last executing test programs: 5m41.209771804s ago: executing program 0 (id=377): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x400, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) (async) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) mlock$auto(0x81, 0xffff) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async) syslog$auto(0x3, 0x0, 0x5) (async) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04\x01\x04\x00\x00\x00\xf1\xff\x00\xb6', 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="97ca09bd689a850edbe36136c853df77fd9b3e", 0x13) sendfile$auto(r2, r2, 0x0, 0x3) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) (async) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) (async) write$auto(0x3, 0x0, 0x5c8) sendfile$auto(r0, 0x3, 0x0, 0x400000000008) 5m41.047378676s ago: executing program 0 (id=379): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0xd41cd146aaf8abae}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r4 = socket(0x2, 0x2, 0x88) setsockopt$auto(r4, 0x0, 0x20, 0x0, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) timer_create$auto(0x0, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{}, {0x2000009}}, 0x0) timer_gettime$auto(0x0, 0x0) r6 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r6, &(0x7f0000000140)="6524c7aac083b05c1173a1174ad8f52418f12ccb3afb0b5d", 0x18) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r8, 0x5423, 0x0) ioctl$auto_TCFLSH2(r8, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 5m38.988542534s ago: executing program 0 (id=389): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) pipe2$auto(0x0, 0x80) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) 5m38.601435261s ago: executing program 0 (id=393): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000380), 0xc2080, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'team_slave_1\x00', 0x0}) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000400)=@bpf_attr_3={0xb8, 0x3, 0x7, 0x927, 0x6, 0x6, 0x8, 0x5, 0xa47, "123f755469e72a2afb1c358fba2361e0", r3, 0x1, r0, 0xffffffff, 0x0, 0x5, 0x2, 0x0, 0x8, 0x3ff, @attach_btf_obj_fd=r1, 0x3, 0x3, 0x2, 0x101, 0x80000001, r2, r1}, 0x5) shmctl$auto_IPC_STAT(0x1ff, 0x2, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x8, 0x4, 0x2}, 0x6, 0x10, 0x9, 0xfff, @inferred=0xffffffffffffffff, @raw=0x16d, 0x4, 0x0, &(0x7f0000000000)="062c2a72c04971631a7836a96257438d90bf9e5326da62d4e7065c324c375d5cbaec48033272221525d06ff7790668aa6e145200d26f14794b7e601db8f1cd672d2b94011f70156148410c7112d510cef7460fb52c35183f5d19ea0a7b4985334576bf53bf8a0fb6c21b68b96c900f873445bad45b7f431044d53c508e5e1c0f999c0a57446ed6a0cacfe7345f894ca09df23fb4cf367f935a8749efc7bd93b9a81110", &(0x7f0000000140)="fa520294b30994ebf2a804a98f11c367d4ec6ea0f1483bc7e9a74e409c11ee69bd33ff55408f75fa5e56b4ae417e57f65b114fff0e6700eeb9d7ceec333009402ff3c5a2eaddbae6840052ca7e8c1f49f9dfba55c693b6d48c98a3e9d7f764d6271be28b820a4ba5cab4c0af2dc0720ba73826a3bd45a142cd5b376aa3c7b7b9b3b1084b1dc56d665e576776d2bdb95dedfc1b851b7d2a8f4c1a73d3f7b36101e90d8c97e923b3b9c06dc4bc0aa0647bbd27b101664069f10df67a08ba0ac48aa1f094cdc0d1cc92a83ee372d3b7445224c714ffe8201388456e"}) r5 = getegid() setfsgid$auto(r5) msgctl$auto_MSG_STAT(0x6, 0xb, &(0x7f0000000300)={{0x6, r4, r5, 0x7a, 0xef, 0xfffffffb, 0x9}, &(0x7f00000000c0)=0x70, &(0x7f00000002c0)=0x7, 0x9, 0x0, 0x9, 0x400, 0xfffffffffffffff8, 0xa27, 0xfffb, 0x7, @raw=0x10001, @raw=0x8}) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dri/card1\x00', 0x400000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 5m38.478015582s ago: executing program 0 (id=394): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x20e6) r1 = socket(0xa, 0x3, 0x3914) socket(0x2b, 0x1, 0x1) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/ht40allow_map\x00', 0xc9400, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0x67, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x0, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x6000, 0x0) mmap$auto(0x0, 0x4000000000001, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000400), 0xa600, 0x0) ioctl$auto_RTC_IRQP_SET(r3, 0x4008700c, &(0x7f0000000440)=0x77b) get_robust_list$auto(0x1, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0x10fbe8, 0x4) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x6, 0x2, 0x4, 0x6e, 0x3, 0x0, 0x4000000006, 0x50b301a, 0x2c, 0x2c, 0x1, 0x4}) epoll_create$auto(0x3e) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r1) epoll_ctl$auto(r2, 0x9, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r5) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000410) socket(0xa, 0x3, 0x2f) setsockopt$auto(0x400000000000003, 0x29, 0x35, 0xffffffffffffffff, 0x0) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) 5m23.182220008s ago: executing program 32 (id=394): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x20e6) r1 = socket(0xa, 0x3, 0x3914) socket(0x2b, 0x1, 0x1) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/ht40allow_map\x00', 0xc9400, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0x67, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x0, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x6000, 0x0) mmap$auto(0x0, 0x4000000000001, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000400), 0xa600, 0x0) ioctl$auto_RTC_IRQP_SET(r3, 0x4008700c, &(0x7f0000000440)=0x77b) get_robust_list$auto(0x1, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0x10fbe8, 0x4) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x6, 0x2, 0x4, 0x6e, 0x3, 0x0, 0x4000000006, 0x50b301a, 0x2c, 0x2c, 0x1, 0x4}) epoll_create$auto(0x3e) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r1) epoll_ctl$auto(r2, 0x9, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r5) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000410) socket(0xa, 0x3, 0x2f) setsockopt$auto(0x400000000000003, 0x29, 0x35, 0xffffffffffffffff, 0x0) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) 3m52.502214252s ago: executing program 33 (id=697): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 2m56.114480015s ago: executing program 34 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x8a0f}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x44881) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)) r5 = open(0x0, 0x1069c1, 0x4b) write$auto(r5, 0x0, 0x100082) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r7 = getsid$auto(0xffffffffffffffff) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x6, 0x0, r7, 0x3, 0x7) getdents$auto(r4, 0x0, 0x5d) (async) getdents$auto(r4, 0x0, 0xa2b0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000) 2m36.018734604s ago: executing program 6 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) listmount$auto(0x0, 0x0, 0xf4240, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r3, 0xc1004111, 0x0) (async) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) (async) pread64$auto(r2, 0x0, 0xe, 0x6) (async) r4 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r4, &(0x7f00000018c0)={0x0, 0x1}, 0x9) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200, 0x0) read$auto(r6, 0x0, 0x40100000001) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0xfffffffffffffffb, 0x4) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/queue/write_cache\x00', 0x6a2443, 0x0) (async) socket(0x15, 0x5, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) r7 = socketpair$auto(0x1, 0x800, 0x0, &(0x7f00000001c0)) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r7) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB='4\t\x00\x00', @ANYRES16=r8, @ANYBLOB="08002bbd7000fddbdf253a00000089009d00f4f042da069c5e7236b4b9ed85902b2b12d170de7772d558e9d601fbb5a307f0b427498c1dedc28420eccf04e2ee3740866f09fa2a89c7967e22dc73161be91181ba30671e212d1cdfd82412c264a0949c605d78f0d53614c26c199e87b6d01f57f2451fbd5c7556817e3814238ef26bee19bf20453789193674fe919e13b75eea3ce92e6e000000b3000600a0548ace2c15f2cd3b05b59da13c7ed4a4d82505b2e214c86f203a9dbf59e6955c45041b95eabb03b90d4e41a29ad5b82972c8296d8cd1213d5b57dfd81d1addec24230a0f9e711c59be02eb4f4813299ffd1d288895339ed7d32b5cf294306a91a97f41bb77878e9c860864e5c1c45ba39f45638ad03bd0aa2763900713cbf89504c2ff65be0b1e35251561aee55d695219716a5f07210ccb4b069b2153d2a98566db77900be168c68a219525c1d20008006900ff070000080042000104000005001801400000001000b0004aa5fb5d8f6a7730595ad5c954040e80b500020099d8b8cdac0ec9f10c94173553d00507898ae968ab3fdee3bc5d447a13543b18433bbf58276e35ce3e67c8ecf612d1802cda8bb796cc4ed4cff474ab869276ebae5c02b04e47425e492909d9221b9bb7321dacabf6b7d468c46d4601d9e844290cc26ff9af7f95f21861c6acb7037170a8c33cda7935fa02706d02e9f9b38e5f558b05ff61eb24f3e547750012c3186a133ca8d5130eab77b84d5d35a2f048091c0c1500e4d1c7497d8c8be854890936db0000004c000300e430fc619c340be36fda0c282a9280771ccefbdcd7a3e2138747a28147f426e4e9b42d0ffea8d778e0f9b70567553c6c082702421d02b59f2b16fa64e5af839be61c98a7ff48224e040001004a00030043573808e2b3f735d560702f708b4b6eba178943ba5087cc6cfac39581573d78f5d0b4a4993848fca54a90aa816774ad20bf2f1cd5e3f1d81e20aa74f241a4554d2d88cf1584e1d9c71c2200009f0003007836d2f9a26e06db19dda0322da91de65663b6703ffe8faaff641d362e97366b85dd092353bc8babfbb3d3ba5b57025e2ffecf2449108ebf0daf2cc68dbbff9f72daed86f7e55ee5316aed8395d32b4959c6fa57a78e296fbee6bc179290b62ae671b195cc0ef8c190c2c4f4dd149a8d0a1c75c75af769a9af33f76638e0299f7b1c066de3c3184da8aa842df8b5adc313c1a73d37eb17ed2b7db600920003006d14a64d22c6b0eb4ba5eeb8c51e0edbc0925925fb874798ddbe0e29f5a1bb8923f79ff24d343a2d10149590147b133f5ac38db4a5732e819edf43182df3e1b190395a3a12d6e68bf9ebe13df52762d23d4e6808777a803e285f67f2308693e6c71eba9295c830c077ddefacf37b6b7d3e5c838bd7b21af8c15d8f7224313b927cfaabff56b71935325b9ef7842d000004000100d40003000289f1a5ea7d814cc1dd074f0e76f0979522bb0d921fa3a490559d05d2b2f1dbd505329ef0061a1787d8ee53d8d578583c6e2e57e2595908e972f78bc43562dffe9441987bcb5260f6ca95d427dcaeaee03b631aa98b982b5b54223c7b55ea4fb35ccac4494debfcbef3c73477dd4ee5de68c5486e9009b92eb2342fd5eb1a62521abe306d664d2619c80ff98c0a05cc459e9daa3f427495286012fac8c29f1324eab83abc45b90dc86beda607455a4bf69650bc4f559ff8866a26df087ae5f56f652081e029c5eec1188b7f6bfa04000100eb0003000d60373eea2695c7a03edc5e7f86f285f211c961a93062309e45379fb4be7fc3061f5ff8da614735541e89e814b9edddefdd58d29f7687c3459d6fb864d7aaa33418320d598e07348eaa7faa323e37005b0ec22b69e80f2f05a9c1873c0b8a076caec4c24b387b3516e5b4e425ca45208c653d2d9203bdc4dce020037ac19ab598ad4e531651197dff0871c99649d8b710a79f4416aeb4725272bcaae37b0a59c42e0834578ffe915767529a7bf3a711447079247ec8e11927d60ffd5a112e48dab5aa80e84c0b806d57901d3fac8e0baf7585b3d4cc28ef26d432e58a7f563f0c999ab5d963aa0004006c005d03f080dcb00c879fd69aa8609b4f7ff0cddef175d181bb0e1ab57821dc4a7e44e9207b46b10ae01d66369d1f05ab123a69bc6bb01b1e2badaa6001fb46c2ca18afaf3dcc9809263d1954d01f63ebb966944156db659f79dbb59a4f27949e8b97ea8ac0655c99a2f49bc7727f40fdbee5e2bb2e5b61dbbd6f6728fff0db4218a86e79148a072c2ead6cf5f08fef2fd27c8d3e119ebe275389388b4c2dd00961a870bd21905d0fcf69fb4a011d800400ca800400b68004babdf994347a1ea1a4d181eedcf7bbf10e136e66b50b0682ec7161e90a619ac539109e90713c12d0f1d851b3ce1c5a7f781e9fac1987132b4a011801e501b230eb65e0f403cad4979962a5ad2ce1ed1d9b0c21660af9e2ce08e37717340035367fa56735537a75cec46e7cf76afc4163f6b9120aa8a188518db2dae6f0b627eb9990d803bb5a21b2bd844f631531c2f766bbde9d6862a599c3c2fa87667ec4215fc4db2095798ed93ce1e92d2015810066fb159a3c336d485fe8b6a360ddc3989d731ce61b8b5cd248628ea55a40d3db805722fffd2c6da37f3a299768ddfe67a03b904d066957d8551015baf235b9784b6188b788c3bc3176c3e76f0770003c4f26ff136b60b56f2e6f97cb7abe71149b221b666c36868a450f075f2dec66bd7dd019354919f9b100dfdbe7c410e2e4f9bcb36ce2aa78fc248fd6081c00003da92a45557ad6aeb4efa8873cf0f15ddb03df73174f2d152df99d0964b18349a670d9b859fdcb08cc5e25a67a9a1addf9cc0dd00716ad4460ec59002b2d598c739867258073dac1e620653f6c890f42f9f74d65e5ebb3952290d55730af1e2471c04e3ce4d7d2e4c3ad43dad17aa7a4f986cc17aedee7f42497dd80321c8526c3459d34698f21b3ce520f1b8f31a79959ff705b7c36341bf5399c97ae4020d0feb4987c953882f39e64c43add85e9cedbd71852cefa9dad6415d9261ef81eb0c3ad0db8dc90de81848a437c54ad806050445e5e421359b9d00fd3c275a59ff783b35a4e70b0d0ea0ef71b8c9f823112abde5dd2c2e19c9399bc30a4ba6fbc655c79985b1b11f173cb445922d4e666b21b875a3594a8482423a5de95c3dec9dfd72f085e418493aea90fe69df4ab8f7a3a521e36dba75ccf62b84a8bf32ead9a292a868fcbe40c05e01356775ba5757d68d8b05ee850468646346f53e3d9935af21212cca0b2bd0000000000b3efe1031fa78a897b05e0669511e36009daeb12"], 0x934}}, 0x440dc) (async) sendmsg$auto_NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r8, @ANYBLOB="000425bd7000ffdbdf25160000000500c20080800000d7000201625a34fbbd9a983aec0dbf7eb00edfa5b19bed2f7293bb4a1d92c980658446e5aac220cc19620e2bd4381339c2c2b953e32ebf53b2075509c046b86e3b60311d1cc634441e176c16001c1b3e1cef0acbe0721087038e0188f8544afcc38ee7b61fdceeb99c9762dfe9f72a06760bfc3be43b6e7f94004b5ce0ca6e88632c666610f7e7b15a86c20b506d3b7d173c4c6a73e39db2c449206a59d95914fdc6c9676b75e1ac44cf038e2c6f24d066c6c6aec1f74649783287ce391d87d03e8b6da70b4d3d274d2a1bc306762f0ade7d26a68d0937964418602d5000158b085dfee46d628f0df79e96c0"], 0xfc}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) 2m34.827462764s ago: executing program 6 (id=1006): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r0, 0x402, 0x8000007fffffdf) close_range$auto(0x0, 0xfffffffffffff000, 0x2) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = gettid() r2 = getpid() r3 = setfsuid$auto(0x0) setuid$auto(r3) ioprio_set$auto(0xffff99af, r3, 0x7) rt_tgsigqueueinfo$auto(r2, r1, 0x1, &(0x7f0000000600)={@siginfo_0_0={0xffffff88, 0x1, 0x40, @_rt={0x0, r3, @sival_int=0x9ae}}}) rt_sigsuspend$auto(&(0x7f0000000380)={0xe}, 0x8) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r4, 0x402, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2m34.826890118s ago: executing program 4 (id=1007): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x55) r2 = socket(0xa, 0x2, 0x0) connect$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x5b) statx$auto(r1, 0x0, 0x2001003, 0xdbe1, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x14, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) 2m33.766118304s ago: executing program 6 (id=1010): mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x7) write$auto(0x1, 0x0, 0x80000000) r0 = socket(0x2, 0x3, 0x4) getsockopt$auto(r0, 0xff, 0x7, 0x0, 0x0) mmap$auto(0x0, 0x2000b, 0xdd, 0x40eb1, 0x401, 0x8000) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/36, 0x24) unshare$auto(0x40000080) r4 = socket(0x12, 0x4, 0x440a) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x5, 0xfffffffffffffffe, 0x10001, 0x1b, r6, 0x8) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r7, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_HT_CAPABILITY={0x24, 0x1f, "d029a13e6b4278b13749666051215ab59096e66f0617c35684ade3fbf1c33c83"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x48}}, 0x24040080) syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r2) capget$auto(&(0x7f0000000140), 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r1, 0x40305824, 0x0) wait4$auto(0x0, &(0x7f0000000280)=0x5, 0x0, &(0x7f00000002c0)={{0x8001, 0x2}, {0x800, 0x9f52}, 0x1000, 0x7fff, 0x3, 0x4f, 0x2, 0x8, 0x2, 0x101, 0x4, 0x0, 0x9, 0xab55, 0x6, 0xa}) r8 = getpid() pidfd_open$auto(r8, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)) 2m32.871228057s ago: executing program 4 (id=1012): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r0, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/info\x00', 0x1b04, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/10, 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/stats\x00', 0xca140, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/scheduler\x00', 0x2c62, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, &(0x7f0000000040)=0xc0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$auto(r6, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, r4, 0x80) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r7, 0x0, 0x3) memfd_create$auto(0x0, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r8) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x1}, 0x8010) socket(0x1a, 0x6, 0x968c) 2m30.796381921s ago: executing program 4 (id=1014): mmap$auto(0x401, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000002000006000700", @ANYRES32, @ANYBLOB="0a00050000000000000000000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) open(&(0x7f0000000000)='X))\x00', 0x44042, 0x190) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x4b67, 0xffffffffffffffff) prctl$auto(0xc, 0x1, 0x4, 0x5, 0x7) socket(0x80000000000000a, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) socket(0x1d, 0x2, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2f212cbd7000fcdbdf2531"], 0x48}}, 0x4000000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.usage_all\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/27, 0x1b) 2m30.745133182s ago: executing program 6 (id=1015): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x80111500, 0x0) r1 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x105, 0x8009, r1, 0x0) r2 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x102, 0x7, r2, 0x0) 2m30.208625137s ago: executing program 6 (id=1017): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x88881, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto(0x3, 0x80045438, 0xfffffffffffff4e0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x5ad2, 0x8) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x41c0, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) read$auto(r0, 0x0, 0x800) write$auto(0x3, 0x0, 0xfffffdef) 2m29.556743778s ago: executing program 6 (id=1019): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0xf5, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/de\x00\x00\x00\x00\x00\x00\x00\x00\xe7W\x00\x00\x00\x00\x00', 0x2, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto(0x3, 0x80081270, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r3, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, 0x0, 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) 2m29.221149329s ago: executing program 4 (id=1020): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0x240040, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x3}, @HSR_A_IF1_AGE={0x8, 0x3, 0x7}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x2}, @HSR_A_IF1_AGE={0x8, 0x3, 0x7}, @HSR_A_IF2_AGE={0x8, 0x4, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x4040090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/locals\x00', 0x40, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socketpair$auto(0x2, 0x5, 0xb, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xfdef, 0xe, &(0x7f0000000100)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x1d) r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy14/hwflags\x00', 0x100, 0x0) mmap$auto(0x6, 0x4005, 0x1, 0x4015, r0, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0) 2m28.6977475s ago: executing program 4 (id=1021): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0xf95, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x1080000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x7}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xffff, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x7, 0x1000000000000006, 0x8000000000000001, 0x7, 0x2, 0x10000000000000d, 0x809, 0x1, 0x400]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) fcntl$auto_F_RDLCK(r3, 0x8, 0x0) mmap$auto(0x0, 0xf, 0xffffffffffffffff, 0x9b52, 0x2, 0x4) unshare$auto(0x40000080) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x204c0, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x450000, 0x1, 0x1}, 0x18) mount_setattr$auto(r5, &(0x7f0000000100)='./file0\x00', 0x36, &(0x7f0000000140)={0x45, 0x6, 0x80000001, @raw=0x305}, 0x80000000) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000280), 0x2804c2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) 2m27.167322092s ago: executing program 4 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES32, @ANYBLOB="0400028008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) mmap$auto(0x0, 0x8000, 0x7fffffff, 0xeb1, r0, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x2aa01, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) read$auto(r2, 0x0, 0x1) 2m19.591101344s ago: executing program 35 (id=1009): umount2$auto(&(0x7f0000000080)='.\x00', 0x3) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 2m13.962623992s ago: executing program 36 (id=1019): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0xf5, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/de\x00\x00\x00\x00\x00\x00\x00\x00\xe7W\x00\x00\x00\x00\x00', 0x2, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto(0x3, 0x80081270, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r3, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, 0x0, 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) 2m11.917112097s ago: executing program 37 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES32, @ANYBLOB="0400028008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) mmap$auto(0x0, 0x8000, 0x7fffffff, 0xeb1, r0, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x2aa01, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) read$auto(r2, 0x0, 0x1) 2m11.704015084s ago: executing program 7 (id=1038): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20080, 0x0) socket(0x22, 0x1, 0x2000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffe, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/209, 0xd1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) read$auto_hsr_node_table_fops_(r1, &(0x7f00000002c0)=""/33, 0x21) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/neigh/veth0_macvtap/anycast_delay\x00', 0xa900, 0x0) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) 2m7.964021577s ago: executing program 7 (id=1056): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0xc0045405, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffdfffe}, 0x3ff) (async) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffdfffe}, 0x3ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x80805, 0x0) io_uring_setup$auto(0x2, 0x0) (async) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(r2, 0x10000000084, 0x64, 0x0, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x1, 0x7d) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r3, 0x10000000084, 0x77, 0x0, 0x8) socket(0x22, 0x3, 0x1) (async) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) 2m6.967457947s ago: executing program 7 (id=1059): read$auto(0xffffffffffffffff, &(0x7f0000000000)='/-+{\x00', 0x8001) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000100)={0x9c8, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x6}, @NL80211_ATTR_WIPHY_NAME={0xe, 0x2, '/dev/vmci\x00'}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MAC_ADDRS={0x68, 0xa6, 0x0, 0x1, [@typed={0x61, 0xa7, 0x0, 0x0, @binary="1aa8da929807ddc2006341f56ed56d04d449dfdf1b1610f819ec1e46cd1d9fe05eaf223f1891013c97ff22ce2a6472a21fd504816d3f43ae049f9c38505c6cce29b9ed2930086fa5f0fc57a7d3c6eb9a181c247190121a4b5a36969bb6"}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@typed={0x5, 0x13, 0x0, 0x0, @str='\x00'}]}, @NL80211_ATTR_FRAME_MATCH={0x84, 0x5b, "659dbd5c5357759ebfd656cad9ace2456b50be1e306a70eab7367cf0883d5f26e10c903859ee2d80fb894b8b479f838b60e920d4e3a8102b7dd647d5e363daec101c2e2824f9f5da6727afd39c76edc139c5b56dd9d752e6aa8fbc02ca2ca557fef3833b6c69d5182f302b149c729b1946b454f4d3290fa714fec516a5b7db28"}, @NL80211_ATTR_FRAME={0x88d, 0x33, "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"}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xd2}]}, 0x9c8}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b80), r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/ram10\x00', 0x515000, 0x0) r4 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000c00)=0x1) ioctl$auto_BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000c40)="9e13a04bacc563961b32e2c8a906a793196c8ee67042ab1bcbb4b1aceb4582f932ab759441d71548255c89ce4ca24f44085839fb82cee7d9e0ce81cf9ffd66d937c02d54febba51c9c2911f98de9a61f040669ee44af99bf9fc12dcce0febb494d34e380b19b8dcf92688b22152e75deb88c51a741acff27e2") finit_module$auto(r3, &(0x7f0000000cc0)='/dev/vmci\x00', 0xd025) madvise$auto(0xe2f9, 0x2000000000, 0x2) getdents64$auto(r3, &(0x7f0000000d00)={0x10001, 0xca, 0xf42, 0xfe, "e665d6cd0766befb714dda6e96e6717ea3e70ad898fcac17cd9a0c987bed4088ba9f557e7bc9025e3e5af4c318d1d170588e6cc7e7c1061d0687d2d6ca2352a4ca821c528cbe9046f9f0cd14b7e20dc73dc2d0e4b81d3e939238e945dc3f8a3635b2df5d8770957d4165fc5404ff72790bd081cec62c00b24043562737ff0bef1d023619f84a0c3ad4ee2a437cb5d142c91bc1b7e3fe873c"}, 0xd312) ioctl$auto_KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000dc0)={0x0, 0xee01, 0xbc, 0x3}) ioctl$auto_EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000e00)={r5, 0x1, 0xc3c, 0x8, 0x7, 0x2e}) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x114, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_NONE={0x9b, 0x0, "c11c1ad0e9d478da5f9d8998cc5bed58d32f820c8a09d73f608ad89ab92b450b586f241f1ba1033ba06b87866b0db67f53a1e59de5bf6b02042135f3a4e18f551cee8e7f57d215e150e52c5f2365e8e57e79a0ad1972af7316645848cc881cb3ee8adeaea924b594b5a84814718816b7649feedf4b9dabedd69c63b94d066226c1627f6fc3e9b7768dfa05c7f60c66ee9bd39979a1ea9c"}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x114}}, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/net/packet\x00', 0x6000, 0x0) r6 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000001080), 0x14000, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(r0, 0x6, &(0x7f00000010c0)='/dev/vmci\x00', &(0x7f0000001100)="72f0cb163791b029d96e49a98c66effcdadf4067fe2914d43419af706ca5091e39c03631b1f91cee88055a2de5e2793ba827f269e58090a8f9a92213b99c761272840088540b357d", 0x1) setsockopt$auto_SO_RCVMARK(r6, 0x4, 0x4b, &(0x7f0000001180)='^#&@\x00', 0x0) mmap$auto(0x3e9, 0x27, 0x4, 0xffffffffffffff90, r2, 0x80000001) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x2102, 0x4) ioctl$auto_SNDCTL_TMR_METRONOME(r4, 0x40045407, &(0x7f0000001200)="4da46e4d9dd1407463541531da0f7525b8e0a26da08d27312ee433cd47a89bbe2f011d96d386b303895bfacb6022c8e89118df9538418e294fc3759075acdede1ecddd22") mount$auto(&(0x7f0000001280)='sit0\x00', &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='\x00', 0x9, &(0x7f0000001340)="b396f69eb4ad4dbdcdc0393924d0527f001aa6fb74e7439812dd3629904d8a3096956c17f89d27f36cb4154c477199ac660a121049b404511dfc") syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001380), r2) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/debug/netdevsim/netdevsim7/ports/1/bpf_tc_non_bound_accept\x00', 0x250000, 0x0) r8 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r8, 0xa, &(0x7f0000001480)="a847b04f7046fc219bcd29bbc34d9d3de3070bc968b68e161ad991d85305e3de284d7811c5d45c7e697d02f0e8a6ba05bbc84398ae07f8b86b89c558f3937d5b7c0968a2c1d8c8a5adb62c3323e8ee4beab223d76a7a8a22dbfd426bcf2d4c4e374ce7c299db155b1924d4e666bc84b3d151af7732962f1a6fce4ab8d94214a70477e1c5516f963da3ea440c68b1bc3ef70d3d5778da42375847a4f96bbef16be95812da1871b9b45fe6bd429b4d2f", 0x9) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000001540)={0x9, r7, 0x80000001, "015ce20f229ec9f758cbe46d04ea31ba"}) mmap$auto(0xf3a, 0x1ff, 0x8, 0x32, r9, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000001580)={0x10000, "c53712414723352bcaa5d5473c3ae1d0e405f59852ed11bacff8dc5c3abe64f2", @raw=0x54}) 2m6.899749762s ago: executing program 7 (id=1060): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop3\x00', 0x40, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x1400, 0x0, 0x20040810}, 0x20000084) shmctl$auto_SHM_STAT(0xf9e3, 0xd, &(0x7f0000000240)={{0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x5085, 0x7fff, 0x5}, 0x3, 0x4, 0x49f, 0x7, @raw=0xfffffffb, @inferred, 0x8, 0x0, &(0x7f0000000080)="17debf86d69d4768f6307a6b4630104b76129b08a194847ea891569c50ca07561a3fe76a67e30b16d7afe95fc33c93e91211709257a7238b710eb5e4f439db8476bf67eda93630ddc6eb5818134cc0c1cd5375c41b90cc733075e9bf4c388ba9b6b586bdaace4cdd5c340351014e09e9f10c21c4d9c1049f1a9c5a185d79a086ee7789544c37e85ed3ed42a5bb7d5e75f772758825852160babe2fa416a86a7e28aa266d", &(0x7f0000000140)="5f7f7f387f2b1cfce3a46d7a61f087619c122b223262a6bfd9ad953816397664f04bab1bea117cdb9388b1d3ae639afb7d05143c08a120bd118af7ecdb5200a5178ef4f6a6c051deb2cb69b435e9c08d8d2709a0295ab25a26079ea359a0d3efc06ff752d00b4705472f853ad5b148fb16c8c09546e6cc24704ed557718bb9d8dd1d70cbd7b1b95344e4a6ffcc0219c3f8f9f3aefcb4b2c6a8fda8c276b1b7761600ec0213bf0228802b20bcfafa036746c9d7b1fc6fc968019232e7d2ed11ab56d196f9066d7dc4eb96f275c31b26a97d2313"}) 2m6.668936778s ago: executing program 7 (id=1061): r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r4 = socket(0x25, 0x5, 0x2) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3a) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r5 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x40047452, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(r2, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xc0000080, 0x2000400, 0xfffffffffffffffd}]}) process_madvise$auto_MADV_SEQUENTIAL(r8, &(0x7f00000006c0)={&(0x7f0000000180)="b7e941ae5afa7e65addf81ff8170573c32ad48bd54b9eeea1afb6920bab7a79a73708ab010f1e2803a025f03d5559d97107b738426bf6d923ff8f56aad2b19bab6445646", 0xffffffffffffff5f}, 0x0, 0x2, 0x102) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r9, 0x5425, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/irq/6/smp_affinity_list\x00', 0x482, 0x0) 2m5.602897783s ago: executing program 7 (id=1062): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x21, 0x0, 0x20) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf25f7ffffffff0900"/30], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0xa, 0x2, 0x3a) (async) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x106100, 0x0) io_uring_setup$auto(0x52, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1m50.310307955s ago: executing program 38 (id=1062): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x21, 0x0, 0x20) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf25f7ffffffff0900"/30], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0xa, 0x2, 0x3a) (async) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x106100, 0x0) io_uring_setup$auto(0x52, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1m40.186597857s ago: executing program 9 (id=1136): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzd\x00', 0x800, 0x0) (async, rerun: 64) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (rerun: 64) ioctl$auto(r1, 0x80085610, r2) (async) mmap$auto(0xe, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) timer_create$auto(0x1, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) (async) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x200008, 0x19) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) write$auto(r5, 0x0, 0x0) pwrite64$auto(r5, &(0x7f0000002500)=']\x00', 0x3, 0xd) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop8/integrity/tag_size\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="b2", 0x1) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) (async) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4b, 0xfffffffe, 0x15, 0x6, 0x0, 0x5, 0x2, 0x11, 0x40000000000000, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x1000000008001]}, 0x0) 1m38.951593172s ago: executing program 9 (id=1138): sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES32=r0], 0x1ac}}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000000), 0x6, 0xa505}, 0x800}, 0x7, 0x8) 1m38.575014064s ago: executing program 9 (id=1140): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000022fc0), r2) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000023280)={0x0, 0x0, &(0x7f0000023240)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x17, 0xe, "1c11b753144f4bf365f6f66676508731aeed1d"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x114, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_MNTR_FLAGS={0xb9, 0x17, "47f62cfe8099b1fabacecefac95aa9193c8273d2f0b7c93669e553c6e2160b35adad848e1e7731aa2e6e856ed88e3069a354f5f0da4e9798c7a785038ac49e04d115af09e78a5eefd8f634dcdb892bd8b8bf10d7ba58301b9d490dd04f71fc5109467829c2f65b4e2307969ba7a0f5d20e40e39361bef121eedce5879e58c99153814527a41c98c59057fed23e248d06620b784dd7d3d25c1d0d210f9cde8cc58a612d638ca31db8a477683df2805d1fe18b188221"}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "36376f23f340da8be37e9a304b90db3375f73b3971bbb624"}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, "ec06c6d64612dc03f44a04ef5d3e"}]}, 0x114}, 0x1, 0x0, 0x0, 0x48080}, 0x4044) 1m37.731898313s ago: executing program 9 (id=1142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) mmap$auto(0xf22, 0x6, 0xfd5, 0x9d, r3, 0x0) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy2/ht40allow_map\x00', 0x20000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0x67, 0x1000, 0x0, 0x5) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), 0xffffffffffffffff) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram14/queue/max_segments\x00', 0x129c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000440)=""/4100, 0x1004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2e, 0x25dfdbfe}, 0x14}}, 0x40044) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/cec/cec17/status\x00', 0x60000, 0x0) read$auto(0x3, 0x0, 0x1f40) 1m36.900071252s ago: executing program 0 (id=1106): socket(0x26, 0x1, 0x300) (async) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) (async) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) (async, rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_clone3(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) setuid$auto(0x800000000008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x4) 1m35.829329733s ago: executing program 9 (id=1148): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4bfa, 0x1) (async) ioctl$auto(r3, 0x4bfa, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf1f0900000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m35.523510238s ago: executing program 9 (id=1149): r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001200)={0xf2f, [{0x529, 0x5}, {0x19f1a9bc, 0x7}, {0x800, 0x5}, {0x9, 0x45053277}, {0x7d, 0xf}, {0x7fffffffffffffff, 0x5}, {0x8, 0x1000}, {0x8, 0xf94}, {0x9, 0x5}, {0x7fff}, {0x80000000, 0x5}, {0x6b, 0x6}, {0x6, 0xfffffffffffffe00}, {0x1}, {0x5, 0xb11}, {0x8, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x5bf8}, {0x6, 0xfff}, {0x100, 0x1000}, {0x10000}, {0x6, 0x1}, {0x9, 0xee}, {0x9, 0x2}, {0xff, 0x6}, {0x7, 0x4}, {0x8, 0xb}, {0x9, 0x6}, {0x9, 0x101}, {0x1, 0x9}, {0x5, 0x2c3}, {0x3, 0xfe}, {0x9, 0x40}, {0x5b, 0x6}, {0xfff, 0x10000}, {0x5, 0x7fffffffffffffff}, {0x40004}, {0x2, 0x12580000}, {0x9}, {0x9, 0x100000001}, {0x2, 0x7}, {0x6, 0x5}, {0x10, 0x4}, {0x9, 0x1}, {0x5, 0x10}, {0x9, 0x200}, {0xb, 0x4d97}, {0xffffffffffffff7f, 0x8000000000000001}, {0x7f, 0x800}, {0x3, 0x10000}, {0x6, 0xffffffffffffffff}, {0x6, 0x2}, {0x5, 0x3}, {}, {0x3, 0x1}, {0x1, 0xbb1}, {0x9, 0x8000}, {0x6302, 0x3}, {0x9, 0x9}, {0xa, 0x401}, {0x2}, {0x4, 0x800002}, {0x0, 0x4}, {0x7ff}, {0x6, 0x7fffffff}, {0x1, 0x9}, {0x67a, 0xffff}, {0xc, 0x8}, {0x80, 0xe0}, {0x3e75, 0x1}, {0xe8, 0x9}, {0x5}, {0x0, 0x1}, {0xfffffffffffffffe, 0x9}, {0x8, 0xf870}, {0x1ae8df8a, 0x5}, {0xf8, 0xd7c}, {0x0, 0x8}, {0x9, 0xffffffffffffffff}, {0x5de8, 0x7ff}, {0x2, 0x800}, {0xfffffffffffffff8, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x7ff}, {0x8b, 0x6e}, {0x8000000000000000, 0x3}, {0x4, 0xf434}, {0x4, 0xa0b}, {0x400000002, 0x5}, {0x4, 0x5}, {0x9, 0x5}, {0xd0c7, 0x9}, {0x7, 0x1}, {0x35d, 0x75}, {0x7, 0x3}, {0x3, 0xfffffffffffffffa}, {0x1, 0x38a}, {0x4, 0x1}, {0x100000001, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x81, 0x821}, {0x2, 0x1}, {0x100000000, 0x5}, {0x8008, 0xfffffffffffffffa}, {0x9, 0xc}, {0x0, 0x2}, {0x2, 0x70829e47}, {0x255, 0x100000001}, {0x7, 0x8}, {0x1315, 0x7}, {0x4, 0x100}, {0x2, 0x24ad}, {0xd, 0x7}, {0x5, 0x131}, {0x1}, {0x7fffffff, 0xaf06}, {0x8, 0x6}, {0x10, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0xc184}, {0x5, 0x8}, {0x101, 0x24}, {0xfab, 0x3}, {0x1, 0x8}, {0xffffffffffffff89, 0x1}, {0x7ff}, {0x3, 0x9}, {0x7fffffff, 0xffffffffffffffff}, {0x1, 0x1944}, {0x7, 0xfffffffffffffff7}, {0x4, 0xa7}, {0x3, 0xd}, {0x4, 0x6}, {0xfff, 0xa81}, {0x3, 0xc0}, {0x1ff, 0x800}, {0x1000, 0x5}, {0xb, 0x8}, {0x4, 0x6}, {0x1000000000002, 0x5}, {0x200000007, 0x6}, {0x8001, 0xb}, {0x7fffffff, 0x953c}, {0x1, 0x2}, {0x4}, {0x1, 0x5}, {0xfffffffffffffff8, 0xbd}, {0x4}, {0x54e5, 0x6000}, {0x100000001, 0x100000001}, {0x4, 0x8}, {0x200, 0x7afe}, {0x5, 0x2}, {0xfffffffffffffff7, 0x3e9}, {0x0, 0x8}, {0x3, 0x9}, {0x80, 0x1000}, {0x802, 0xd}, {0x0, 0x6}, {0x7, 0x10}, {0x80000000000000, 0x5}, {0xf, 0xc}, {0x0, 0x3}, {0x0, 0x9bd}, {0x4, 0xf96a}, {0x203b0000000000, 0x6}, {0x9}, {0x1, 0x8}, {0x1e, 0x2}, {0x6, 0x400}, {0x8, 0x80000001}, {0x3fc0, 0x6}, {0x4}, {0x7fff, 0x7}, {0x30, 0x8399}, {0xffffffffffffffff, 0x2}, {0x1ff, 0x7}, {0x5, 0x4}, {0x4, 0x79}, {0x3, 0x2}, {0x6, 0x7fff}, {0x6, 0x8}, {0x1000, 0xef62}, {0xbd1b, 0x10001}, {0x8, 0x6}, {0xbd8, 0x80000000}, {0x5, 0x80000001}, {0x1, 0x6}, {0xfff, 0x7}, {0x100, 0x3}, {0x7a}, {0x100}, {0x7, 0xffffffffffffffff}, {0x238b, 0x5}, {0x0, 0x2}, {0xd3fe, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x99, 0xfffffffffffffffc}, {0x6, 0xee}, {0x6, 0x100}, {0x78e, 0x5}, {0x1ddf, 0x6}, {0x9, 0x40}, {0x1, 0x2}, {0x8001, 0x91}, {0x8000, 0x1}, {0x9, 0x6}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0xffff}, {0x5}, {0x5aa, 0x8020000000000}, {0x7, 0x8000000000000000}, {0x400005c4a, 0x4}, {0x3, 0x7de}, {0x0, 0x2}, {0x780000000, 0x8}, {0x9, 0xffffffffffffff3f}, {0x3, 0x4}, {0x81, 0x6a04}, {0x2, 0x1c25}, {0xffffffffffffffc0, 0x8}, {0x1, 0x427}, {0x2, 0x1}, {0x2000008, 0xed3}, {0x3, 0xbe28}, {0x8000000000000000, 0xffffffffffffffff}, {0x2, 0x2}, {0x7, 0x7}, {0x80000001, 0x3987}, {0x66f3, 0x101}, {0x5, 0x101}, {0x4, 0x2}, {0xfff, 0x2}, {0x4, 0x8000000000000001}, {0x1}, {0xa, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0xd, 0x2}, {0x1, 0x10001000000000}, {0x0, 0x7fffffffffffffff}, {0x9, 0x6}, {0x200, 0x2f91}, {0xd5c5, 0x81}, {0x8, 0x8000}, {0x800, 0xfffffffffffffffa}, {0x301983e2, 0x5}, {0x3, 0x7}, {0x0, 0x4}], 0x7, "0a54d639d08954"}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x5408, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) fcntl$auto_F_UNLCK(r0, 0xb0, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) personality$auto(0xfffff032) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1m21.859241697s ago: executing program 39 (id=1106): socket(0x26, 0x1, 0x300) (async) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) (async) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) (async, rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_clone3(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) setuid$auto(0x800000000008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x4) 1m20.383602666s ago: executing program 40 (id=1149): r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001200)={0xf2f, [{0x529, 0x5}, {0x19f1a9bc, 0x7}, {0x800, 0x5}, {0x9, 0x45053277}, {0x7d, 0xf}, {0x7fffffffffffffff, 0x5}, {0x8, 0x1000}, {0x8, 0xf94}, {0x9, 0x5}, {0x7fff}, {0x80000000, 0x5}, {0x6b, 0x6}, {0x6, 0xfffffffffffffe00}, {0x1}, {0x5, 0xb11}, {0x8, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x5bf8}, {0x6, 0xfff}, {0x100, 0x1000}, {0x10000}, {0x6, 0x1}, {0x9, 0xee}, {0x9, 0x2}, {0xff, 0x6}, {0x7, 0x4}, {0x8, 0xb}, {0x9, 0x6}, {0x9, 0x101}, {0x1, 0x9}, {0x5, 0x2c3}, {0x3, 0xfe}, {0x9, 0x40}, {0x5b, 0x6}, {0xfff, 0x10000}, {0x5, 0x7fffffffffffffff}, {0x40004}, {0x2, 0x12580000}, {0x9}, {0x9, 0x100000001}, {0x2, 0x7}, {0x6, 0x5}, {0x10, 0x4}, {0x9, 0x1}, {0x5, 0x10}, {0x9, 0x200}, {0xb, 0x4d97}, {0xffffffffffffff7f, 0x8000000000000001}, {0x7f, 0x800}, {0x3, 0x10000}, {0x6, 0xffffffffffffffff}, {0x6, 0x2}, {0x5, 0x3}, {}, {0x3, 0x1}, {0x1, 0xbb1}, {0x9, 0x8000}, {0x6302, 0x3}, {0x9, 0x9}, {0xa, 0x401}, {0x2}, {0x4, 0x800002}, {0x0, 0x4}, {0x7ff}, {0x6, 0x7fffffff}, {0x1, 0x9}, {0x67a, 0xffff}, {0xc, 0x8}, {0x80, 0xe0}, {0x3e75, 0x1}, {0xe8, 0x9}, {0x5}, {0x0, 0x1}, {0xfffffffffffffffe, 0x9}, {0x8, 0xf870}, {0x1ae8df8a, 0x5}, {0xf8, 0xd7c}, {0x0, 0x8}, {0x9, 0xffffffffffffffff}, {0x5de8, 0x7ff}, {0x2, 0x800}, {0xfffffffffffffff8, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x7ff}, {0x8b, 0x6e}, {0x8000000000000000, 0x3}, {0x4, 0xf434}, {0x4, 0xa0b}, {0x400000002, 0x5}, {0x4, 0x5}, {0x9, 0x5}, {0xd0c7, 0x9}, {0x7, 0x1}, {0x35d, 0x75}, {0x7, 0x3}, {0x3, 0xfffffffffffffffa}, {0x1, 0x38a}, {0x4, 0x1}, {0x100000001, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x81, 0x821}, {0x2, 0x1}, {0x100000000, 0x5}, {0x8008, 0xfffffffffffffffa}, {0x9, 0xc}, {0x0, 0x2}, {0x2, 0x70829e47}, {0x255, 0x100000001}, {0x7, 0x8}, {0x1315, 0x7}, {0x4, 0x100}, {0x2, 0x24ad}, {0xd, 0x7}, {0x5, 0x131}, {0x1}, {0x7fffffff, 0xaf06}, {0x8, 0x6}, {0x10, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0xc184}, {0x5, 0x8}, {0x101, 0x24}, {0xfab, 0x3}, {0x1, 0x8}, {0xffffffffffffff89, 0x1}, {0x7ff}, {0x3, 0x9}, {0x7fffffff, 0xffffffffffffffff}, {0x1, 0x1944}, {0x7, 0xfffffffffffffff7}, {0x4, 0xa7}, {0x3, 0xd}, {0x4, 0x6}, {0xfff, 0xa81}, {0x3, 0xc0}, {0x1ff, 0x800}, {0x1000, 0x5}, {0xb, 0x8}, {0x4, 0x6}, {0x1000000000002, 0x5}, {0x200000007, 0x6}, {0x8001, 0xb}, {0x7fffffff, 0x953c}, {0x1, 0x2}, {0x4}, {0x1, 0x5}, {0xfffffffffffffff8, 0xbd}, {0x4}, {0x54e5, 0x6000}, {0x100000001, 0x100000001}, {0x4, 0x8}, {0x200, 0x7afe}, {0x5, 0x2}, {0xfffffffffffffff7, 0x3e9}, {0x0, 0x8}, {0x3, 0x9}, {0x80, 0x1000}, {0x802, 0xd}, {0x0, 0x6}, {0x7, 0x10}, {0x80000000000000, 0x5}, {0xf, 0xc}, {0x0, 0x3}, {0x0, 0x9bd}, {0x4, 0xf96a}, {0x203b0000000000, 0x6}, {0x9}, {0x1, 0x8}, {0x1e, 0x2}, {0x6, 0x400}, {0x8, 0x80000001}, {0x3fc0, 0x6}, {0x4}, {0x7fff, 0x7}, {0x30, 0x8399}, {0xffffffffffffffff, 0x2}, {0x1ff, 0x7}, {0x5, 0x4}, {0x4, 0x79}, {0x3, 0x2}, {0x6, 0x7fff}, {0x6, 0x8}, {0x1000, 0xef62}, {0xbd1b, 0x10001}, {0x8, 0x6}, {0xbd8, 0x80000000}, {0x5, 0x80000001}, {0x1, 0x6}, {0xfff, 0x7}, {0x100, 0x3}, {0x7a}, {0x100}, {0x7, 0xffffffffffffffff}, {0x238b, 0x5}, {0x0, 0x2}, {0xd3fe, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x99, 0xfffffffffffffffc}, {0x6, 0xee}, {0x6, 0x100}, {0x78e, 0x5}, {0x1ddf, 0x6}, {0x9, 0x40}, {0x1, 0x2}, {0x8001, 0x91}, {0x8000, 0x1}, {0x9, 0x6}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0xffff}, {0x5}, {0x5aa, 0x8020000000000}, {0x7, 0x8000000000000000}, {0x400005c4a, 0x4}, {0x3, 0x7de}, {0x0, 0x2}, {0x780000000, 0x8}, {0x9, 0xffffffffffffff3f}, {0x3, 0x4}, {0x81, 0x6a04}, {0x2, 0x1c25}, {0xffffffffffffffc0, 0x8}, {0x1, 0x427}, {0x2, 0x1}, {0x2000008, 0xed3}, {0x3, 0xbe28}, {0x8000000000000000, 0xffffffffffffffff}, {0x2, 0x2}, {0x7, 0x7}, {0x80000001, 0x3987}, {0x66f3, 0x101}, {0x5, 0x101}, {0x4, 0x2}, {0xfff, 0x2}, {0x4, 0x8000000000000001}, {0x1}, {0xa, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0xd, 0x2}, {0x1, 0x10001000000000}, {0x0, 0x7fffffffffffffff}, {0x9, 0x6}, {0x200, 0x2f91}, {0xd5c5, 0x81}, {0x8, 0x8000}, {0x800, 0xfffffffffffffffa}, {0x301983e2, 0x5}, {0x3, 0x7}, {0x0, 0x4}], 0x7, "0a54d639d08954"}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x5408, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) fcntl$auto_F_UNLCK(r0, 0xb0, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) personality$auto(0xfffff032) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1m13.52677654s ago: executing program 8 (id=1201): r0 = pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/rqos/wbt/unknown_cnt\x00', 0x38044, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x4) r3 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000180)={@_si_pad}, 0x4, &(0x7f0000000200)={{0x1, 0x9}, {0x81, 0xfff}, 0x0, 0x4, 0x8, 0x6, 0x2, 0x40, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x2, 0x5, 0x2}) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84050000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00050026000400000008000d000600000008000d002c5000000c03198008001300", @ANYRES32=0x0, @ANYBLOB="0c00d5800800b900", @ANYRES32=r3, @ANYBLOB="ff00028005000300000000002ad22923ba910882bf015d0db26cf9fc3b847327b5a9bec67779282d0054079940824acf6d7e36df4cdbcaa6a1cfbf4388c230816ebd92bf2f2bcb63227dca2956ed9094b975bb6959d3527708f8765f434564aaf7e0ae85b15e15044bfa0cf735b8d17404ffacaaddb740cbeb3d17f645a016d1214d771b46d62556ca372aa31c135f488e2b4492c22aff2365cf8c46a189763d2192b753c9afd9301d587136f55a4cd6e5554ddb1ed4b8f9d6a8cd427134f518c190b3a906e4147208f71211397984d6b7c421d45db712db21e751d388bbdc70b3018a5fbac143b28c03809c855b6908001000", @ANYRES32=r2, @ANYBLOB="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"], 0x584}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004804) munlock$auto(0xffff, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFRASET(r2, 0x1264, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) ioctl$auto_BLKROSET(r2, 0x125d, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x1e, 0x3, 0xa6) signalfd$auto(r1, 0x0, 0x3cb) ioprio_set$auto(0x81b, 0xff, 0xffffffff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @loopback}, 0x7fff) sendmmsg$auto(r4, 0x0, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000340)='\x00', 0x1) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x7) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 1m12.098968863s ago: executing program 8 (id=1202): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x77, 0x5, 0x80000000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyt4\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x1, 0x2, 0x2, 0xb, 0x2e, 0x8000, 0x3}, 0x6f4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)={0x0, 0x80805513, 0x0}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r2 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r2, 0x84, 0x76, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram0\x00', 0x60782, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x301800, 0x0) ioctl$auto_TUNSETCARRIER(r4, 0x400454e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x3b, 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000300)="2d4fe0df45b4352334513e2f44bee6b44f145d95faf05bdce76cf9455b0ca3473ad2f240679a9bb78682cb92fd09c99bb2e188499ccdb45314984bb871fc40d9fa0b7d60922deb897faadc8bd8375256a163da06b6573682742749f47c45efbce088c6ab8f1cdead2bd7fd21fdaf0d3c360ddf02cc03478fc98c3ae4219eb0b6b1b6081c00127c31d491233838622d4b1aa9c43c8417128fe3eb0f4135434e0082f47401a808041349") 1m11.572587387s ago: executing program 8 (id=1204): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) pipe$auto(&(0x7f0000001480)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bdi/43:192/wb_stats\x00', 0xa0000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xe790631ab136965f}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x26, 0x3, 0x1000) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x80007}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setpriority$auto(0x9, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 1m11.253952809s ago: executing program 8 (id=1205): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy16/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x103000, 0x0) r1 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b76, 0x2, 0x8000) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) r2 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x5, 0x80000001) ioctl$auto_FS_IOC_ENABLE_VERITY3(r2, 0x40806685, &(0x7f0000000280)={0x1c0, 0x3, 0x9, 0x6, 0xfffffffffffffffd, 0xa, 0x0, 0x7}) getsockopt$auto_SO_PEEK_OFF(r1, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r6 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000000c0)={0x1, "e6826c22ab89af11056b0001ac097e0a0728d9300000c500"}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @inferred=r2}) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000040)=0x8) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/power/runtime_active_time\x00', 0x1a200, 0x0) ioctl$auto_PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) r8 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) close_range$auto(r0, r8, 0x7) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x22040, 0x0) 1m9.620381643s ago: executing program 8 (id=1206): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0xf95, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x1080000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x7}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xffff, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x7, 0x1000000000000006, 0x8000000000000001, 0x7, 0x2, 0x10000000000000d, 0x809, 0x1, 0x400]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) fcntl$auto_F_RDLCK(r3, 0x8, 0x0) mmap$auto(0x0, 0xf, 0xffffffffffffffff, 0x9b52, 0x2, 0x4) unshare$auto(0x40000080) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x204c0, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x450000, 0x1, 0x1}, 0x18) mount_setattr$auto(r5, &(0x7f0000000100)='./file0\x00', 0x36, &(0x7f0000000140)={0x45, 0x6, 0x80000001, @raw=0x305}, 0x80000000) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000280), 0x2804c2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) 1m8.211865057s ago: executing program 8 (id=1208): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppoe\x00', 0x121040, 0x0) pread64$auto(r0, 0x0, 0x87ff, 0x100005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb5, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x22240, 0x155) r4 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r5 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) setsockopt$auto(r4, 0x11, 0x65, 0x0, 0x8) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f00000000c0)={0x7, @inferred=r6, @raw=0x871, 0x8, 0x7fff, '\x00', {0x9, 0x8, 0x10, 0xee00, 0xffffffffffffffff, 0x6, 0x6, 0x1000, {0x9, 0x5}, {0x401, 0xf06}, {0x10000000000001, 0x3}, 0x4, 0x1000, 0x1, 0xb7, 0x7ff, 0x1, 0x106, 0x4, 0x7a76, 0x8, '\x00', 0x4, 0x72a3bfc8, 0x5, 0xf}}) r8 = setfsuid$auto(0xffffffffffffffff) getpriority$auto_PRIO_USER(0x2, r8) sendmsg$auto_TIPC_NL_BEARER_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x834, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x5f5, 0x8, 0x0, 0x1, [@generic="eb71e6ec1a38a93ef73777410f8663ddda0f864f5be741d0cb1bd6e822c6592bb7e0bf10f0322ea61c3c48f90629efd3ea008bf3c96b954bcdf052754497fd7fd81790ddecbc3af8e6", @typed={0x8, 0x54, 0x0, 0x0, @uid}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x12}, @generic="6f11d74448b2db70dd276390632cfcf5bbbdedefe35205bbca9b623c39e79da72c8083dd657c57b4de07eed9a52774dc721b453675", @nested={0x189, 0x6b, 0x0, 0x1, [@generic="b45cf8f55eb158182abc8d79588debef03ab66183ab050d86650b5a9bd687b4af887067d0c21723cba7535405374cf1817e3422233ac6a786909f7af0139d52bf7fe03828e151eac81dae2fe31c08ff0fcc553e6e567d3f0ed2bb82ab7412b95815c8d2dc1d063345b0e2aee4436f935f025a3f3c779cd21009451f8faeea45e959b76bea12e9dee69aee7f2d699e9", @nested={0x4, 0xa}, @nested={0x4, 0x1d}, @generic="19178138d402cde3792bec545014b2a8bd251e9da40d27612c23bf7b8cb15ef4fa651c6034ee5019dfce59b3211147acefa34d03b9cbe1bd8dbf51194effe108395af51535afcc2aa6f1c037eba21bde687a3c2f1527fcd5888209ff1099bbd3b904aa8bb2cce9fcbbcaa61732794c6140db2cb71296ec68df8ff4784dc4aaf0f13c75cd979a28c54ba6ec3e4cf52f55efc0ea852e2bf43bcfef3db74326f61ab10827abd651f50cfdd15ba6d484b5369430d72cffe71fa36864be3e22353b2a2581538bf321c4f578248aef4aacebfd2e87fe3ceada8b2bdb79d4b42c637311613a3dba78cdaf35654253d32992"]}, @nested={0xd1, 0x93, 0x0, 0x1, [@generic="502e476050d0231672f9e8789d9db0bb53588e28a6438fd49a1407fedee96a928b0a8d55224d5a32f09552dfe4f7d6b168572b8ee55c9e8bf9d3872656c9cbc8c7b9d13942baa147a5e981823d11d58889824b8c7a70fbe3408ccab22ed91e68a39ef8caad017460386d009616c59844f51605f108291681cffa7fc56d99f10aa795a64957fb981aa7f5e8f223a92a56b487ac47981dbdf8aafc16807a29aedb18f11da43161dc30bca433a742c8a753771984fceae899b75f3249ea6aaf2974d0", @typed={0x8, 0x124, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x8b}]}, @generic="b375b275c37956968fe5a28d33f2a77727bc723b60997d33d0861e6e91f158b879bc2a4cc8b7ed33ed3e0194734b84492f05b511c65bed1df3530abcd92d5d1c132dc7d291025b4f63dc215c5b9438ac4173e8efd8e3bdd914d1ed3c288542480aed9d9c3f2772134f0c2c3a46e5baa783ce021f2136850a3b08728e195d9a6b8f4b828ef3bc83ea", @generic="6b1defda5bc4ff3bc45e4a92025fb2036b1927a050eb93749a0ce3ef0631bebf8dcb6a8577c07153d4e6bf575d9c6bec26cf6d05b7d059da9306a113f32a432ae856e4fa8e59982742d6d8e1b6cb16a833d043e3ed0d4e2c48adba7a09ab6a034afe8fafc03eb4239087a97b20e1f05bf6b1831ef7466a285f8f14cced2884508eeca43b670bf18787fd4dfba12209569e70747e722a559691a3043875fd7d8893ceca5f584f9081c390bdcef224f56818154346030e9d9ea61b6ef193674a4fa2d68023450f36d7f228468a0797fbf9de5506904e2dbb9c97caf0d5da7d4633ca6ce42a76f04cb644efb741f70f3af4c5f1a6", @nested={0x182, 0xfa, 0x0, 0x1, [@generic="8d544908e8a36d643725982f6ecf8c9aef09a16a029ec798d28b080a742eb0555a826cf6bdfe4a1a58e6", @typed={0x14, 0xfa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="0e73e1b51dfa6542d525a1edb381a493062728ed3a653238f3e6f895039be7d3a6e3d43fdad78efa7bf502c61abbd1bfc7b855a2bfbb3f466fa16c32682a0b7cae7a443bdebf47edc4c28f918536f19d0b0c1025f06c06c605ff6d5682edb50870c500205a7f2bed4827ad3d292e850967c2e88611d9f27c1bf26385645a62a264ebba375e332955ef4ef4bc09d7bbc1ab9b6c7fdc19ed3a882dd0fd7eb80b9f", @nested={0x4, 0x137}, @generic="a4331a987efcddea2e3511ce681075f0470947004587810fbbea438703bbb1661c156a3ff53a80e8924af0e9f683414eab7687b670b548e11e451ced7de0c5b400ab9ce75980593c6957557e9fb5b0256625aba40deb5945fed512e272a77487e933572f0230649fc30758aef3157b497780e0576572baef991736a30c0e99e5ee2f5c6db2c7c4450b954e874660883ddb2c2493ad77ac005b262b6d"]}]}, @TIPC_NLA_NODE={0x227, 0x6, 0x0, 0x1, [@generic="2f080372d51ba6891fdece18e0e2e5f2dbbc83affad54351438f3ce2501d7f7b2905e92e3747b65cfd68e2a89aee6b64a7f3ca4d72cc75827caac48a02f300862587b879e3dcf3302415c84349a9e86820ff2343d8f9a1", @nested={0x8, 0x130, 0x0, 0x1, [@nested={0x4, 0x8e}]}, @nested={0xb0, 0xab, 0x0, 0x1, [@generic="5779ffe5a8ee1bb37915770539e65e83dff77553ed5c683bc488808e44ce3ffc14907b67121e80618a235f6579e659620b3ca44c61e0d710c1504ca34b1a7046cdb4b854a3d738ffb3f17fc9ff9f36bcb05c2a57978f549b5fd26e50a248b8947f7ee73f19b2e36d7c2e1e4a6c9126790457e43949b453dce00f6f4fee1d7dc442dfe56017d968e93b78a0af7f75475a685abfd99259f16a3952944bd89877085a0bc472d54008cf1f570ef5"]}, @nested={0x6d, 0xbb, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @uid=r8}, @generic="ada133be57e4c53ed97b27a05f4243fd0a10f7a544dd29d788ca8450f2b25f9561bad071613e68abb99b9f9b5e22578c36e60acf9c1869a0fc748b03887dae132ce5efc0082fdd91ea32ac9299ed6b524368aacc5f5ebea97700881bcbfdd6021f"]}, @generic="8014d431c2b099b45fed82814916debfa32daee8f9778c5cd4", @generic="e0217becddc25aba809c8154c47b5c3fd8c4469764d7e8fb8ad313e7", @generic="212c74bf92a1699457a55e6f100ec3ae17a5dded44ffb534a04bbca95bc48db049888a3cf98a5b865d557c57f16aae736f2d50300d439dad64cefd2474336af0126882f5b79b11337b8b3312334197fbe55a95d354ba9099dddd89feac00493731330635145f414d111a38f454a828"]}]}, 0x834}, 0x1, 0x0, 0x0, 0x481}, 0x90) connect$auto(0x3, 0x0, 0x55) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) 52.708729486s ago: executing program 41 (id=1208): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppoe\x00', 0x121040, 0x0) pread64$auto(r0, 0x0, 0x87ff, 0x100005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb5, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x22240, 0x155) r4 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r5 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) setsockopt$auto(r4, 0x11, 0x65, 0x0, 0x8) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f00000000c0)={0x7, @inferred=r6, @raw=0x871, 0x8, 0x7fff, '\x00', {0x9, 0x8, 0x10, 0xee00, 0xffffffffffffffff, 0x6, 0x6, 0x1000, {0x9, 0x5}, {0x401, 0xf06}, {0x10000000000001, 0x3}, 0x4, 0x1000, 0x1, 0xb7, 0x7ff, 0x1, 0x106, 0x4, 0x7a76, 0x8, '\x00', 0x4, 0x72a3bfc8, 0x5, 0xf}}) r8 = setfsuid$auto(0xffffffffffffffff) getpriority$auto_PRIO_USER(0x2, r8) sendmsg$auto_TIPC_NL_BEARER_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x834, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x5f5, 0x8, 0x0, 0x1, [@generic="eb71e6ec1a38a93ef73777410f8663ddda0f864f5be741d0cb1bd6e822c6592bb7e0bf10f0322ea61c3c48f90629efd3ea008bf3c96b954bcdf052754497fd7fd81790ddecbc3af8e6", @typed={0x8, 0x54, 0x0, 0x0, @uid}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x12}, @generic="6f11d74448b2db70dd276390632cfcf5bbbdedefe35205bbca9b623c39e79da72c8083dd657c57b4de07eed9a52774dc721b453675", @nested={0x189, 0x6b, 0x0, 0x1, [@generic="b45cf8f55eb158182abc8d79588debef03ab66183ab050d86650b5a9bd687b4af887067d0c21723cba7535405374cf1817e3422233ac6a786909f7af0139d52bf7fe03828e151eac81dae2fe31c08ff0fcc553e6e567d3f0ed2bb82ab7412b95815c8d2dc1d063345b0e2aee4436f935f025a3f3c779cd21009451f8faeea45e959b76bea12e9dee69aee7f2d699e9", @nested={0x4, 0xa}, @nested={0x4, 0x1d}, @generic="19178138d402cde3792bec545014b2a8bd251e9da40d27612c23bf7b8cb15ef4fa651c6034ee5019dfce59b3211147acefa34d03b9cbe1bd8dbf51194effe108395af51535afcc2aa6f1c037eba21bde687a3c2f1527fcd5888209ff1099bbd3b904aa8bb2cce9fcbbcaa61732794c6140db2cb71296ec68df8ff4784dc4aaf0f13c75cd979a28c54ba6ec3e4cf52f55efc0ea852e2bf43bcfef3db74326f61ab10827abd651f50cfdd15ba6d484b5369430d72cffe71fa36864be3e22353b2a2581538bf321c4f578248aef4aacebfd2e87fe3ceada8b2bdb79d4b42c637311613a3dba78cdaf35654253d32992"]}, @nested={0xd1, 0x93, 0x0, 0x1, [@generic="502e476050d0231672f9e8789d9db0bb53588e28a6438fd49a1407fedee96a928b0a8d55224d5a32f09552dfe4f7d6b168572b8ee55c9e8bf9d3872656c9cbc8c7b9d13942baa147a5e981823d11d58889824b8c7a70fbe3408ccab22ed91e68a39ef8caad017460386d009616c59844f51605f108291681cffa7fc56d99f10aa795a64957fb981aa7f5e8f223a92a56b487ac47981dbdf8aafc16807a29aedb18f11da43161dc30bca433a742c8a753771984fceae899b75f3249ea6aaf2974d0", @typed={0x8, 0x124, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x8b}]}, @generic="b375b275c37956968fe5a28d33f2a77727bc723b60997d33d0861e6e91f158b879bc2a4cc8b7ed33ed3e0194734b84492f05b511c65bed1df3530abcd92d5d1c132dc7d291025b4f63dc215c5b9438ac4173e8efd8e3bdd914d1ed3c288542480aed9d9c3f2772134f0c2c3a46e5baa783ce021f2136850a3b08728e195d9a6b8f4b828ef3bc83ea", @generic="6b1defda5bc4ff3bc45e4a92025fb2036b1927a050eb93749a0ce3ef0631bebf8dcb6a8577c07153d4e6bf575d9c6bec26cf6d05b7d059da9306a113f32a432ae856e4fa8e59982742d6d8e1b6cb16a833d043e3ed0d4e2c48adba7a09ab6a034afe8fafc03eb4239087a97b20e1f05bf6b1831ef7466a285f8f14cced2884508eeca43b670bf18787fd4dfba12209569e70747e722a559691a3043875fd7d8893ceca5f584f9081c390bdcef224f56818154346030e9d9ea61b6ef193674a4fa2d68023450f36d7f228468a0797fbf9de5506904e2dbb9c97caf0d5da7d4633ca6ce42a76f04cb644efb741f70f3af4c5f1a6", @nested={0x182, 0xfa, 0x0, 0x1, [@generic="8d544908e8a36d643725982f6ecf8c9aef09a16a029ec798d28b080a742eb0555a826cf6bdfe4a1a58e6", @typed={0x14, 0xfa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="0e73e1b51dfa6542d525a1edb381a493062728ed3a653238f3e6f895039be7d3a6e3d43fdad78efa7bf502c61abbd1bfc7b855a2bfbb3f466fa16c32682a0b7cae7a443bdebf47edc4c28f918536f19d0b0c1025f06c06c605ff6d5682edb50870c500205a7f2bed4827ad3d292e850967c2e88611d9f27c1bf26385645a62a264ebba375e332955ef4ef4bc09d7bbc1ab9b6c7fdc19ed3a882dd0fd7eb80b9f", @nested={0x4, 0x137}, @generic="a4331a987efcddea2e3511ce681075f0470947004587810fbbea438703bbb1661c156a3ff53a80e8924af0e9f683414eab7687b670b548e11e451ced7de0c5b400ab9ce75980593c6957557e9fb5b0256625aba40deb5945fed512e272a77487e933572f0230649fc30758aef3157b497780e0576572baef991736a30c0e99e5ee2f5c6db2c7c4450b954e874660883ddb2c2493ad77ac005b262b6d"]}]}, @TIPC_NLA_NODE={0x227, 0x6, 0x0, 0x1, [@generic="2f080372d51ba6891fdece18e0e2e5f2dbbc83affad54351438f3ce2501d7f7b2905e92e3747b65cfd68e2a89aee6b64a7f3ca4d72cc75827caac48a02f300862587b879e3dcf3302415c84349a9e86820ff2343d8f9a1", @nested={0x8, 0x130, 0x0, 0x1, [@nested={0x4, 0x8e}]}, @nested={0xb0, 0xab, 0x0, 0x1, [@generic="5779ffe5a8ee1bb37915770539e65e83dff77553ed5c683bc488808e44ce3ffc14907b67121e80618a235f6579e659620b3ca44c61e0d710c1504ca34b1a7046cdb4b854a3d738ffb3f17fc9ff9f36bcb05c2a57978f549b5fd26e50a248b8947f7ee73f19b2e36d7c2e1e4a6c9126790457e43949b453dce00f6f4fee1d7dc442dfe56017d968e93b78a0af7f75475a685abfd99259f16a3952944bd89877085a0bc472d54008cf1f570ef5"]}, @nested={0x6d, 0xbb, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @uid=r8}, @generic="ada133be57e4c53ed97b27a05f4243fd0a10f7a544dd29d788ca8450f2b25f9561bad071613e68abb99b9f9b5e22578c36e60acf9c1869a0fc748b03887dae132ce5efc0082fdd91ea32ac9299ed6b524368aacc5f5ebea97700881bcbfdd6021f"]}, @generic="8014d431c2b099b45fed82814916debfa32daee8f9778c5cd4", @generic="e0217becddc25aba809c8154c47b5c3fd8c4469764d7e8fb8ad313e7", @generic="212c74bf92a1699457a55e6f100ec3ae17a5dded44ffb534a04bbca95bc48db049888a3cf98a5b865d557c57f16aae736f2d50300d439dad64cefd2474336af0126882f5b79b11337b8b3312334197fbe55a95d354ba9099dddd89feac00493731330635145f414d111a38f454a828"]}]}, 0x834}, 0x1, 0x0, 0x0, 0x481}, 0x90) connect$auto(0x3, 0x0, 0x55) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) 9.646952378s ago: executing program 1 (id=1391): r0 = pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/rqos/wbt/unknown_cnt\x00', 0x38044, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x4) r3 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000180)={@_si_pad}, 0x4, &(0x7f0000000200)={{0x1, 0x9}, {0x81, 0xfff}, 0x0, 0x4, 0x8, 0x6, 0x2, 0x40, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x2, 0x5, 0x2}) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84050000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf250c0000002b022e80250afb3bb275119169a6d955f571a7bc86a1b49597849d6e2c01a95e1210c6af7e32909fe6976fd2ef7db1870225ea54064ceff238e0f35052f35cc6ba9828b860b0ea9314d738c390a043867e56524e05a6457184e9126a843d505dd9fd2a9e69536c1b0a23d496709c80deeb97b5de753eaef983ad3b120804009700b800b6807da51e9ff539d1ed627ebb209c10d33cf8bb0a008972bc2750e0c59ec6ebb4334f5f5b65060640878de62727680f4bd5d32685e844ba20043e48560caa0c004d00fd34000000000000040048800800d700000000004ff2d6ff9fcef2b3fc73e72d920ff0e22eb1393f05c5b18053fcaae2503fe91d34bccfaaced9701b986e1000120fca089fd9e66b3c544f8a69a927890f67a1b12f2bf1f5ab7ad1f0ec4a190400468004001d80040018800800b500fffffffffe64c38a2345e3be8c3bb69f092640f8ae3ee58d1dc6c6d9fd783e93582fec0af30e8e268d9674ac416a241d301bac4df034fbed3a44a63264344b28b8e49dced460bd30db778d39a9654a5fc3928aa775a24b9ce2fe52bea659d5fd662f99c78414d41be6b6099da1340103ce75747e75bd53e141da2ec3234391081302ac0cc51c22e0b4f7f66a04be6a92b09a8acf5ca17062fe2e74439a70360b797cc4eafe5af55319d7ba12ef9a6ca80eebe54eb48ae81546c5f4d072b87d0c9bf2ad4cc8fcfc54d461336f2d2945fd0cc40c93560008e2884207e8a3e86136c43ea27b554aa32eef57fa35302908005e00", @ANYRES32, @ANYBLOB="00050026000400000008000d000600000008000d002c5000000c03198008001300", @ANYRES32=0x0, @ANYBLOB="0c00d5800800b900", @ANYRES32=r3, @ANYBLOB="ff00028005000300000000002ad22923ba910882bf015d0db26cf9fc3b847327b5a9bec67779282d0054079940824acf6d7e36df4cdbcaa6a1cfbf4388c230816ebd92bf2f2bcb63227dca2956ed9094b975bb6959d3527708f8765f434564aaf7e0ae85b15e15044bfa0cf735b8d17404ffacaaddb740cbeb3d17f645a016d1214d771b46d62556ca372aa31c135f488e2b4492c22aff2365cf8c46a189763d2192b753c9afd9301d587136f55a4cd6e5554ddb1ed4b8f9d6a8cd427134f518c190b3a906e4147208f71211397984d6b7c421d45db712db21e751d388bbdc70b3018a5fbac143b28c03809c855b6908001000", @ANYRES32=r2, @ANYBLOB="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"], 0x584}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004804) munlock$auto(0xffff, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFRASET(r2, 0x1264, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) ioctl$auto_BLKROSET(r2, 0x125d, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x1e, 0x3, 0xa6) signalfd$auto(r1, 0x0, 0x3cb) ioprio_set$auto(0x81b, 0xff, 0xffffffff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @loopback}, 0x7fff) sendmmsg$auto(r4, 0x0, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000340)='\x00', 0x1) mlockall$auto(0x7) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 8.685101953s ago: executing program 1 (id=1393): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lo/statistics/tx_errors\x00', 0x3091c0, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci8/force_wakeup\x00', 0x20000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='-7', 0x2) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = socket(0x10, 0x4, 0xffffffc0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000002c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0xc000) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(r0, &(0x7f00000002c0)=' R(Z\x1e\xe5\xec\xd3f\n\xa1\x80e>\x99\x96\xcc\xfe\x95\x9c\xe5\x96\x16\x19\x15Z\x90\xa6\x03>\x98\n\xc3\xb1\xee\xdc\xabh\xa9v2>l`\x0e\x89:\x11\xa3S2)Oy\xe2&\f`\xf0q\t\xc3\xbe\x8f\xc6b\xcc\xc8:\x9fDt\x89\x17$d\xbc\x9a\xbe\x12\xbbj>\xe7x\xd0\xd59-\xd4\xfe\xf5\xc7(B\xc1\x8a\x13z\xb9q\xb1d\xed\xe7\xcb_z\xb9\xf9VA\xa4\x9e_\x83\xb1; {\xa8k\xd8\x12\x02\xc5+\xb3L\xb9+\xb9\xbc\x1b \xfc\x13U\xa7\xe4\xbff\xd0\x85f\xad\x8a\xe3\xbd\xde\xc7\x0e\xd8\'\x93\x91,~\xcb\xbb\'\xc3\xcf\x946\xb2D\xeb/Y\xb6\xc6i\xbbz9O8\x87\x02\x86rX\xcd\xd5\xbc\x00\x00\x00\x00\xdf\x04;t\x87c\xeb`\xdd\a \xd8\x1b\xba\xaa\xf3\xe1\x9dC\xb1gR\xd9\xe2\xde\xa8\x03&V\x1f~\xf8\x90\xca\x16\x10\x85\x04\x0e\x8e\xd1\x87\x99\xa3\x9b\xb2\xda\\R\a\\\x05Q\xa1\xe92)\xdf\xc2\x95\x97_Pw\xb9\xc3~\xeb\xb2x\xb6\xdf\v\xe3\xb6\xc1\x98\xaf\x0f\xc68\xc2\xda,h\xe2|\x1dLZ%\x85\xc9\xeb5\b\xc0\xe7\'\x01', 0x100000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0xffffffff) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/geneve0/accept_source_route\x00', 0x40a203, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) r5 = syz_clone(0x0, 0x0, 0xffffffffffffff10, 0x0, 0x0, 0x0) ptrace$auto(0x20000000000008b, r5, 0x4, 0x100) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r5, 0x4, 0x8) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r5, 0x2, 0x20a) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r6, 0x0, 0x8, 0xffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x0, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) madvise$auto(0xffdffffffffffffc, 0x200006, 0x0) setreuid$auto(0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket(0xa, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.460059614s ago: executing program 1 (id=1399): prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x4, 0x40, 0x6, 0x1) (async) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x100, 0x6, 0xffffffff, 0x5) (async) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0x1, 0x4, 0x5) (async) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x9b, 0x40a, 0x10001, 0x5) (async) r0 = syz_clone(0x34000080, &(0x7f0000000000)="571d88562d273eab5f20a6f2172bdb215a5975d9bdf55757d01778a900ed187737583bb8bb4f3fe3d45f9d76c1b63cbbc564652fcc", 0x35, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="691d67b3c837b2653fbd236b6f7b5b1fe33169f1efb6383d9694ea9c5f809a04b2a85e80f8acc0d42c6eaa835f7ade7e78736e39d9d15100d057297d84ae60cf537e2e440ab5d8c7dae365") rt_sigqueueinfo$auto(r0, 0x1ff, &(0x7f00000001c0)={@siginfo_0_0={0xfffffff7, 0x3, 0x0, @_sigfault={&(0x7f0000000140)="df483ab9449575b7bc6b51952ca6c5586e818d1a8321e6391a3eaaadf8f0f1c46ab0f3c7a2e89f4c74fc0b01fbca45b1cfd90adc940be85aaffeb190e5a950fac7f1e78cd80155141f", @_addr_pkey={"d0dc5c8b30a5ab33", 0x9}}}}) (async, rerun: 32) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x800, 0x1000, 0x8, 0xb4) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.9/usbmon/usbmon28/power/control\x00', 0x220080, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000280)={r1}) sendfile$auto(r1, r2, &(0x7f00000002c0)=0xfffffffffffffffd, 0x100000001) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy8/wep_iv\x00', 0x141140, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0xc03, 0x0) (async) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x0, 0x6, 0x10001, 0x8000000000000001) r5 = fsopen$auto(&(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x586) ioctl$auto_TIOCGICOUNT2(r5, 0x545d, &(0x7f00000003c0)="72f9a16a302b2578863567d255fbb7d0469afdedfbd9794b3e1ab9820804d6a89b5fcf1542b842af6e1b9d21b9d9d38fb415d2664e5c8372e753df249fa2a230df03d8408d0cffa303ce1e4128094fdebe33e8178557a668f60187ca8eaac82062fe1c7d8d350eebac2b355549611ab6e8a0183c375c28acaf81450de1d53273a778c7d2dd045ef2302bc0505275cef7f2968a45992b7f7e6ac2dfa26c060b8c9ae0c26bee7c7ce659cb730d206bed7b6f6b4f4d7c2a681ccc50a36ccc9d402f590a9a95492cbb5bd159ff255a399878ba45ee97b02795") (async) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0xb30, 0x0, 0x200) (async, rerun: 32) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000004c0), 0x214302, 0x0) (rerun: 32) setsockopt$auto(r6, 0x3, 0x65d8, &(0x7f0000000500)='/sys/kernel/debug/ieee80211/phy8/wep_iv\x00', 0x2) r7 = socket(0x1e, 0x4, 0x7) r8 = fcntl$auto(r7, 0x2, r0) write$auto_tty_fops_tty_io(r8, &(0x7f0000000540)="ec48ddbd12b3b7dfc6bb3054608edcddc628f51085a8b1c7c506ca0ff70c6f519fbfde74cd1df595d516c2ea9ce282e82b01b68b1551f63b853125375e7022d8cc4fd9bd04c1a56695d6bc79d05b21f5b6b02316f589ef6029ddf1f2cb4cd77bafa5bc539302c8ec8de533c2f2ba8584ae1bfd22f80f61db3ac3f0837142fe34653f2a38a7076844a77176cf99f8efe6bdb9ed0414060bc1b6147788ad552c3cc56b12d2ecbcc551f2ba01b12c298e273a09ac256620220964f7ef8afb3632c564c7de6d45d1b581dfec765b5c1f9508f05edfc9e86af5", 0xd7) (async) io_uring_setup$auto(0x7, &(0x7f0000000640)={0x2800, 0x9, 0x5, 0x2, 0x0, 0x1000, r5, [0x6, 0x4, 0x71], {0x0, 0x1, 0x4, 0x3, 0x1, 0x1, 0x6, 0x8, 0x2}, {0x200, 0x10000, 0x7, 0x9, 0x0, 0x200, 0x3, 0x320, 0x5}}) (async) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0x7, 0x3, 0x9) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x7fffffffffffffff, 0x5, 0xfffffffffffffffc, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/platform/drivers/vimc/bind\x00', 0x105800, 0x0) (async) getsockopt$auto_SO_PREFER_BUSY_POLL(r3, 0x4, 0x45, &(0x7f0000000700)='/sys/kernel/debug/ieee80211/phy8/wep_iv\x00', &(0x7f0000000740)=0x80000001) (async) gettid() (async) gettid() (async) io_uring_setup$auto(0x0, &(0x7f0000000780)={0x7, 0x1f, 0x9e35, 0x100, 0x1, 0x6, r4, [0x74, 0x3, 0x6], {0x400, 0x9, 0xffff, 0x0, 0x401, 0x3, 0x4, 0x4, 0xd797}, {0xfffffffa, 0x5, 0x4, 0xc1, 0x81, 0xfc67, 0x2, 0x2, 0xffffffffffff8001}}) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, &(0x7f0000000800)=0x5f8c) 7.346608267s ago: executing program 2 (id=1401): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) unshare$auto(0x6d) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r3, 0x0, 0x2) readv$auto(r3, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(r3, 0x54, 0xa, &(0x7f0000000040)='-@]\x00', &(0x7f0000000080)=0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0) read$auto(r4, 0x0, 0x4000000081) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 6.755500638s ago: executing program 1 (id=1403): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000002c0)={0x7fe3, 0x6, "b908674cfda2f7f351c66f681b0cf4a6f675fcee96065fdca6f219ea386de55097e14dbb38e0462dd9d44d7c6c55e2a5937efe361800", "3b6e33d493a9c79b3387938d612ceab5a4a20e605cd0842aa149397ff8063b45d44f8ce95fa39df1e5e1fc5e51f00fa2dfcc38c9b1ef6596b9e746f5e48ac07048156ea6be1e1ca5d281c7bb11333d0f", 0x397, 0x3, "d3bc655e384df871894a5771758ff164f2cd8098ac193333046911421bc3f1a0cf5d0300000000000000a9001fa7efb0600cc93b5b84a000"}) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r2, &(0x7f0000000100)='/surit\x8b\xafR\xf2y/integrity?iqa/policy\x00\xa2\xf4\x92_\xe8\xaeD\xca/ \xe5\xed`\xa4\xb5b\xff\x8c\xcf8\x00\xd5s\xb36\"\'\xb0\x84k\x98\xd7\xca\x06O\xd8Y\x15{W\f=XM\xb7\xf4\xca\xdf\x8fe\xe2\x91>`D{\x9e\xfe\x92\x9f|#5P\x8b\xdd\xd2/\b\xb5g\x18\xed\xaa \x9fs\xe0\x04\x84\x04\x02\x89\x84%d\xc1@\x91W\xf8\xf65\xa8\x1d\xde\alUZ\xab\x17\xba\xf8\x02\x12\x94\xdc\xcb\xc3\x06\x82\xc8G4>J\x83\xd3^\x8d', 0x2000000000c5) read$auto(0x3, 0x0, 0x80) r3 = mq_open$auto(&(0x7f00000001c0)='@\x00', 0x8, 0xff00, &(0x7f0000000200)={0x5, 0x61bb, 0x9, 0x55f}) ioctl$auto_PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000240)=0x78) r4 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x540a, 0x0) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r4, 0xc1004110, &(0x7f0000000040)={0x3cdc80, [0x4, 0x6, 0xc31], [{0x2, 0x10000}, {0x4, 0x70, 0x0, 0x1, 0x1, 0x1}, {0xcf, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x836e, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x4db, 0x100, 0x1}, {0x3, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xffffff31, 0x1, 0x0, 0x1}, {0x3, 0x100, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xff, 0x80000000}], 0x1, 0x7, 0x4, 0x4, 0x8, 0x94bf, 0x0, "c95ef840fa5396cd6ac429fd111a286a242d1edd7a644d0744b0a99ba98672339058e9f7540a38055c83f68b614e48d7aae998f208715a9b7742adae19071535"}) write$auto(r0, 0x0, 0x6) setsockopt$auto(0x3, 0x1, 0x34, 0x0, 0x4) 5.651160051s ago: executing program 3 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setreuid$auto(0x3, 0x7) (async) setregid$auto(0x5, 0x6) syz_clone(0x20041091, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) 5.575699138s ago: executing program 1 (id=1405): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r1, &(0x7f0000000080)=""/228, 0xe4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="b2", 0x1) 5.433684188s ago: executing program 5 (id=1406): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x77, 0x5, 0x80000000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyt4\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x1, 0x2, 0x2, 0xb, 0x2e, 0x8000, 0x3}, 0x6f4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)={0x0, 0x80805513, 0x0}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r2 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r2, 0x84, 0x76, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram0\x00', 0x60782, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x301800, 0x0) ioctl$auto_TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000080)=0x9d4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x3b, 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000300)="2d4fe0df45b4352334513e2f44bee6b44f145d95faf05bdce76cf9455b0ca3473ad2f240679a9bb78682cb92fd09c99bb2e188499ccdb45314984bb871fc40d9fa0b7d60922deb897faadc8bd8375256a163da06b6573682742749f47c45efbce088c6ab8f1cdead2bd7fd21fdaf0d3c360ddf02cc03478fc98c3ae4219eb0b6b1b6081c00127c31d491233838622d4b1aa9c43c") 5.428540999s ago: executing program 2 (id=1407): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000002c0)={0x7fe3, 0x6, "b908674cfda2f7f351c66f681b0cf4a6f675fcee96065fdca6f219ea386de55097e14dbb38e0462dd9d44d7c6c55e2a5937efe361800", "3b6e33d493a9c79b3387938d612ceab5a4a20e605cd0842aa149397ff8063b45d44f8ce95fa39df1e5e1fc5e51f00fa2dfcc38c9b1ef6596b9e746f5e48ac07048156ea6be1e1ca5d281c7bb11333d0f", 0x397, 0x3, "d3bc655e384df871894a5771758ff164f2cd8098ac193333046911421bc3f1a0cf5d0300000000000000a9001fa7efb0600cc93b5b84a000"}) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r1, &(0x7f0000000100)='/surit\x8b\xafR\xf2y/integrity?iqa/policy\x00\xa2\xf4\x92_\xe8\xaeD\xca/ \xe5\xed`\xa4\xb5b\xff\x8c\xcf8\x00\xd5s\xb36\"\'\xb0\x84k\x98\xd7\xca\x06O\xd8Y\x15{W\f=XM\xb7\xf4\xca\xdf\x8fe\xe2\x91>`D{\x9e\xfe\x92\x9f|#5P\x8b\xdd\xd2/\b\xb5g\x18\xed\xaa \x9fs\xe0\x04\x84\x04\x02\x89\x84%d\xc1@\x91W\xf8\xf65\xa8\x1d\xde\alUZ\xab\x17\xba\xf8\x02\x12\x94\xdc\xcb\xc3\x06\x82\xc8G4>J\x83\xd3^\x8d', 0x2000000000c5) read$auto(0x3, 0x0, 0x80) r2 = mq_open$auto(&(0x7f00000001c0)='@\x00', 0x8, 0xff00, &(0x7f0000000200)={0x5, 0x61bb, 0x9, 0x55f}) ioctl$auto_PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000240)=0x78) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x540a, 0x0) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r3, 0xc1004110, &(0x7f0000000040)={0x3cdc80, [0x4, 0x6, 0xc31], [{0x2, 0x10000}, {0x4, 0x70, 0x0, 0x1, 0x1, 0x1}, {0xcf, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x836e, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x4db, 0x100, 0x1}, {0x3, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xffffff31, 0x1, 0x0, 0x1}, {0x3, 0x100, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xff, 0x80000000}], 0x1, 0x7, 0x4, 0x4, 0x8, 0x94bf, 0x0, "c95ef840fa5396cd6ac429fd111a286a242d1edd7a644d0744b0a99ba98672339058e9f7540a38055c83f68b614e48d7aae998f208715a9b7742adae19071535"}) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$auto(0x3, 0x1, 0x34, 0x0, 0x4) 4.730523389s ago: executing program 5 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mlock$auto(0xfbe8, 0x4) (async) mlock$auto(0x1a81, 0x2) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) (async) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050029bd7000fcdbdf250300000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) 4.587488992s ago: executing program 3 (id=1409): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop3\x00', 0x40, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x1414, &(0x7f0000000040)={&(0x7f0000000280)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80005}]}, 0x24}, 0x1, 0x1400, 0x0, 0x20040810}, 0x20000084) shmctl$auto_SHM_STAT(0xf9e3, 0xd, &(0x7f0000000240)={{0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x5085, 0x7fff, 0x5}, 0x3, 0x4, 0x49f, 0x7, @raw=0xfffffffb, @inferred, 0x8, 0x0, &(0x7f0000000080)="17debf86d69d4768f6307a6b4630104b76129b08a194847ea891569c50ca07561a3fe76a67e30b16d7afe95fc33c93e91211709257a7238b710eb5e4f439db8476bf67eda93630ddc6eb5818134cc0c1cd5375c41b90cc733075e9bf4c388ba9b6b586bdaace4cdd5c340351014e09e9f10c21c4d9c1049f1a9c5a185d79", &(0x7f0000000140)="5f7f7f387f2b1cfce3a46d7a61f087619c122b223262a6bfd9ad953816397664f04bab1bea117cdb9388b1d3ae639afb7d05143c08a120bd118af7ecdb5200a5178ef4f6a6c051deb2cb69b435e9c08d8d2709a0295ab25a26079ea359a0d3efc06ff752d00b4705472f853ad5b148fb16c8c09546e6cc24704ed557718bb9d8dd1d70cbd7b1b95344e4a6ffcc0219c3f8f9f3aefcb4b2c6a8fda8c276b1b7761600ec0213bf0228802b20bcfafa036746c9d7b1fc6fc968019232e7d2ed11ab56d196f9066d7dc4eb96f275c31b26a97d2313"}) 4.313275147s ago: executing program 2 (id=1410): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/ignore_ce\x00', 0xa0202, 0x0) sendfile$auto(r1, r0, 0x0, 0x2) read$auto(r1, &(0x7f0000000140)='ovs_p\x04\x00\x00\x00\x00\x00', 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0xffffff82, 0x7, 0x0, 0x0, 0x3) select$auto(0x3, &(0x7f0000000040)={[0x4, 0x2, 0x34, 0x3, 0x9, 0xfffffffffffffffe, 0x7, 0x8, 0x9, 0x0, 0xa044, 0x2, 0x5, 0x213, 0x5, 0xffffffffffffffff]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700000000000000df25020000002c00018028003c80ceea994b8e7587d1654723f5b3cc330b4212ef00045d1d55fec5b15800"/60, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008801}, 0x20004855) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004811}, 0x800) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) ioctl$auto(r1, 0x4b67, r2) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x80091, 0x0) ioctl$auto(0xffffffffffffffff, 0xe, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x56cc6a5874233663}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYRES64=r4, @ANYRESHEX=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20040080) read$auto(r3, 0x0, 0x4) write$auto(0x3, 0x0, 0xfdef) unshare$auto(0x40000080) unlink$auto(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') ioctl$auto(0x3, 0x80045439, 0x10000000000402) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x100) mmap$auto(0x6fb2, 0x20004, 0xdf, 0xeb1, r1, 0xff) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x3, 0x1) 4.293959622s ago: executing program 3 (id=1411): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/id\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x200000000003, 0x2f4a3a23) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdf3) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x3a) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) 4.047683152s ago: executing program 5 (id=1412): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x76e9, 0x1, 0x0, 0x4, 0x10000) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(r0, 0x0, 0x250b360b) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000240)={'vlan0\x00', 0x0}) (async, rerun: 64) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (rerun: 64) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) (async) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket(0x2, 0x801, 0x100) (async, rerun: 64) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) (async) read$auto(r0, 0x0, 0x20) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000003c0001801400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020069705f7674693000000000000000000008000300fbffffff5800018008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f766c616e00000000000008000300010000800800030008000000140002006c6f0000000000000000000000000000140002006d6163767461703000000000000000002000018008000300198400001400020069703667726574617030000000000000800001801400020064756d6d79300000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="14000200636169663000000000000000000000001400020073797a6b616c6c65723100000000000014000200697036746e6c300000000000000000000800030002020000140002006772657461703000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="63284f9469349877af3825adeb3992a16fb1a62bdf3675b6cca558ce4841f49361109c269ccaa79fb99b425aa3d0667ac81f3d229469ac42f698acd5d023af76058a27b83379b7fb091c6131ec231056777257f6f920853e182c4c6cce9a2f56c51c4bd00452de97bfe1e98a0ac00a73c95284ae070b16861c48288dce1d845671fe9ab41028f1430b3d0d4ca4840bd63a5bccd146ef47da7ad5720802"], 0x148}}, 0x4000000) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.859038207s ago: executing program 3 (id=1413): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000002c0)={0x7fe3, 0x6, "b908674cfda2f7f351c66f681b0cf4a6f675fcee96065fdca6f219ea386de55097e14dbb38e0462dd9d44d7c6c55e2a5937efe361800", "3b6e33d493a9c79b3387938d612ceab5a4a20e605cd0842aa149397ff8063b45d44f8ce95fa39df1e5e1fc5e51f00fa2dfcc38c9b1ef6596b9e746f5e48ac07048156ea6be1e1ca5d281c7bb11333d0f", 0x397, 0x3, "d3bc655e384df871894a5771758ff164f2cd8098ac193333046911421bc3f1a0cf5d0300000000000000a9001fa7efb0600cc93b5b84a000"}) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r2, &(0x7f0000000100)='/surit\x8b\xafR\xf2y/integrity?iqa/policy\x00\xa2\xf4\x92_\xe8\xaeD\xca/ \xe5\xed`\xa4\xb5b\xff\x8c\xcf8\x00\xd5s\xb36\"\'\xb0\x84k\x98\xd7\xca\x06O\xd8Y\x15{W\f=XM\xb7\xf4\xca\xdf\x8fe\xe2\x91>`D{\x9e\xfe\x92\x9f|#5P\x8b\xdd\xd2/\b\xb5g\x18\xed\xaa \x9fs\xe0\x04\x84\x04\x02\x89\x84%d\xc1@\x91W\xf8\xf65\xa8\x1d\xde\alUZ\xab\x17\xba\xf8\x02\x12\x94\xdc\xcb\xc3\x06\x82\xc8G4>J\x83\xd3^\x8d', 0x2000000000c5) read$auto(0x3, 0x0, 0x80) r3 = mq_open$auto(&(0x7f00000001c0)='@\x00', 0x8, 0xff00, &(0x7f0000000200)={0x5, 0x61bb, 0x9, 0x55f}) ioctl$auto_PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000240)=0x78) r4 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x540a, 0x0) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r4, 0xc1004110, &(0x7f0000000040)={0x3cdc80, [0x4, 0x6, 0xc31], [{0x2, 0x10000}, {0x4, 0x70, 0x0, 0x1, 0x1, 0x1}, {0xcf, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x836e, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x4db, 0x100, 0x1}, {0x3, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xffffff31, 0x1, 0x0, 0x1}, {0x3, 0x100, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xff, 0x80000000}], 0x1, 0x7, 0x4, 0x4, 0x8, 0x94bf, 0x0, "c95ef840fa5396cd6ac429fd111a286a242d1edd7a644d0744b0a99ba98672339058e9f7540a38055c83f68b614e48d7aae998f208715a9b7742adae19071535"}) write$auto(r0, 0x0, 0x6) setsockopt$auto(0x3, 0x1, 0x34, 0x0, 0x4) 2.800516024s ago: executing program 5 (id=1414): r0 = pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/rqos/wbt/unknown_cnt\x00', 0x38044, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x4) r3 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000180)={@_si_pad}, 0x4, &(0x7f0000000200)={{0x1, 0x9}, {0x81, 0xfff}, 0x0, 0x4, 0x8, 0x6, 0x2, 0x40, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x2, 0x5, 0x2}) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84050000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf250c0000002b022e80250afb3bb275119169a6d955f571a7bc86a1b49597849d6e2c01a95e1210c6af7e32909fe6976fd2ef7db1870225ea54064ceff238e0f35052f35cc6ba9828b860b0ea9314d738c390a043867e56524e05a6457184e9126a843d505dd9fd2a9e69536c1b0a23d496709c80deeb97b5de753eaef983ad3b120804009700b800b6807da51e9ff539d1ed627ebb209c10d33cf8bb0a008972bc2750e0c59ec6ebb4334f5f5b65060640878de62727680f4bd5d32685e844ba20043e48560caa0c004d00fd34000000000000040048800800d700000000004ff2d6ff9fcef2b3fc73e72d920ff0e22eb1393f05c5b18053fcaae2503fe91d34bccfaaced9701b986e1000120fca089fd9e66b3c544f8a69a927890f67a1b12f2bf1f5ab7ad1f0ec4a190400468004001d80040018800800b500fffffffffe64c38a2345e3be8c3bb69f092640f8ae3ee58d1dc6c6d9fd783e93582fec0af30e8e268d9674ac416a241d301bac4df034fbed3a44a63264344b28b8e49dced460bd30db778d39a9654a5fc3928aa775a24b9ce2fe52bea659d5fd662f99c78414d41be6b6099da1340103ce75747e75bd53e141da2ec3234391081302ac0cc51c22e0b4f7f66a04be6a92b09a8acf5ca17062fe2e74439a70360b797cc4eafe5af55319d7ba12ef9a6ca80eebe54eb48ae81546c5f4d072b87d0c9bf2ad4cc8fcfc54d461336f2d2945fd0cc40c93560008e2884207e8a3e86136c43ea27b554aa32eef57fa35302908005e00", @ANYRES32, @ANYBLOB="00050026000400000008000d000600000008000d002c5000000c03198008001300", @ANYRES32=0x0, @ANYBLOB="0c00d5800800b900", @ANYRES32=r3, @ANYBLOB="ff00028005000300000000002ad22923ba910882bf015d0db26cf9fc3b847327b5a9bec67779282d0054079940824acf6d7e36df4cdbcaa6a1cfbf4388c230816ebd92bf2f2bcb63227dca2956ed9094b975bb6959d3527708f8765f434564aaf7e0ae85b15e15044bfa0cf735b8d17404ffacaaddb740cbeb3d17f645a016d1214d771b46d62556ca372aa31c135f488e2b4492c22aff2365cf8c46a189763d2192b753c9afd9301d587136f55a4cd6e5554ddb1ed4b8f9d6a8cd427134f518c190b3a906e4147208f71211397984d6b7c421d45db712db21e751d388bbdc70b3018a5fbac143b28c03809c855b6908001000", @ANYRES32=r2, @ANYBLOB="0500c300000000000008000900c60500007e005780c8ce7c4def6624c047f3c860997247c6096e44e39436606dc3223c0860312ce155df4492019ef6ad672d430902c934bcbc7085fd04dfa4ae9586d7b7dfdf0e5811984de8a1d4d83109f803002299c1e988867b97e9d85819d03268b130bedde158d57888bc1de535bce10400b08004005680080038006401010200000900dd0040255e2d000000005d869a87aa182ca9dcf50305bb8f3a8c3b3c44035a07edc798a137b823edadede87b6cbfe1daa608000507274c382e61999fbf7ec4c4fa337520d961af7998da1088ad86c99527c885d0a6836383120d9fd8e5d6c477ae5c79e427b2350a5822568eff5cb48e702ffb57af1e16359741dc8254666ee3368e21f2d8ea278284d912c04a5715322584c5c53e2f875b129211a791c25c2a0695b81710ced52c39a339864bf206402067d357618f7927d814bb2ae1b22d9a731805a4531f3f63ffe637cd3fcd44be62e0d3cba755c3de20b33de0c8c2fd3d4a141c1c5cbf5c598e3b9dff8306c1b31543cf8e56b2e54ff4143aef2eceea27a3ad28ffaecc7ee619c99a2816fcc2f6fbdb7fd2fa056acbf48d74d386869a69e9cd3c1120554d3c9448ccb594bf58e5ac73395da6ded31ce57d568ddce78396b6bddef3d7f268a4efaf0e0c60ab3759abb0f8f8499ab1f896f43618c255b9c2615c3542a606dac910306044a7369e112075050007000f00000006000a00a90e00000500250000000000"], 0x584}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004804) munlock$auto(0xffff, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFRASET(r2, 0x1264, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) ioctl$auto_BLKROSET(r2, 0x125d, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x1e, 0x3, 0xa6) signalfd$auto(r1, 0x0, 0x3cb) ioprio_set$auto(0x81b, 0xff, 0xffffffff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @loopback}, 0x7fff) sendmmsg$auto(r4, 0x0, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) 2.110118915s ago: executing program 2 (id=1415): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x1, 0x84) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) ustat$auto(0x801, 0x0) io_uring_setup$auto(0x59, 0x0) madvise$auto(0xc38a, 0x0, 0xfc10) 2.098137432s ago: executing program 5 (id=1416): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyrd\x00', 0x4000, 0x0) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x0, 0x38, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) setpgid$auto(0x0, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) 1.563569082s ago: executing program 1 (id=1417): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x0, 0xdf, 0x11, r1, 0x8000) madvise$auto(0x0, 0x2000040080040008, 0xe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) mmap$auto(0x0, 0x8009, 0x400000072, 0x8b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r2, 0x0, 0x80) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20005, 0xdf, 0x16, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x101400, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) io_uring_setup$auto(0x9e6, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 1.523454514s ago: executing program 3 (id=1418): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00\x00\x00W\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv1\x00', 0x102, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv1\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000280)={r0, &(0x7f00000000c0)="0bc6325887365cec4a084340f2416645d8057669e5c8749770c801c4422c6d3383e0713d0d6db97d9e8f9b69e9ec32412ce2ab9cc1016e376b89df907668ac70dc8eff857ceaba57e4957d0d3005a9b4772cfba94ab12a4ec7f1ff78df30bea0c74bd3e3927dd60fd5d7a6c3f7650b22ed7983be9ff0f7596e63210851a6b283571864ed2a244f897e4cc09361a58f355278d334b3fb5594a5a120951b467e963d3427ac03fd9917061f5beedb3ddccb857230465b68254c8e497ffe768fed2830a3cfe28cc967bc", 0x400, &(0x7f00000001c0)="1f424a4ca3d9b9e005edc2008061e27643bce4a207d2a875aedbfbe227189c103317d06047f2b1bda01673c9ef83cb3a7bd799fb0d25d9444af418", 0xffffffff, &(0x7f0000000200)="e721aaa53c032a4672c1f27493f12a1061dde35ab33d9107cf3a7d88dffa49031eb19c04530b63d8b2f3a8a89982cf9fafdd130b6b7b9baa4457064471", &(0x7f0000000240)=0xa3}) sendfile$auto(r1, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0xfffffffffffffff8) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/event2\x00', 0x113800, 0x0) ioctl$auto(r2, 0x8100451b, r2) (async) ioctl$auto(r2, 0x8100451b, r2) mount$auto(&(0x7f0000000540)='veth0_to_bond\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='/dev/ptyv1\x00', 0xc8, &(0x7f0000000600)="fc7ef4ac3c1ff0c3abf27dcebb7d8c95ebb21747695a5833d61752943f09dc53927e3efde67a1f1e4e474c269b2f263868871397d4a58292638b254f6c27fc808b9a60424dfc2450e64afb141b7a8250cec2fddaa9bb65c6397dddf9dbbd5775b8d658b61c6f98c8857a7a35d1a0ac43939fe380a8bee6c1c8c382c4e5a965c660121f57ca99f087f7ace91d49") r3 = socket(0x1d, 0x3, 0x1) r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x769903, 0x0) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x769903, 0x0) ioctl$auto(r5, 0x5393, r4) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r3) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) 472.695881ms ago: executing program 2 (id=1419): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)="d5f107539aeb16c64a9237e81135e865d9af7a7f21a9221021") openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) (async) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) close_range$auto(r3, r2, 0xc8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x9}) (async) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x9}) open_by_handle_at$auto(r1, 0x0, 0x800) 352.416971ms ago: executing program 5 (id=1420): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x200) (async, rerun: 64) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) (async) fsopen$auto(0x0, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x270) getsockopt$auto_SO_MAX_PACING_RATE(r1, 0xfb49, 0x2f, &(0x7f0000000180)='\x85)4&++\\\\\x00', &(0x7f0000000280)) mlockall$auto(0x7) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) (async) personality$auto(0xfffff032) (async) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, 0x0, &(0x7f00000002c0)={0x10000}, 0x8) (async) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0xd, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) (async) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r3, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) (async) ioctl$auto(r3, 0x4008550c, r0) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x420082, 0x0) (async) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x14001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) 59.493188ms ago: executing program 3 (id=1421): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, 0x0, 0x81, 0x968e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) mmap$auto(0x0, 0x9, 0x5, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0x401, 0x7ffd) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe4982, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x20, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) 0s ago: executing program 2 (id=1422): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xfffffffffffffffb, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x2fa) ioctl$auto_SNDCTL_SEQ_SYNC(r2, 0x5101, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYBLOB='^\x00', @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x109280, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) kernel console output (not intermixed with test programs): 77/0x7f [ 332.844514][T10398] RIP: 0033:0x7f8be0d8eec9 [ 332.844536][T10398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.844562][T10398] RSP: 002b:00007f8be1cb9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 332.844587][T10398] RAX: ffffffffffffffda RBX: 00007f8be0fe5fa0 RCX: 00007f8be0d8eec9 [ 332.844610][T10398] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000016 [ 332.844627][T10398] RBP: 00007f8be0e11f91 R08: 0000000000000001 R09: 0000000000000000 [ 332.844644][T10398] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 332.844660][T10398] R13: 00007f8be0fe6038 R14: 00007f8be0fe5fa0 R15: 00007ffc0a7bfb08 [ 332.844697][T10398] [ 334.427709][T10428] random: crng reseeded on system resumption [ 336.001116][ T8275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.020986][ T8275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.031183][ T8275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.039104][ T8275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.049304][ T8275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.671150][T10459] random: crng reseeded on system resumption [ 337.208928][T10451] chnl_net:caif_netlink_parms(): no params data found [ 338.034254][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.064526][T10451] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.081989][T10451] bridge_slave_0: entered allmulticast mode [ 338.102673][T10451] bridge_slave_0: entered promiscuous mode [ 338.109189][ T8275] Bluetooth: hci1: command tx timeout [ 338.119549][T10451] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.126713][T10451] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.149129][T10451] bridge_slave_1: entered allmulticast mode [ 338.161797][T10451] bridge_slave_1: entered promiscuous mode [ 338.389402][T10451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.430141][T10451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.597891][T10451] team0: Port device team_slave_0 added [ 338.623272][T10451] team0: Port device team_slave_1 added [ 338.902661][T10451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.939512][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.068563][T10451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.222338][T10451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.253030][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.290393][T10451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.803716][T10451] hsr_slave_0: entered promiscuous mode [ 339.819180][T10451] hsr_slave_1: entered promiscuous mode [ 340.188064][ T8275] Bluetooth: hci1: command tx timeout [ 340.696556][T10451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 340.740082][T10451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 340.787953][T10451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 340.881291][T10451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 340.892945][T10493] Invalid ELF header magic: != ELF [ 341.544357][T10451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.568998][T10451] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.644649][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.651955][ T6604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.700358][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.707613][ T6604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.267551][ T8275] Bluetooth: hci1: command tx timeout [ 342.631858][T10520] zswap: compressor 000 not available [ 343.464694][T10553] Setting dangerous option i915.mitigations - tainting kernel [ 343.507633][T10451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.523890][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'. [ 343.749869][T10555] team0: Port device team_slave_0 removed [ 344.346152][ T8275] Bluetooth: hci1: command tx timeout [ 344.525251][T10579] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 344.537680][T10569] FAULT_INJECTION: forcing a failure. [ 344.537680][T10569] name failslab, interval 1, probability 0, space 0, times 0 [ 344.576452][T10579] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 344.584415][T10579] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 344.593416][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.5.957 Tainted: G U syzkaller #0 PREEMPT(full) [ 344.593458][T10569] Tainted: [U]=USER [ 344.593468][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.593484][T10569] Call Trace: [ 344.593493][T10569] [ 344.593503][T10569] dump_stack_lvl+0x16c/0x1f0 [ 344.593549][T10569] should_fail_ex+0x512/0x640 [ 344.593586][T10569] ? __kmalloc_noprof+0xbf/0x510 [ 344.593618][T10569] ? ops_init+0x77/0x5f0 [ 344.593638][T10569] should_failslab+0xc2/0x120 [ 344.593674][T10569] __kmalloc_noprof+0xd2/0x510 [ 344.593708][T10569] ? net_generic+0xf4/0x2a0 [ 344.593749][T10569] ops_init+0x77/0x5f0 [ 344.593776][T10569] setup_net+0x10f/0x380 [ 344.593796][T10569] ? lockdep_init_map_type+0x5c/0x280 [ 344.593832][T10569] ? __pfx_setup_net+0x10/0x10 [ 344.593870][T10569] ? debug_mutex_init+0x37/0x70 [ 344.593902][T10569] copy_net_ns+0x2a6/0x5f0 [ 344.593935][T10569] create_new_namespaces+0x3ea/0xa90 [ 344.593974][T10569] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 344.594009][T10569] ksys_unshare+0x45b/0xa40 [ 344.594045][T10569] ? __pfx_ksys_unshare+0x10/0x10 [ 344.594080][T10569] ? xfd_validate_state+0x61/0x180 [ 344.594127][T10569] __x64_sys_unshare+0x31/0x40 [ 344.594161][T10569] do_syscall_64+0xcd/0x4c0 [ 344.594188][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.594214][T10569] RIP: 0033:0x7f2f0c58eec9 [ 344.594236][T10569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.594261][T10569] RSP: 002b:00007f2f0d3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 344.594286][T10569] RAX: ffffffffffffffda RBX: 00007f2f0c7e6090 RCX: 00007f2f0c58eec9 [ 344.594304][T10569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 344.594320][T10569] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 344.594336][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.594352][T10569] R13: 00007f2f0c7e6128 R14: 00007f2f0c7e6090 R15: 00007ffd65af3348 [ 344.594388][T10569] [ 344.802028][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.061082][T10579] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 345.096114][T10579] page dumped because: unmovable page [ 345.122926][T10579] page_owner info is not present (never set?) [ 345.463806][T10451] veth0_vlan: entered promiscuous mode [ 345.508433][T10451] veth1_vlan: entered promiscuous mode [ 345.712776][T10451] veth0_macvtap: entered promiscuous mode [ 345.751528][T10451] veth1_macvtap: entered promiscuous mode [ 345.813853][T10451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.843365][T10451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.938838][ T6303] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.952624][T10590] input: jJǸ-¶9ă%vø“û¨lĐQ  J86Ö‘ as /devices/virtual/input/input14 [ 345.987494][ T6303] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.037500][ T9] Process accounting resumed [ 346.058578][ T6303] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.118011][ T6303] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.612303][ T6304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.675831][ T6304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.912806][ T6303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.934063][ T6303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.045588][T10626] FAULT_INJECTION: forcing a failure. [ 348.045588][T10626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.148258][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.2.970 Tainted: G U syzkaller #0 PREEMPT(full) [ 348.148299][T10626] Tainted: [U]=USER [ 348.148307][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 348.148321][T10626] Call Trace: [ 348.148330][T10626] [ 348.148339][T10626] dump_stack_lvl+0x16c/0x1f0 [ 348.148383][T10626] should_fail_ex+0x512/0x640 [ 348.148425][T10626] should_fail_alloc_page+0xe7/0x130 [ 348.148461][T10626] prepare_alloc_pages+0x3c2/0x610 [ 348.148506][T10626] ? rcu_is_watching+0x12/0xc0 [ 348.148536][T10626] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 348.148573][T10626] ? rcu_is_watching+0x12/0xc0 [ 348.148598][T10626] ? trace_mm_page_alloc+0x11f/0x1a0 [ 348.148643][T10626] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 348.148672][T10626] ? rcu_is_watching+0x12/0xc0 [ 348.148694][T10626] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 348.148727][T10626] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.148759][T10626] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 348.148787][T10626] ? stack_depot_save_flags+0x3de/0x9c0 [ 348.148831][T10626] ? __kasan_slab_alloc+0x89/0x90 [ 348.148858][T10626] ? alloc_vmap_area+0xdcf/0x29c0 [ 348.148887][T10626] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 348.148908][T10626] ? __kvmalloc_node_noprof+0x30a/0x620 [ 348.148935][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 348.148959][T10626] ? do_syscall_64+0xcd/0x4c0 [ 348.148979][T10626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.149017][T10626] alloc_pages_bulk_noprof+0x71c/0x1410 [ 348.149048][T10626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 348.149087][T10626] ? policy_nodemask+0xea/0x4e0 [ 348.149122][T10626] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 348.149151][T10626] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 348.149191][T10626] kasan_populate_vmalloc+0x112/0x2d0 [ 348.149215][T10626] ? alloc_vmap_area+0x8b5/0x29c0 [ 348.149250][T10626] alloc_vmap_area+0x960/0x29c0 [ 348.149292][T10626] ? __pfx_alloc_vmap_area+0x10/0x10 [ 348.149329][T10626] __get_vm_area_node+0x1ca/0x330 [ 348.149365][T10626] __vmalloc_node_range_noprof+0x271/0x14b0 [ 348.149386][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 348.149406][T10626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 348.149438][T10626] ? policy_nodemask+0xea/0x4e0 [ 348.149465][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 348.149492][T10626] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 348.149517][T10626] ? ___kmalloc_large_node+0xed/0x160 [ 348.149552][T10626] __kvmalloc_node_noprof+0x30a/0x620 [ 348.149579][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 348.149602][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 348.149627][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 348.149655][T10626] __do_sys_listmount+0x1c2/0xf80 [ 348.149677][T10626] ? __sys_sendmsg+0x18c/0x220 [ 348.149714][T10626] ? __x64_sys_futex+0x1e0/0x4c0 [ 348.149738][T10626] ? __x64_sys_futex+0x1e9/0x4c0 [ 348.149764][T10626] ? __pfx___do_sys_listmount+0x10/0x10 [ 348.149799][T10626] do_syscall_64+0xcd/0x4c0 [ 348.149820][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.149840][T10626] RIP: 0033:0x7f8be0d8eec9 [ 348.149857][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.149879][T10626] RSP: 002b:00007f8be1c98038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 348.149901][T10626] RAX: ffffffffffffffda RBX: 00007f8be0fe6090 RCX: 00007f8be0d8eec9 [ 348.149916][T10626] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 348.149929][T10626] RBP: 00007f8be0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 348.149943][T10626] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 348.149956][T10626] R13: 00007f8be0fe6128 R14: 00007f8be0fe6090 R15: 00007ffc0a7bfb08 [ 348.149985][T10626] [ 348.946984][T10626] syz.2.970: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 349.003208][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.2.970 Tainted: G U syzkaller #0 PREEMPT(full) [ 349.003249][T10626] Tainted: [U]=USER [ 349.003258][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.003273][T10626] Call Trace: [ 349.003283][T10626] [ 349.003293][T10626] dump_stack_lvl+0x16c/0x1f0 [ 349.003338][T10626] warn_alloc+0x248/0x3a0 [ 349.003372][T10626] ? __pfx_warn_alloc+0x10/0x10 [ 349.003410][T10626] ? kfree+0x2b4/0x4d0 [ 349.003439][T10626] ? __get_vm_area_node+0x208/0x330 [ 349.003479][T10626] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 349.003503][T10626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.003549][T10626] ? policy_nodemask+0xea/0x4e0 [ 349.003586][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 349.003623][T10626] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.003655][T10626] ? ___kmalloc_large_node+0xed/0x160 [ 349.003699][T10626] __kvmalloc_node_noprof+0x30a/0x620 [ 349.003728][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 349.003753][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 349.003785][T10626] ? __do_sys_listmount+0x1c2/0xf80 [ 349.003808][T10626] __do_sys_listmount+0x1c2/0xf80 [ 349.003834][T10626] ? __sys_sendmsg+0x18c/0x220 [ 349.003874][T10626] ? __x64_sys_futex+0x1e0/0x4c0 [ 349.003905][T10626] ? __x64_sys_futex+0x1e9/0x4c0 [ 349.003939][T10626] ? __pfx___do_sys_listmount+0x10/0x10 [ 349.003983][T10626] do_syscall_64+0xcd/0x4c0 [ 349.004009][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.004037][T10626] RIP: 0033:0x7f8be0d8eec9 [ 349.004058][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.004083][T10626] RSP: 002b:00007f8be1c98038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 349.004108][T10626] RAX: ffffffffffffffda RBX: 00007f8be0fe6090 RCX: 00007f8be0d8eec9 [ 349.004125][T10626] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 349.004142][T10626] RBP: 00007f8be0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.004157][T10626] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 349.004173][T10626] R13: 00007f8be0fe6128 R14: 00007f8be0fe6090 R15: 00007ffc0a7bfb08 [ 349.004209][T10626] [ 349.233965][T10626] Mem-Info: [ 349.237128][T10626] active_anon:38291 inactive_anon:10 isolated_anon:0 [ 349.237128][T10626] active_file:12322 inactive_file:46034 isolated_file:0 [ 349.237128][T10626] unevictable:769 dirty:138 writeback:0 [ 349.237128][T10626] slab_reclaimable:11989 slab_unreclaimable:101005 [ 349.237128][T10626] mapped:44909 shmem:26331 pagetables:1433 [ 349.237128][T10626] sec_pagetables:0 bounce:0 [ 349.237128][T10626] kernel_misc_reclaimable:0 [ 349.237128][T10626] free:1262027 free_pcp:7010 free_cma:0 [ 349.284414][T10626] Node 0 active_anon:152264kB inactive_anon:40kB active_file:49288kB inactive_file:184000kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:179632kB dirty:552kB writeback:0kB shmem:103788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13692kB pagetables:5588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 349.323406][T10626] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 349.566118][T10626] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.613513][T10626] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 349.627196][T10626] Node 0 DMA32 free:1128620kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:151416kB inactive_anon:40kB active_file:49288kB inactive_file:182684kB unevictable:1940kB writepending:52kB present:3129332kB managed:2539524kB mlocked:404kB bounce:0kB free_pcp:29576kB local_pcp:12512kB free_cma:0kB [ 349.678447][T10626] lowmem_reserve[]: 0 0 1 1 1 [ 349.684488][T10626] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 349.803138][T10626] lowmem_reserve[]: 0 0 0 0 0 [ 349.837396][T10626] Node 1 Normal free:3905144kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:0kB free_cma:0kB [ 349.914458][T10626] lowmem_reserve[]: 0 0 0 0 0 [ 349.920423][T10626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 349.949785][T10626] Node 0 DMA32: 35*4kB (ME) 2*8kB (UE) 0*16kB 671*32kB (UM) 418*64kB (UM) 243*128kB (UME) 95*256kB (UME) 41*512kB (ME) 26*1024kB (UME) 5*2048kB (M) 236*4096kB (M) = 1128316kB [ 349.990913][T10626] Node 0 Normal: 2*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 350.004759][T10626] Node 1 Normal: 210*4kB (UME) 54*8kB (UME) 40*16kB (UME) 236*32kB (UME) 104*64kB (UME) 25*128kB (UME) 15*256kB (UM) 10*512kB (UM) 2*1024kB (ME) 4*2048kB (UE) 944*4096kB (M) = 3905144kB [ 350.033872][T10626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.048578][T10626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.058056][T10626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.071940][T10656] FAULT_INJECTION: forcing a failure. [ 350.071940][T10656] name failslab, interval 1, probability 0, space 0, times 0 [ 350.089839][T10626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.132252][T10626] 86235 total pagecache pages [ 350.223001][T10656] CPU: 1 UID: 0 PID: 10656 Comm: syz.6.974 Tainted: G U syzkaller #0 PREEMPT(full) [ 350.223040][T10656] Tainted: [U]=USER [ 350.223047][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.223060][T10656] Call Trace: [ 350.223068][T10656] [ 350.223076][T10656] dump_stack_lvl+0x16c/0x1f0 [ 350.223117][T10656] should_fail_ex+0x512/0x640 [ 350.223150][T10656] ? fs_reclaim_acquire+0xae/0x150 [ 350.223186][T10656] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 350.223217][T10656] should_failslab+0xc2/0x120 [ 350.223248][T10656] __kmalloc_noprof+0xd2/0x510 [ 350.223285][T10656] tomoyo_realpath_from_path+0xc2/0x6e0 [ 350.223321][T10656] ? tomoyo_profile+0x47/0x60 [ 350.223348][T10656] tomoyo_path_number_perm+0x245/0x580 [ 350.223377][T10656] ? tomoyo_path_number_perm+0x237/0x580 [ 350.223411][T10656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 350.223443][T10656] ? find_held_lock+0x2b/0x80 [ 350.223500][T10656] ? find_held_lock+0x2b/0x80 [ 350.223524][T10656] ? hook_file_ioctl_common+0x145/0x410 [ 350.223564][T10656] ? __fget_files+0x20e/0x3c0 [ 350.223598][T10656] security_file_ioctl+0x9b/0x240 [ 350.223630][T10656] __x64_sys_ioctl+0xb7/0x210 [ 350.223670][T10656] do_syscall_64+0xcd/0x4c0 [ 350.223695][T10656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.223720][T10656] RIP: 0033:0x7fba3338eec9 [ 350.223762][T10656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.223786][T10656] RSP: 002b:00007fba342e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.223810][T10656] RAX: ffffffffffffffda RBX: 00007fba335e5fa0 RCX: 00007fba3338eec9 [ 350.223827][T10656] RDX: 0000000000000000 RSI: 0000000000005412 RDI: 0000000000000010 [ 350.223842][T10656] RBP: 00007fba342e2090 R08: 0000000000000000 R09: 0000000000000000 [ 350.223857][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.223871][T10656] R13: 00007fba335e6038 R14: 00007fba335e5fa0 R15: 00007ffd695ab948 [ 350.223907][T10656] [ 350.223917][T10656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.303041][T10626] 9 pages in swap cache [ 350.442822][T10626] Free swap = 124832kB [ 350.446998][T10626] Total swap = 124996kB [ 350.452409][T10626] 2097051 pages RAM [ 350.491299][T10626] 0 pages HighMem/MovableOnly [ 350.552811][T10626] 430208 pages reserved [ 350.571155][T10626] 0 pages cma reserved [ 352.537379][T10701] input: jJǸ-¶9ă%vø“û¨lĐQ  J86Ö‘ as /devices/virtual/input/input15 [ 355.366988][T10756] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 355.633323][T10755] random: crng reseeded on system resumption [ 359.249706][T10809] FAULT_INJECTION: forcing a failure. [ 359.249706][T10809] name failslab, interval 1, probability 0, space 0, times 0 [ 359.309996][T10809] CPU: 1 UID: 0 PID: 10809 Comm: syz.5.1013 Tainted: G U syzkaller #0 PREEMPT(full) [ 359.310036][T10809] Tainted: [U]=USER [ 359.310044][T10809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 359.310058][T10809] Call Trace: [ 359.310066][T10809] [ 359.310075][T10809] dump_stack_lvl+0x16c/0x1f0 [ 359.310123][T10809] should_fail_ex+0x512/0x640 [ 359.310166][T10809] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 359.310201][T10809] should_failslab+0xc2/0x120 [ 359.310229][T10809] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 359.310259][T10809] ? xfrm_sysctl_init+0x10a/0x2d0 [ 359.310287][T10809] kmemdup_noprof+0x29/0x60 [ 359.310316][T10809] xfrm_sysctl_init+0x10a/0x2d0 [ 359.310342][T10809] xfrm_net_init+0x842/0xcc0 [ 359.310369][T10809] ? __pfx_xfrm_net_init+0x10/0x10 [ 359.310390][T10809] ops_init+0x1e2/0x5f0 [ 359.310414][T10809] setup_net+0x10f/0x380 [ 359.310431][T10809] ? lockdep_init_map_type+0x5c/0x280 [ 359.310465][T10809] ? __pfx_setup_net+0x10/0x10 [ 359.310488][T10809] ? debug_mutex_init+0x37/0x70 [ 359.310513][T10809] copy_net_ns+0x2a6/0x5f0 [ 359.310538][T10809] create_new_namespaces+0x3ea/0xa90 [ 359.310573][T10809] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 359.310603][T10809] ksys_unshare+0x45b/0xa40 [ 359.310639][T10809] ? __pfx_ksys_unshare+0x10/0x10 [ 359.310673][T10809] ? xfd_validate_state+0x61/0x180 [ 359.310719][T10809] __x64_sys_unshare+0x31/0x40 [ 359.310750][T10809] do_syscall_64+0xcd/0x4c0 [ 359.310776][T10809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.310801][T10809] RIP: 0033:0x7f2f0c58eec9 [ 359.310832][T10809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.310861][T10809] RSP: 002b:00007f2f0d3d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 359.310888][T10809] RAX: ffffffffffffffda RBX: 00007f2f0c7e6180 RCX: 00007f2f0c58eec9 [ 359.310905][T10809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 359.310923][T10809] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 359.310939][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.310953][T10809] R13: 00007f2f0c7e6218 R14: 00007f2f0c7e6180 R15: 00007ffd65af3348 [ 359.310984][T10809] [ 360.808321][T10824] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1014'. [ 360.838520][T10824] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1014'. [ 362.112935][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1018'. [ 362.133301][T10842] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1020'. [ 362.147463][T10836] bridge_slave_1: left allmulticast mode [ 362.154353][T10836] bridge_slave_1: left promiscuous mode [ 362.161527][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.174632][T10836] bridge_slave_0: left allmulticast mode [ 362.187893][T10836] bridge_slave_0: left promiscuous mode [ 362.194342][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.181575][ T30] audit: type=1800 audit(4294967339.429:14): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1030" name="features" dev="configfs" ino=35960 res=0 errno=0 [ 368.935816][T10909] netlink: 'syz.5.1033': attribute type 21 has an invalid length. [ 368.943870][T10909] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1033'. [ 371.582817][T10924] random: crng reseeded on system resumption [ 372.114317][ T8305] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.124181][ T8305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.132974][ T8305] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.144948][ T8305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.163222][ T8305] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.484989][T10937] netlink: 'syz.5.1040': attribute type 1 has an invalid length. [ 372.938958][T10933] chnl_net:caif_netlink_parms(): no params data found [ 373.184278][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.201540][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.231962][T10933] bridge_slave_0: entered allmulticast mode [ 373.274789][T10933] bridge_slave_0: entered promiscuous mode [ 373.283287][T10933] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.296816][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.321565][T10933] bridge_slave_1: entered allmulticast mode [ 373.332439][T10933] bridge_slave_1: entered promiscuous mode [ 373.434240][T10933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.453061][T10933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.540034][T10933] team0: Port device team_slave_0 added [ 373.552751][T10945] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1042'. [ 373.562914][T10933] team0: Port device team_slave_1 added [ 373.700048][T10933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.735028][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.761422][T10933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.773752][T10933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.783829][T10945] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 373.786660][ T30] audit: type=1800 audit(4294967346.032:15): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1042" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 373.796941][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.796980][T10933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.881872][T10945] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 373.901304][T10945] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 373.993310][T10933] hsr_slave_0: entered promiscuous mode [ 374.002045][T10933] hsr_slave_1: entered promiscuous mode [ 374.061840][T10933] debugfs: 'hsr0' already exists in 'hsr' [ 374.067618][T10933] Cannot create hsr debugfs directory [ 374.250941][ T8275] Bluetooth: hci6: command tx timeout [ 375.016798][T10933] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 375.054230][T10933] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 375.247256][T10933] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.258457][T10933] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 375.393410][T10962] FAULT_INJECTION: forcing a failure. [ 375.393410][T10962] name fail_futex, interval 1, probability 0, space 0, times 0 [ 375.470448][T10962] CPU: 1 UID: 0 PID: 10962 Comm: syz.5.1044 Tainted: G U syzkaller #0 PREEMPT(full) [ 375.470490][T10962] Tainted: [U]=USER [ 375.470498][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.470510][T10962] Call Trace: [ 375.470518][T10962] [ 375.470527][T10962] dump_stack_lvl+0x16c/0x1f0 [ 375.470565][T10962] should_fail_ex+0x512/0x640 [ 375.470601][T10962] get_futex_key+0x1d0/0x1560 [ 375.470632][T10962] ? __pfx_get_futex_key+0x10/0x10 [ 375.470659][T10962] ? kasan_save_stack+0x42/0x60 [ 375.470683][T10962] ? kasan_save_stack+0x33/0x60 [ 375.470706][T10962] ? kasan_save_track+0x14/0x30 [ 375.470734][T10962] futex_wait_setup+0x9d/0x550 [ 375.470772][T10962] __futex_wait+0x194/0x2f0 [ 375.470803][T10962] ? __pfx___futex_wait+0x10/0x10 [ 375.470838][T10962] ? __pfx_futex_wake_mark+0x10/0x10 [ 375.470881][T10962] ? futex_private_hash_put+0x176/0x300 [ 375.470911][T10962] ? futex_private_hash_put+0x18a/0x300 [ 375.470940][T10962] futex_wait+0xe8/0x380 [ 375.470972][T10962] ? __pfx_futex_wait+0x10/0x10 [ 375.471011][T10962] ? errseq_sample+0x53/0x70 [ 375.471034][T10962] ? file_init_path+0x4fe/0x760 [ 375.471068][T10962] do_futex+0x229/0x350 [ 375.471094][T10962] ? __pfx_do_futex+0x10/0x10 [ 375.471120][T10962] ? fd_install+0x225/0x750 [ 375.471148][T10962] __x64_sys_futex+0x1e0/0x4c0 [ 375.471174][T10962] ? __sys_socket+0xac/0x260 [ 375.471197][T10962] ? __x64_sys_openat+0x174/0x210 [ 375.471215][T10962] ? __pfx___x64_sys_futex+0x10/0x10 [ 375.471241][T10962] ? xfd_validate_state+0x61/0x180 [ 375.471283][T10962] do_syscall_64+0xcd/0x4c0 [ 375.471305][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.471325][T10962] RIP: 0033:0x7f2f0c58eec9 [ 375.471343][T10962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.471364][T10962] RSP: 002b:00007f2f0d41b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 375.471384][T10962] RAX: ffffffffffffffda RBX: 00007f2f0c7e5fa8 RCX: 00007f2f0c58eec9 [ 375.471398][T10962] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2f0c7e5fa8 [ 375.471411][T10962] RBP: 00007f2f0c7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 375.471423][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.471436][T10962] R13: 00007f2f0c7e6038 R14: 00007ffd65af3260 R15: 00007ffd65af3348 [ 375.471464][T10962] [ 376.112794][T10933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.185314][T10933] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.237726][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.244915][ T6605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.288092][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.295232][ T6605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.330047][ T8275] Bluetooth: hci6: command tx timeout [ 376.648041][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1045'. [ 376.776707][T10933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.677503][T10933] veth0_vlan: entered promiscuous mode [ 377.723681][T10933] veth1_vlan: entered promiscuous mode [ 377.846208][T10933] veth0_macvtap: entered promiscuous mode [ 377.887633][T10933] veth1_macvtap: entered promiscuous mode [ 377.963502][T10933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.008035][T10933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.053110][ T6296] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.069718][ T6296] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.131641][ T8305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.150756][ T8305] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.164231][ T6296] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.174119][ T8305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.189576][ T8305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.198195][ T8305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.295468][ T6296] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.409023][ T8305] Bluetooth: hci6: command tx timeout [ 378.723780][ T6604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.817350][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.826010][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.858560][ T6604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.012518][ T6604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.065020][ T6604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.310532][T10994] chnl_net:caif_netlink_parms(): no params data found [ 379.959266][ T8275] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 379.968560][ T8275] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 379.978445][ T8275] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 380.002107][ T8275] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 380.040019][ T8275] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 380.248179][ T8305] Bluetooth: hci7: command tx timeout [ 380.308223][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.359138][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.370188][T10994] bridge_slave_0: entered allmulticast mode [ 380.379940][T10994] bridge_slave_0: entered promiscuous mode [ 380.468032][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.475183][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.489015][ T8305] Bluetooth: hci6: command tx timeout [ 380.542321][T10994] bridge_slave_1: entered allmulticast mode [ 380.551220][T10994] bridge_slave_1: entered promiscuous mode [ 380.794071][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.831657][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.869018][T10994] team0: Port device team_slave_0 added [ 380.878306][T10994] team0: Port device team_slave_1 added [ 381.422911][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.430222][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.467345][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.503372][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.510666][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.608133][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.853356][T11013] chnl_net:caif_netlink_parms(): no params data found [ 381.905529][T10994] hsr_slave_0: entered promiscuous mode [ 381.930813][T10994] hsr_slave_1: entered promiscuous mode [ 381.937610][T10994] debugfs: 'hsr0' already exists in 'hsr' [ 381.967025][T10994] Cannot create hsr debugfs directory [ 382.087397][ T8305] Bluetooth: hci8: command tx timeout [ 382.327550][ T8305] Bluetooth: hci7: command tx timeout [ 382.399445][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1054'. [ 382.711771][T11043] FAULT_INJECTION: forcing a failure. [ 382.711771][T11043] name failslab, interval 1, probability 0, space 0, times 0 [ 382.725390][T11043] CPU: 1 UID: 0 PID: 11043 Comm: syz.5.1055 Tainted: G U syzkaller #0 PREEMPT(full) [ 382.725415][T11043] Tainted: [U]=USER [ 382.725420][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.725429][T11043] Call Trace: [ 382.725434][T11043] [ 382.725440][T11043] dump_stack_lvl+0x16c/0x1f0 [ 382.725468][T11043] should_fail_ex+0x512/0x640 [ 382.725492][T11043] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 382.725510][T11043] should_failslab+0xc2/0x120 [ 382.725530][T11043] __kmalloc_cache_noprof+0x6a/0x3e0 [ 382.725546][T11043] ? percpu_ref_init+0xec/0x410 [ 382.725567][T11043] ? __pfx_css_release+0x10/0x10 [ 382.725587][T11043] percpu_ref_init+0xec/0x410 [ 382.725609][T11043] cgroup_mkdir+0x2e0/0x11f0 [ 382.725633][T11043] ? __pfx_cgroup_mkdir+0x10/0x10 [ 382.725664][T11043] kernfs_iop_mkdir+0x10e/0x190 [ 382.725685][T11043] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 382.725707][T11043] vfs_mkdir+0x593/0x8c0 [ 382.725724][T11043] do_mkdirat+0x304/0x3e0 [ 382.725743][T11043] ? __pfx_do_mkdirat+0x10/0x10 [ 382.725762][T11043] ? getname_flags.part.0+0x1c5/0x550 [ 382.725786][T11043] __x64_sys_mkdir+0xef/0x140 [ 382.725804][T11043] do_syscall_64+0xcd/0x4c0 [ 382.725818][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.725833][T11043] RIP: 0033:0x7f2f0c58eec9 [ 382.725846][T11043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.725860][T11043] RSP: 002b:00007f2f0d41b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 382.725875][T11043] RAX: ffffffffffffffda RBX: 00007f2f0c7e5fa0 RCX: 00007f2f0c58eec9 [ 382.725884][T11043] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 382.725893][T11043] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 382.725902][T11043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.725910][T11043] R13: 00007f2f0c7e6038 R14: 00007f2f0c7e5fa0 R15: 00007ffd65af3348 [ 382.725928][T11043] [ 382.986582][T10994] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.126298][T11013] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.133963][T11013] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.141592][T11013] bridge_slave_0: entered allmulticast mode [ 383.168849][T11013] bridge_slave_0: entered promiscuous mode [ 383.176638][T10994] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.187395][T10994] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.230802][T10994] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.307360][T11013] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.324686][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.334933][T11013] bridge_slave_1: entered allmulticast mode [ 383.408431][T11013] bridge_slave_1: entered promiscuous mode [ 383.556080][T11013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.779154][T11013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.862319][T11013] team0: Port device team_slave_0 added [ 383.875812][T11013] team0: Port device team_slave_1 added [ 384.167299][ T8305] Bluetooth: hci8: command tx timeout [ 384.388712][T11013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.398567][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.405850][ T8305] Bluetooth: hci7: command tx timeout [ 384.435194][T11013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.536652][T11013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.543643][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.591360][T11013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.914742][T11013] hsr_slave_0: entered promiscuous mode [ 384.990582][T11013] hsr_slave_1: entered promiscuous mode [ 385.030148][T11013] debugfs: 'hsr0' already exists in 'hsr' [ 385.043724][T11013] Cannot create hsr debugfs directory [ 385.575775][T10994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.716939][T10994] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.760263][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.768664][ T6601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.839253][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.846472][ T6601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.168746][T11013] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 386.204292][T11013] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 386.245406][T11013] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 386.246182][ T8305] Bluetooth: hci8: command tx timeout [ 386.300231][T11013] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 386.485568][ T8305] Bluetooth: hci7: command tx timeout [ 386.876788][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.020052][T11013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.129559][T11013] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.200948][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.208123][ T6601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.251408][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.258596][ T6601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.943865][T10994] veth0_vlan: entered promiscuous mode [ 387.985094][T11013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.030738][T10994] veth1_vlan: entered promiscuous mode [ 388.132270][T10994] veth0_macvtap: entered promiscuous mode [ 388.156428][T10994] veth1_macvtap: entered promiscuous mode [ 388.221868][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.305471][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.324169][ T8305] Bluetooth: hci8: command tx timeout [ 388.338558][ T6601] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.466807][ T6601] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.639010][ T6601] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.691654][ T6601] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.943794][ T6304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.984653][ T6304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.182163][ T6304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.203812][ T6304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.339184][T11013] veth0_vlan: entered promiscuous mode [ 389.420548][T11013] veth1_vlan: entered promiscuous mode [ 389.574883][T11145] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 389.574883][T11145] program syz.8.1046 not setting count and/or reply_len properly [ 389.625819][T11013] veth0_macvtap: entered promiscuous mode [ 389.641062][T11013] veth1_macvtap: entered promiscuous mode [ 389.748710][T11013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.852417][T11013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.886600][ T6246] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.936254][ T6246] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.995308][ T6246] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.231069][T11148] netlink: 338 bytes leftover after parsing attributes in process `syz.8.1046'. [ 390.290741][ T6246] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.336500][T11151] netlink: 338 bytes leftover after parsing attributes in process `syz.8.1046'. [ 390.590086][ T6246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.693274][ T6246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.821294][ T6597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.860989][ T6597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.384880][T11193] random: crng reseeded on system resumption [ 394.472828][T11221] netlink: 334 bytes leftover after parsing attributes in process `syz.9.1087'. [ 397.341129][ T30] audit: type=1804 audit(4294967369.604:16): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1096" name="/newroot/6/file0" dev="tmpfs" ino=48 res=1 errno=0 [ 397.600291][ T30] audit: type=1804 audit(4294967369.854:17): pid=11259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1096" name="/newroot/6/file0" dev="tmpfs" ino=48 res=1 errno=0 [ 397.744449][T11267] XFS: Clearing xfsstats [ 401.854656][ T8275] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 401.871191][ T8275] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 401.892313][ T8275] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 401.929739][ T8275] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 401.939894][ T8275] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 401.974736][T11326] delete_channel: no stack [ 402.185822][T11319] tipc: Started in network mode [ 402.199982][T11319] tipc: Node identity 45e5412, cluster identity 4711 [ 402.207197][T11319] tipc: Node number set to 73290770 [ 403.268991][T11321] chnl_net:caif_netlink_parms(): no params data found [ 403.996152][ T8275] Bluetooth: hci9: command tx timeout [ 404.260396][T11321] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.300194][T11321] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.325578][T11321] bridge_slave_0: entered allmulticast mode [ 404.342658][T11321] bridge_slave_0: entered promiscuous mode [ 404.354099][T11321] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.365968][T11321] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.409402][T11321] bridge_slave_1: entered allmulticast mode [ 404.440554][T11321] bridge_slave_1: entered promiscuous mode [ 404.618115][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1114'. [ 404.938640][T11321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.997747][T11321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.389188][T11321] team0: Port device team_slave_0 added [ 405.522184][T11321] team0: Port device team_slave_1 added [ 405.742516][T11384] random: crng reseeded on system resumption [ 405.859769][T11321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.885106][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.930711][T11321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.981909][T11321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.015036][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.065184][T11321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.076356][ T8305] Bluetooth: hci9: command tx timeout [ 406.214139][T11388] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 406.244420][T11391] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 406.359946][T11321] hsr_slave_0: entered promiscuous mode [ 406.369778][T11321] hsr_slave_1: entered promiscuous mode [ 406.426026][T11321] debugfs: 'hsr0' already exists in 'hsr' [ 406.454723][T11321] Cannot create hsr debugfs directory [ 406.474791][ T8305] Bluetooth: hci5: command 0x0406 tx timeout [ 407.831756][T11321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.158335][T11321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.164094][ T8275] Bluetooth: hci9: command tx timeout [ 408.435426][T11321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.862444][T11321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.399867][T11321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.462482][T11321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.533773][T11423] random: crng reseeded on system resumption [ 409.585812][T11321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.675823][T11321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.843478][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1133'. [ 409.895982][T11444] ip6tnl0: entered allmulticast mode [ 410.233147][ T8275] Bluetooth: hci9: command tx timeout [ 410.967943][T11321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.353830][T11321] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.381826][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.389120][ T6296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.475269][T11467] binder: 11455:11467 ioctl c018620c 0 returned -1 [ 411.567010][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.574148][ T6246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.842474][T11321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.036087][T11321] veth0_vlan: entered promiscuous mode [ 413.070819][T11321] veth1_vlan: entered promiscuous mode [ 413.160106][T11321] veth0_macvtap: entered promiscuous mode [ 413.208622][T11321] veth1_macvtap: entered promiscuous mode [ 413.265062][T11321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.290313][T11321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.345498][ T6246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.365364][ T6246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.437741][ T6246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.524603][ T6598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.756685][ T6597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.776761][ T6597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.934025][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.011167][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.094755][T11520] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1146'. [ 415.822037][T11502] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 417.278135][ T30] audit: type=1804 audit(4294975189.544:18): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1152" name="/newroot/143/file0" dev="tmpfs" ino=756 res=1 errno=0 [ 418.606421][T11567] zswap: compressor not available [ 421.834238][T11609] FAULT_INJECTION: forcing a failure. [ 421.834238][T11609] name failslab, interval 1, probability 0, space 0, times 0 [ 421.878823][T11609] CPU: 0 UID: 0 PID: 11609 Comm: syz.5.1166 Tainted: G U syzkaller #0 PREEMPT(full) [ 421.878864][T11609] Tainted: [U]=USER [ 421.878872][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.878886][T11609] Call Trace: [ 421.878895][T11609] [ 421.878911][T11609] dump_stack_lvl+0x16c/0x1f0 [ 421.878955][T11609] should_fail_ex+0x512/0x640 [ 421.878996][T11609] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 421.879028][T11609] should_failslab+0xc2/0x120 [ 421.879061][T11609] __kmalloc_cache_noprof+0x6a/0x3e0 [ 421.879094][T11609] ? copy_ipcs+0x19f/0x610 [ 421.879130][T11609] copy_ipcs+0x19f/0x610 [ 421.879156][T11609] ? copy_utsname+0xab/0x470 [ 421.879194][T11609] create_new_namespaces+0x20a/0xa90 [ 421.879223][T11609] ? security_capable+0x7e/0x260 [ 421.879256][T11609] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 421.879289][T11609] ksys_unshare+0x45b/0xa40 [ 421.879323][T11609] ? __pfx_ksys_unshare+0x10/0x10 [ 421.879358][T11609] ? xfd_validate_state+0x61/0x180 [ 421.879404][T11609] __x64_sys_unshare+0x31/0x40 [ 421.879437][T11609] do_syscall_64+0xcd/0x4c0 [ 421.879461][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.879487][T11609] RIP: 0033:0x7f2f0c58eec9 [ 421.879508][T11609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.879534][T11609] RSP: 002b:00007f2f0d41b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 421.879558][T11609] RAX: ffffffffffffffda RBX: 00007f2f0c7e5fa0 RCX: 00007f2f0c58eec9 [ 421.879577][T11609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 421.879592][T11609] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.879609][T11609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.879625][T11609] R13: 00007f2f0c7e6038 R14: 00007f2f0c7e5fa0 R15: 00007ffd65af3348 [ 421.879660][T11609] [ 421.942500][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1166'. [ 427.569084][T11688] FAULT_INJECTION: forcing a failure. [ 427.569084][T11688] name failslab, interval 1, probability 0, space 0, times 0 [ 427.581979][T11688] CPU: 1 UID: 0 PID: 11688 Comm: syz.5.1186 Tainted: G U syzkaller #0 PREEMPT(full) [ 427.582019][T11688] Tainted: [U]=USER [ 427.582028][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 427.582043][T11688] Call Trace: [ 427.582051][T11688] [ 427.582061][T11688] dump_stack_lvl+0x16c/0x1f0 [ 427.582104][T11688] should_fail_ex+0x512/0x640 [ 427.582141][T11688] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 427.582177][T11688] should_failslab+0xc2/0x120 [ 427.582215][T11688] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 427.582246][T11688] ? ptlock_alloc+0x1f/0x70 [ 427.582278][T11688] ptlock_alloc+0x1f/0x70 [ 427.582302][T11688] pte_alloc_one+0x82/0x3a0 [ 427.582331][T11688] __pte_alloc+0x6d/0x3c0 [ 427.582363][T11688] ? __pfx___pte_alloc+0x10/0x10 [ 427.582396][T11688] ? _raw_spin_unlock+0x28/0x50 [ 427.582428][T11688] ? __pmd_alloc+0x3fb/0x930 [ 427.582466][T11688] walk_pgd_range+0xb84/0x1f50 [ 427.582501][T11688] ? __pfx_guard_install_set_pte+0x10/0x10 [ 427.582543][T11688] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 427.582578][T11688] ? __pfx_guard_install_set_pte+0x10/0x10 [ 427.582615][T11688] ? __pfx_guard_install_set_pte+0x10/0x10 [ 427.582649][T11688] ? __pfx_guard_install_set_pte+0x10/0x10 [ 427.582684][T11688] ? __pfx_walk_pgd_range+0x10/0x10 [ 427.582725][T11688] __walk_page_range+0x163/0x820 [ 427.582759][T11688] ? find_vma+0xbf/0x140 [ 427.582790][T11688] ? __pfx_find_vma+0x10/0x10 [ 427.582826][T11688] ? walk_page_test+0x9b/0x180 [ 427.582859][T11688] walk_page_range_mm+0x461/0xb40 [ 427.582896][T11688] ? __pfx_walk_page_range_mm+0x10/0x10 [ 427.582939][T11688] ? __anon_vma_prepare+0x2e2/0x5e0 [ 427.582972][T11688] madvise_vma_behavior+0xa62/0x2d60 [ 427.583013][T11688] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 427.583051][T11688] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 427.583095][T11688] ? __pfx_mas_prev+0x10/0x10 [ 427.583142][T11688] ? find_vma_prev+0xda/0x160 [ 427.583180][T11688] ? __pfx_find_vma_prev+0x10/0x10 [ 427.583225][T11688] ? __lock_acquire+0x62e/0x1ce0 [ 427.583266][T11688] madvise_walk_vmas+0x31f/0x9c0 [ 427.583307][T11688] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 427.583353][T11688] madvise_do_behavior+0x1e2/0x530 [ 427.583386][T11688] ? futex_private_hash_put+0x18a/0x300 [ 427.583418][T11688] ? __pfx_madvise_do_behavior+0x10/0x10 [ 427.583461][T11688] ? down_read+0x13d/0x480 [ 427.583499][T11688] do_madvise+0x176/0x240 [ 427.583541][T11688] ? __pfx_do_madvise+0x10/0x10 [ 427.583576][T11688] ? do_futex+0x122/0x350 [ 427.583631][T11688] ? xfd_validate_state+0x61/0x180 [ 427.583665][T11688] ? __pfx_ksys_write+0x10/0x10 [ 427.583702][T11688] __x64_sys_madvise+0xa9/0x110 [ 427.583735][T11688] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.583769][T11688] do_syscall_64+0xcd/0x4c0 [ 427.583796][T11688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.583822][T11688] RIP: 0033:0x7f2f0c58eec9 [ 427.583843][T11688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.583869][T11688] RSP: 002b:00007f2f0d41b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 427.583895][T11688] RAX: ffffffffffffffda RBX: 00007f2f0c7e5fa0 RCX: 00007f2f0c58eec9 [ 427.583912][T11688] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 427.583928][T11688] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 427.583943][T11688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.583959][T11688] R13: 00007f2f0c7e6038 R14: 00007f2f0c7e5fa0 R15: 00007ffd65af3348 [ 427.583992][T11688] [ 428.534038][T11689] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 428.563714][T11689] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 428.606411][T11689] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 428.618134][T11689] page_type: f8(unknown) [ 428.622463][T11689] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 428.638851][T11689] raw: ffff88807fe06000 0000000000000000 00000000f8000000 0000000000000000 [ 428.667880][T11689] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 428.723630][T11689] head: ffff88807fe06000 0000000000000000 00000000f8000000 0000000000000000 [ 428.751489][T11689] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 428.833558][T11689] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 428.845661][T11689] page dumped because: unmovable page [ 428.862612][T11689] page_owner tracks the page as allocated [ 428.882820][T11689] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x429c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_ZERO|__GFP_COMP), pid 5862, tgid 5862 (syz-executor), ts 86418513031, free_ts 83467366779 [ 428.943497][T11689] post_alloc_hook+0x1c0/0x230 [ 428.968652][T11689] get_page_from_freelist+0x132b/0x38e0 [ 428.994006][T11689] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 428.999927][T11689] alloc_pages_mpol+0x1fb/0x550 [ 429.013543][T11689] ___kmalloc_large_node+0xed/0x160 [ 429.035248][T11689] __kmalloc_large_node_noprof+0x1c/0x70 [ 429.040899][T11689] __kvmalloc_node_noprof.cold+0xb/0x65 [ 429.103514][T11689] wg_packet_queue_init+0x95/0x360 [ 429.109057][T11689] wg_newlink+0x36a/0x780 [ 429.113554][T11689] rtnl_newlink+0xc45/0x2000 [ 429.118148][T11689] rtnetlink_rcv_msg+0x95e/0xe90 [ 429.143767][T11689] netlink_rcv_skb+0x155/0x420 [ 429.148558][T11689] netlink_unicast+0x5aa/0x870 [ 429.163933][T11689] netlink_sendmsg+0x8d1/0xdd0 [ 429.168720][T11689] __sys_sendto+0x4a0/0x520 [ 429.173241][T11689] __x64_sys_sendto+0xe0/0x1c0 [ 429.209207][T11689] page last free pid 5853 tgid 5853 stack trace: [ 429.235974][T11689] __free_frozen_pages+0x7d5/0x10f0 [ 429.241190][T11689] __folio_put+0x329/0x450 [ 429.281786][T11689] skb_release_data+0x81a/0x9e0 [ 429.317235][T11689] __kfree_skb+0x4f/0x70 [ 429.333273][T11689] tcp_ack+0x19b2/0x5bf0 [ 429.353286][T11689] tcp_rcv_established+0xda2/0x23f0 [ 429.363282][T11689] tcp_v4_do_rcv+0x5ca/0xa90 [ 429.367887][T11689] __release_sock+0x31b/0x400 [ 429.398255][T11689] __sk_flush_backlog+0x27/0xc0 [ 429.429093][T11689] tcp_sendmsg_locked+0x3957/0x42a0 [ 429.458952][T11689] tcp_sendmsg+0x2e/0x50 [ 429.489264][T11689] inet_sendmsg+0xb9/0x140 [ 429.514075][T11689] sock_write_iter+0x4aa/0x5b0 [ 429.518865][T11689] vfs_write+0x7d3/0x11d0 [ 429.574688][T11689] ksys_write+0x1f8/0x250 [ 429.585099][T11689] do_syscall_64+0xcd/0x4c0 [ 430.346944][ T8305] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 430.363294][ T8305] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 430.375488][ T8305] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 430.388595][ T8305] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 430.408887][ T8305] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 431.351597][T11698] chnl_net:caif_netlink_parms(): no params data found [ 431.722975][ T8275] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 431.732094][ T8275] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 431.740516][ T8275] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 431.750359][ T8275] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 431.758927][ T8275] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 431.887201][T11698] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.898893][T11698] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.908585][T11698] bridge_slave_0: entered allmulticast mode [ 431.917178][T11698] bridge_slave_0: entered promiscuous mode [ 431.930364][T11698] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.943246][T11698] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.964395][T11698] bridge_slave_1: entered allmulticast mode [ 431.983459][T11698] bridge_slave_1: entered promiscuous mode [ 432.077956][T11698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.099411][T11698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.294864][T11698] team0: Port device team_slave_0 added [ 432.313445][T11698] team0: Port device team_slave_1 added [ 432.398063][T11698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.405484][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.442740][T11698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.464957][ T8275] Bluetooth: hci10: command tx timeout [ 432.525945][T11698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.551923][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.579152][T11698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.781080][T11698] hsr_slave_0: entered promiscuous mode [ 432.816383][T11698] hsr_slave_1: entered promiscuous mode [ 432.864101][T11698] debugfs: 'hsr0' already exists in 'hsr' [ 432.882949][T11698] Cannot create hsr debugfs directory [ 432.933579][T11723] chnl_net:caif_netlink_parms(): no params data found [ 433.334437][T11723] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.351872][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.359713][T11723] bridge_slave_0: entered allmulticast mode [ 433.371294][T11723] bridge_slave_0: entered promiscuous mode [ 433.430830][T11723] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.441722][T11723] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.451018][T11723] bridge_slave_1: entered allmulticast mode [ 433.484479][T11723] bridge_slave_1: entered promiscuous mode [ 433.656137][T11723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.697570][T11723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.822044][ T8275] Bluetooth: hci11: command tx timeout [ 434.126608][T11723] team0: Port device team_slave_0 added [ 434.168424][T11723] team0: Port device team_slave_1 added [ 434.540813][ T8275] Bluetooth: hci10: command tx timeout [ 434.634106][T11744] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 434.775000][T11723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.796621][T11723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.905341][T11723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.954863][T11723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.978311][T11723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.004793][T11723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.027116][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'. [ 435.133014][T11756] FAULT_INJECTION: forcing a failure. [ 435.133014][T11756] name failslab, interval 1, probability 0, space 0, times 0 [ 435.166144][T11756] CPU: 0 UID: 0 PID: 11756 Comm: syz.8.1195 Tainted: G U syzkaller #0 PREEMPT(full) [ 435.166185][T11756] Tainted: [U]=USER [ 435.166194][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 435.166209][T11756] Call Trace: [ 435.166217][T11756] [ 435.166227][T11756] dump_stack_lvl+0x16c/0x1f0 [ 435.166271][T11756] should_fail_ex+0x512/0x640 [ 435.166315][T11756] ? fs_reclaim_acquire+0xae/0x150 [ 435.166355][T11756] should_failslab+0xc2/0x120 [ 435.166387][T11756] __kmalloc_cache_noprof+0x6a/0x3e0 [ 435.166414][T11756] ? tomoyo_init_log+0x197/0x2140 [ 435.166454][T11756] tomoyo_init_log+0x197/0x2140 [ 435.166488][T11756] ? kasan_save_stack+0x33/0x60 [ 435.166516][T11756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.166564][T11756] ? __pfx_tomoyo_init_log+0x10/0x10 [ 435.166599][T11756] ? tomoyo_profile+0x47/0x60 [ 435.166624][T11756] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 435.166660][T11756] tomoyo_supervisor+0x302/0x13b0 [ 435.166689][T11756] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 435.166712][T11756] ? __pfx_vsnprintf+0x10/0x10 [ 435.166757][T11756] ? tomoyo_encode2+0x329/0x3e0 [ 435.166795][T11756] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 435.166819][T11756] tomoyo_path_number_perm+0x448/0x580 [ 435.166839][T11756] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 435.166875][T11756] ? find_held_lock+0x2b/0x80 [ 435.166889][T11756] ? hook_file_ioctl_common+0x145/0x410 [ 435.166912][T11756] ? __fget_files+0x20e/0x3c0 [ 435.166931][T11756] security_file_ioctl+0x9b/0x240 [ 435.166951][T11756] __x64_sys_ioctl+0xb7/0x210 [ 435.166975][T11756] do_syscall_64+0xcd/0x4c0 [ 435.166989][T11756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.167004][T11756] RIP: 0033:0x7f8f4e78eec9 [ 435.167016][T11756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.167030][T11756] RSP: 002b:00007f8f4f6a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.167044][T11756] RAX: ffffffffffffffda RBX: 00007f8f4e9e6270 RCX: 00007f8f4e78eec9 [ 435.167053][T11756] RDX: 0000000000000006 RSI: 00000000000007a0 RDI: 000000000000000a [ 435.167062][T11756] RBP: 00007f8f4e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.167070][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.167078][T11756] R13: 00007f8f4e9e6308 R14: 00007f8f4e9e6270 R15: 00007ffcac8e68b8 [ 435.167097][T11756] [ 435.900083][ T8275] Bluetooth: hci11: command tx timeout [ 436.022527][T11764] FAULT_INJECTION: forcing a failure. [ 436.022527][T11764] name failslab, interval 1, probability 0, space 0, times 0 [ 436.035389][T11764] CPU: 0 UID: 0 PID: 11764 Comm: syz.8.1196 Tainted: G U syzkaller #0 PREEMPT(full) [ 436.035427][T11764] Tainted: [U]=USER [ 436.035435][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.035448][T11764] Call Trace: [ 436.035456][T11764] [ 436.035465][T11764] dump_stack_lvl+0x16c/0x1f0 [ 436.035506][T11764] should_fail_ex+0x512/0x640 [ 436.035541][T11764] ? fs_reclaim_acquire+0xae/0x150 [ 436.035579][T11764] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 436.035613][T11764] should_failslab+0xc2/0x120 [ 436.035645][T11764] __kmalloc_noprof+0xd2/0x510 [ 436.035682][T11764] tomoyo_realpath_from_path+0xc2/0x6e0 [ 436.035721][T11764] ? tomoyo_profile+0x47/0x60 [ 436.035747][T11764] tomoyo_path_number_perm+0x245/0x580 [ 436.035775][T11764] ? tomoyo_path_number_perm+0x237/0x580 [ 436.035807][T11764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 436.035838][T11764] ? find_held_lock+0x2b/0x80 [ 436.035892][T11764] ? find_held_lock+0x2b/0x80 [ 436.035916][T11764] ? hook_file_ioctl_common+0x145/0x410 [ 436.035955][T11764] ? __fget_files+0x20e/0x3c0 [ 436.035988][T11764] security_file_ioctl+0x9b/0x240 [ 436.036022][T11764] __x64_sys_ioctl+0xb7/0x210 [ 436.036061][T11764] do_syscall_64+0xcd/0x4c0 [ 436.036087][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.036112][T11764] RIP: 0033:0x7f8f4e78eec9 [ 436.036132][T11764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.036155][T11764] RSP: 002b:00007f8f4f704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.036179][T11764] RAX: ffffffffffffffda RBX: 00007f8f4e9e5fa0 RCX: 00007f8f4e78eec9 [ 436.036196][T11764] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000004 [ 436.036210][T11764] RBP: 00007f8f4f704090 R08: 0000000000000000 R09: 0000000000000000 [ 436.036224][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.036245][T11764] R13: 00007f8f4e9e6038 R14: 00007f8f4e9e5fa0 R15: 00007ffcac8e68b8 [ 436.036281][T11764] [ 436.036612][T11764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 436.299511][T11723] hsr_slave_0: entered promiscuous mode [ 436.327393][T11723] hsr_slave_1: entered promiscuous mode [ 436.338412][T11723] debugfs: 'hsr0' already exists in 'hsr' [ 436.346376][T11723] Cannot create hsr debugfs directory [ 436.582043][T11698] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 436.622678][ T8275] Bluetooth: hci10: command tx timeout [ 436.730579][T11698] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 436.831019][T11698] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 437.094177][T11698] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 437.567233][T11723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.867274][T11723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.979247][ T8275] Bluetooth: hci11: command tx timeout [ 438.169232][T11723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.513290][T11723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.713406][ T8275] Bluetooth: hci10: command tx timeout [ 438.855654][T11698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.042886][T11698] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.592270][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.599519][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.653821][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.660946][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.807221][T11831] random: crng reseeded on system resumption [ 440.005157][T11723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.058188][ T8275] Bluetooth: hci11: command tx timeout [ 440.146330][T11698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 440.156848][T11698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.234029][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.249295][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.281328][T11723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.317954][T11723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.406809][T11723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.060895][T11698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.196148][T11723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.379444][T11723] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.480550][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.487705][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.620394][T11698] veth0_vlan: entered promiscuous mode [ 441.690996][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.698287][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.992667][T11698] veth1_vlan: entered promiscuous mode [ 442.406928][T11698] veth0_macvtap: entered promiscuous mode [ 442.511624][T11698] veth1_macvtap: entered promiscuous mode [ 442.671022][T11698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.694918][T11698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.763850][ T6304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.792732][ T6304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.820377][ T6304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.866930][ T6304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.458715][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.493285][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.660201][T11723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.722375][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.770372][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.951073][T11723] veth0_vlan: entered promiscuous mode [ 443.987548][T11723] veth1_vlan: entered promiscuous mode [ 444.090707][T11723] veth0_macvtap: entered promiscuous mode [ 444.167475][T11723] veth1_macvtap: entered promiscuous mode [ 444.301275][T11723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.395965][T11723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.472738][ T6246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.496861][ T6246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.545732][ T6246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.600106][ T6246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.025043][ T6604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.043018][ T6604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.140732][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.202579][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.395647][ T30] audit: type=1326 audit(4294975218.679:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11937 comm="syz.1.1216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff02cb8eec9 code=0x0 [ 447.566560][T11971] random: crng reseeded on system resumption [ 450.071082][T12009] ima: Unable to open file: /surit‹¯Ṛy/integrity?iqa/policy (-2) [ 450.555780][T12008] ima: policy update failed [ 450.603149][ T30] audit: type=1802 audit(4294975222.881:20): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1225" res=0 errno=0 [ 450.967565][T12031] kAFS: Invalid Command on /proc/fs/afs/cells file [ 452.859516][T12066] FAULT_INJECTION: forcing a failure. [ 452.859516][T12066] name failslab, interval 1, probability 0, space 0, times 0 [ 452.971585][T12066] CPU: 0 UID: 0 PID: 12066 Comm: syz.3.1233 Tainted: G U syzkaller #0 PREEMPT(full) [ 452.971625][T12066] Tainted: [U]=USER [ 452.971635][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.971647][T12066] Call Trace: [ 452.971655][T12066] [ 452.971665][T12066] dump_stack_lvl+0x16c/0x1f0 [ 452.971710][T12066] should_fail_ex+0x512/0x640 [ 452.971747][T12066] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 452.971780][T12066] should_failslab+0xc2/0x120 [ 452.971812][T12066] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 452.971841][T12066] ? ptlock_alloc+0x1f/0x70 [ 452.971872][T12066] ptlock_alloc+0x1f/0x70 [ 452.971895][T12066] pte_alloc_one+0x82/0x3a0 [ 452.971925][T12066] do_pte_missing+0x1afc/0x3ba0 [ 452.971953][T12066] ? do_raw_spin_unlock+0x172/0x230 [ 452.971992][T12066] ? __pmd_alloc+0x3fb/0x930 [ 452.972030][T12066] __handle_mm_fault+0x152a/0x2a50 [ 452.972063][T12066] ? __pfx___handle_mm_fault+0x10/0x10 [ 452.972117][T12066] handle_mm_fault+0x589/0xd10 [ 452.972160][T12066] __get_user_pages+0x551/0x34a0 [ 452.972215][T12066] ? __pfx___get_user_pages+0x10/0x10 [ 452.972262][T12066] populate_vma_page_range+0x267/0x3f0 [ 452.972301][T12066] ? __pfx_populate_vma_page_range+0x10/0x10 [ 452.972332][T12066] ? __pfx_find_vma_intersection+0x10/0x10 [ 452.972361][T12066] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 452.972389][T12066] __mm_populate+0x1d8/0x380 [ 452.972410][T12066] ? __pfx___mm_populate+0x10/0x10 [ 452.972431][T12066] ? up_write+0x1b2/0x520 [ 452.972462][T12066] do_mlock+0x448/0x810 [ 452.972489][T12066] ? __pfx_do_mlock+0x10/0x10 [ 452.972509][T12066] ? __x64_sys_futex+0x1e0/0x4c0 [ 452.972534][T12066] ? __x64_sys_futex+0x1e9/0x4c0 [ 452.972559][T12066] ? fput+0x9b/0xd0 [ 452.972589][T12066] ? xfd_validate_state+0x61/0x180 [ 452.972616][T12066] ? __pfx_ksys_write+0x10/0x10 [ 452.972646][T12066] __x64_sys_mlock+0x59/0x80 [ 452.972670][T12066] do_syscall_64+0xcd/0x4c0 [ 452.972691][T12066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.972712][T12066] RIP: 0033:0x7f555038eec9 [ 452.972729][T12066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.972751][T12066] RSP: 002b:00007f55511f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 452.972773][T12066] RAX: ffffffffffffffda RBX: 00007f55505e6090 RCX: 00007f555038eec9 [ 452.972787][T12066] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 000000000000002a [ 452.972799][T12066] RBP: 00007f5550411f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.972811][T12066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.972824][T12066] R13: 00007f55505e6128 R14: 00007f55505e6090 R15: 00007ffc13fd16b8 [ 452.972853][T12066] [ 453.645602][T12067] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1233'. [ 454.095568][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1236'. [ 454.473479][T12067] syz.3.1233 (12067) used greatest stack depth: 19848 bytes left [ 455.565702][T12113] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 456.136216][T12130] zswap: compressor not available [ 457.121551][T12154] FAULT_INJECTION: forcing a failure. [ 457.121551][T12154] name failslab, interval 1, probability 0, space 0, times 0 [ 457.181817][T12154] CPU: 1 UID: 0 PID: 12154 Comm: syz.3.1245 Tainted: G U syzkaller #0 PREEMPT(full) [ 457.181858][T12154] Tainted: [U]=USER [ 457.181867][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.181881][T12154] Call Trace: [ 457.181890][T12154] [ 457.181908][T12154] dump_stack_lvl+0x16c/0x1f0 [ 457.181954][T12154] should_fail_ex+0x512/0x640 [ 457.181991][T12154] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 457.182027][T12154] should_failslab+0xc2/0x120 [ 457.182062][T12154] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 457.182094][T12154] ? mem_cgroup_css_alloc+0x5c/0x1e80 [ 457.182134][T12154] mem_cgroup_css_alloc+0x5c/0x1e80 [ 457.182179][T12154] cgroup_apply_control_enable+0x4b0/0xbb0 [ 457.182233][T12154] cgroup_mkdir+0x5e7/0x11f0 [ 457.182278][T12154] ? __pfx_cgroup_mkdir+0x10/0x10 [ 457.182318][T12154] kernfs_iop_mkdir+0x10e/0x190 [ 457.182367][T12154] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 457.182405][T12154] vfs_mkdir+0x593/0x8c0 [ 457.182437][T12154] do_mkdirat+0x304/0x3e0 [ 457.182471][T12154] ? __pfx_do_mkdirat+0x10/0x10 [ 457.182506][T12154] ? getname_flags.part.0+0x1c5/0x550 [ 457.182549][T12154] __x64_sys_mkdir+0xef/0x140 [ 457.182581][T12154] do_syscall_64+0xcd/0x4c0 [ 457.182608][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.182635][T12154] RIP: 0033:0x7f555038eec9 [ 457.182656][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.182682][T12154] RSP: 002b:00007f5551215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 457.182707][T12154] RAX: ffffffffffffffda RBX: 00007f55505e5fa0 RCX: 00007f555038eec9 [ 457.182724][T12154] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 457.182739][T12154] RBP: 00007f5550411f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.182754][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.182769][T12154] R13: 00007f55505e6038 R14: 00007f55505e5fa0 R15: 00007ffc13fd16b8 [ 457.182805][T12154] [ 457.912790][T12159] FAULT_INJECTION: forcing a failure. [ 457.912790][T12159] name failslab, interval 1, probability 0, space 0, times 0 [ 457.942573][T12159] CPU: 0 UID: 0 PID: 12159 Comm: syz.3.1246 Tainted: G U syzkaller #0 PREEMPT(full) [ 457.942624][T12159] Tainted: [U]=USER [ 457.942632][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.942647][T12159] Call Trace: [ 457.942655][T12159] [ 457.942666][T12159] dump_stack_lvl+0x16c/0x1f0 [ 457.942710][T12159] should_fail_ex+0x512/0x640 [ 457.942746][T12159] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 457.942779][T12159] should_failslab+0xc2/0x120 [ 457.942814][T12159] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 457.942844][T12159] ? mem_cgroup_css_alloc+0x5c/0x1e80 [ 457.942880][T12159] mem_cgroup_css_alloc+0x5c/0x1e80 [ 457.942923][T12159] cgroup_apply_control_enable+0x4b0/0xbb0 [ 457.942976][T12159] cgroup_mkdir+0x5e7/0x11f0 [ 457.943017][T12159] ? __pfx_cgroup_mkdir+0x10/0x10 [ 457.943056][T12159] kernfs_iop_mkdir+0x10e/0x190 [ 457.943089][T12159] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 457.943124][T12159] vfs_mkdir+0x593/0x8c0 [ 457.943153][T12159] do_mkdirat+0x304/0x3e0 [ 457.943187][T12159] ? __pfx_do_mkdirat+0x10/0x10 [ 457.943221][T12159] ? getname_flags.part.0+0x1c5/0x550 [ 457.943258][T12159] __x64_sys_mkdir+0xef/0x140 [ 457.943289][T12159] do_syscall_64+0xcd/0x4c0 [ 457.943314][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.943341][T12159] RIP: 0033:0x7f555038eec9 [ 457.943362][T12159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.943388][T12159] RSP: 002b:00007f5551215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 457.943411][T12159] RAX: ffffffffffffffda RBX: 00007f55505e5fa0 RCX: 00007f555038eec9 [ 457.943429][T12159] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 457.943445][T12159] RBP: 00007f5550411f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.943460][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.943475][T12159] R13: 00007f55505e6038 R14: 00007f55505e5fa0 R15: 00007ffc13fd16b8 [ 457.943512][T12159] [ 459.375349][ T8305] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 459.387298][ T8305] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 459.397179][ T8305] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 459.406208][ T8305] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 459.529492][ T8305] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 460.239731][T12182] chnl_net:caif_netlink_parms(): no params data found [ 461.040908][T12182] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.048956][T12182] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.056654][T12182] bridge_slave_0: entered allmulticast mode [ 461.064347][T12182] bridge_slave_0: entered promiscuous mode [ 461.408379][T12182] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.451862][T12182] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.459160][T12182] bridge_slave_1: entered allmulticast mode [ 461.495304][T12182] bridge_slave_1: entered promiscuous mode [ 461.571968][ T8275] Bluetooth: hci12: command tx timeout [ 461.700319][T12182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.804042][T12182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.151060][T12182] team0: Port device team_slave_0 added [ 462.173819][T12182] team0: Port device team_slave_1 added [ 462.362935][T12182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.391555][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.445221][T12182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.521619][T12182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.550095][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.707749][T12182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.774242][ T8275] Bluetooth: hci1: command 0x0406 tx timeout [ 462.863508][T12222] FAULT_INJECTION: forcing a failure. [ 462.863508][T12222] name failslab, interval 1, probability 0, space 0, times 0 [ 462.967116][T12222] CPU: 1 UID: 0 PID: 12222 Comm: syz.5.1255 Tainted: G U syzkaller #0 PREEMPT(full) [ 462.967159][T12222] Tainted: [U]=USER [ 462.967167][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.967181][T12222] Call Trace: [ 462.967190][T12222] [ 462.967200][T12222] dump_stack_lvl+0x16c/0x1f0 [ 462.967246][T12222] should_fail_ex+0x512/0x640 [ 462.967294][T12222] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 462.967328][T12222] should_failslab+0xc2/0x120 [ 462.967362][T12222] __kmalloc_cache_noprof+0x6a/0x3e0 [ 462.967388][T12222] ? idr_replace+0xfa/0x170 [ 462.967422][T12222] ? mem_cgroup_css_online+0x5c/0x640 [ 462.967453][T12222] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 462.967476][T12222] mem_cgroup_css_online+0x5c/0x640 [ 462.967500][T12222] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 462.967523][T12222] online_css+0xaf/0x350 [ 462.967557][T12222] cgroup_apply_control_enable+0x702/0xbb0 [ 462.967610][T12222] cgroup_mkdir+0x5e7/0x11f0 [ 462.967651][T12222] ? __pfx_cgroup_mkdir+0x10/0x10 [ 462.967686][T12222] kernfs_iop_mkdir+0x10e/0x190 [ 462.967718][T12222] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 462.967750][T12222] vfs_mkdir+0x593/0x8c0 [ 462.967773][T12222] do_mkdirat+0x304/0x3e0 [ 462.967802][T12222] ? __pfx_do_mkdirat+0x10/0x10 [ 462.967836][T12222] ? getname_flags.part.0+0x1c5/0x550 [ 462.967878][T12222] __x64_sys_mkdir+0xef/0x140 [ 462.967910][T12222] do_syscall_64+0xcd/0x4c0 [ 462.967937][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.967963][T12222] RIP: 0033:0x7f2f0c58eec9 [ 462.967985][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.968012][T12222] RSP: 002b:00007f2f0d41b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 462.968038][T12222] RAX: ffffffffffffffda RBX: 00007f2f0c7e5fa0 RCX: 00007f2f0c58eec9 [ 462.968056][T12222] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 462.968071][T12222] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 462.968087][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.968102][T12222] R13: 00007f2f0c7e6038 R14: 00007f2f0c7e5fa0 R15: 00007ffd65af3348 [ 462.968142][T12222] [ 463.484301][T12221] Invalid ELF header magic: != ELF [ 463.551563][T12225] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 463.556816][T12182] hsr_slave_0: entered promiscuous mode [ 463.603340][T12182] hsr_slave_1: entered promiscuous mode [ 463.609771][T12182] debugfs: 'hsr0' already exists in 'hsr' [ 463.642834][T12182] Cannot create hsr debugfs directory [ 463.660465][ T8305] Bluetooth: hci12: command tx timeout [ 463.821521][T12226] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 464.740008][T12182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.219741][T12182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.323243][T12256] Setting dangerous option i915.mitigations - tainting kernel [ 465.776795][ T8305] Bluetooth: hci12: command tx timeout [ 465.957983][T12182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.219040][T12182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.635143][T12182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.687330][T12182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.749117][T12182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.920066][T12182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.437940][T12182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.549872][T12182] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.597581][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.604800][ T6597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.681380][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.688599][ T6246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.812016][ T8305] Bluetooth: hci12: command tx timeout [ 467.948991][T12292] random: crng reseeded on system resumption [ 468.412950][ T8305] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 468.412975][ T8305] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 468.428232][ T8305] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 468.428273][ T8305] Bluetooth: hci5: adv larger than maximum supported [ 468.439272][ T8305] Bluetooth: hci5: Malformed LE Event: 0x0d [ 468.629983][T12182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.812166][T12182] veth0_vlan: entered promiscuous mode [ 468.846211][T12182] veth1_vlan: entered promiscuous mode [ 468.877780][T12313] FAULT_INJECTION: forcing a failure. [ 468.877780][T12313] name failslab, interval 1, probability 0, space 0, times 0 [ 468.945958][T12182] veth0_macvtap: entered promiscuous mode [ 468.962482][T12313] CPU: 1 UID: 0 PID: 12313 Comm: syz.3.1272 Tainted: G U syzkaller #0 PREEMPT(full) [ 468.962524][T12313] Tainted: [U]=USER [ 468.962532][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.962547][T12313] Call Trace: [ 468.962555][T12313] [ 468.962565][T12313] dump_stack_lvl+0x16c/0x1f0 [ 468.962611][T12313] should_fail_ex+0x512/0x640 [ 468.962648][T12313] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 468.962685][T12313] should_failslab+0xc2/0x120 [ 468.962723][T12313] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 468.962756][T12313] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 468.962797][T12313] mem_cgroup_css_alloc+0xa8f/0x1e80 [ 468.962844][T12313] cgroup_apply_control_enable+0x4b0/0xbb0 [ 468.962898][T12313] cgroup_mkdir+0x5e7/0x11f0 [ 468.962943][T12313] ? __pfx_cgroup_mkdir+0x10/0x10 [ 468.962983][T12313] kernfs_iop_mkdir+0x10e/0x190 [ 468.963019][T12313] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 468.963054][T12313] vfs_mkdir+0x593/0x8c0 [ 468.963085][T12313] do_mkdirat+0x304/0x3e0 [ 468.963128][T12313] ? __pfx_do_mkdirat+0x10/0x10 [ 468.963164][T12313] ? getname_flags.part.0+0x1c5/0x550 [ 468.963207][T12313] __x64_sys_mkdir+0xef/0x140 [ 468.963239][T12313] do_syscall_64+0xcd/0x4c0 [ 468.963267][T12313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.963294][T12313] RIP: 0033:0x7f555038eec9 [ 468.963316][T12313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.963342][T12313] RSP: 002b:00007f5551215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 468.963368][T12313] RAX: ffffffffffffffda RBX: 00007f55505e5fa0 RCX: 00007f555038eec9 [ 468.963387][T12313] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 468.963404][T12313] RBP: 00007f5550411f91 R08: 0000000000000000 R09: 0000000000000000 [ 468.963421][T12313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.963437][T12313] R13: 00007f55505e6038 R14: 00007f55505e5fa0 R15: 00007ffc13fd16b8 [ 468.963475][T12313] [ 469.223176][T12182] veth1_macvtap: entered promiscuous mode [ 469.266510][T12182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.282893][T12182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.392342][ T6303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.482111][ T6303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.647496][ T6604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.682297][ T6604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.907662][T12330] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 469.982285][ T6597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.991419][ T6597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.283581][ T6597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.403283][ T6597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.083222][T12350] FAULT_INJECTION: forcing a failure. [ 471.083222][T12350] name failslab, interval 1, probability 0, space 0, times 0 [ 471.133651][T12350] CPU: 1 UID: 0 PID: 12350 Comm: syz.2.1282 Tainted: G U syzkaller #0 PREEMPT(full) [ 471.133694][T12350] Tainted: [U]=USER [ 471.133703][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.133719][T12350] Call Trace: [ 471.133728][T12350] [ 471.133738][T12350] dump_stack_lvl+0x16c/0x1f0 [ 471.133783][T12350] should_fail_ex+0x512/0x640 [ 471.133820][T12350] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 471.133856][T12350] should_failslab+0xc2/0x120 [ 471.133891][T12350] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 471.133921][T12350] ? __asan_memcpy+0x3c/0x60 [ 471.133945][T12350] ? __kernfs_new_node+0xd2/0x8e0 [ 471.133990][T12350] __kernfs_new_node+0xd2/0x8e0 [ 471.134027][T12350] ? __pfx___kernfs_new_node+0x10/0x10 [ 471.134071][T12350] ? find_held_lock+0x2b/0x80 [ 471.134099][T12350] ? kernfs_root+0xee/0x2a0 [ 471.134138][T12350] kernfs_new_node+0x13c/0x1e0 [ 471.134182][T12350] __kernfs_create_file+0x53/0x350 [ 471.134213][T12350] cgroup_addrm_files+0x546/0xc20 [ 471.134268][T12350] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 471.134321][T12350] ? idr_replace+0xfa/0x170 [ 471.134355][T12350] ? __pfx_idr_replace+0x10/0x10 [ 471.134395][T12350] css_populate_dir+0x169/0x580 [ 471.134429][T12350] cgroup_apply_control_enable+0x3f3/0xbb0 [ 471.134481][T12350] cgroup_mkdir+0x5e7/0x11f0 [ 471.134525][T12350] ? __pfx_cgroup_mkdir+0x10/0x10 [ 471.134564][T12350] kernfs_iop_mkdir+0x10e/0x190 [ 471.134598][T12350] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 471.134634][T12350] vfs_mkdir+0x593/0x8c0 [ 471.134664][T12350] do_mkdirat+0x304/0x3e0 [ 471.134702][T12350] ? __pfx_do_mkdirat+0x10/0x10 [ 471.134737][T12350] ? getname_flags.part.0+0x1c5/0x550 [ 471.134780][T12350] __x64_sys_mkdir+0xef/0x140 [ 471.134812][T12350] do_syscall_64+0xcd/0x4c0 [ 471.134839][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.134865][T12350] RIP: 0033:0x7f40dbd8eec9 [ 471.134887][T12350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.134914][T12350] RSP: 002b:00007f40dcc34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 471.134939][T12350] RAX: ffffffffffffffda RBX: 00007f40dbfe5fa0 RCX: 00007f40dbd8eec9 [ 471.134958][T12350] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 471.134975][T12350] RBP: 00007f40dbe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.134997][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.135013][T12350] R13: 00007f40dbfe6038 R14: 00007f40dbfe5fa0 R15: 00007ffc417a6248 [ 471.135050][T12350] [ 471.491863][T12350] cgroup: cgroup_addrm_files: failed to add usage_percpu_sys, err=-12 [ 473.840252][T12393] FAULT_INJECTION: forcing a failure. [ 473.840252][T12393] name failslab, interval 1, probability 0, space 0, times 0 [ 473.881932][T12393] CPU: 0 UID: 0 PID: 12393 Comm: syz.2.1294 Tainted: G U syzkaller #0 PREEMPT(full) [ 473.881976][T12393] Tainted: [U]=USER [ 473.881985][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.882002][T12393] Call Trace: [ 473.882011][T12393] [ 473.882022][T12393] dump_stack_lvl+0x16c/0x1f0 [ 473.882066][T12393] should_fail_ex+0x512/0x640 [ 473.882101][T12393] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 473.882134][T12393] should_failslab+0xc2/0x120 [ 473.882166][T12393] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 473.882192][T12393] ? __asan_memcpy+0x3c/0x60 [ 473.882215][T12393] ? __kernfs_new_node+0xd2/0x8e0 [ 473.882251][T12393] __kernfs_new_node+0xd2/0x8e0 [ 473.882283][T12393] ? __pfx___kernfs_new_node+0x10/0x10 [ 473.882323][T12393] ? find_held_lock+0x2b/0x80 [ 473.882347][T12393] ? kernfs_root+0xee/0x2a0 [ 473.882384][T12393] kernfs_new_node+0x13c/0x1e0 [ 473.882422][T12393] __kernfs_create_file+0x53/0x350 [ 473.882453][T12393] cgroup_addrm_files+0x546/0xc20 [ 473.882499][T12393] ? __xa_store+0x1dc/0x2e0 [ 473.882524][T12393] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 473.882559][T12393] ? __pfx___xa_store+0x10/0x10 [ 473.882594][T12393] ? do_raw_spin_unlock+0x172/0x230 [ 473.882637][T12393] css_populate_dir+0x169/0x580 [ 473.882670][T12393] cgroup_apply_control_enable+0x3f3/0xbb0 [ 473.882721][T12393] cgroup_mkdir+0x5e7/0x11f0 [ 473.882759][T12393] ? __pfx_cgroup_mkdir+0x10/0x10 [ 473.882807][T12393] kernfs_iop_mkdir+0x10e/0x190 [ 473.882844][T12393] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 473.882881][T12393] vfs_mkdir+0x593/0x8c0 [ 473.882911][T12393] do_mkdirat+0x304/0x3e0 [ 473.882945][T12393] ? __pfx_do_mkdirat+0x10/0x10 [ 473.882981][T12393] ? getname_flags.part.0+0x1c5/0x550 [ 473.883024][T12393] __x64_sys_mkdir+0xef/0x140 [ 473.883055][T12393] do_syscall_64+0xcd/0x4c0 [ 473.883082][T12393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.883108][T12393] RIP: 0033:0x7f40dbd8eec9 [ 473.883131][T12393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.883157][T12393] RSP: 002b:00007f40dcc34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 473.883184][T12393] RAX: ffffffffffffffda RBX: 00007f40dbfe5fa0 RCX: 00007f40dbd8eec9 [ 473.883202][T12393] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 473.883219][T12393] RBP: 00007f40dbe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 473.883235][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.883250][T12393] R13: 00007f40dbfe6038 R14: 00007f40dbfe5fa0 R15: 00007ffc417a6248 [ 473.883287][T12393] [ 473.883856][T12393] cgroup: cgroup_addrm_files: failed to add limit_in_bytes, err=-12 [ 474.004405][T12400] FAULT_INJECTION: forcing a failure. [ 474.004405][T12400] name failslab, interval 1, probability 0, space 0, times 0 [ 474.322085][T12400] CPU: 0 UID: 0 PID: 12400 Comm: syz.5.1297 Tainted: G U syzkaller #0 PREEMPT(full) [ 474.322127][T12400] Tainted: [U]=USER [ 474.322135][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 474.322149][T12400] Call Trace: [ 474.322157][T12400] [ 474.322166][T12400] dump_stack_lvl+0x16c/0x1f0 [ 474.322206][T12400] should_fail_ex+0x512/0x640 [ 474.322241][T12400] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 474.322273][T12400] should_failslab+0xc2/0x120 [ 474.322305][T12400] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 474.322333][T12400] ? d_instantiate+0x77/0x90 [ 474.322362][T12400] ? alloc_empty_file+0x55/0x1e0 [ 474.322402][T12400] alloc_empty_file+0x55/0x1e0 [ 474.322437][T12400] alloc_file_pseudo+0x13a/0x230 [ 474.322474][T12400] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 474.322508][T12400] ? alloc_fd+0x471/0x7d0 [ 474.322540][T12400] sock_alloc_file+0x50/0x210 [ 474.322565][T12400] __sys_socket+0x1c0/0x260 [ 474.322594][T12400] ? __pfx___sys_socket+0x10/0x10 [ 474.322622][T12400] ? xfd_validate_state+0x61/0x180 [ 474.322655][T12400] ? __pfx_ksys_write+0x10/0x10 [ 474.322690][T12400] __x64_sys_socket+0x72/0xb0 [ 474.322716][T12400] ? lockdep_hardirqs_on+0x7c/0x110 [ 474.322750][T12400] do_syscall_64+0xcd/0x4c0 [ 474.322781][T12400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.322806][T12400] RIP: 0033:0x7f2f0c58eec9 [ 474.322825][T12400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.322849][T12400] RSP: 002b:00007f2f0d41b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 474.322872][T12400] RAX: ffffffffffffffda RBX: 00007f2f0c7e5fa0 RCX: 00007f2f0c58eec9 [ 474.322889][T12400] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 474.322904][T12400] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.322919][T12400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.322933][T12400] R13: 00007f2f0c7e6038 R14: 00007f2f0c7e5fa0 R15: 00007ffd65af3348 [ 474.322965][T12400] [ 475.371228][ T30] audit: type=1400 audit(4294975247.637:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12412 comm="syz.3.1299" [ 476.775351][T12442] FAULT_INJECTION: forcing a failure. [ 476.775351][T12442] name failslab, interval 1, probability 0, space 0, times 0 [ 476.831901][T12442] CPU: 1 UID: 0 PID: 12442 Comm: syz.5.1307 Tainted: G U syzkaller #0 PREEMPT(full) [ 476.831945][T12442] Tainted: [U]=USER [ 476.831955][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 476.831969][T12442] Call Trace: [ 476.831979][T12442] [ 476.831989][T12442] dump_stack_lvl+0x16c/0x1f0 [ 476.832034][T12442] should_fail_ex+0x512/0x640 [ 476.832071][T12442] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 476.832112][T12442] should_failslab+0xc2/0x120 [ 476.832148][T12442] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 476.832184][T12442] ? kstrdup_const+0x63/0x80 [ 476.832221][T12442] kstrdup+0x53/0x100 [ 476.832254][T12442] kstrdup_const+0x63/0x80 [ 476.832285][T12442] __kernfs_new_node+0x9b/0x8e0 [ 476.832324][T12442] ? __pfx___kernfs_new_node+0x10/0x10 [ 476.832367][T12442] ? find_held_lock+0x2b/0x80 [ 476.832395][T12442] ? kernfs_root+0xee/0x2a0 [ 476.832435][T12442] kernfs_new_node+0x13c/0x1e0 [ 476.832478][T12442] __kernfs_create_file+0x53/0x350 [ 476.832510][T12442] cgroup_addrm_files+0x546/0xc20 [ 476.832560][T12442] ? __xa_store+0x1dc/0x2e0 [ 476.832588][T12442] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 476.832625][T12442] ? __pfx___xa_store+0x10/0x10 [ 476.832665][T12442] ? do_raw_spin_unlock+0x172/0x230 [ 476.832718][T12442] css_populate_dir+0x169/0x580 [ 476.832754][T12442] cgroup_apply_control_enable+0x3f3/0xbb0 [ 476.832810][T12442] cgroup_mkdir+0x5e7/0x11f0 [ 476.832857][T12442] ? __pfx_cgroup_mkdir+0x10/0x10 [ 476.832898][T12442] kernfs_iop_mkdir+0x10e/0x190 [ 476.832932][T12442] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 476.832969][T12442] vfs_mkdir+0x593/0x8c0 [ 476.832999][T12442] do_mkdirat+0x304/0x3e0 [ 476.833033][T12442] ? __pfx_do_mkdirat+0x10/0x10 [ 476.833068][T12442] ? getname_flags.part.0+0x1c5/0x550 [ 476.833112][T12442] __x64_sys_mkdir+0xef/0x140 [ 476.833144][T12442] do_syscall_64+0xcd/0x4c0 [ 476.833171][T12442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.833198][T12442] RIP: 0033:0x7f2f0c58eec9 [ 476.833219][T12442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.833245][T12442] RSP: 002b:00007f2f0d41b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 476.833270][T12442] RAX: ffffffffffffffda RBX: 00007f2f0c7e5fa0 RCX: 00007f2f0c58eec9 [ 476.833288][T12442] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 476.833305][T12442] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 476.833321][T12442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.833337][T12442] R13: 00007f2f0c7e6038 R14: 00007f2f0c7e5fa0 R15: 00007ffd65af3348 [ 476.833374][T12442] [ 477.411755][T12442] cgroup: cgroup_addrm_files: failed to add cgroup.event_control, err=-12 [ 479.212615][T12477] Console: switching to colour VGA+ 80x25 [ 479.378037][T12485] FAULT_INJECTION: forcing a failure. [ 479.378037][T12485] name failslab, interval 1, probability 0, space 0, times 0 [ 479.378079][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.1.1317 Tainted: G U syzkaller #0 PREEMPT(full) [ 479.378100][T12485] Tainted: [U]=USER [ 479.378105][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.378113][T12485] Call Trace: [ 479.378118][T12485] [ 479.378124][T12485] dump_stack_lvl+0x16c/0x1f0 [ 479.378150][T12485] should_fail_ex+0x512/0x640 [ 479.378173][T12485] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 479.378194][T12485] should_failslab+0xc2/0x120 [ 479.378213][T12485] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 479.378229][T12485] ? __asan_memcpy+0x3c/0x60 [ 479.378244][T12485] ? __kernfs_new_node+0xd2/0x8e0 [ 479.378265][T12485] __kernfs_new_node+0xd2/0x8e0 [ 479.378285][T12485] ? __pfx___kernfs_new_node+0x10/0x10 [ 479.378308][T12485] ? find_held_lock+0x2b/0x80 [ 479.378324][T12485] ? kernfs_root+0xee/0x2a0 [ 479.378352][T12485] kernfs_new_node+0x13c/0x1e0 [ 479.378377][T12485] __kernfs_create_file+0x53/0x350 [ 479.378395][T12485] cgroup_addrm_files+0x546/0xc20 [ 479.378424][T12485] ? __xa_store+0x1dc/0x2e0 [ 479.378439][T12485] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 479.378460][T12485] ? __pfx___xa_store+0x10/0x10 [ 479.378481][T12485] ? do_raw_spin_unlock+0x172/0x230 [ 479.378506][T12485] css_populate_dir+0x169/0x580 [ 479.378530][T12485] cgroup_apply_control_enable+0x3f3/0xbb0 [ 479.378558][T12485] cgroup_mkdir+0x5e7/0x11f0 [ 479.378584][T12485] ? __pfx_cgroup_mkdir+0x10/0x10 [ 479.378606][T12485] kernfs_iop_mkdir+0x10e/0x190 [ 479.378626][T12485] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 479.378646][T12485] vfs_mkdir+0x593/0x8c0 [ 479.378663][T12485] do_mkdirat+0x304/0x3e0 [ 479.378682][T12485] ? __pfx_do_mkdirat+0x10/0x10 [ 479.378701][T12485] ? getname_flags.part.0+0x1c5/0x550 [ 479.378725][T12485] __x64_sys_mkdir+0xef/0x140 [ 479.378742][T12485] do_syscall_64+0xcd/0x4c0 [ 479.378756][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.378771][T12485] RIP: 0033:0x7ff02cb8eec9 [ 479.378783][T12485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.378796][T12485] RSP: 002b:00007ff02da82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 479.378810][T12485] RAX: ffffffffffffffda RBX: 00007ff02cde5fa0 RCX: 00007ff02cb8eec9 [ 479.378820][T12485] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 479.378829][T12485] RBP: 00007ff02cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 479.378838][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.378847][T12485] R13: 00007ff02cde6038 R14: 00007ff02cde5fa0 R15: 00007ffd1bd13ae8 [ 479.378866][T12485] [ 479.378883][T12485] cgroup: cgroup_addrm_files: failed to add pressure_level, err=-12 [ 479.438324][T12477] Console: switching to colour frame buffer device 128x48 [ 479.778903][T12498] Invalid ELF header magic: != ELF [ 480.545253][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 480.901608][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.019643][T12504] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1320'. [ 482.428568][T12535] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 483.403675][T12543] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1328'. [ 487.014100][ T30] audit: type=1804 audit(4294975259.307:22): pid=12595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1339" name="/newroot/35/file0" dev="tmpfs" ino=198 res=1 errno=0 [ 487.099762][ T30] audit: type=1804 audit(4294975259.327:23): pid=12596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1339" name="/newroot/35/file0" dev="tmpfs" ino=198 res=1 errno=0 [ 487.593066][T12607] FAULT_INJECTION: forcing a failure. [ 487.593066][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 487.744704][T12607] CPU: 0 UID: 0 PID: 12607 Comm: syz.1.1340 Tainted: G U syzkaller #0 PREEMPT(full) [ 487.744747][T12607] Tainted: [U]=USER [ 487.744756][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.744770][T12607] Call Trace: [ 487.744779][T12607] [ 487.744790][T12607] dump_stack_lvl+0x16c/0x1f0 [ 487.744835][T12607] should_fail_ex+0x512/0x640 [ 487.744873][T12607] ? __kvmalloc_node_noprof+0x124/0x620 [ 487.744908][T12607] should_failslab+0xc2/0x120 [ 487.744951][T12607] __kvmalloc_node_noprof+0x137/0x620 [ 487.744984][T12607] ? pidlist_array_load+0x129/0x9c0 [ 487.745023][T12607] ? pidlist_array_load+0x129/0x9c0 [ 487.745051][T12607] pidlist_array_load+0x129/0x9c0 [ 487.745087][T12607] ? __pfx_pidlist_array_load+0x10/0x10 [ 487.745117][T12607] ? __pfx___mutex_lock+0x10/0x10 [ 487.745155][T12607] ? kernfs_root+0xf8/0x2a0 [ 487.745195][T12607] cgroup_pidlist_start+0x3a3/0x4f0 [ 487.745234][T12607] ? __pfx_cgroup_seqfile_start+0x10/0x10 [ 487.745269][T12607] kernfs_seq_start+0x133/0x2a0 [ 487.745298][T12607] seq_read_iter+0x2c1/0x12c0 [ 487.745343][T12607] kernfs_fop_read_iter+0x46c/0x610 [ 487.745370][T12607] ? rw_verify_area+0xcf/0x6c0 [ 487.745402][T12607] vfs_read+0x8bc/0xcf0 [ 487.745435][T12607] ? __pfx___mutex_lock+0x10/0x10 [ 487.745460][T12607] ? __pfx_vfs_read+0x10/0x10 [ 487.745516][T12607] ksys_read+0x12a/0x250 [ 487.745545][T12607] ? __pfx_ksys_read+0x10/0x10 [ 487.745586][T12607] do_syscall_64+0xcd/0x4c0 [ 487.745614][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.745641][T12607] RIP: 0033:0x7ff02cb8eec9 [ 487.745663][T12607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.745689][T12607] RSP: 002b:00007ff02da82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.745716][T12607] RAX: ffffffffffffffda RBX: 00007ff02cde5fa0 RCX: 00007ff02cb8eec9 [ 487.745734][T12607] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000002 [ 487.745749][T12607] RBP: 00007ff02cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.745765][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.745781][T12607] R13: 00007ff02cde6038 R14: 00007ff02cde5fa0 R15: 00007ffd1bd13ae8 [ 487.745818][T12607] [ 487.976620][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.568393][T12619] ima: Unable to open file: /surit‹¯Ṛy/integrity?iqa/policy (-2) [ 488.854821][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'. [ 489.040932][T12618] ima: policy update failed [ 489.060418][ T30] audit: type=1802 audit(4294975261.347:24): pid=12618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1342" res=0 errno=0 [ 490.098478][ T30] audit: type=1800 audit(4294975262.387:25): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1350" name="dbroot" dev="configfs" ino=47940 res=0 errno=0 [ 490.613711][T12662] delete_channel: no stack [ 490.859341][T12683] ima: policy update failed [ 490.949414][ T30] audit: type=1802 audit(4294975263.207:26): pid=12683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1352" res=0 errno=0 [ 493.447477][T12750] random: crng reseeded on system resumption [ 494.519969][T12761] FAULT_INJECTION: forcing a failure. [ 494.519969][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 494.628286][T12774] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 494.638053][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.1.1366 Tainted: G U syzkaller #0 PREEMPT(full) [ 494.638082][T12761] Tainted: [U]=USER [ 494.638087][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.638096][T12761] Call Trace: [ 494.638101][T12761] [ 494.638107][T12761] dump_stack_lvl+0x16c/0x1f0 [ 494.638133][T12761] should_fail_ex+0x512/0x640 [ 494.638155][T12761] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 494.638174][T12761] ? __pfx_lru_gen_seq_open+0x10/0x10 [ 494.638192][T12761] should_failslab+0xc2/0x120 [ 494.638212][T12761] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 494.638229][T12761] ? __pfx___debugfs_file_get+0x10/0x10 [ 494.638250][T12761] ? seq_open+0x55/0x170 [ 494.638269][T12761] ? __pfx_apparmor_file_open+0x10/0x10 [ 494.638286][T12761] ? __pfx_lru_gen_seq_open+0x10/0x10 [ 494.638306][T12761] seq_open+0x55/0x170 [ 494.638326][T12761] full_proxy_open_regular+0x1b6/0x360 [ 494.638342][T12761] do_dentry_open+0x982/0x1530 [ 494.638360][T12761] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 494.638378][T12761] vfs_open+0x82/0x3f0 [ 494.638401][T12761] path_openat+0x1de4/0x2cb0 [ 494.638423][T12761] ? __pfx_path_openat+0x10/0x10 [ 494.638444][T12761] do_filp_open+0x20b/0x470 [ 494.638461][T12761] ? __pfx_do_filp_open+0x10/0x10 [ 494.638497][T12761] ? alloc_fd+0x471/0x7d0 [ 494.638518][T12761] do_sys_openat2+0x11b/0x1d0 [ 494.638539][T12761] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.638560][T12761] ? find_held_lock+0x2b/0x80 [ 494.638575][T12761] ? handle_mm_fault+0x2ab/0xd10 [ 494.638594][T12761] __x64_sys_openat+0x174/0x210 [ 494.638607][T12761] ? __pfx___x64_sys_openat+0x10/0x10 [ 494.638627][T12761] do_syscall_64+0xcd/0x4c0 [ 494.638642][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.638656][T12761] RIP: 0033:0x7ff02cb8eec9 [ 494.638669][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.638683][T12761] RSP: 002b:00007ff02da61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.638696][T12761] RAX: ffffffffffffffda RBX: 00007ff02cde6090 RCX: 00007ff02cb8eec9 [ 494.638706][T12761] RDX: 00000000000c0000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 494.638714][T12761] RBP: 00007ff02cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.638723][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.638731][T12761] R13: 00007ff02cde6128 R14: 00007ff02cde6090 R15: 00007ffd1bd13ae8 [ 494.638750][T12761] [ 495.573541][T12769] random: crng reseeded on system resumption [ 496.082942][T12782] TCP: TCP_TX_DELAY enabled [ 496.730689][T12814] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 496.815958][T12809] FAULT_INJECTION: forcing a failure. [ 496.815958][T12809] name fail_futex, interval 1, probability 0, space 0, times 0 [ 496.848915][T12809] CPU: 0 UID: 0 PID: 12809 Comm: syz.1.1374 Tainted: G U syzkaller #0 PREEMPT(full) [ 496.848955][T12809] Tainted: [U]=USER [ 496.848962][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.848975][T12809] Call Trace: [ 496.848983][T12809] [ 496.848991][T12809] dump_stack_lvl+0x16c/0x1f0 [ 496.849029][T12809] should_fail_ex+0x512/0x640 [ 496.849066][T12809] get_futex_key+0x1d0/0x1560 [ 496.849122][T12809] ? __pfx_get_futex_key+0x10/0x10 [ 496.849149][T12809] ? find_held_lock+0x2b/0x80 [ 496.849174][T12809] ? __handle_mm_fault+0x14fd/0x2a50 [ 496.849204][T12809] futex_wake+0xea/0x530 [ 496.849239][T12809] ? __pfx_futex_wake+0x10/0x10 [ 496.849270][T12809] ? css_rstat_updated+0x1c2/0x510 [ 496.849292][T12809] do_futex+0x1e3/0x350 [ 496.849315][T12809] ? __pfx_do_futex+0x10/0x10 [ 496.849337][T12809] ? find_held_lock+0x2b/0x80 [ 496.849355][T12809] ? handle_mm_fault+0x2ab/0xd10 [ 496.849376][T12809] __x64_sys_futex+0x1e0/0x4c0 [ 496.849402][T12809] ? __pfx___x64_sys_futex+0x10/0x10 [ 496.849435][T12809] do_syscall_64+0xcd/0x4c0 [ 496.849454][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.849472][T12809] RIP: 0033:0x7ff02cb8eec9 [ 496.849488][T12809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.849505][T12809] RSP: 002b:00007ffd1bd13c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 496.849523][T12809] RAX: ffffffffffffffda RBX: 00007ff02cde6188 RCX: 00007ff02cb8eec9 [ 496.849534][T12809] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff02cde6188 [ 496.849545][T12809] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000151bd13f3f [ 496.849556][T12809] R10: 00007ff02cde5fa0 R11: 0000000000000246 R12: 00007ff02cde618c [ 496.849567][T12809] R13: 00007ff02cde6180 R14: 000000000000111f R15: 0000000000000004 [ 496.849591][T12809] [ 498.127547][T12841] FAULT_INJECTION: forcing a failure. [ 498.127547][T12841] name failslab, interval 1, probability 0, space 0, times 0 [ 498.216938][T12841] CPU: 1 UID: 0 PID: 12841 Comm: syz.5.1378 Tainted: G U syzkaller #0 PREEMPT(full) [ 498.216982][T12841] Tainted: [U]=USER [ 498.216991][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 498.217007][T12841] Call Trace: [ 498.217016][T12841] [ 498.217026][T12841] dump_stack_lvl+0x16c/0x1f0 [ 498.217073][T12841] should_fail_ex+0x512/0x640 [ 498.217111][T12841] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 498.217151][T12841] should_failslab+0xc2/0x120 [ 498.217185][T12841] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 498.217221][T12841] ? addrconf_init_net+0x1c2/0x8e0 [ 498.217261][T12841] ? __pfx_addrconf_init_net+0x10/0x10 [ 498.217291][T12841] kmemdup_noprof+0x29/0x60 [ 498.217324][T12841] addrconf_init_net+0x1c2/0x8e0 [ 498.217350][T12841] ? ip6addrlbl_net_init+0x142/0x380 [ 498.217386][T12841] ? __pfx_addrconf_init_net+0x10/0x10 [ 498.217415][T12841] ops_init+0x1e2/0x5f0 [ 498.217444][T12841] setup_net+0x10f/0x380 [ 498.217466][T12841] ? lockdep_init_map_type+0x5c/0x280 [ 498.217501][T12841] ? __pfx_setup_net+0x10/0x10 [ 498.217525][T12841] ? debug_mutex_init+0x37/0x70 [ 498.217556][T12841] copy_net_ns+0x2a6/0x5f0 [ 498.217587][T12841] create_new_namespaces+0x3ea/0xa90 [ 498.217626][T12841] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 498.217659][T12841] ksys_unshare+0x45b/0xa40 [ 498.217694][T12841] ? __pfx_ksys_unshare+0x10/0x10 [ 498.217730][T12841] ? xfd_validate_state+0x61/0x180 [ 498.217776][T12841] __x64_sys_unshare+0x31/0x40 [ 498.217808][T12841] do_syscall_64+0xcd/0x4c0 [ 498.217835][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.217861][T12841] RIP: 0033:0x7f2f0c58eec9 [ 498.217882][T12841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.217906][T12841] RSP: 002b:00007f2f0d41b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 498.217933][T12841] RAX: ffffffffffffffda RBX: 00007f2f0c7e5fa0 RCX: 00007f2f0c58eec9 [ 498.217957][T12841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 498.217973][T12841] RBP: 00007f2f0c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 498.217987][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.218000][T12841] R13: 00007f2f0c7e6038 R14: 00007f2f0c7e5fa0 R15: 00007ffd65af3348 [ 498.218034][T12841] [ 498.752058][ T8275] Bluetooth: hci6: command 0x0406 tx timeout [ 498.932826][T12854] random: crng reseeded on system resumption [ 500.431784][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 500.691039][ T30] audit: type=1804 audit(4294975272.957:27): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1387" name=2F6E6577726F6F742F33312F08 dev="tmpfs" ino=178 res=1 errno=0 [ 500.768608][ T30] audit: type=1800 audit(4294975272.957:28): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1387" name=08 dev="tmpfs" ino=178 res=0 errno=0 [ 501.147152][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1388'. [ 501.675513][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.681994][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.737391][ T8273] Bluetooth: hci7: command 0x0406 tx timeout [ 503.743505][ T8275] Bluetooth: hci8: command 0x0406 tx timeout [ 504.440622][T12975] random: crng reseeded on system resumption [ 504.750991][T12974] ima: Unable to open file: /surit‹¯Ṛy/integrity?iqa/policy (-2) [ 505.252215][T12973] ima: policy update failed [ 505.259324][ T30] audit: type=1802 audit(4294975277.547:29): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1403" res=0 errno=0 [ 506.196726][T12998] Console: switching to colour VGA+ 80x25 [ 506.359308][T12993] ima: Unable to open file: /surit‹¯Ṛy/integrity?iqa/policy (-2) [ 506.680507][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'. [ 506.699497][T12989] ima: policy update failed [ 506.752068][ T30] audit: type=1802 audit(4294975279.017:30): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1407" res=0 errno=0 [ 506.919156][T10231] svc: failed to register nfsdv3 RPC service (errno 512). [ 506.947588][T10231] svc: failed to register nfsaclv3 RPC service (errno 512). [ 508.613858][T13033] ima: Unable to open file: /surit‹¯Ṛy/integrity?iqa/policy (-2) [ 508.974409][T12996] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 509.199058][T13032] ima: policy update failed [ 509.204026][ T30] audit: type=1802 audit(4294975281.497:31): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1413" res=0 errno=0 [ 511.252844][ T31] INFO: task syz-executor:5865 blocked for more than 143 seconds. [ 511.260699][ T31] Tainted: G U syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 511.343923][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.357239][ T31] task:syz-executor state:D stack:24024 pid:5865 tgid:5865 ppid:1 task_flags:0x400140 flags:0x00004004 [ 511.374415][ T31] Call Trace: [ 511.381069][ T31] [ 511.390538][ T31] __schedule+0x1190/0x5de0 [ 511.396087][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 511.403201][ T31] ? __pfx___schedule+0x10/0x10 [ 511.410430][ T31] ? find_held_lock+0x2b/0x80 [ 511.431747][ T31] ? schedule+0x2d7/0x3a0 [ 511.436253][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 511.443337][ T31] schedule+0xe7/0x3a0 [ 511.497066][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.522855][ T31] __mutex_lock+0x81b/0x1060 [ 511.547007][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 511.554077][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 511.560108][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.572225][ T31] ? net_generic+0xea/0x2a0 [ 511.578926][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 511.590223][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 511.599591][ T31] nfsd_umount+0x48/0xe0 [ 511.608028][ T31] deactivate_locked_super+0xbe/0x1a0 [ 511.637676][ T31] deactivate_super+0xde/0x100 [ 511.649399][ T31] cleanup_mnt+0x225/0x450 [ 511.660863][ T31] task_work_run+0x150/0x240 [ 511.681265][ T31] ? __pfx_task_work_run+0x10/0x10 [ 511.716368][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 511.745301][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 511.765006][ T31] do_syscall_64+0x41c/0x4c0 [ 511.784684][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.802830][ T31] RIP: 0033:0x7f8be0d901f7 [ 511.834238][ T31] RSP: 002b:00007ffc0a7bed98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 511.857388][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8be0d901f7 [ 511.873154][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0a7bee50 [ 511.889723][ T31] RBP: 00007ffc0a7bee50 R08: 0000000000000000 R09: 0000000000000000 [ 511.920432][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0a7bfee0 [ 511.941262][ T31] R13: 00007f8be0e11d7d R14: 0000000000056fe9 R15: 00007ffc0a7bff20 [ 511.973261][ T31] [ 511.978712][ T31] INFO: task syz-executor:7941 blocked for more than 144 seconds. [ 511.991183][ T31] Tainted: G U syzkaller #0 [ 511.999077][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.020036][ T31] task:syz-executor state:D stack:23304 pid:7941 tgid:7941 ppid:1 task_flags:0x400140 flags:0x00004004 [ 512.037888][ T31] Call Trace: [ 512.041870][ T31] [ 512.056775][ T31] __schedule+0x1190/0x5de0 [ 512.061512][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 512.070188][ T31] ? __pfx___schedule+0x10/0x10 [ 512.077164][ T31] ? find_held_lock+0x2b/0x80 [ 512.095639][ T31] ? schedule+0x2d7/0x3a0 [ 512.100012][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 512.164515][ T31] schedule+0xe7/0x3a0 [ 512.181843][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.236731][ T31] __mutex_lock+0x81b/0x1060 [ 512.241376][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 512.246426][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 512.342683][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.347870][ T31] ? net_generic+0xea/0x2a0 [ 512.359259][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 512.364929][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 512.370075][ T31] nfsd_umount+0x48/0xe0 [ 512.374445][ T31] deactivate_locked_super+0xbe/0x1a0 [ 512.380022][ T31] deactivate_super+0xde/0x100 [ 512.411868][ T31] cleanup_mnt+0x225/0x450 [ 512.416345][ T31] task_work_run+0x150/0x240 [ 512.421283][ T31] ? __pfx_task_work_run+0x10/0x10 [ 512.461709][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 512.467122][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 512.491728][ T31] do_syscall_64+0x41c/0x4c0 [ 512.499751][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.515683][ T31] RIP: 0033:0x7feaadf901f7 [ 512.520101][ T31] RSP: 002b:00007ffedbbce0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 512.562924][ T31] RAX: 0000000000000000 RBX: 00007feaae011d7d RCX: 00007feaadf901f7 [ 512.570944][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedbbce1b0 [ 512.581754][ T31] RBP: 00007ffedbbce1b0 R08: 0000000000000000 R09: 0000000000000000 [ 512.591759][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffedbbcf240 [ 512.599767][ T31] R13: 00007feaae011d7d R14: 0000000000058c6e R15: 00007ffedbbcf280 [ 512.609596][ T31] [ 512.613038][ T31] INFO: task syz.6.1019:10838 blocked for more than 144 seconds. [ 512.633677][ T31] Tainted: G U syzkaller #0 [ 512.640202][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.663161][ T31] task:syz.6.1019 state:D stack:26616 pid:10838 tgid:10837 ppid:10451 task_flags:0x400140 flags:0x00004004 [ 512.676584][ T31] Call Trace: [ 512.679890][ T31] [ 512.683756][ T31] __schedule+0x1190/0x5de0 [ 512.688302][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.694887][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 512.699837][ T31] ? __pfx___schedule+0x10/0x10 [ 512.725746][ T31] ? find_held_lock+0x2b/0x80 [ 512.739585][ T31] ? schedule+0x2d7/0x3a0 [ 512.749047][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 512.755188][ T31] schedule+0xe7/0x3a0 [ 512.759274][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.773858][ T31] __mutex_lock+0x81b/0x1060 [ 512.778495][ T31] ? netlink_unicast+0x5aa/0x870 [ 512.784397][ T31] ? netlink_sendmsg+0x8d1/0xdd0 [ 512.789338][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 512.802630][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.808930][ T31] ? __asan_memset+0x23/0x50 [ 512.813876][ T31] ? __nla_validate_parse+0x600/0x2880 [ 512.819345][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 512.831896][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 512.841504][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 512.863057][ T31] ? __nla_parse+0x40/0x60 [ 512.867537][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 512.909330][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 512.917135][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 512.927309][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 512.952464][ T31] ? rcu_is_watching+0x12/0xc0 [ 512.957261][ T31] ? bpf_lsm_capable+0x9/0x10 [ 512.972276][ T31] ? security_capable+0x7e/0x260 [ 512.977235][ T31] genl_rcv_msg+0x55c/0x800 [ 512.991762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.996806][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 513.012040][ T31] netlink_rcv_skb+0x155/0x420 [ 513.022235][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.027270][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.041628][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 513.053423][ T31] genl_rcv+0x28/0x40 [ 513.057412][ T31] netlink_unicast+0x5aa/0x870 [ 513.062277][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 513.075098][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 513.081216][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 513.093074][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 513.097886][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.103276][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 513.113455][ T31] ____sys_sendmsg+0xa95/0xc70 [ 513.118228][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 513.123819][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.131771][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 513.137772][ T31] ___sys_sendmsg+0x134/0x1d0 [ 513.151758][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.161793][ T31] __sys_sendmsg+0x16d/0x220 [ 513.172960][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 513.178085][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 513.192348][ T31] do_syscall_64+0xcd/0x4c0 [ 513.196867][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.211765][ T31] RIP: 0033:0x7fba3338eec9 [ 513.216984][ T31] RSP: 002b:00007fba342e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.231757][ T31] RAX: ffffffffffffffda RBX: 00007fba335e5fa0 RCX: 00007fba3338eec9 [ 513.241741][ T31] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000002 [ 513.252787][ T31] RBP: 00007fba33411f91 R08: 0000000000000000 R09: 0000000000000000 [ 513.278701][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.286803][ T31] R13: 00007fba335e6038 R14: 00007fba335e5fa0 R15: 00007ffd695ab948 [ 513.312346][ T31] [ 513.315439][ T31] INFO: task syz.6.1019:10839 blocked for more than 145 seconds. [ 513.374729][ T31] Tainted: G U syzkaller #0 [ 513.381280][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.390477][ T31] task:syz.6.1019 state:D stack:27688 pid:10839 tgid:10837 ppid:10451 task_flags:0x400140 flags:0x00004004 [ 513.406734][ T31] Call Trace: [ 513.410016][ T31] [ 513.431784][ T31] __schedule+0x1190/0x5de0 [ 513.436365][ T31] ? __pfx___schedule+0x10/0x10 [ 513.441244][ T31] ? find_held_lock+0x2b/0x80 [ 513.491724][ T31] ? schedule+0x2d7/0x3a0 [ 513.496117][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 513.524042][ T31] schedule+0xe7/0x3a0 [ 513.528180][ T31] schedule_preempt_disabled+0x13/0x30 [ 513.554886][ T31] __mutex_lock+0x81b/0x1060 [ 513.559528][ T31] ? netlink_unicast+0x5aa/0x870 [ 513.611773][ T31] ? netlink_sendmsg+0x8d1/0xdd0 [ 513.616770][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 513.691722][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 513.696817][ T31] ? __asan_memset+0x23/0x50 [ 513.701458][ T31] ? __nla_validate_parse+0x600/0x2880 [ 513.750169][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 513.768479][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 513.811711][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 513.818082][ T31] ? __nla_parse+0x40/0x60 [ 513.862070][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 513.869523][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 513.921725][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 513.941799][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 513.947892][ T31] ? rcu_is_watching+0x12/0xc0 [ 513.973003][ T31] ? bpf_lsm_capable+0x9/0x10 [ 513.977730][ T31] ? security_capable+0x7e/0x260 [ 514.001775][ T31] genl_rcv_msg+0x55c/0x800 [ 514.006333][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.011373][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 514.036087][ T31] netlink_rcv_skb+0x155/0x420 [ 514.040907][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.046492][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.058329][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 514.064014][ T31] genl_rcv+0x28/0x40 [ 514.071905][ T31] netlink_unicast+0x5aa/0x870 [ 514.076699][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 514.082769][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 514.092405][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 514.097443][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 514.111840][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.121893][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 514.127965][ T31] ____sys_sendmsg+0xa95/0xc70 [ 514.137300][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 514.143094][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.148403][ T31] ___sys_sendmsg+0x134/0x1d0 [ 514.153611][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.159827][ T31] __sys_sendmsg+0x16d/0x220 [ 514.164923][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 514.171918][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 514.176884][ T31] do_syscall_64+0xcd/0x4c0 [ 514.182009][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.187926][ T31] RIP: 0033:0x7fba3338eec9 [ 514.202516][ T31] RSP: 002b:00007fba342c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.212417][ T31] RAX: ffffffffffffffda RBX: 00007fba335e6090 RCX: 00007fba3338eec9 [ 514.220409][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000003 [ 514.228712][ T31] RBP: 00007fba33411f91 R08: 0000000000000000 R09: 0000000000000000 [ 514.239678][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.251778][ T31] R13: 00007fba335e6128 R14: 00007fba335e6090 R15: 00007ffd695ab948 [ 514.263051][ T31] [ 514.269357][ T31] [ 514.269357][ T31] Showing all locks held in the system: [ 514.286776][ T31] 1 lock held by khungtaskd/31: [ 514.301853][ T31] #0: ffffffff8e5c1520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 514.321885][ T31] 2 locks held by syz-executor/5865: [ 514.327194][ T31] #0: ffff888028bba0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 514.338222][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 514.348219][ T31] 4 locks held by kworker/u10:24/6598: [ 514.354068][ T31] 1 lock held by syz.0.394/7725: [ 514.364533][ T31] 2 locks held by syz-executor/7941: [ 514.369860][ T31] #0: ffff88807c4f00e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 514.381959][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 514.391625][ T31] 3 locks held by syz-executor/9453: [ 514.401767][ T31] #0: ffff888033138dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 514.411403][ T31] #1: ffff8880331380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 514.421615][ T31] #2: ffffffff905f13a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 514.442553][ T31] 2 locks held by syz.1.881/10231: [ 514.447651][ T31] #0: ffffffff9042c210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.456586][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 514.467944][ T31] 2 locks held by syz.6.1019/10838: [ 514.473476][ T31] #0: ffffffff9042c210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.491769][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 514.502173][ T31] 2 locks held by syz.6.1019/10839: [ 514.507361][ T31] #0: ffffffff9042c210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.515989][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 514.532188][ T31] 2 locks held by syz-executor/10933: [ 514.537960][ T31] #0: ffff88814e0340e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 514.552344][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 514.562308][ T31] 2 locks held by syz-executor/10994: [ 514.569199][ T31] #0: ffff8880789660e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 514.580618][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 514.601808][ T31] 2 locks held by syz.0.1106/11504: [ 514.611909][ T31] #0: ffffffff9042c210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.620119][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 514.630595][ T31] 2 locks held by syz.0.1106/11506: [ 514.636106][ T31] #0: ffffffff9042c210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.649590][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 514.671728][ T31] 2 locks held by syz.9.1149/11535: [ 514.676948][ T31] #0: ffffffff9042c210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.686317][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 514.701834][ T31] 3 locks held by syz-executor/11723: [ 514.707213][ T31] #0: ffff8880648f0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 514.722160][ T31] #1: ffff8880648f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 514.732132][ T31] #2: ffffffff905f13a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 514.742479][ T31] 3 locks held by syz-executor/12182: [ 514.752320][ T31] #0: ffff888034ee0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 514.774030][ T31] #1: ffff888034ee00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 514.784085][ T31] #2: ffffffff905f13a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 514.794964][ T31] 5 locks held by syz.3.1274/12321: [ 514.800174][ T31] #0: ffff88807a268dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 514.812109][ T31] #1: ffff88807a2680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 514.822663][ T31] #2: ffffffff905f13a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 514.841823][ T31] #3: ffff88805b91b338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 514.851952][ T31] #4: ffffffff8e5ccab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 514.871873][ T31] [ 514.875150][ T31] ============================================= [ 514.875150][ T31] [ 514.900209][ T31] NMI backtrace for cpu 1 [ 514.900235][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 514.900304][ T31] Tainted: [U]=USER [ 514.900318][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.900348][ T31] Call Trace: [ 514.900365][ T31] [ 514.900384][ T31] dump_stack_lvl+0x116/0x1f0 [ 514.900470][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 514.900531][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 514.900612][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 514.900691][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 514.900766][ T31] watchdog+0xf0e/0x1260 [ 514.900861][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.900937][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 514.900981][ T31] ? __kthread_parkme+0x19e/0x250 [ 514.901012][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.901044][ T31] kthread+0x3c2/0x780 [ 514.901079][ T31] ? __pfx_kthread+0x10/0x10 [ 514.901115][ T31] ? rcu_is_watching+0x12/0xc0 [ 514.901141][ T31] ? __pfx_kthread+0x10/0x10 [ 514.901176][ T31] ret_from_fork+0x56d/0x730 [ 514.901209][ T31] ? __pfx_kthread+0x10/0x10 [ 514.901243][ T31] ret_from_fork_asm+0x1a/0x30 [ 514.901289][ T31] [ 514.901297][ T31] Sending NMI from CPU 1 to CPUs 0: [ 515.031197][ C0] NMI backtrace for cpu 0 [ 515.031218][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U syzkaller #0 PREEMPT(full) [ 515.031249][ C0] Tainted: [U]=USER [ 515.031256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.031268][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 515.031302][ C0] Code: fd 63 02 e9 13 0a 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 35 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 515.031323][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 515.031340][ C0] RAX: 00000000004aa60f RBX: 0000000000000000 RCX: ffffffff8b91db29 [ 515.031354][ C0] RDX: 0000000000000000 RSI: ffffffff8de4f872 RDI: ffffffff8c163780 [ 515.031368][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 515.031382][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 515.031396][ C0] R13: ffffffff8e2977c0 R14: ffffffff90abad90 R15: 0000000000000000 [ 515.031410][ C0] FS: 0000000000000000(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 515.031430][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.031444][ C0] CR2: 0000001b2fcbeff8 CR3: 000000005c512000 CR4: 00000000003526f0 [ 515.031458][ C0] Call Trace: [ 515.031465][ C0] [ 515.031471][ C0] default_idle+0x13/0x20 [ 515.031492][ C0] default_idle_call+0x6d/0xb0 [ 515.031512][ C0] do_idle+0x391/0x510 [ 515.031534][ C0] ? __pfx_do_idle+0x10/0x10 [ 515.031554][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 515.031589][ C0] cpu_startup_entry+0x4f/0x60 [ 515.031610][ C0] rest_init+0x16b/0x2b0 [ 515.031631][ C0] ? acpi_subsystem_init+0x133/0x180 [ 515.031659][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 515.031685][ C0] start_kernel+0x3ee/0x4d0 [ 515.031712][ C0] x86_64_start_reservations+0x18/0x30 [ 515.031740][ C0] x86_64_start_kernel+0x130/0x190 [ 515.031767][ C0] common_startup_64+0x13e/0x148 [ 515.031798][ C0] [ 515.036429][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 515.036452][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 515.036488][ T31] Tainted: [U]=USER [ 515.036497][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.036512][ T31] Call Trace: [ 515.036521][ T31] [ 515.036531][ T31] dump_stack_lvl+0x3d/0x1f0 [ 515.036571][ T31] vpanic+0x6e8/0x7a0 [ 515.036606][ T31] ? __pfx_vpanic+0x10/0x10 [ 515.036643][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 515.036683][ T31] panic+0xca/0xd0 [ 515.036715][ T31] ? __pfx_panic+0x10/0x10 [ 515.036749][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 515.036785][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 515.036817][ T31] ? watchdog+0xd78/0x1260 [ 515.036850][ T31] ? watchdog+0xd6b/0x1260 [ 515.036884][ T31] watchdog+0xd89/0x1260 [ 515.036923][ T31] ? __pfx_watchdog+0x10/0x10 [ 515.036955][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 515.036992][ T31] ? __kthread_parkme+0x19e/0x250 [ 515.037024][ T31] ? __pfx_watchdog+0x10/0x10 [ 515.037058][ T31] kthread+0x3c2/0x780 [ 515.037092][ T31] ? __pfx_kthread+0x10/0x10 [ 515.037128][ T31] ? rcu_is_watching+0x12/0xc0 [ 515.037154][ T31] ? __pfx_kthread+0x10/0x10 [ 515.037195][ T31] ret_from_fork+0x56d/0x730 [ 515.037229][ T31] ? __pfx_kthread+0x10/0x10 [ 515.037264][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.037307][ T31] [ 515.369877][ T31] Kernel Offset: disabled [ 515.374197][ T31] Rebooting in 86400 seconds..