0] FS: 0000000000000000(0000) GS:ffff8881249e7000(0000) knlGS:0000000000000000 [ 977.262370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 977.262388][ C0] CR2: 00007f2275df4d58 CR3: 0000000031928000 CR4: 00000000003526f0 [ 977.262405][ C0] Call Trace: [ 977.262414][ C0] [ 977.262423][ C0] default_idle+0x13/0x20 [ 977.262457][ C0] default_idle_call+0x6c/0xb0 [ 977.262496][ C0] do_idle+0x38d/0x500 [ 977.262530][ C0] ? __pfx_do_idle+0x10/0x10 [ 977.262560][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 977.262613][ C0] cpu_startup_entry+0x4f/0x60 [ 977.262643][ C0] rest_init+0x16b/0x2b0 [ 977.262681][ C0] ? acpi_subsystem_init+0x133/0x180 [ 977.262725][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 977.262756][ C0] start_kernel+0x3f3/0x4e0 [ 977.262803][ C0] x86_64_start_reservations+0x18/0x30 [ 977.262853][ C0] x86_64_start_kernel+0x130/0x190 [ 977.262906][ C0] common_startup_64+0x13e/0x148 [ 977.262944][ C0] [ 977.411062][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 977.411102][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U I syzkaller #0 PREEMPT(full) [ 977.411159][ T32] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 977.411176][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 977.411200][ T32] Call Trace: [ 977.411214][ T32] [ 977.411230][ T32] dump_stack_lvl+0x3d/0x1f0 [ 977.411279][ T32] vpanic+0x640/0x6f0 [ 977.411337][ T32] panic+0xca/0xd0 [ 977.411391][ T32] ? __pfx_panic+0x10/0x10 [ 977.411446][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 977.411496][ T32] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 977.411556][ T32] ? watchdog+0xe48/0x1170 [ 977.411591][ T32] ? watchdog+0xe3b/0x1170 [ 977.411628][ T32] watchdog+0xe59/0x1170 [ 977.411669][ T32] ? rcu_is_watching+0x12/0xc0 [ 977.411711][ T32] ? __pfx_watchdog+0x10/0x10 [ 977.411744][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 977.411790][ T32] ? __kthread_parkme+0x19e/0x250 [ 977.411843][ T32] ? __pfx_watchdog+0x10/0x10 [ 977.411880][ T32] kthread+0x3c2/0x780 [ 977.411945][ T32] ? __pfx_kthread+0x10/0x10 [ 977.412013][ T32] ? rcu_is_watching+0x12/0xc0 [ 977.412054][ T32] ? __pfx_kthread+0x10/0x10 [ 977.412111][ T32] ret_from_fork+0x675/0x7d0 [ 977.412167][ T32] ? __pfx_kthread+0x10/0x10 [ 977.412224][ T32] ret_from_fork_asm+0x1a/0x30 [ 977.412287][ T32] [ 977.604922][ T32] Kernel Offset: disabled [ 977.609278][ T32] Rebooting in 86400 seconds..