last executing test programs: 12m46.598462453s ago: executing program 1 (id=2285): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x17, 0x0, 0x56b) read$auto(r1, 0x0, 0x7) keyctl$auto(0xf, 0x7fffffffffffffff, 0xffff, 0x4, 0x3) keyctl$auto(0xb, 0xffffffffffffffff, 0x2, 0x0, 0x8) read$auto(r0, &(0x7f0000000180)='/dev/ppp\x00', 0x7) ioctl$auto(r2, 0x1, r2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x4d0000, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000280), 0x54c001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/amidi2\x00', 0x20000, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = memfd_create$auto(0x0, 0x2) write$auto_proc_pid_attr_operations_base(r5, &(0x7f0000000240)="c837", 0x2) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 12m45.602228593s ago: executing program 1 (id=2290): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdffb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8000002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x8000000000000000, 0x9}, 0x7}, 0x3, 0xba) 12m44.73815796s ago: executing program 1 (id=2291): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x3, 0x7, 0x0, @_timer={0x0, 0x81, @sival_int, 0x9}}}, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x8}, {0x5, 0x7}, 0x7fffffffffffffff, 0x10000, 0x5, 0x2, 0xc00000000, 0x3, 0xb9, 0x9, 0x6, 0xc, 0x0, 0x6, 0xf4, 0x3}) move_pages$auto(r2, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r4}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0xf00, 0x1, 0x101, 0x0, 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r7 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0xd, 0x136a, "8f42b1077e737d4629d7867bca"}, 0x7d) ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r7, 0x4004550f, &(0x7f0000000180)=0x1) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x6, 0xffffffff, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680000002000400000000000200000000000000010009000000000001000400000000000200070000000000980006000000003f14010f000000000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e64587adba9ba7537f79f056fbd60490f11a3498560bfa783badf6fa39e3aa9815705e629beb9573271a53f5c4ee3859bf0313d7dad665a019c4e908768bb5b896533bbd3b39e4768150289646864a302e8ded90a5b83ada85575e6657023fb727d3723ff97af53540e2fbc15e85a0c6a5644432b997ba3bdc423b0be181bf0d501cf098551e7b2ce99ac721bf9145ebc91fe7c9230b30f9b88ac5b2c404ddfac531ea9fcaf6d514daf8c13a9f382059488c3280a13754303b49d3eddff53520086a38cbb1075e09f556c208c26f727717e52ad91b929b37df820ffca5a077087bc540d3c30fa84b5986b17605e72c7af63bd4264355ec1e043e6ae397fd5b925bc6ee277f7e42b305fbe861e8e9974efb062206bd7fef4b13f19f926c090b1367e4599ea549d1e97c1c2b214d06c5de3e7dc0bae99b9030f72ae011f303fa7ea798a612fd252f9e9c238f07ccc755d8c4aff22798a08e567e0b8f3975fc1b30522f1b82ed37fecc8927a2f8265cb2423f4272359a5b097f54bdb65f51f0911ca880641493cce6f3f00edfefe3d7f007bc5c57214dde959740b9e0a70b28d191e10eb5c3eccfdf045407c80e026f4e9fe766eca822b77df002210db69f60480ae2e21fced2bf22dde077e0ccbe2e05f58ba0db3d9f6469382574a23009202a928c2e7a67623eeeb3976036936871d6056bca11541ed5d795853e233149c9ea3e3d478b5e35cf5e551002a79ac8a33d81b60fde70ccbf125c4b4243160db218068b7a2db851b3dfad23f584b6db1b9ec1428635f27d4bb08cb9b0d4d9c725595fbd59622038dc6cb2f70282ae273c9927dfc884b8e99578c897e90ffeec2c4f3b1e4c5cadc23ff40dd06e618b0f798c0d4a87c7728de7b03a7a8021dcdbd1f4c8b29ea50d2130cf3099a8b37a4d894a5020bc583feaf86c00b8d917567b988f875af819935a325517e76850262d5558ff1fcf9f5b7b26a9645bb26d20104227757359a6e52317edbdd2fde26c3b3f26ee6e2714d9668cfafe1f1c83c24d7e3b55127b38315b1b9053d3ed9561c14e0cf3b173f89e739337a63e5d13fb97466b9b36556adb4af4e9b18d4778c369692333cb70c72d968aff999fe3f08690fdc345eceedb90782bc907b20d4a06867f2930ebb553494aeceabf2f33f1295753241986835af90226970a126a27d9c1f3a04f9b917fa57524fb70f161e619ab83cff4edceef04362c497dc4804af7e7837a4b4241521a2cb28a08fe7001ce941a8cf3f2a4266dbc5fd02c56a5a16fe2a0af334673588ea9b161c65b7ab9a67e4808f1e8c6cf55641a97082348e1e31ed07154364d1fb134e988d32277a2c5224985ab2e3b518c927af3338cfeab947dc38466b8e58f40402d97417a895d335dcd5ccf6ed33ba8a54c80ea0cfe0c66993e86f8b2699d860ff1b2d00db394a18a92e0ed026737e46d52978bae076c156be5e6530222fe8c93c8e4ecd29bfd1823b2730515eb3e99ecb867e0117fafafb495f34fe5c82c7af4e163ef7c543d5327b011b65e661db58838a0821f66c65a9b2d598fe497d778ced9bb1c48369c70a3ab32dd9626f0b575d47a0b7398fcaebce8048504cc3ebcc4498894bf079758aa008906c570f9a4ce0c5faefd8326dde933dccf7a2896a3b86ceb8add2b7f69943b006c8ca893916b156458c9dd28e1e21770e7ba6d7fb8ebdde22ff23346cd0f6d0c90a093fae2f128f759418402b13fae56d033f6adde7442b46db3aedb8665718b37055df3b0710f5e31ea2e04abbca71d7c8cc71325a1124d38c4245587ff29c5e0f1cbfdf7b865099a395dd9c2f7e29200bda2c2b20b17b7f33e1c277c57925b59aca80821a48085b7eab507385849a0e22c2ac4a526e7b786fd9442fd2df0eb05cb1df98795853536dc12b6fea234a4c32a57059049c0dedee032615da106c88fe54e73226cb88b4863c1f905dac6dffd4e5e53873f746e19ee631e8cab802ef174df5cb6e88e513aa10a0e1dd7d43075bc19b94491b9cb8fe1efac7d300e4c6253d42198c94f76fef50405405c348b9bfe0c4e09b6668655baaff6d464b20c5db5aa72b6e5345aa6af3c2b2e508ab94ed2f3ae27947c30f6c9435396cccca249745963693d456f0b13551ebd2714a5d2aa5eec9d61d2d6b9aba3d482f4c49906435b1d783f381a7180a5077358717dfc2e117d31e141382b11db23fb0c7d8ec13b0e2e542cfe4b44f2e9b0a440dcf9143f3be9494f3bc2004047e86405b4190fb667d269f2a7d1c48509fbdc3bb3e99d6f68a309ffff000006007347b9c70c7a48913b05957bbb9826fc681df1b98ace4a88eebe405b8400e41aa87a86c1aca27323448d0dfed2b28ecfa7d65c7264311080712e8fa3874f7ee38b02120b885602b84d954479702f51ac45a331dfe2ef76c45014c84415189885b9c9613c2acb7a41c6ace876ee5af4fc50407fc3361a128a2e59e60f11b47277c9a5f3cbe0424d3886a3a3a0f40c5ef46d2b331ca3d83f2f444bc6998d06926c6a1cb162ef14fb7ab2ee731fdc7f0fc553a3c07226a2160d350ed7f30000360103e17d2b53cce133a6674f5b8600a49a8403c6bdfd3e0c464ed8a2fe254a5939fb09cb1dc350c9230c189febda65557207893e11deb595e622008d945c914692afa24b99bf04b003881b9fc35a628e8a1f7dd36490920c7ce2dbffcf61124f39b5329db3d8f56f48af0b3b31b588771b14d045e0ea69404cf54596db22abd3d35b4f3d484faa4ac1eca1bbbe82ed861aee4715f465c010e98899929b521dea88b03c97f8d005000000987004d3b262"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) 12m43.566814784s ago: executing program 1 (id=2295): syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r1, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x7fff) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x38, 0x65f, 0x1ffde, 0xfffffff7, 0x7f, 0x20000005, 0xb, 0x3, 0x2000006, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0x3827f8fd, 0xfffffffc, 0x7, 0x9, 0x203, 0x2670, 0x84, 0x2, 0x419e2260, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4d, 0x0, 0x400000000000003, 0x80000001, 0x0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff7cc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 12m42.491668662s ago: executing program 1 (id=2299): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg1\x00', 0x0}) connect$auto(r0, &(0x7f0000000040)=@xdp={0x2c, 0x1, r1, 0x12}, 0xb7a8) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x3c41, 0x0) r2 = getpid() r3 = gettid() r4 = open(0x0, 0x80400, 0xb5d1af1605322dd2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) read$auto_lowpan_enable_fops_(r4, &(0x7f00000002c0)=""/120, 0x78) rt_tgsigqueueinfo$auto(r2, r3, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}}) 12m41.49104596s ago: executing program 1 (id=2304): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) gettid() clone$auto(0x7, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) setpriority$auto(0x1, 0x0, 0xe55c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/memory.pressure\x00', 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/configuration\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x4, 0x0) ioctl$auto(0x3, 0x890b, r1) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r2 = socket(0x11, 0x3, 0x9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SCHED_CORE(0x3e, 0x8, r3, 0x9, 0x7) capset$auto(0x0, 0x0) sendmmsg$auto(r2, 0x0, 0x2, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) 12m26.225322641s ago: executing program 32 (id=2304): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) gettid() clone$auto(0x7, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) setpriority$auto(0x1, 0x0, 0xe55c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/memory.pressure\x00', 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/configuration\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x4, 0x0) ioctl$auto(0x3, 0x890b, r1) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r2 = socket(0x11, 0x3, 0x9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SCHED_CORE(0x3e, 0x8, r3, 0x9, 0x7) capset$auto(0x0, 0x0) sendmmsg$auto(r2, 0x0, 0x2, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) 11m21.803240551s ago: executing program 2 (id=2483): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) socket(0x15, 0x5, 0x0) socket(0xa, 0x1, 0x84) write$auto(0x6, 0x0, 0x100000001) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2800, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) ioctl$auto(r0, 0x545c, 0xffffffffffffffff) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x9003, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r2, 0xc2604110, &(0x7f0000000040)={0x6, [{[0x2, 0xf5e, 0x1ff, 0xd, 0x7f, 0x8, 0x4, 0x663d349e]}, {[0x2, 0xa6, 0x5c915993, 0xfffffffd, 0x6, 0xe, 0x80000001, 0x3]}, {[0x2, 0xe, 0x2, 0x579c8feb, 0x9, 0x6, 0x7, 0xa53]}], [{[0x75d, 0x9, 0x6, 0x17f29ee4, 0x400, 0x7, 0xc, 0x44]}, {[0x1, 0xeade, 0x1, 0x3, 0xf0, 0x5, 0x101, 0x1]}, {[0x7e61, 0x6, 0x7, 0x0, 0x5, 0x5, 0x100, 0x9]}, {[0x4, 0x5, 0x1, 0xfffffff7, 0x5, 0x0, 0xfffffffb, 0x1]}, {[0x3, 0x1000, 0x8, 0x8, 0x2, 0xe8c, 0xf, 0xd403]}], [{0xfffffffa, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7f, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x61, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x49c5fc8b, 0x0, 0x0, 0x0, 0x1}, {0x7ff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x800, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfffffffd, 0x1, 0x1, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}], [{0xbe, 0xd5, 0x0, 0x1, 0x0, 0x1}, {0xc2, 0x7fffffff, 0x1, 0x1, 0x1}, {0xbc, 0xbb5e, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x100, 0x12e800, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xf, 0x0, 0x1, 0x1}, {0xffff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0x6, 0x0, 0x1}], 0x100, 0x2, 0x4, 0x9, 0x5, 0x1, 0x8, "938f570ba48ab1df6ea169301a0f4b75", "16fef137d6f6aa1d93e7fd319170d04be4063eb16bddc7a41e5782dfff02104539c9b5e571a002e14933724526d0c013"}) ioctl$auto_TIOCMSET2(r0, 0x5418, &(0x7f0000000040)="fcfa") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 11m20.887915475s ago: executing program 2 (id=2487): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x808000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0xc, 0xdf, 0xeb1, 0x2000000000006, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x68) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000400), 0x40002, 0x0) preadv$auto(r1, &(0x7f0000000600)={&(0x7f00000005c0), 0x7}, 0x6, 0x10, 0x8001) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) read$auto(0x3, 0x0, 0xf34) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(r0, 0x1, 0x8, 0x0, 0x7) sendto$auto(0x3, 0x0, 0xfdef, 0x101, 0x0, 0x1c) 11m19.9937841s ago: executing program 2 (id=2491): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x808000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(r0, 0x1, 0x8, 0x0, 0x7) sendto$auto(0x3, 0x0, 0xfdef, 0x101, 0x0, 0x1c) 11m19.115509186s ago: executing program 2 (id=2497): mmap$auto(0x0, 0x7, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) sendmsg$auto_BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf2501000000060014000800000008002c0009000000"], 0x24}, 0x1, 0x0, 0x0, 0x44044}, 0x40) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0020cb26", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250600000008000c0007000000080003000000000006000b00b10000000800030003000000080004000400000008000300d08b000006000b007e21000008000400ff000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x14) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x8001, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x8000000000000000, 0x948b, 0x3, 0x95f4da0a, 0x0, 0x6, 0x3, 0x80000001, 0x2, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff09, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) 11m17.878084675s ago: executing program 2 (id=2498): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8140, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 32) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x400001, 0x9, 0x3, 0x2c, 0x940, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffffffffffc, 0x7fff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]}, 0x1fe, 0x7) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYBLOB="11002d59bf20015dbcb660c34a12c4ec039654f36c"], 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) (async) r1 = socket(0x18, 0x5, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRES32=r1], 0x1ac}}, 0x40000) gettid() (async) r2 = getpid() (async) r3 = set_tid_address$auto(0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram0\x00', 0x0, 0x0) (async, rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) (rerun: 32) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async, rerun: 64) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x40080, 0x0) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000", @ANYRESHEX=r2, @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000051) (async) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) (async) ioctl$auto_BLKGETZONESZ(r4, 0x80041284, &(0x7f0000000040)=0x4b9) (async) tgkill$auto(r2, r3, 0x7) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dri/card1\x00', 0xb0543, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040)="6dac6c633f10a88fa7a7280af322408be6b792c81f6d7e68b7556e12c41972dbbdf9bbc22161c639e21da847d7ccc2e627eb424a40faef1ce1f42557819e3c9d84bbeb4406425f56219341a8f6bba27e6b069cddb98e97a34794f8cb0213bc75b19f6ceae16e017fe6d833771350a398ad51", 0x5, &(0x7f00000000c0)={&(0x7f0000000380)="b8b9d1b1e6cc3c0f6a407b0ca5af79afda2548556d3fce7f8b5bb2f41dd4ed041fa7460ca2d62203665f0388b83658e8dee1a8a3ef5fb592d6c415d614711629da1c064a99a1994af257019692cc14e0b237a413a4dfc91bc4de5be892670fb2c9389a11f0b8ef9f1436a484f7f8fbd57653f86f7770077a0970f226f236a7f652eac8ed743a3e946cd911e2022d739b583ab2e612f2992522714797fc4988dc7a", 0x9}, 0x4, &(0x7f0000000440)="137f5c6896d818e142ae8d6036bcaddc25dbf021cb1687dd8ab91871fa189d23bca6807fd2bafc0c778fc29c9c8976787c10dfe1fcaa92e7c0ee111d4bf3d55768abefa92481438406505602cba1d01b104eff4a4ca5b46de464d3baf189852dcf56af99b7d15df429052a8f639e7850b3ba426fb6106049911b82fdf7f102caf9973b53088455ab7df44106275dc7fbf08b07e88753acd6d1ce9404ba7be235", 0x8c, 0xca0}, 0x4}, 0x6, 0x938) 11m15.478538714s ago: executing program 2 (id=2504): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) pread64$auto(0xffffffffffffffff, 0x0, 0xf42f, 0x7f) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/153, 0x99) r1 = socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x21, 0x0, 0x10) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) r5 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$auto(r5, 0x0, 0x80000000, 0x0, 0x20000000) write$auto(r3, 0x0, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket(0xa, 0x5, 0x94) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r4, r2, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 11m15.084711187s ago: executing program 33 (id=2504): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) pread64$auto(0xffffffffffffffff, 0x0, 0xf42f, 0x7f) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/153, 0x99) r1 = socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x21, 0x0, 0x10) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) r5 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$auto(r5, 0x0, 0x80000000, 0x0, 0x20000000) write$auto(r3, 0x0, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket(0xa, 0x5, 0x94) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r4, r2, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 6m39.124499118s ago: executing program 5 (id=3474): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shutdown$auto(0xffffffffffffffff, 0x6) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x28e403, 0x0) ioctl$auto(r0, 0xc0046209, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011d3da4420008bd7100f9db5f250200000000000010"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc1}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/net/raw6\x00', 0x500, 0x0) pread64$auto(r3, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) r4 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r4, 0x0, 0x8000) ioctl$auto__ctl_fops_dm_ioctl(r4, 0x80000000, &(0x7f0000000280)="39f97fba2ba3195aa895da9f0b8fccd9f6e8977e4fbc32edc52d2352d1ab01fc9bf09c1e2aab2430459dae74bc2542c69cb8afa56121833ffbf7079b9ef0abf3aad47874935225edb8e8b2a3e6dce3acff1183a28d73b7abebce05fa6c0c6a12df96b13c9b5d5a1cfb08b4609f108c65d8b6aed9b13ed10041e4139c2a7ea94113a5e0fa898b678663b68feeb7ef5b7ce180af9a2811cf0d182a497d3f66db840cda239816fbdab24c29450fef7947a4ca1ced15dcd1b5516a4e478e8a64efcbc0ac80e48522e6493a2c961341ec3dd77ad1da9b217cbc3a4fbe47994f4206e79da3920ea917c557418979a0b52973efbde7") r5 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x88000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000240)={0x7, r5, 0x10000, "48ad94a9edc22273807d8e3aed5ef354"}) 6m37.437950137s ago: executing program 5 (id=3485): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) r1 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) read$auto(r0, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x3a5, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000010001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) r2 = socket(0x2, 0x3, 0x100) copy_file_range$auto(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x40) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0x2, 0x9, 0x939, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r4, 0x0, 0x39b8) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x3, &(0x7f0000000100)={0x8, 0x7, 0x3, @raw=0x8}}) sendfile$auto(r4, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xa) 6m28.4607412s ago: executing program 5 (id=3492): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose7/queues/rx-0/rps_cpus\x00', 0x1c1002, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_GET(r0, 0x0, 0x4000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r1, 0x900064d1, 0xc35) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) (async) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x1, 0x84) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 32) open(0x0, 0x543240, 0xa2) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) pread64$auto(r2, 0x0, 0x40000000f42d, 0x585) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 32) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) (async) r3 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x2, 0x1, 0x9) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) r4 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r4, 0x0, 0x80000000006) tkill$auto(r3, 0x9) (async) unshare$auto(0x40000080) socket(0x27, 0x3, 0x8561) 6m23.614639544s ago: executing program 5 (id=3500): mmap$auto(0x0, 0x40, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) socketpair$auto(0x7ffffffc, 0x5, 0x1, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aad4) open(0x0, 0x0, 0x40) getsockopt$auto(0xffffffffffffffff, 0x11b, 0x8, 0x0, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 6m18.654249444s ago: executing program 5 (id=3506): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mknod$auto(&(0x7f00000005c0)='./file0\x00', 0x0, 0x5) mmap$auto(0x0, 0x101, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmmsg$auto(r1, &(0x7f0000000940)={{&(0x7f0000000680)="8b1eec143a8dfdd85869f6efee295bd928f1a30b4804f5337787074ff1feffb8a6e5a01ac4d1eb4dfa88a39c15a8dbfba80d6f9009476a88de4df6d17d805c2735a1553360f4242026cc3ed0103a29f01b8523f52fe113cdda10153cf3665bb5eca1285f696f58476b23ef58e2f77a7ab3a9870183eed5e9edcdb6d9bc254e603e86639c0bb4fcbe80b59452d972ad80e770a50d6a34e4abc76a6c8b100e88d7", 0x3, &(0x7f0000000600)={&(0x7f0000000740)="3b68b8858007ed97c80d0fc7cedb255ed8d9ab8b4cfc3aced86845edf5a72eb65cda76f7a748cb01ca8a29a21f45ef87ab34f5e230dd1862684762d6a687179b72a185354b4f854fcecdba6a15f6a8cd3a7c9d4ef2438bdd32607db286b6b1da173cdde30d950ff6b19b6b15c54547d449f3a93f005df2920055d2ee1b0658852df4b9d1d2d1a3af9ec831ff5c522f21c7d45f1ad7db", 0x40}, 0x0, &(0x7f0000000840)="9132da9d333c70002788b2bd79f2382b1e16d99aea9edfe467f2e912ea39fbad1383417851706e41817c93d888b0632a9e746e56bb85330312eaeb2230b76993c4057a2944b66d6e481939b6d61dac5c9509b90454903c2708cb4addffa6674d93643619119f0b6b4a8afd9c00d558993e602207ee095e71a39574e9f8387a3b5b50dade6d44db5847992ced13fb35bee6a88c54575bf1837aa05c5e15c2e1683371615cbe9e096d6ecdfe2528f87bc7a25342f51f694ac0f815db21951d64f80bfaa7e9d120c13bd7cc58f17662c9ca5beb1530f5ab79d5337f56", 0xffffffffb8177ae8, 0x9}}, 0x9, 0x0, &(0x7f0000000980)={0x1, 0x80000000}) ioctl$auto_XFS_IOC_FREESP(r0, 0x4030580b, &(0x7f00000000c0)={0x4, 0x9, 0x5, 0x812, 0x3, 0x0}) prctl$auto_PR_SCHED_CORE_CREATE(0x40, 0x1, r2, 0x3, 0x9) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x400, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_setup$auto(0x85, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r5, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) signalfd4$auto(r4, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) write$auto(0x3, 0x0, 0x5c8) 6m17.909991593s ago: executing program 5 (id=3508): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) lseek$auto(r0, 0x9, 0x0) unshare$auto(0x40000080) socket(0x23, 0x1, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000051a1449363dfd21923441a7e466e6764b18911dca1674eb4", @ANYRES16=r3, @ANYBLOB="2f032abd7000ffdbdf251200f000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 6m2.567349524s ago: executing program 34 (id=3508): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) lseek$auto(r0, 0x9, 0x0) unshare$auto(0x40000080) socket(0x23, 0x1, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000051a1449363dfd21923441a7e466e6764b18911dca1674eb4", @ANYRES16=r3, @ANYBLOB="2f032abd7000ffdbdf251200f000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 22.268449133s ago: executing program 4 (id=4851): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop2/hctx0/tags\x00', 0x280, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, r0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, 0x0, 0x183200, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006"], 0x6c}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) 21.798657996s ago: executing program 4 (id=4853): mmap$auto(0xfffffffffffffffe, 0x2, 0xdf, 0x9b72, 0xffffffffffffffff, 0x100000000000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x100242, 0x78e22799f4a46f88) flock$auto(r0, 0x5) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x104) flock$auto(r1, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x84, 0x25, 0xfffffffffffffffe, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x8802, 0x0) statx$auto(0x564, 0xfffffffffffffffc, 0x1000, 0x3, 0x0) write$auto(r2, &(0x7f0000000140)='\x91[', 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) 21.484579752s ago: executing program 4 (id=4855): bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1c, r3, 0xb81, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) 20.883863861s ago: executing program 4 (id=4856): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) mmap$auto(0x33, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000340)={0x8, 0xee01, 0xffffffffffffffff, 0x1ff}) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, r1, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x80, 0x1001, 0x8, 0x7, 0x9, 0x2, 0x9, 0xf, @inferred=0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r3 = socketcall$auto(0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf25120000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0000000002000000d55ab238219d8db6341c1ef2451b29ea7d729927f730a028ef5886668fdf2accb8fa41a4cc47065d62e6325bdb1f4fbaa986518778ec3525b7e04656c4aba2d6da5a8c3b4a50f8fbc58d6274"], 0x28}, 0x1, 0x100000000000000, 0x0, 0x9dfefc5e47f5c72f}, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = prctl$auto_PR_SET_MM_ENV_START(0xa3b, 0xa, r2, 0x4, 0x2) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r8, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fddbdf250a000000080003000c00000008000200", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000) ioctl$auto(0x3, 0xae41, r7) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r9, &(0x7f0000000100)='0[.[\x00', 0xcd02) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) ioctl$auto(0x3, 0xae41, r3) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r10, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0xcea8) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x3, 0x7fffffff, 0xdf, 0x9b72, 0x2, 0x0) 18.728099173s ago: executing program 4 (id=4863): r0 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) ioperm$auto(0x7, 0x6, 0x10) statfs$auto(0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r2 = socket(0xa, 0x1, 0x84) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) write$auto(r1, 0x0, 0x3) adjtimex$auto(&(0x7f0000000480)={0x101, 0x0, 0x1, 0x1, 0x7, 0x7f, 0x860, 0x0, 0x1, 0x45079941, 0x8, {0x47a8, 0x7}, 0x4, 0x3, 0x9, 0x9000000, 0x0, 0x8, 0x46fa, 0xffffffffffffffff, 0xb4, 0x800, 0xf9}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x8000) r3 = getpgrp(0xffffffffffffffff) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)=@raw_tracepoint={0x2000000000, r0, 0x0, 0xd3fc}, 0x9) ioperm$auto(0x8, 0x8, 0x9) ioctl$auto_VHOST_SET_VRING_ADDR2(r4, 0x4028af11, &(0x7f0000000100)={0x47d, 0x95f6, 0x3ac8, 0xe5bd, 0x1, 0xffff}) prctl$auto(0x1000000003b, 0x1, r3, 0x3, 0x2a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) 17.390786852s ago: executing program 4 (id=4869): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/33, 0x21) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/stack\x00', 0x4000, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000280)="905bc27772d938d0f9c285336ed9d832890d68a39c268be5d4306136d4cea2fe6808a7e148b5b69ab9c54ba7553898891550dfe9a6a1aba49b894ca3faf49bfe45697f5e75f1385525da90c7560ef1478e8d6ef9147d140c1cdaac4e2b20dd4d15f8c64562d4d3519f747931148ffd7529472156cecdbbfdc3b2f0c06a23ffae196a06a8329a86fd1c15a9297aad5f02943ec1e0090abd0fdd98a76de77b2674d0a7be858af09ab84ff1bebfd7216b5f883776ddd25db1487a5fd09b377c43e8ae3eb7eeffa3de396c9beb35d289a7bc4d66ec54eb2220600e1e6012e6f2f2955988cfacf34a3a2671fd173ad1194549", 0x6) r2 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000000)=0x94d) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x40) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000003c0)="22e030b1f1193fd495b7432f5493d1187f016e4838a0a6c56fbfa2f370311662e39dc20de5c1184cf39787ac657b4a454b6ba4d1ee", 0x35) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 13.386575293s ago: executing program 3 (id=4879): io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(0x0, 0x261c2, 0x84) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r4, 0x8, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0x10) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) fcntl$auto_F_NOTIFY(r5, 0x402, 0x7f) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x301, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44010) 12.120948416s ago: executing program 6 (id=4883): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x7878, 0x7000000) (async) mmap$auto(0x0, 0x20009, 0x0, 0x40000000000eb1, r1, 0x8003) (async) r2 = fsopen$auto(0x0, 0x1) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) getpriority$auto_PRIO_PGRP(0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) r3 = io_uring_setup$auto(0x1, 0x0) r4 = socket(0x1a, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = socket(0xa, 0x3, 0xac75) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000009c0)=@bpf_attr_3={0x8a, 0x7, 0x2dfa, 0x7302, 0xfff, 0xfffffffb, 0xa0, 0xfffffffd, 0xb, "80c351f01c47e5b7a18d787c217a958a", r6, 0x400, r3, 0x4, 0x4, 0x5, 0x0, 0x0, 0x4, 0x9, @attach_btf_obj_fd=r0, 0xdf3b, 0xffffffff, 0x80000001, 0xc5, 0x7fffffff, r4, r2}, 0x0) sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe040100"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) socket(0xa, 0x801, 0x84) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0xfffffffb) (async) pselect6$auto(0x9, &(0x7f0000000180)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x1, 0xfffffffffffffffe, 0xffffffff, 0x8000000000000001, 0xfffffffffffffffd, 0x211, 0x40000000, 0x8, 0x1]}, 0x0, 0x0, 0x0, 0x0) (async) shutdown$auto(0x200000003, 0x2) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x0, 0xfffff000) (async) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 11.153781177s ago: executing program 6 (id=4886): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) r3 = open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) unshare$auto(0x40000080) r4 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_NVRAM_SETCKS(r4, 0x7041, 0x0) r5 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r0, 0x0, 0x2) readv$auto(r5, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) r6 = socket(0x2, 0x2, 0x1) getsockopt$auto(r6, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r3) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_PERM_ADDR={0x19, 0x16, "b98b0fb98363bdc3006bee167c7ce53893abbf32b9"}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x30000}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x4}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x7fffffff}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x3d, 0x2, "ee58d01da70df022c40226fbf7c5c7d098d8e2fb450c07badff16b8aea9d0ecc9996f2ccc9d16121797a8d27677a69bf239f587471dba0ca46"}]}, 0x88}}, 0x41) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff}) mmap$auto(0x0, 0xffffffffffffff7c, 0x4000000000e2, 0x17, r1, 0x8001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, 0x0, 0x0, &(0x7f0000000740)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r8, 0x0], 0x6, {r2}}, 0x58) 10.07984576s ago: executing program 0 (id=4887): socket(0xa, 0x3, 0x9) capset$auto(0x0, 0x0) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) madvise$auto(0x0, 0x2000040080040008, 0xe) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) sysfs$auto(0x2, 0xd, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r3, 0x0, 0x80) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) read$auto_regulator_summary_fops_(r3, 0x0, 0x0) read$auto_proc_fault_inject_operations_base(r3, 0x0, 0x0) ioctl$auto(0x3, 0x6f3e, 0x38) write$auto(r2, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) connect$auto(0x3, &(0x7f00000000c0)=@llc={0x1a, 0x338, 0x5e, 0x1, 0x6, 0x5, @local}, 0x10) r4 = socket$auto(0xff, 0x2, 0x8) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x7, 0xee01, 0xee00, 0x7ad6, 0x9, 0x7fffffff, 0xffff}, &(0x7f0000000180)=0xfa, &(0x7f0000000200)=0x40, 0x2, 0x4, 0x6f8a9eb9, 0xfffffffffffffcf8, 0x9, 0xfffa, 0x9, 0x50, @raw=0x3ff, @inferred=r0}) fsconfig$auto(r4, 0x8000, &(0x7f0000000040)='\'\x00', &(0x7f0000000080)="ca90ae84061b15f750b10b2f918cd4d9739f1287", r5) 8.718598136s ago: executing program 0 (id=4888): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) pread64$auto(r0, 0x0, 0x1ff, 0x8800000000) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000140)='\x999\xdb\x17fF5%\x00', 0x4) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x5c8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) (async) pread64$auto(r0, 0x0, 0x1ff, 0x8800000000) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) (async) write$auto(r1, &(0x7f0000000140)='\x999\xdb\x17fF5%\x00', 0x4) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x3, 0x0, 0x5c8) (async) 8.362604397s ago: executing program 0 (id=4889): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xffffffffffffffdd, 0xdf, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) io_uring_setup$auto(0x4, &(0x7f00000000c0)={0x0, 0x9, 0x7, 0x0, 0x400, 0x88ae, r0, [0x2, 0x7, 0x9], {0x8, 0xf0da, 0x38, 0x2, 0x1d1, 0x9, 0xbc8, 0x5, 0x3}, {0x6, 0x3c, 0x4a, 0xb9b, 0x80000000, 0x100, 0x9, 0x40, 0x6}}) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) futex_wait$auto(0x0, 0x6, 0x2, 0x6, 0x0, 0xc3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x0, 0x0, &(0x7f0000000200)=0x1000004) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}}, &(0x7f0000000080)={{0xa04, 0x4}, {0x9000, 0x7ff}}) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, 0x0) unshare$auto(0x40000080) 8.018777924s ago: executing program 3 (id=4890): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) memfd_create$auto(0x0, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) mmap$auto(0x0, 0x200, 0xdd, 0x13, 0x2, 0x8800) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x80302, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) read$auto_fops_x64_ro_(r3, &(0x7f0000000300)=""/73, 0x49) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x2100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r4 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/oss\x00', 0x101000, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000240)={@padding, 0xfe}) socket(0xa, 0x1, 0x100) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x2, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) write$auto(0xca, &(0x7f00000001c0)='\x04>\x01\n\xfb\xff\xf6OL\xe8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x100, 0x20000000ffb, 0x8000000008012, 0x3, 0x0) mmap$auto(0x4, 0x2000a, 0x4000000000df, 0xeb1, 0x401, 0x7ffc) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) 7.335431858s ago: executing program 6 (id=4891): ioctl$auto(0x4000000000000c8, 0x400454cf, 0x3) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/ip6tnl0/accept_dad\x00', 0x242, 0x0) sendfile$auto(r0, r1, 0x0, 0x7) socket(0x2, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x70, 0x0, 0x3, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0xc, 0x1, ')&-&-+&\x00'}, @SMC_PNETID_NAME={0xf, 0x1, '/procP|(\'r\x00'}, @SMC_PNETID_NAME={0x7, 0x1, '\'!\x00'}, @SMC_PNETID_NAME={0x17, 0x1, 'eh\xc8\xa4\x17\xf1n0\x7fZ\xfc\xef\xa1\xd6\xb3\xcd\'!\xfd'}, @SMC_PNETID_NAME={0xf, 0x1, '/dev/tty12\x00'}, @SMC_PNETID_IBNAME={0xf, 0x3, '/dev/tty12\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x8080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x2, 0x9) ioctl$auto(r2, 0x40104d01, r2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0x4) r4 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000180)="e9fa89a53e03ac7aa286", 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x140) bpf$auto_BPF_PROG_ATTACH(0x8, 0x0, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x8, 0x100000000, 0x1, 0x2, 0x4, 0x15f4da12, 0x8, 0xa, 0x80000000008, 0x8000000000008, 0x4, 0x7f, 0x9, 0xfffffffffffffffe, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) read$auto_trace_fops_debugfs(0xffffffffffffffff, 0x0, 0x0) 6.947493419s ago: executing program 3 (id=4892): io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(0x0, 0x261c2, 0x84) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r4, 0x8, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0x10) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) fcntl$auto_F_NOTIFY(r5, 0x402, 0x7f) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x301, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44010) 4.538623904s ago: executing program 6 (id=4893): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video48\x00', 0x0, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, 0x0, 0x0) semctl$auto(0x0, 0xe3, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6) getsockname$auto(r1, 0x0, &(0x7f0000000040)=0x6) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.042969309s ago: executing program 0 (id=4894): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x3, 0x4007, 0x0, @_timer={0x0, 0x81, @sival_int, 0x9}}}, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x8}, {0x5, 0x7}, 0x7fffffffffffffff, 0x10000, 0x5, 0x2, 0xc00000000, 0x3, 0xb9, 0x9, 0x6, 0xc, 0x0, 0x6, 0xf4, 0x3}) move_pages$auto(r2, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x200343, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x41, 0x26f, r3, 0x1, 0x2) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) 3.676941165s ago: executing program 3 (id=4895): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(r0, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) ioctl$auto_FS_IOC_RESVSP(r2, 0x40305828, 0x4) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000380)=""/189, 0xbd) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000200)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x5e0}, 0x200000, 0x1, 0x4, @raw=0x3, @enumerated={0x8, 0x0, "3544fac47a801d819cb534605db6a893115890fe4787b893bf2d3f312883af26fc4d92993388bae934e26fa2157468e873f1359a98377e7310a5f19b224938a6", 0xf}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) socket(0x2, 0x1, 0x106) mmap$auto(0xfffdffffffffffff, 0x8002, 0xb, 0xeb2, r1, 0x86a3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/address\x00', 0x752502, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) mlockall$auto(0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x73) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2.947269384s ago: executing program 6 (id=4896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, "5fb6c3cbb9a8d2a856683dea66507d5cdc7c16ef8ce4c54e04df"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ff}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x810) r2 = waitid$auto_P_ALL(0x0, 0xffffffc0, &(0x7f0000000180)={@siginfo_0_0={0x2229, 0x4, 0x2, @_sigpoll={0x81, r0}}}, 0x4, &(0x7f0000000200)={{0x4, 0x6}, {0x4, 0x4}, 0x40c, 0x1, 0x904, 0x0, 0x2, 0x6, 0x5, 0x2, 0x101, 0x8, 0x3, 0x4, 0x0, 0x8}) move_pages$auto(r2, 0xff, &(0x7f0000000380)=&(0x7f00000002c0)="e8a45ef177f51251f57a1e37858dac1cb0ca9a9a28d73ddcdb9266e3f1f039320395b57e567d90849a586f8fed4d567943334e978027b51240cc4fcf36a9d852726c288cb36813f852657df836bbac8bc2c974912c3b6f08f900f920bd2694962bc50d4f6af4ee300793625d4ded8dd2e2fc7b5cfc0a7f00a3a9ac0328bd99f8f46ba220b80e38a96d7169d73d2b41fa4b4b89f5d2b6be44d2c3", &(0x7f00000003c0)=0x59, &(0x7f0000000400)=0x7ff, 0x8) ioctl$auto_BLKOPENZONE(r3, 0x40101286, &(0x7f0000000440)={0x2fd3, 0x8}) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x194, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, "46308411878932679870d6e7"}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x580e}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x68, 0x75, 0x0, 0x1, [@generic="3856e0843d0bbbb52b00ec30a3b7302f2b3a46fa67a407317b415034ec1e37e03208cf0d0da5a41a69bf043f4ff63e2697f967de0e84ba5e46f47fc89857814cc0160c45ff5e016bbf8b8500d1dfe3d347ef0628b1cca85089fa10fbe7a821eacb81e37a"]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "36c7265a05ece5adc52134cad47856478ca74396aa7e5c92"}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x7f}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_REG_ALPHA2={0xc2, 0x21, "f436888e377ace543b5f33e517248c0ca0e77c316bcd259255297cb26b232e0480b8b30729ef3494513fef42b20afd6f7853ebb601666e7657fca6004ee3bbdad87e722b37f40f49cb2b10a6a129140d1a17561ea1441e619642bb1a0454fcc7dd0bd202fcc16a23b7b3ca4e0a6cfc91c1cd37348ebe489e7b2234430a574cbb282d0ae184e01bc8399db5313799659b25194567a2592c6d5faa44d4f836636e8e686df649f841d36801c01d9587f96ba835cb6b790bab85cce2bb17b09a"}]}, 0x194}, 0x1, 0x0, 0x0, 0x4100}, 0x4000001) close_range$auto(r3, r0, 0xffffcaf8) mincore$auto(0x95, 0x1, &(0x7f0000000700)='nl80211\x00') r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000780)="85bfc8ad8e91d73303eb33854d55de09e0e93fe2250494531f5223dc5d3cc29ae68aa94f6fffcb", 0x0) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0xa30, 0x70bd2c, 0x25dfdbfe, {}, [@NFSD_A_POOL_MODE_MODE={0x7, 0x1, ')&\x00'}, @NFSD_A_POOL_MODE_MODE={0x12, 0x1, '/dev/snapshot\x00'}, @NFSD_A_POOL_MODE_MODE={0x12, 0x1, '/dev/snapshot\x00'}, @NFSD_A_POOL_MODE_MODE={0x7, 0x1, '!)\x00'}, @NFSD_A_POOL_MODE_MODE={0x5, 0x1, '\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) mincore$auto(0x1, 0x8000, &(0x7f0000000900)=')&\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000940), r5) read$auto_proc_timers_operations_base(r3, &(0x7f0000000980)=""/25, 0x19) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a00), r5) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x1a789920c5a67977, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/midi2\x00', 0x420100, 0x0) r8 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000b80), r3) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r8, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0xd6e}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) ioctl$auto_I2C_SMBUS(r3, 0x720, &(0x7f0000000cc0)="d218534f0169c2343fc5db6a8233b9836686375b725e63c8219772d8d6502e8399f4530bb447214afc1cd936bd3b5a4f0765d8844560c2b1edcd6984d79f8f88d72f70ba68377a111fa5e818d432b23fe2ab7ca732dd62d4539395d102e92f4af32f1ce3f426ff1420e7341f9377f9625d5e41160ae8f7173f3a4a7880ffb2f3ce8933b436a20ba7c82745aa96d830633b3e6e8be319078244422b0c6ebb64d145eb777df68900fe7ed9147213f89c4bfb3093c2") capget$auto(&(0x7f0000000d80)={0x10001, r2}, &(0x7f0000000dc0)={0x7, 0x5, 0x51f0}) rt_sigqueueinfo$auto(r9, 0x6, &(0x7f0000000e00)={@siginfo_0_0={0x7, 0x591, 0x8, @_sigpoll={0x6, r7}}}) r11 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000ec0), r3) msgctl$auto_MSG_INFO(0x2954d3c7, 0xc, &(0x7f0000000f80)={{0x0, 0xee01, 0xee01, 0x0, 0x4, 0x8, 0x5}, &(0x7f0000000f00)=0x3, &(0x7f0000000f40)=0x7, 0xfffffffffffffffe, 0x2c1, 0xfffffffffffffff6, 0x5, 0x5, 0x3, 0x9, 0x3, @raw=0x80000000, @raw=0x8}) shmctl$auto_SHM_INFO(0x1a53, 0xe, &(0x7f0000001100)={{0x5, 0xee01, 0x0, 0x9, 0x84, 0x5, 0xfffa}, 0x9, 0x8, 0x4, 0x4, @inferred=r9, @inferred=r9, 0x4, 0x0, &(0x7f0000001000)="3070cea8b932de77ced111418d18013b9cf90ebb52680d3b30eec5aeff72f3fbd8ed0106e4270d6a1a8f", &(0x7f0000001040)="6eec2e9768d7795d8974a52958a78ec99fdcdc09dc57a72b521b1517b4395f4c4ac82fb4892cfad6149be2c430b9729a4d0963497b62995b035c2c03b95d33ba551a27fff3827be1ad4107614dc8e2c561cc5a425a7e29dabb0d64c969fc6197da638123f611ef21980f784bd3453a837e7922c9feb8299f320dc56b9007b74e6706e11dd7015aa2ae0063ce5d7ecc396cdb5d37ad69baaa24c6e71f0b549b6dedf401ae356301d1"}) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000003e80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x811}, 0xc, &(0x7f0000003e40)={&(0x7f0000001180)={0x2c8c, r11, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@local}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1c7, 0x3, 0x0, 0x1, [@generic="2fcb80f425993692fd392896e2ec94dd4d583285d7b87f734061d6a70b2eb6b66bce9dba2b3a7cb556f1fd674336746c1f774dcb173d8c50d51e1edbfbf90b2c01e2101327395c63884d2d11f53512a2fbcf24d4518b44faf06d879045a99121a2507f7711f03bdcb0a93865131afce3d84f01621eff893cca34fdb8b2871a28f42479a3a779aee8678bfce6a4168a54429d9efbdf34eb5656352bf4a8c695d8019b014887e041a70e260c2c8290700c00b7f28f62719c3b16a7903421879bfdba11a497114703c796", @typed={0x8, 0xca, 0x0, 0x0, @uid=r12}, @generic="5a17be37dce0c2e2f71f42eceffe40b746b1440f1155bbafd9218b8300aec08e1bd832f4efe483dd931aafd6a7d8351755a195e3925b4262485f4a8c2f62e82f8a93b66babcd28f213d2ef2587891578d6beeb55d50e3f67bbbf3224fccb940b1bacd81abb82d60504726adf9ad3d35b4d52b2d30e032143ebd5d42724f8e09cb42de87efb0e794b2ad5a5c22434f36ddbaab474253bce270535a21f16844678d863dbc734f0078cf69a1ffb51fe93a8c4cf78d024168c6f11ae", @generic="4a0965aed9c33b58fefe5a7b1b2862d4a00c492c597756c94de5e00718728e2e6d3e75408637433cc05dd23e6136636f", @nested={0x8, 0xdf, 0x0, 0x1, [@nested={0x4, 0x125}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1d0, 0x2, 0x0, 0x1, [@nested={0x1c4, 0x64, 0x0, 0x1, [@nested={0x4, 0x69}, @nested={0x4, 0x86}, @generic="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", @generic="0462f8d9782e23979529547796ff8d98f84b95493773e35843438e56f631cee1f970e6aa076c770a6227682ce044ba29fde5394925f8e35ba0ba7d48a2bcbd8b13205202e0c0af97152e0b846062316403f95d79eb4c66d6fe290bb2bef292161547757a6dae431429fe07a9a0fa5b88f72bec01084141a2d5c662c5a59fcc7698eae74487d6f7df819e55ee02340ab56926d3929a2c84aa66770a67e236a9c13dae57f7d2", @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x13d}, @nested={0x4, 0x5b}, @typed={0x8, 0x4c, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @typed={0x8, 0x75, 0x0, 0x0, @u32=0x6}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @u32=0x8}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x78}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x200, 0x2, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0x9d, 0x0, 0x0, @u64=0xda}, @typed={0x8, 0x133, 0x0, 0x0, @pid=r9}, @nested={0xe7, 0xe1, 0x0, 0x1, [@generic="be98dd811c0b5f0dca8c9ddda38f8f502a45d9e2658288b8edec2e701d9a50977368d63d3de6aa82190805a1ff0400da7c2f84f0fba61756bb969e633b4cc97a7ab870a5a9e73aaf1e2f15ed4d199c685f5620c4349b94223874dea4b9da2afb39b3d7d6563663afae14c46f4db5122f50f831fc09c1222857643e", @nested={0x4, 0x14e}, @nested={0x4, 0x139}, @nested={0x4, 0x3a}, @generic="ade273a59295fd3c0174a138ad94f3cd11d7094ede1ddca29004c562173c1590d4da56b8f5e1311064792db4b7e8c3d8f45a8b4a91da47251f3039636f968b42425e61129e94fca5cff75b766ef074557730a8b6927344b7", @nested={0x4, 0x86}]}, @typed={0x8, 0x116, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xee, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x118, 0x0, 0x0, @uid=r13}, @nested={0xd1, 0xc6, 0x0, 0x1, [@generic="b658550b13fdf8a479e692a48af8679f0a4276826d5c04a66f202dca224e2e9d594f38c416a8c09a4475f7c6c492071c98d79851f9cd4af564ee587200a9bdcf17d85bf1421d16a6316ffcbcfa15586b23eb6e56b49e26f7", @nested={0x4, 0x65}, @nested={0x4, 0x61}, @generic="030de741bfef5ac4b1c52d6e784d4876b8fdca49a39ce881251df29d21657369194a310e110e10083104e7f50f62f8ef2425bd3c50ab5e35897f9e5a131e7dfb55ac3fc0f9ed011620", @typed={0x8, 0x8a, 0x0, 0x0, @u32=0x2}, @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x10b, 0x0, 0x0, @u32=0x4}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x2f4, 0x3, 0x0, 0x1, [@generic="8d649dc50d29d364c74e7290bf7ec23da2460d7f25e6ed9dba599f55f4cb91211891bc62a16cf45103f6583ec7fd415ae0c1112ad9aab9773919d4138307bec3dfe2", @generic="aace2fac3fba8f7b2b2b7224a2984da6d4505b74261dea7e6db7120c3d2fe29e68038237a5598f50e0a39da17b2a07029170cca1075abebe73d6870e184a7b80", @generic="3af61d371b144e745ac02bf7bec0807fd7868878647dabcabc9797c06e2623d7c52ed08ef8c7f3a0fb3fa578e0aa627169b48c5197b3ee5c192db53b8c31abf17528363134b4f88a8828a18a421a72f4815fd3ae2132c20a748f7e86f8a71129ffe6b8d2a4ea6e53233aa5c6cbcfb02bbffc83198bbe5cb68be946a1f577df191f11edb11967754da50f8793d7fc4a6b743f9945d5fa0240b6c5100c374e8520aa7fc42f5cac19f927f9af9463fb0ea25167c5b5bd9336ae363df9be949354dd3e2038e0671f74abb8e0902cb3417cc4fbc27f", @generic="78c6ee3b8db2577750a911cd7b29fe7c665c8cf3cfd36c97cfa38d7a1cdbfcade4490cc1a8f42950c00d25f13f1ed4663370cb830f103f1200f26c118e6f30e85f44d949189ef7687d5097b0e17abb829351fb2b9354ba847f8efab09c264297eeebe81aa2257b68ea7e21ae339ee3fb10447c643ddf68a638c297de723a3e1cf6b779e3ed53507089ea41cad68babec7b66a75c10a3a4eb44338f724fd11dd6f97f613342d6cbb3c4bf8eb8eca83f49fbad61e91ecf2194d1f2379c0c435d58276f3aa725a72fb7e3c87af2a8596e92652e75c25b1ec25df23fd5c3c67ce45ab52c9efa420263e27a03c41e2aa24d1251c4b27eb446", @generic="0101863d3ebdda62020f55a69e5686a643126e523ff65a331a0dfbbbb39844140a02b12270f48f9d7eed4956714060e8d399e5b9e3d83e08c50b1dec829fe3c8f927fa04c326932a1252c2d350bb0d42ac3227a10a9a5c5a83e77196be7348c3f176b49b5fe77395a08e2a0d32bdbe06b7345440ed06e5348f661321a4b7eb358c867c6cf212b9831f5dc7dfbdd83e7a73b8b5158d4e8d915177a5daab13d0f06171ca433b"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x13ab, 0x2, 0x0, 0x1, [@generic="c9c8c30a61600148991077f4bf06ac23802d242e741a09845b2da614da1724ab00cc85461b6dce41f755e2af97dc3268c2a1ab65274da1c98b319ddabdf34954c6d487f1258d956a6653aed96744c00dd2130e3a004737b560a9c8ddaef81faabda30bc513ef3856a53327071197e97d9ba0f21a82acb3283af99beadf1d", @nested={0x8, 0xc8, 0x0, 0x1, [@nested={0x4, 0xb8}]}, @nested={0x1102, 0x12d, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@loopback}, @generic="23ee36c3f1d5bff2de99db4ecf21945efe7aca8d619332512f3c9beb2f41510f084bf577f95b7dc59a415845294ea36dd81fd0d831e68547244675aed16a9a9044d113912187125244febd9ca8b1639193d7034957bebafe8643df88fb5f0e612c278c6bac45dca8b9ec7f6c72227818f68d51398f1c258da70c5eee0d5c93852f82d84c8ced30fdd84db607974437ce96ed3f0b071764755fb2415fd2100daa1a8cc197d39cf2ecef76ff5c5729c6ccc8403e8e9642621f3396afcca262af373f19347e696c0d2a0621ba9f2710ad3b3cca4ff45d39824f43c5dad13b27bfba9f419ce751c7586501e889c8d49fbdb64ba073bbf5c28d589d9847459c4f379982450e387ae5acc1f19594342d30457a28bc324acdf486e162d22879cdbc6beacf3edab260fb79ec34087aa3b03b5f3e91a72ebd7120558289c1d482587c1177bd932c1385630e2652bfa3d031b8dc314fb71ad683983cadb22c72523d37dc71c451960a008c12fbec8d29141762723006e413c1f732c1499acba5038bcfe958d6cfcccbac48d13a1af699ef3f85026d304352c8aefeb87338e1a46c3f9584544c60b60315697765bef9c3b8549217b9cd9bb9e5c647b6fb714ba4a5713241eb77c80dc3d5b1b030612aec917c3a3ee19f02bbe0e490b9aff49152587ae504f68f029fd7e583c717baaa1888aba26b7fc87255aa21510f901b619251a58298dc6008447e8009b2c5ae42cb6f4daee621171de60053fd915fe92c8e2f1f0d4e4d6c2ada970957bb67607fe0b03e455948a43c8cdeed9c5a1463aa1767e2b3403cbfa79befc48b7f30ee6d5b13654c6000fe4fcafe51f416ad6053d2c61af02d001f857a0bab428a1a468e7a4174d196daeb8edef89e33dd41378779585669727a7cfc5b0c1c74f85c8af311cf512e3dc177a7a8feb23290f68190a46b5ad915463f44d4734fc050fd72f67e4d1ea326172c50aa0dc1d067fea89e81bf1762f444e15906662ba3ef6fe8f0b717c8e94a3879c9029ddffa3f583dbf19f9ee0fbf6e63774f47ce148e92fdaa99ea9db2b39be4cf0ea7ee49f827cafb0aeb99b84c850c89092847133efe071abee97b6c4f601c9e97dac1e228e55b5e0f6dd1fce5263a4c9c4f6c61289881a4ccb640cc488a18bc1e37d18ba7ff2c3a511bd7fd00f98a4123dea545015bfcec73ec069f698bdd326291b251e41dc836b2f8629ce5e2450c8845e3feb60843f48700f65f6a55bc52cf48ff3223edec6e0747fedfbc6519c6413ff4171f114ab12a2a93b5a80322aabacd2c72f7811d5f766a4b63a5fb55a3bb2d62c058e2b62461d623360b65fd591b570b8b6d0229e449bb84fa14eb69c35aaa9ad3cb548cd2b399228a93fa28f51bfe98ecec8a3a8ef342e6b24121074695aee5b1355a4fd6ae587ef07cf0b1b540fd468787c774a117d880210600fc9bd2231065afb6218eb35e7db1721921c56fd070fd0faf49abc02f1bbc58c6292a616c8b71138a1047f08ba810de8528f52c80df26111d2ad4fc469b44c3d88db79303ba99a361aa45c3fcbe437dc86bdfec4430b4d51dbd8e3d186e9e7cca9321b0e29a6416925f93a500a649bdfdff2b0ddc43755e9f34d123a60e44acd77f96ead99fbb9a846ccd1f458c582861a2a5a42edb4e2b83bc62190dddd3f267abbd9a7e59aca2e6ef7972dbb6ab63a44a20a20c22786eb83589ea7bc651362aeb7864c79996a6b391a425be8d1ad5007947bbf8de771502db052a090394050ff7840238739049777d4c5d45712474b9c8af4447e176a8b6eaf44108329437bc34862990be9684f9bdf2ef357ba6393350a6a994f478635754a24dcbc171f55473272c9a73606df8a000c2881966f4d1902bc74167caca50492941de9b677e41fd773dfb956eb90ec7c3bf9af84fe0a8a89b5e814db3c16d5db4305cb50ac88952750733586eb3dc377b77b884bdff99682bfb72c5c34a72f16f0177fd8c6ff8499c7b793d6b0ddf440088647357cfc5939ecdbc6446bbc7bebde9f7428d51b3a2c6844a74dcaa276f2f4e1fac475fcf990d4e4ccf3dc96b1ca271d5779c8ea9b1d365860bd880b1adbd89e0db31a6f37dbbc064f9bd83922298eb249d4980eec6bb86af0ffd895fb40630bebfab9827bab1512eab6a1267d6f3b6a9a8171fc95c83dda60839585edb4cca653f3dfa35154fdd351b2c99aede07ae74309092a2f6ab514367bfccef29073c6f56556c1d498f25c48760eaa8869443a93a5b88fc1725daadf39d251927f882c0cf18572ff73d7583821d352eb0df9b3fbbff4fdc437abf6fe6fc69e2fc1013ae0e2724e94fc1457830681efd88f7ab9375dc8428c3ca9887e4d94d5bbae1fba987db1198ed761d5ba04e8837b4404724a836305c7c27a1885507a7650c82baa73abf55bc928e0bb4fe49f968b5ad47bdbe2811f3f04af0e9b1e6d029ffc2a2181f35998ed5beafa9fc6977b483d16498258809268967945f1f9341ef6041de787cc6aa23946ae961fe3a8045c2cd130d92b11243e45430aadb4e5001e049ce6c550cbb6ae9ff90001e77f28ee7c5c891b67568e5ad7a1777cbc2e02a5204c53c8f06900be9b2a32fbb7dc2a8f554113f045b6564a24bc79955d0d767f4e4dab5ceaf1451ac5b6dbb239b54100d6900b55406d48cb521cd34190717f3209f1417e6f433a082ec0eb3e74a54be8549dcd51f037c98117b5bb8d89e60bffe4b80c4fa6aae15538b0cff52ae299684fbc09611051d0e102a72b2c95a5c50fb73da407388ded8f8dba8ef3b1775041a3ddf6fb20349a7319ac16323b22631e42d66cc7bbdc1791eecbdb6acfb59c1980039a0a48e2ee22a5038ec150a48bbb50b35d7eff44d9cc45723f9a5db5a00ad4a382005cd794de919b45e3ea862f07510edc054f281ac5033a1ffe7a5b96ca3521e4608e3b66d3d4f869cd89f289f4c71a6a3c35d69e5a06dde10354f5402c23e28638610f456c77061b32d44dd76ae2513d0ea9c831f15f37a72036738ad5aaa8e83cced7871d5890276f47cfa2f5cd8ce3ff24e3ceadc9356e960b3b5f5facf1345a878962a4bd32f7673b43a7ec6c1b9322a8c21c527373fe318c246e75341f5bb1f8266c53a2d38ff9d77c8508f07bb8faf6935144c85aef4cffe880d2f97b2963fc3652252b84a8feca5f971152debed97d6ed98697612f2cb42afaf298fc0dba800e58544b673a18ffa5613a294aac07bb5271b5948abd93b9e42fcfcfc30dd0e1f51c9c466df79004d40678267f273e05b8a0cdbf4ceb3a73810179dbdcdace866e571f7411d52e6b7ceb92e466a3e7ca1718c2becf882055054ac70b009cc2bcc83f24c34cdfea4763eb544a1b6a42a313389c1b1d25feead899f44c133a682fde06774459d56c1536919f62916e38f88576270668921ede70be1f4256985b55a34e964f30b22ab40dd07f9c00ba34b388480dcee03eaf3355c2fd2d801bd8e8ff0c311eed094b3ef293bcb2df7c36a33d41221a8e85c9bf187d6ba8fbc109684f5eb3519b9c8fce7f2a9ac44ae988a7363e70e616b32da40637fbbf2030bf0136ffe13c52fea902c01adfaa953bb455715391050b6c650b991db0f632abbc698c43746cbfa743398ee3d70d73ca366edf74aa56c551b9076525aa461d6a4762903bba69d58f265ce6af44403894869aadf035eb4f7c94d3f7967ba67e60fcdaa849cdc64d90d8c4e0c09b7a587f9c07969484a702d73d9ff77eb007dc1bc72a37e1ca2750f1008509efeaf3281889803a9319b154585fb7abf0d6b156f1fc646f595b2f70262c0168757539bc82ce21e3fd457430440710042a045212392b3408f4bf13da1302fd0ac0b55e6a9eb5a11af05b68c61d3fcec9d84e559b0c3b1e2a4a99c241fddd99620e3ae88cfaf5fd26ed27f8c03197bb1dcec78c0895710219daebb3ed8dee714be2a4174252d9712d9963653a847add71354eff064733eab1c50664950533d180a20e3caf3da25fcad10bcf5c0ca73bca51ed4226d7c66cb0f4a02f0fc42c08ae86888904e6d7b63c16c32b88f2334157d938405df32494f3024b9d25686c3a4521cfb642862c4f4c6dee4883d15abce4b0906e883961912432dae2ae92ec11a67fa53f2f0a218fcb059117128b64919683bbb7dde6aee7d75a172b8682c3dc934ee54d653ebc138d22182aa7907b214c2f7075c67f4f865118c092541a9b7b0b68641fcc64dc3e6ca50fcc39d90deb870f1cd888c2be93a79244b54e22227650593adfc3d404c0945150f26450cc4e4781509170d850993bcd3c68aaeaf5a59b9d5ad8463d59094a2799dbf29cc14434491024232b3bd87d5eb8507e85c37d712df82e7b3cea612be3ef84ea5ec44c4eec4af9fdb895e1ae8e22a76bdbcb16565526383baf8efcab31dac6e22d6822309a45a8c9b3f80ea62d53162a3204f35c3783dd7c025895e8840746f98a6405580617f2620effb892b0ca9dffd71ad9a0cbbe0438bea83115ce89a044579a513740b5b299766cc1bb856f769638e85b30dac3f45c64815ce80d4556982b66bb631ee563ae5209646d5af855cb80655be1d7a9d8f56286d62ae5cfc37981ba82f9cb60403b939f141036dc60cd4a5e07cb71f234f11242f926b153a91dadd9de77371a81d1c0486419ef70c128805234b3bcbb0d143f0a449681316cacb20af9dfafef7d01617161fdf93b73fef589cc04f9a77ac2e8cc56c8d8c77e6dbe448d45bf83833aa64b14bbc5a62172c7e8264a89d4c7f4e3b5ccded676e2d90386e8e52dd12eddacb1a8d786f5c844d09eb414e4a187fb932515a819829daaa50f8638ab368a24bfed1a6aeef89c5c2d5bf4a75632c720045eba899e8016aaa712d53b9e0dd4ebff2b5925c5fd8964605048e7cfd9baa9713ca8d88eb0e868c97a4024792b21f770f9845f23aa6abf0465abed22d527e9daa145c24b937c37164d5a0c7236221256f3bb08f5c86e6655a351029efa9f4a6d136a19b14deeec31dbf48b8739d01b9ffa2a533decea2bd17a7d1d5c747fb09dd3c596321a2851a3a19e643432818c63c56b5d67138587383d166243bfbbe1ed9fde070dc5654cfce110db11c2204d817c73e90d9e15a09024a4e6809f57573f76df760cc80a724f062fa79b1b45a0458ce18a0b3f21ddcea922764ff6276c26a5fbc06162e8550614d2fd3518d4b3377ba274506a01136e1270a420d9a1b71f1118fe4a73e2eb1079aae0e250208fc5f60d38bc35fbf275cd792a51c639846afbc69b008cefb6cc9290d32d68a36ea18fe2c63ba4db2a7dccd677a846a7244016d208667aa3e52309bda1f5253736e99334069ce9935341fffe15ca866ee0ba98198992961cc5f0b6eaa1b8419415b72edeef8927d417d48d1ccf5f7b9634acfcd23798947505828cdd9c02c022c1c9f231208e87d5b8c70f93760e1d37e41349e0412d3a8d1731cb26e1c283fb4f7101b014d36e82afab04ac92cd46b342907aa3354ca6bbb37a7e9bdbf1127117afa380cee6cde08ad473c9ec52a83f84ba9a2372cb67dbd3e8c878c265bd0798ed88a3f50bd551ddeed219dc94afdbbd8f8e447b4bced7bf67eb683037a404580223ccdea47bf6aad336b424b5ba45143582c4d3bfaf1eff895ea2970b8093e63613c35d80c8d1b05580a78584b5643693c727fc58c94f7029f40581ae227b57115a71c0f0f2c6d14117a103d4cc454b95942cc286b3843a66272b8c139f626e1c13bddf772c0a7d26399eaa7b72fb155260075da06190ad9214a185fa7163073e215bf5e20", @typed={0x34, 0xc3, 0x0, 0x0, @binary="fc48cb40aceebf6111c15bc303f8ee7ce52e6098b90e2ba82cdb5dc61ce5862db1b6152c25ab48b9f8033dcad62533cc"}, @nested={0x4, 0x9c}, @generic="539b2d90f2f843c72e80e2ed434a35a15e78a9650ef1400ff2abc8211aef528cb9fa1ca71224ecf0fad3b9ec4fd5d39f3774219516f67d40cc1f8cf8f0b33cee199d996aefe35b102de5f4ffb6a9aa1271cc002d18cdda8abc4e29d32fcca8c31d434b0692de7c5387ddc9e59689bb2363b886659ecad92aaa8265b5fe98a682a48cc44d3edd74aec089354054c0b31a2dce90882a609f7df417d525d23dd69e2aece6c56d2d70fb71ccc131ee19ca5352632f27b9c1"]}, @generic="1a5b32e1029b26095e8768328d06f2598619390a7066176475e00ebf426d69c2b20ea270147e58c165181a9952486077077857731ca949936ea2f31986eefbf62e20f401ef27675972c551a0b839eb873328d012c95c84aaec7e683dff8e62b56c847ed4a5704b5237810ef27d0fd407d611ff6e8d063004d10cd436b927a8252079dd7dd38b3f8c504e9e67fe8c30b4096aae75fa080977739c2b97aef31078f801524c499e837eeb56596216e2aaf94cbda533026d00a12471cb9ef05128c7a16f819f6b177473e0", @nested={0xf0, 0x7d, 0x0, 0x1, [@nested={0x4, 0x12d}, @generic="929719df6768c8817722f589a765cfdf63359e13d402f973e173857b73c917177557563dd318f0c41fbb602700a4a7c47e8b70d9fd12ab53767299e342cb53b7ad40727cd799d14fa81b43807804a660e993d0de4d0bf11869377cb384faff8f295c9e57e8f6b0639e47c43e32e5951227a10209c14d479c9109783841bf4c96260a59cc5a949c3099acdf79fe5a5265ae5b00630206090461632a3bcedbd5f0ec5c3fb125a33355b01ac6cd3af6f17e4a54458b5ae4adacb4232e172683933ce4f72102112899fc70b764591891e153c22da2b1c5f20491702c", @generic="de04c4e99f495e2d1f1412c51061"]}, @typed={0x62, 0xcc, 0x0, 0x0, @binary="d416ae3aa5ee5a376dd581e9f9c26713fc3ec6e60b9a843da98bab6895e04f52acb2d8d038feab0cf9bc561f098b515ec60d583dafaea0317bb9f5597e8e8ef8e60baa6659a55d250e1566c160ea30eb21596c780ca778605a9f4a6721fc"}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x81}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x100c, 0x3, 0x0, 0x1, [@generic="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", @typed={0x8, 0x7c, 0x0, 0x0, @fd=r10}]}]}, 0x2c8c}, 0x1, 0x0, 0x0, 0x2000800}, 0x20000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003ec0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000009cc0)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000009c80)={&(0x7f0000006180)={0x3ac4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x81}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x8}, @NL802154_ATTR_COORDINATOR={0x37f7, 0x1e, 0x0, 0x1, [@nested={0x10, 0x45, 0x0, 0x1, [@nested={0x4, 0x106}, @nested={0x4, 0x10a}, @nested={0x4, 0x14e}]}, @nested={0x18, 0x29, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0xe}, @nested={0x4, 0x130}]}, @nested={0x11d, 0x125, 0x0, 0x1, [@generic="b1d80e68fdd06cf4dbda96679ad259807bb8e57abfa281e058b471d4", @generic="f174a5fc99600f4428d4cc9cc33728b36f673a22669eea9a737b3411b471fe037fd48c2b43804e798fbdde40be8393c22f0d5f9cdcb3307ae0ae8d9403fe8cf0a8b5a744ddce647ea9e028281690df33d379f698047aad0aacf20b4de15be346a83f9ef0202bf653d0e860b84b7b110608a48b997eb6fd08392034a6848191b2e385c2a22cd011819ee42139b1bcde732d81163d1b3e1c38bd316453183bd0ba1cc3d2d0a1c52d078be868e037db056abbcc2ca0caeb397f9ff8940b91d08ef217198eb17e5b1dd2", @nested={0x4, 0x2}, @typed={0x8, 0x138, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x22, 0x0, 0x0, @fd=r0}, @generic="b466046964785e49051dc701c27244d7065efe0951a64ba785fef6e9d1", @nested={0x4, 0x101}]}, @generic="6be53f2ed1caa27c1c6a25ba0c", @typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x123c, 0x36, 0x0, 0x1, [@generic="0e84d4bd0240593e8aaa821fe889c85bee201028b58d0f7f3d275089eae05407d2945bdaf8228ddc9c4f95e023e2913fc9d994bebb7ea6303772b614401cb658883ec7f8f3e1c051a6d3b589a6a51d1df4a759c6dfa935d829b5bda36d0f97b2a10f64a89358904246316d76889231d083746b911ac64499324fe63f14e079f357e3dfcf6f1fb8bbedaa4b70baad8f63607c8b18fa65aba4e3c918deab70a87d40b39d510f1c19f018cc72df6e337bc46a6e5158368ddae7b511e2aca760347a516d30d8c2be0e5538c24da438a922a1f1542fb7e9c1b6be7efa743a00d5f7ae010b3b513309ab600a16efc3a636c4da73e63337f4240db6e16953ca0920d089a84ae36cd8c34320bc04bc91b7042aed7bac6e6e307e756af3fca8859ebd16f39f6e6e89b8736c4f3ec0bb13b8f73ff1e486c4d6baa6b021e09adb8688d989d61d973e12689ca6cf46c752e9e7ba124f5c03ecd2a4e5ed0d3301b7fc31e6430d3d209ead97c709ed24a4c6c4ab129b3130580d6ce2b38d37c7c7c320590e55d3fc5385ec30fee77e4bee2d596c95f7b60e9600178da1840cd4287a058d7d80600526aa93a3e3ce8cdbbfce8299789c48472cec1cf008b02582e85b65f687c22d42c68b24c6e6b1fb022ec9a26c6ac6f88f77dcc017677c9d521ef779aeb86fa0518e79dca4d514cb0001d1417007e0469fa88c09a533cf0a59d492e22ac3eb2bdfdd4bac953d292a7de32bc60ee0272e87b19c89b87f494217a6d6e64d3c4f093c18da463347a7dea6f5e0cda43f55245e84ad9d5b8316e86ca8e57520aef166829a9a912fffb46094e2b187b115e773aa45472d89ec957463240feed9b2ce21d331c0ee13fd2478b8b6209f85f941312e4e49533aa6474615742eb1a4001a6ec58c32068e6f9029865ca8e602eb4e1eac9112416bd62e1ef001036e7523ee7ff4d68ef4f94df32adf89b120abaa9b74085fed893cd9bcf84199623c92302a3e58abd47f74814af756ef5ee3f7285845a2ae57a5ea0b80e34ae86ddd82e65d1edc6e464cdfcf2369479d8eb1273e1cd01cdda674425079f89419df7db2198521f93cf99c25be23e7d7cbb30115a587559a303681397024df3c608fd326425a799cb78a5e48c6d48105654a0e8f6fdd405e6ccfc307e90626d91b2fe1a29bed57309ad6e1a706e320ff5c6b8bace488644cb6d18eb53db596c9e8acbaa8819f8fbe8db11ff1cc0d517920b6c7f303a049ce42a0f16d88681874603bbf5c9cede0a09cd802c6a6f68507d188e7a8e4f1fff58a62edad3f9070c362e331bf8cc16bb6eaa37add12a574e643ebea2888734a82e1a833dae65b262b9685e207efb8d895a60c845146c6e09d085d0e4f2e615b966518b63302b812bf1a10b8f14dfc5598289b87a3d189cbd17741da73799c6bb4dc85d3ee63dcf792c2a31b2fa79f21f6c7704a5811dc54b8629c79f54e62cc4de658eaa4d6e4a6d03230aa89d7d3ca1c2554fc68ea6b270d0602fc3dec3beaf07977a1c6c46327a0fcdff8c7ff0f2fcfd84874991cb40628ab5da0e983e18dffbca47b1476113df5923e954f97106742986267ccdf683379f5aebb9bcfb026415b176a9f3a0e25f750060304420ddc61a888d33815660f0d552ddffeb2c14c644e393385dc8f632dec47a895994b74998f1b92ec619f255275ea9447a7006cb1fe182c6672860999f631c49df6a9467b43cfbb30ff5f13dc4b360bdb4821e627defa462b988cdc55cbb9020e699d27e8c86ba626c32b3f6f670013a43f6ca9e6ab69065ed1f079ccd4e6b6fd61f8914143d07e20e18dbb8043e34ec6cb1ca881e350ad2314091eed1a9e2eaa208cba782265cd6befce3b952f1528d2e11d757873ca3f07e8ceb60f7ae385e39a0a175836c55771ea2eabc52fae0637e3d02c0c754c8bc41315491f08280fb96ea5dbc9f959c93a385ee809a993533bd7edaa9879199bd7f1bea49308c8d4fef6484cddcbba5f3074bc138a425e9673e1836c48316c90bd3f3b402a3d36d07aeb09f1e63a2fe03a68fd8ebf9978f38d1efe972a6b1dd1cfa1f7690eff309215e637bff9621e09f973c4002950bd25c83e3f77891b343d449917d374180b92a8c928c183ffe0c1ed211e93adddb361e6006892b14bb618e6b734efa25298c09f65ab22948a2546180446d7bcb7bf0e3f70ac7b72ea77ab657b08b8520626ea3e7fa3b14f8d68a2f3e9f5a6264b29ee5d0c7b232090d999cf24018d55a6e70775ce37b69d13fb6d1090b39f2e515557fe7f06bff4de09b3bb4de1c06d694bdeadd605c7f37dbfa59ca167cdabbb811e5e1b3bf3c122e4fea01ede2e1a39531c2b0ea109d0ed7681864318ccaa960506c139e038c5556d8123949c5c10693b26968210524491a505ac724563eb87dd1f535c7909ad8ab644574ba6f320fd2fc78a9d8641308cd2eab037d4705ebcbacc62c60c781a10cdbd430798bb503053c267d51ba11f11ef6d52aba92528a2f7094569158d0fbd33659e7d844b80f48649fb31740222cddda27a86dc86658de6e067a0d15c21acb78cb89f0ddfcdee7c5d04e8b727be42a6a8aac48fe504891202325f65cb8f49d4933a80c64b72e04d3857fa3464ec8c37ff5dfb6370f556b98c47e1771d61061a593f010a8073140752b9f7114803c45d2a954809620450b711a9c97e86ab442ae3b9a6bf55e84aea2c3eebd6b41527f04fed6e5a745d2f6226fe49841a7c9a2c7e6a54f927478e1be8a0cb51386e8bacde6b523f618cbe70720966af1dc8911d6a18c2bb656b1397978df83843030754f07db534af9cb4516b9e77481fba4928aadb6fdc68792791b8c2aa12ea44d570fd32001b23feaec6c7a3eb4263d28ca2acac8debd4625e7272f54e5afcc83f9e6dce9c0c44e5f9e71367f9c99e6d3f9ead4471efeb86951ffcc69e5fcbbf3fb5b0ff7c9f37308b14449b44604043f280ea41c19803fd0f1cbacb5b20e9ca6f0bc2b45814732925423338c08de6afa2a51eb691ea06c38e1659f2f2040ba8874d325d85d8c737332247c3657384327a70c2a69d015c682b3bf6904d7acd1413e61eccaf4de6a111384838ba0ef644efc0c073effbb01b4537d8f535ff222e78083d0f1df427789ce61a68a78b4517783f682b4c13adcad79c1e490e2da29a8836ba0b80906720ed32f5b2c9ecf965e705f50e5ce34ee9efd17c794080180c30cbafedf33c87fe7f2d53f2a2e2d840b1569391ce5d2b8d39d45c4ab43e86f577914f1ff1f1d65c407ec6cf6e5808877e84f5b9748f2d4114c172b1ee3af92a402a4fe519e24ea7406182c2d2177adc8cfdf9b89838ef67844d7c1ab6e580523260d395eae7c1a5f5196124e1e830a6fdd5aa3f39a49468af6f3d65acc3afb38d451fa493185093a96e7ef9c44f26b85f1306d16b65a5b6b490262f7b8d31c7d8221a87358206e57b2d6e55f6180a17e8a6219e93fabfc7ee4990426d1efa837cee1ebbd760f106d4d17eba6c53612848d1483e199e683b80ef9f127aef8f0974a2d4b035ae17fe82e945e7c895d8e6c46bf060cbd678b20b1970e0897d01215636f26369d0417e4b15cfc6fe5bfdb339ae3504e71b83161a68ce1f43db5163ed8fc1e6d130e9eafdacdec3f9d2061712e1aa11db575ceaf3d70bbf07b15b0fdb6e01aaed242be1927f60e9f90df54353eb05bec1815b7539f9242cd5bd5b4f4c8a2ff9d4bb379d2d4bf1675c1ab70cf4df0c6080be492017670eb07eddb070446ba4474b7d8a8e50c2d6362f4b31ef513a8991947e9ee5b3a5341c598f0e656d10138370a29531caf92b6b90bcd02447c364db1f387f150135f9c976dfe37a23aa5b79b20723e509228251cf53ce9c289aa5afa6de237f1c2ec371bf78fbe8767a2ecd16e1d69b5dc8b20585fe210979364971b2911743397879926296a9eccde3389fadb1778aeb53522bee7fc2f1e216aae25f19eb86b5240b04c5208975bb76bd53f80e9420fc35d075aa88f2c9a355bb0ef97efac1861bf5edf19c6c8f4ecdec2aa14277491ce98ad5ab01174215d17d5d8e3b0d1bb20ff9a06a1219250f02d9f8fa4980dba28debc70fadfd0ca6e01bfe57004870728a95a6a5e3102f9d43fffe52571a8a9edd377d0887642ff4392419d678bf9e4fc273c47129767119a01fa373e226de4735680734d46b9b6366c9abbc5f09197e4613e250100e03841a594fc2e0dd742e635adab2a685e04fcdea951e476fd25447882f157f065be2483f38c8f671ccee9a2887c0e5305bfb7c4c9a33bc978a2b84f72e92b7c5fa2c94be7ef3b9769271a7ce70ab6dad9293ee81cb9a6d7865d47c96bf4ae9033edf00d18242501fc05733de77582649d14703b5d7f2604a150f9c484b643992676c7706f0bc107c7daacc03bd82c98331fa3e2db7011af583638cc91352ad226d790834e62ecfba593181d5f8fb67c553d44506c0137e5f9b4370ac2fa36011ea9c68c6ec2e41ea461d514d8f78acfb22104855da55ae410e61aa9c3e2f6497409df6e4123d025a511eafab6dd1666cc95d1e5fe124cf5860d86c613dc58f24b82593609d67f3fd366570ad70fc081c03e3917bda0e0c00f5dc3d13d9b86317ca4cf4153613a8d5bf952b7eb77a466e58966bdad3b666dc247222b78217cf4a9e6b0fffbd3cc9ee628357f087ea63dc0dbe9170ddb673ce78c86a71444f8ee7d13def6834d2be52828856ce661218852cd984b0776165d03cee1ba59df0530fbf4c76d1ccb8c8fba8ddc2a2ce4986430c9eb5e9b881d454b5f6245f66532cb6501432dedb6978a4e0d6b5b8b893149e058324ea94001a556f7d3c869b1885dd81c99299ffcfa89e5cd114e656b7962ab43f5876bf6a29027061123e3e2be43b49f0fd73f71ccdf85df7eb7f484046a6ac111a54724e4a1e0c611850157feb8c7ccc36175a2ba5aafbedc43370eac29cca984191b89db06470c1fa1653530d37b947e28fcd3129969ed213bb1c601c920b03710debaed247258108efefe0f1b887f9b60f4eb6dc452459da2aec56826bad0534babc1d45e36ca8973a4097f967612817e033be94e7fddb224523ead56f379f2784867b4291a7ca1085e3e51974677418bc786ed232bed717a3658321ae0b3c991005885052272dd4f034860f8170a05c34dc72f866c55dc4940ad301be493e96fe7848e2de795c6c7502a196527d0555a72ce41fdaada35cb4dec2615624857f6a8b5f19bdadf9195f4a9049fd972c464933d0e7a7ac3d65d0c108ae1635871db5741112505beac1ffd1f563b420b54601834208a44f8e37104c7d453e61c1d3f62bd88a40ee6c99f3d6d1fcad39335e2dc0f987f681c20e898fff4e3047029cbde47c7237f8496f52ea80f85d2f02e8834aee082466d52d75c1554dbb15a65898331d0e3d1d90bb18ef7b7a3b904165d222af1b7c48dd56083748b4fc4bf2a3f1ef3fbf89c43beffbfe86019fbb2bb45d972e510226d248c7002953710ad34feb73de4af7a4e18f99ba35cdbf1a1a3c564cce76b2d67f1d5cdb98631d3f01103aea4f40712f30ce08e498bbd2fb38a7cad1369b6567cf2ad3871a27c22b02b6cd0892b55cc9c948faa532d121a39b574b23535bc29a709be8a9d0d4569b4c15feca07249d9dd09ccb24edbefe2a6865f91fedb6f22711a27992e5936838449fda019d9877228c15d329d25bc708f35ad2c5d377e7110252f0aa6cfbb0ed91aa1e98e9fbf85894004db5743b9820457594dab174d02ee4c8b7923026a46f4a575bd2950c15857e2643f5ade1c9", @nested={0x4, 0x12}, @generic="d1d21d6fd2138c3d43f4a95c447f6d442e82712218d65e5cd7f60b5c1a180da32d38a00c697676842ec237a8f2e2db6ac0e39da150236e507f0c7bef3da07bc44ed5f87392b1e35b6eb95ef4d400c44556e243f87f373e4c5175f2f3b907f27123bd2d4613c7422f77550eb8a08f8f3743bf2e3bdac47433e06cae7dc6e1dd5e3cab5cd474a683ef6f60d06eb85244f6f780f270c36ee9fb6265a79f26ac083dc067de4201cc304f9486a41b2938106e8decccbf2178461b7f40f4958b28804d885ee531df9025e02b619d81f46992dd33dbdd", @generic="a736bd65c255638a711f3efae9a6ec02cfbaf0e399acf6e4475ab54bda9dda395ca4bd8f73c13bec428a5b42e88c4e19b676c3d49afcff60527832ff9216f7c9954e4ccd83a9ab74c770e0eb66ed9550cfa7cc29e08b547848108cb0838e158ddc4cb1a4838df5adf781c35816bab08d41fe0c97fcf76a7830bc2a20f7a88f0efac1b176f0a7a8d14bb7e848d183b708", @nested={0x4, 0x10c}, @generic="5c9715ee14773f56380c129963862f320d86d16855c27926e34b86fbf79a93f72b4b267c020dcb3c68d1d5914607316b42b1349e19c96a493f5af9a741e48b3815dd6633ff7a670ebf43eb6413245bf45e747d42", @generic="e62767accc1ba4d381388da22a957b130a6e554a05dff232a6e5121d2e78d28989af1462b5d9853719d65cde29e15c6a767f405e1d8bf98f4d7736515be8b990b9451c02f536e52d07bb03352bb8c9b37f06f8af4de42350987c12ef21294e9982f8e443940ce575c51861657fb36f83bc11b1f9e79267e782"]}, @nested={0x1128, 0x40, 0x0, 0x1, [@generic="761cef83bab723c2389aaf10b04b028f4890cabc1b4c3db55bd2342616157939596aea5a1665d37146a98e9102fdf056c68dbed30e991dd6afe8481ae87c5a", @generic="8331f522e8623e696483c74b4acc93078add2e81eabc6bc01069961be7294a2aea79f081ef8fbc5e03474c6bcafe12d14cdd2095ab55881fae4ed323a8d25397cf22e8b0227c11f7ac08440a08c601a7f5de119199f64b82c3c09a40fd60e5a36954fc1890dd7a28b05c1d9f764164791ba28d2dbe6701869fb750cdab78c64e6ef07c6cdb29ae25446e9c4f7d95ca5fe74c2816571a663573708a8d81bf003f180dba26de8e10efe5835563d207ce1bb11a311f6f970930b2f6f9539cde41855d52f8cfd0ebe5b6d51db249918528026a", @nested={0x4, 0x33}, @generic="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", @typed={0x8, 0x85, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x8f, 0x0, 0x0, @uid}]}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x3}, @nested={0x123a, 0x4c, 0x0, 0x1, [@typed={0x92, 0x10b, 0x0, 0x0, @binary="8a191b38c799ebe694b756dba00333086818e978f5a239f06b99ad378c838ea739052826f9578f34a26eec35832b1315f0a1b30a6d79f4da3f4c3e3ba52cc8142de7d07b7af6fcd2bbc76f61e73a3a68a145520c04b2449762e01f3be1d3cd97e6771df0537eddeebdf451f746d138b6a3c00577b3cc2a75a47c70a08c4117471d6754d4c25ee0897ad1c842e10c"}, @generic="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", @generic="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", @generic="b3db8acfa1b069e6e994130783ecae4ce4ba277180cc0c96436a54b0a0f50db9d075080a1c8fb300113f486f3c49b1d5ef7a0a01f122d9a806ee3495909d4f57e8b0bca8e9c493a1f6971ca7e47562ece79a081f3a1fe95f910c48b7f169e432b30a5eb41810bf3bf551295ce4f06ec1afb8d52b3a1e7713ad3800c819c13469d498cbbc79f562589f1b4fb070844e", @typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x119}, @typed={0x8, 0xef, 0x0, 0x0, @uid}, @nested={0x4, 0xf}]}, @generic="f8bf0f6414b5fb7848119a7ea4843d8197ff86edff5e526a86e6ca53adfc1c7f7b1f4a142d0c94833112915a0d6bdb76ead0f2acd9c9e5f9085475cab192213a85d62fbfaf0d48156b7e21a74fda616144b79445655e25d92ff40cf925460cc106ee75f871f995f486b63d4481925dab155b960ac2032a181a63cb3440342dd0b45e94541156300f4c7cd90b586bc4ea35c9a1998b2f554135c4f04ecacf46178c3ec9b8a5e5df5ca705435a1587f3aaeee0999858d410fdb201f85d8b673a54dfa5d376e9c58fbe3f12650274915c7a65dc49c12a34d368b8af5a8abc10309dd9d43329b25c1c485e67"]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x7}, @NL802154_ATTR_WPAN_PHY_NAME={0x7, 0x2, '\xc9)\x00'}, @NL802154_ATTR_SEC_LEVEL={0x280, 0x2d, 0x0, 0x1, [@nested={0x196, 0xe8, 0x0, 0x1, [@generic="7a74b3194f95ae8bfa125b265fcf50f1e7da414a5c97ac93323b2463fd7f42d4fba647cd3cd3d839f67ad99edafef5c806469c44ed0290b3e0a4f6146fd9bff0c63bc053658fd26dba4b13c5e6b573de9d8f472559d74c46aa71312784f6c64d34886836939a9742bc9fe77c36be62bc1dd3c961", @typed={0x8, 0xfc, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x1e}, @nested={0x4, 0x10b}, @typed={0x7, 0x14a, 0x0, 0x0, @str='.(\x00'}, @typed={0xc, 0xf3, 0x0, 0x0, @u64=0x9}, @generic="ba30d2510d55a6f65d5c87b869851abe09ed8722c67fed877727e6355b1b9c84e7c6967786acfa5a659add6123487710adc58e9b2ba0d8069db176b785d6c7557815bb27f10f27b273903d1d30d357f60fb73a42724bda23d713e5ab8c03f4d7006925173a4515457d6c445abef7634dd10054cc4f736536c3f3f02354e29487a7d17618e00c2ee923047c36399c762a51113f88945ce63c60ddfbe1b1ab3fa29ff3a78eb1a3a341db7b401ceb68a62cf150287b5e6706b10f95e6b8c36ae322d3bf449797acc1d96f2c879c823eadab8ec0b07522bfd236a9e10f75ac0973fd08b2fbacce0f69febc21d4ed125db538ec39ebf61322", @nested={0x4, 0x137}]}, @nested={0x6, 0x57, 0x0, 0x1, [@generic="129b"]}, @generic="e88cddfa9e490b0cd4bdce3a53bdb73f1d0cc5910220dfdefd4d8922748c93f2bd6eee5fd64a706d392cc9ef0a46ac7c87770675c4e82c58eca718a257eb71739dc41085e983b181cbc76ae04b1f0e4d8a7001f4eb6ac4171d59da28b9fbc4d8757d82718dc1a6167a38376be7478b3ca5994691ef9d0b4f388f5d00300aa36398b89585cf4b0224646d65e864acd723", @nested={0x41, 0x77, 0x0, 0x1, [@generic="81c20e59bf41df236c2ac6555c5cceb856322ba5c6fb970277b55907706bb1a0aaedda0112101a65dad3765cd832b0d3382834cf8455b9a879e42230c4"]}, @typed={0x8, 0xe5, 0x0, 0x0, @u32=0xfffffffb}]}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xdd7a}]}, 0x3ac4}, 0x1, 0x0, 0x0, 0x8804}, 0x8454) 2.222540628s ago: executing program 0 (id=4897): io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(0x0, 0x261c2, 0x84) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r4, 0x8, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0x10) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) fcntl$auto_F_NOTIFY(r5, 0x402, 0x7f) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) openat$auto_mgts_fops_(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x301, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44010) 1.392060744s ago: executing program 6 (id=4898): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye6\x00', 0x40202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0xffffffffffffffff, 0x2000b, 0x7, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) mlockall$auto(0x7) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000040)='e:\ru', 0x4) ioctl$auto(0xffffffffffffffff, 0x4b67, r2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1000000000, 0x20009, 0x4000002000df, 0xeb1, r0, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x0, 0x0) unshare$auto(0x40000080) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000004, 0x8}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x15, 0x5, 0x0) r4 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) writev$auto(r4, &(0x7f0000000140)={&(0x7f0000002ac0), 0xe4}, 0x4) 301.779713ms ago: executing program 3 (id=4899): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x0, 0x24, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x34}}, 0x4000) ioctl$auto_TUNSETOFFLOAD2(r0, 0x400454d0, &(0x7f0000000000)=0x6) 931.573µs ago: executing program 0 (id=4900): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r0, 0x80a86f3d, 0x38) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xc, 0x2, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) write$auto(0x4, 0x0, 0x100082) unshare$auto(0x40000080) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) vmsplice$auto(0xffffffffffffffff, 0x0, 0x6, 0x1) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e7abe0ec631458f5c6e730e12d87e2676b836ff48d0c764be2a36fbdfca3350df8f62341cd49925e86ce2a1b9a41594883db836b6fdfea3a371afc5a4146041c9ab0ac9c828f424def0da6a0b88b128ce4f3bf9af9cb2fdb90e45075ad929a42790d2b9929d1cf9ef19cf791eac4cbc4298c445eda3dd97fcffa5817dadc7f5c89f4e84d88ce597361fa9e413d7b54c3aaa5377866db9406de4711ee92d31291442aab03d4008c15e4993ce6b2c1fe20ecf033f83b8588c27c63e8c3b8bf13f129ef6b5396c1f9986ef6bd54b976e5da97fb9d308e528c3ac97ffe273419a5a2dbcc499b926ace10ce606c0ef8be221b82b7f76769f0915f", @ANYRES16=r4, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES8=r3], 0x58}}, 0x4008110) shutdown$auto(r2, 0x4) madvise$auto(0x7a8, 0x1, 0x19) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x10000, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) gettid() r6 = getpid() msgctl$auto_IPC_SET(0x80000000, 0x1, &(0x7f00000001c0)={{0x59b, 0xee00, 0xee01, 0x1, 0x8, 0x80000000, 0x2e}, &(0x7f0000000240)=0x8, &(0x7f0000000180)=0x9, 0x5, 0x7fff, 0xa, 0x5, 0x5, 0x0, 0x4c, 0xa, @raw=0x2, @raw=0x5}) rt_tgsigqueueinfo$auto(r6, r6, 0x4, &(0x7f0000000600)={@_si_pad}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000001c0)="ff") rt_sigsuspend$auto(&(0x7f0000000380)={0xe}, 0x8) madvise$auto(0x0, 0x2003ec, 0x14) 0s ago: executing program 3 (id=4901): close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$auto(r1, 0x0, 0x7) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x2, 0x48}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xb, &(0x7f0000000040)="e75b15fc96897382db37d43e584d781fd82af36672a178f7e2f40cbfc2fc450b649e1acb45b6118b2055538eba1ea6f5a46af37f46c9b6a88246cc99") socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r3 = semctl$auto_GETPID(0x6, 0x1, 0xb, 0xb7d2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0) write$auto(r4, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcdz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:kJr\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\x8b\xb3yA.\xb4\xbc\td\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00\x00\x00\x00\x00\x00\x00 \x00'/478, 0x8000000000b) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r3, 0x5, 0x8) sendmmsg$auto(r2, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780), 0x49}, 0x8, 0x0, 0x2000000000005, 0x3}, 0x1}, 0x0, 0x7) kernel console output (not intermixed with test programs): .4.4198': attribute type 4 has an invalid length. [ 1414.697099][T28883] FAULT_INJECTION: forcing a failure. [ 1414.697099][T28883] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.721368][T28881] dyndbg: expected <4096 bytes into control [ 1414.761429][T28883] CPU: 0 UID: 0 PID: 28883 Comm: syz.0.4203 Tainted: G U syzkaller #0 PREEMPT(full) [ 1414.761455][T28883] Tainted: [U]=USER [ 1414.761460][T28883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1414.761469][T28883] Call Trace: [ 1414.761475][T28883] [ 1414.761481][T28883] dump_stack_lvl+0x16c/0x1f0 [ 1414.761509][T28883] should_fail_ex+0x512/0x640 [ 1414.761523][T28883] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1414.761547][T28883] should_failslab+0xc2/0x120 [ 1414.761564][T28883] __kvmalloc_node_noprof+0x141/0x9c0 [ 1414.761589][T28883] ? evdev_open+0x11a/0x690 [ 1414.761608][T28883] ? evdev_open+0x11a/0x690 [ 1414.761622][T28883] evdev_open+0x11a/0x690 [ 1414.761639][T28883] ? __pfx_evdev_open+0x10/0x10 [ 1414.761656][T28883] chrdev_open+0x234/0x6a0 [ 1414.761678][T28883] ? __pfx_apparmor_file_open+0x10/0x10 [ 1414.761695][T28883] ? __pfx_chrdev_open+0x10/0x10 [ 1414.761716][T28883] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1414.761739][T28883] do_dentry_open+0x982/0x1530 [ 1414.761760][T28883] ? __pfx_chrdev_open+0x10/0x10 [ 1414.761785][T28883] vfs_open+0x82/0x3f0 [ 1414.761801][T28883] path_openat+0x1de4/0x2cb0 [ 1414.761827][T28883] ? __pfx_path_openat+0x10/0x10 [ 1414.761848][T28883] ? __lock_acquire+0xb8a/0x1c90 [ 1414.761865][T28883] do_filp_open+0x20b/0x470 [ 1414.761893][T28883] ? __pfx_do_filp_open+0x10/0x10 [ 1414.761927][T28883] ? alloc_fd+0x471/0x7d0 [ 1414.761951][T28883] do_sys_openat2+0x11b/0x1d0 [ 1414.761968][T28883] ? __pfx_do_sys_openat2+0x10/0x10 [ 1414.761991][T28883] __x64_sys_openat+0x174/0x210 [ 1414.762007][T28883] ? __pfx___x64_sys_openat+0x10/0x10 [ 1414.762030][T28883] do_syscall_64+0xcd/0xfa0 [ 1414.762053][T28883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.762068][T28883] RIP: 0033:0x7f4b99b8efc9 [ 1414.762081][T28883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1414.762095][T28883] RSP: 002b:00007f4b9aa48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1414.762110][T28883] RAX: ffffffffffffffda RBX: 00007f4b99de5fa0 RCX: 00007f4b99b8efc9 [ 1414.762120][T28883] RDX: 0000000000020881 RSI: 0000200000001a40 RDI: ffffffffffffff9c [ 1414.762129][T28883] RBP: 00007f4b99c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1414.762139][T28883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1414.762149][T28883] R13: 00007f4b99de6038 R14: 00007f4b99de5fa0 R15: 00007ffc6981dd88 [ 1414.762169][T28883] [ 1415.006716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1415.112774][T28862] Bluetooth: hci3: command 0x0c1a tx timeout [ 1415.120716][T28862] Bluetooth: hci2: command 0x0c1a tx timeout [ 1415.137462][T28889] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4204'. [ 1415.549803][T28899] sp0: Synchronizing with TNC [ 1415.900535][T28906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4209'. [ 1416.236709][T28925] vhci_hcd: invalid port number 255 [ 1417.102695][ T30] audit: type=1800 audit(4294967325.155:52): pid=28946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4218" name="features" dev="configfs" ino=237318 res=0 errno=0 [ 1417.588265][T28957] ptrace attach of "./syz-executor exec"[19177] was attempted by ""[28957] [ 1419.493286][T28986] could not allocate digest TFM handle [ 1420.369684][T29016] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1421.277804][T29039] zswap: compressor not available [ 1422.078743][T29067] nfsd: Unknown parameter '^BÔ-' [ 1422.887823][T29091] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1423.130390][ T30] audit: type=1804 audit(4294967331.185:53): pid=29095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4250" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1423.271308][T29102] block nbd9: NBD_DISCONNECT [ 1423.807177][T29116] program syz.4.4255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1423.852245][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4255'. [ 1424.179168][T29124] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 1424.179168][T29124] MÅ' is too long [ 1424.324245][T29124] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 1424.324245][T29124] ††½WÏõ›ú «ú' is too long [ 1424.354523][T29137] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1424.434723][T29142] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1424.600166][T29151] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1425.415100][T29166] Unable to find swap-space signature [ 1425.786733][T29184] FAULT_INJECTION: forcing a failure. [ 1425.786733][T29184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.805569][T29181] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1425.850463][T29184] CPU: 0 UID: 0 PID: 29184 Comm: syz.3.4277 Tainted: G U syzkaller #0 PREEMPT(full) [ 1425.850490][T29184] Tainted: [U]=USER [ 1425.850495][T29184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1425.850504][T29184] Call Trace: [ 1425.850509][T29184] [ 1425.850515][T29184] dump_stack_lvl+0x16c/0x1f0 [ 1425.850541][T29184] should_fail_ex+0x512/0x640 [ 1425.850558][T29184] _copy_to_user+0x32/0xd0 [ 1425.850574][T29184] simple_read_from_buffer+0xcb/0x170 [ 1425.850594][T29184] proc_fail_nth_read+0x197/0x240 [ 1425.850615][T29184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1425.850635][T29184] ? rw_verify_area+0xcf/0x6c0 [ 1425.850653][T29184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1425.850672][T29184] vfs_read+0x1e4/0xcf0 [ 1425.850694][T29184] ? __pfx___mutex_lock+0x10/0x10 [ 1425.850707][T29184] ? __pfx_vfs_read+0x10/0x10 [ 1425.850731][T29184] ? __fget_files+0x20e/0x3c0 [ 1425.850755][T29184] ksys_read+0x12a/0x250 [ 1425.850773][T29184] ? __pfx_ksys_read+0x10/0x10 [ 1425.850792][T29184] ? fput+0x9b/0xd0 [ 1425.850809][T29184] do_syscall_64+0xcd/0xfa0 [ 1425.850832][T29184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.850846][T29184] RIP: 0033:0x7f94dd78d9dc [ 1425.850859][T29184] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1425.850872][T29184] RSP: 002b:00007f94de5da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1425.850886][T29184] RAX: ffffffffffffffda RBX: 00007f94dd9e5fa0 RCX: 00007f94dd78d9dc [ 1425.850895][T29184] RDX: 000000000000000f RSI: 00007f94de5da0a0 RDI: 0000000000000003 [ 1425.850904][T29184] RBP: 00007f94de5da090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.850912][T29184] R10: 0000000000000086 R11: 0000000000000246 R12: 0000000000000001 [ 1425.850920][T29184] R13: 00007f94dd9e6038 R14: 00007f94dd9e5fa0 R15: 00007ffe3bd40a38 [ 1425.850939][T29184] [ 1426.397728][T29188] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4275'. [ 1427.055385][T29228] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4279'. [ 1427.374682][T29247] Process accounting resumed [ 1428.867305][T29261] sp0: Synchronizing with TNC [ 1428.923834][T29263] sp0: Found TNC [ 1432.309292][T29334] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4300'. [ 1432.341684][T29326] zswap: compressor not available [ 1432.929356][T29345] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1432.992897][T29326] lo: entered allmulticast mode [ 1433.030492][T29326] lo: left allmulticast mode [ 1433.074644][T29331] zswap: compressor xF„Rûúc not available [ 1433.326504][T29359] Invalid ELF header magic: != ELF [ 1434.075384][T27976] Bluetooth: hci2: unexpected event 0x06 length: 439 > 3 [ 1434.816064][T29398] ptp ptp0: delete virtual clock ptp3 [ 1434.890613][T29398] ptp ptp0: delete virtual clock ptp2 [ 1434.913386][T29400] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4315'. [ 1434.945524][T29400] : renamed from bond0 (while UP) [ 1434.968261][T29398] ptp ptp0: delete virtual clock ptp1 [ 1434.996912][T29398] ptp ptp0: only physical clock in use now [ 1435.083556][T29401] FAULT_INJECTION: forcing a failure. [ 1435.083556][T29401] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.207388][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.4314 Tainted: G U syzkaller #0 PREEMPT(full) [ 1435.207417][T29401] Tainted: [U]=USER [ 1435.207422][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1435.207432][T29401] Call Trace: [ 1435.207446][T29401] [ 1435.207452][T29401] dump_stack_lvl+0x16c/0x1f0 [ 1435.207480][T29401] should_fail_ex+0x512/0x640 [ 1435.207495][T29401] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1435.207518][T29401] should_failslab+0xc2/0x120 [ 1435.207533][T29401] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1435.207553][T29401] ? __proc_create+0x2ce/0x8e0 [ 1435.207573][T29401] ? __proc_create+0x2ce/0x8e0 [ 1435.207587][T29401] __proc_create+0x2ce/0x8e0 [ 1435.207603][T29401] ? __pfx___proc_create+0x10/0x10 [ 1435.207621][T29401] ? _raw_write_unlock+0x28/0x50 [ 1435.207642][T29401] ? proc_register+0x559/0x8b0 [ 1435.207660][T29401] proc_create_reg+0x7d/0x180 [ 1435.207676][T29401] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 1435.207692][T29401] proc_create_net_single+0x86/0x180 [ 1435.207708][T29401] ? __pfx_proc_create_net_single+0x10/0x10 [ 1435.207731][T29401] can_init_proc+0x1e1/0x4d0 [ 1435.207745][T29401] can_pernet_init+0x1e4/0x370 [ 1435.207767][T29401] ? __pfx_can_pernet_init+0x10/0x10 [ 1435.207788][T29401] ops_init+0x1e2/0x5f0 [ 1435.207804][T29401] setup_net+0x100/0x390 [ 1435.207818][T29401] ? __pfx_setup_net+0x10/0x10 [ 1435.207832][T29401] ? debug_mutex_init+0x37/0x70 [ 1435.207855][T29401] copy_net_ns+0x2f8/0x690 [ 1435.207872][T29401] create_new_namespaces+0x3ea/0xa90 [ 1435.207897][T29401] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1435.207920][T29401] ksys_unshare+0x45b/0xa40 [ 1435.207935][T29401] ? __pfx_ksys_unshare+0x10/0x10 [ 1435.207950][T29401] ? xfd_validate_state+0x61/0x180 [ 1435.207971][T29401] __x64_sys_unshare+0x31/0x40 [ 1435.207985][T29401] do_syscall_64+0xcd/0xfa0 [ 1435.208008][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.208023][T29401] RIP: 0033:0x7f4b99b8efc9 [ 1435.208036][T29401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1435.208050][T29401] RSP: 002b:00007f4b9aa27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1435.208064][T29401] RAX: ffffffffffffffda RBX: 00007f4b99de6090 RCX: 00007f4b99b8efc9 [ 1435.208074][T29401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1435.208084][T29401] RBP: 00007f4b99c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1435.208093][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.208102][T29401] R13: 00007f4b99de6128 R14: 00007f4b99de6090 R15: 00007ffc6981dd88 [ 1435.208123][T29401] [ 1436.394086][T29409] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1436.445107][T29409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1436.520167][T29409] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1436.586559][T29409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1436.700975][T29436] bond0: option peer_notif_delay: invalid value () [ 1436.728266][T29436] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 1436.786280][T29437] bond0: option peer_notif_delay: invalid value () [ 1436.824978][T29437] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 1438.461945][T28862] Bluetooth: hci3: command 0x0c1a tx timeout [ 1438.468073][T28862] Bluetooth: hci4: command 0x0c1a tx timeout [ 1438.542369][T29523] Bluetooth: hci0: command 0x0c1a tx timeout [ 1438.604388][T29462] workqueue: Failed to create a rescuer kthread for wq "nfc19_nci_tx_wq": -EINTR [ 1438.619830][T29523] Bluetooth: hci2: command 0x0c1a tx timeout [ 1439.865540][T29596] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input49 [ 1439.970162][ T9] Process accounting resumed [ 1440.068476][T29605] ptp ptp0: only physical clock in use now [ 1440.380383][T27976] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1440.927200][T29625] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1441.265359][T29630] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 1441.296969][T29631] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 1441.561751][T28027] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 917 with max blocks 4 with error 117 [ 1441.629456][T28027] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1441.629456][T28027] [ 1441.956734][T29641] netlink: 346 bytes leftover after parsing attributes in process `syz.0.4344'. [ 1444.744095][T29685] __vm_enough_memory: pid: 29685, comm: syz.4.4353, bytes: 4398046511104 not enough memory for the allocation [ 1447.105481][T29735] FAULT_INJECTION: forcing a failure. [ 1447.105481][T29735] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.125079][T27976] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1447.300396][T29735] CPU: 0 UID: 0 PID: 29735 Comm: syz.4.4362 Tainted: G U syzkaller #0 PREEMPT(full) [ 1447.300424][T29735] Tainted: [U]=USER [ 1447.300429][T29735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1447.300439][T29735] Call Trace: [ 1447.300445][T29735] [ 1447.300452][T29735] dump_stack_lvl+0x16c/0x1f0 [ 1447.300479][T29735] should_fail_ex+0x512/0x640 [ 1447.300494][T29735] ? __kmalloc_noprof+0xca/0x880 [ 1447.300514][T29735] should_failslab+0xc2/0x120 [ 1447.300531][T29735] __kmalloc_noprof+0xdd/0x880 [ 1447.300555][T29735] ? __register_sysctl_table+0xea2/0x1900 [ 1447.300577][T29735] ? __register_sysctl_table+0xea2/0x1900 [ 1447.300595][T29735] __register_sysctl_table+0xea2/0x1900 [ 1447.300616][T29735] ? __pfx___register_sysctl_table+0x10/0x10 [ 1447.300632][T29735] ? is_module_address+0x69/0xf0 [ 1447.300649][T29735] ? register_net_sysctl_sz+0x228/0x3e0 [ 1447.300666][T29735] ? __asan_memcpy+0x3c/0x60 [ 1447.300687][T29735] sctp_sysctl_net_register+0x15d/0x200 [ 1447.300712][T29735] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1447.300734][T29735] sctp_defaults_init+0x6d2/0xd90 [ 1447.300757][T29735] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1447.300778][T29735] ops_init+0x1e2/0x5f0 [ 1447.300795][T29735] setup_net+0x100/0x390 [ 1447.300809][T29735] ? __pfx_setup_net+0x10/0x10 [ 1447.300824][T29735] ? debug_mutex_init+0x37/0x70 [ 1447.300845][T29735] copy_net_ns+0x2f8/0x690 [ 1447.300863][T29735] create_new_namespaces+0x3ea/0xa90 [ 1447.300888][T29735] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1447.300910][T29735] ksys_unshare+0x45b/0xa40 [ 1447.300925][T29735] ? __pfx_ksys_unshare+0x10/0x10 [ 1447.300940][T29735] ? xfd_validate_state+0x61/0x180 [ 1447.300962][T29735] __x64_sys_unshare+0x31/0x40 [ 1447.300975][T29735] do_syscall_64+0xcd/0xfa0 [ 1447.300998][T29735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.301013][T29735] RIP: 0033:0x7fa27338efc9 [ 1447.301026][T29735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.301040][T29735] RSP: 002b:00007fa27419d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1447.301056][T29735] RAX: ffffffffffffffda RBX: 00007fa2735e5fa0 RCX: 00007fa27338efc9 [ 1447.301066][T29735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1447.301075][T29735] RBP: 00007fa273411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1447.301085][T29735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1447.301093][T29735] R13: 00007fa2735e6038 R14: 00007fa2735e5fa0 R15: 00007ffcfbb6a7b8 [ 1447.301114][T29735] [ 1447.301122][T29735] sysctl could not get directory: /net/sctp -12 [ 1448.022975][T29747] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4365'. [ 1448.047379][T29755] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1448.998887][T29773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4373'. [ 1449.380198][T29785] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4374'. [ 1450.136794][T29804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4379'. [ 1450.504711][T29808] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1450.527475][T29804] team0: Port device team_slave_0 removed [ 1450.917683][T29816] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1451.142323][T29829] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4384'. [ 1452.066870][T29858] FAULT_INJECTION: forcing a failure. [ 1452.066870][T29858] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1452.131170][T29858] CPU: 0 UID: 0 PID: 29858 Comm: syz.6.4391 Tainted: G U syzkaller #0 PREEMPT(full) [ 1452.131196][T29858] Tainted: [U]=USER [ 1452.131201][T29858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1452.131214][T29858] Call Trace: [ 1452.131220][T29858] [ 1452.131226][T29858] dump_stack_lvl+0x16c/0x1f0 [ 1452.131252][T29858] should_fail_ex+0x512/0x640 [ 1452.131269][T29858] should_fail_alloc_page+0xe7/0x130 [ 1452.131285][T29858] prepare_alloc_pages+0x3c2/0x610 [ 1452.131303][T29858] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1452.131330][T29858] ? mas_wr_store_entry+0x102d/0x2550 [ 1452.131348][T29858] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1452.131369][T29858] ? perf_event_mmap+0xbb/0xd40 [ 1452.131393][T29858] ? __pfx_perf_event_mmap+0x10/0x10 [ 1452.131415][T29858] ? vma_wants_writenotify+0x10b/0x390 [ 1452.131434][T29858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1452.131454][T29858] ? policy_nodemask+0xea/0x4e0 [ 1452.131470][T29858] alloc_pages_mpol+0x1fb/0x550 [ 1452.131484][T29858] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1452.131503][T29858] alloc_pages_noprof+0x131/0x390 [ 1452.131518][T29858] __pmd_alloc+0x3b/0x8b0 [ 1452.131531][T29858] ? find_held_lock+0x2b/0x80 [ 1452.131551][T29858] __handle_mm_fault+0xada/0x2aa0 [ 1452.131574][T29858] ? __pfx___handle_mm_fault+0x10/0x10 [ 1452.131610][T29858] handle_mm_fault+0x589/0xd10 [ 1452.131630][T29858] __get_user_pages+0x54e/0x3530 [ 1452.131653][T29858] ? __pfx___get_user_pages+0x10/0x10 [ 1452.131673][T29858] populate_vma_page_range+0x267/0x3f0 [ 1452.131689][T29858] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1452.131704][T29858] ? __pfx_find_vma_intersection+0x10/0x10 [ 1452.131727][T29858] ? do_mmap+0x69c/0x1210 [ 1452.131743][T29858] __mm_populate+0x1d8/0x380 [ 1452.131758][T29858] ? __pfx___mm_populate+0x10/0x10 [ 1452.131775][T29858] ? up_write+0x1b2/0x520 [ 1452.131792][T29858] vm_mmap_pgoff+0x37f/0x470 [ 1452.131808][T29858] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1452.131826][T29858] ? __x64_sys_futex+0x1e0/0x4c0 [ 1452.131840][T29858] ? __x64_sys_futex+0x1e9/0x4c0 [ 1452.131856][T29858] ksys_mmap_pgoff+0x7d/0x5c0 [ 1452.131868][T29858] ? xfd_validate_state+0x61/0x180 [ 1452.131883][T29858] ? __pfx_ksys_write+0x10/0x10 [ 1452.131905][T29858] __x64_sys_mmap+0x125/0x190 [ 1452.131924][T29858] do_syscall_64+0xcd/0xfa0 [ 1452.131947][T29858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.131961][T29858] RIP: 0033:0x7f563e38efc9 [ 1452.131974][T29858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.131988][T29858] RSP: 002b:00007f563f205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1452.132002][T29858] RAX: ffffffffffffffda RBX: 00007f563e5e5fa0 RCX: 00007f563e38efc9 [ 1452.132012][T29858] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000100000000 [ 1452.132020][T29858] RBP: 00007f563e411f91 R08: 0000000000000002 R09: 0000000000008000 [ 1452.132029][T29858] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1452.132038][T29858] R13: 00007f563e5e6038 R14: 00007f563e5e5fa0 R15: 00007fff01bb6a38 [ 1452.132057][T29858] [ 1452.586111][T29866] random: crng reseeded on system resumption [ 1452.645207][T29866] vhci_hcd: invalid port number 23 [ 1452.650408][T29866] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 1453.284519][T29885] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4394'. [ 1454.133063][T29885] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1454.174309][T29885] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1454.223333][T29885] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1454.544097][T29903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4397'. [ 1454.697112][T27976] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1454.705896][T27976] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1454.715954][T27976] CPU: 0 UID: 0 PID: 27976 Comm: kworker/u11:0 Tainted: G U syzkaller #0 PREEMPT(full) [ 1454.715981][T27976] Tainted: [U]=USER [ 1454.715987][T27976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1454.716004][T27976] Workqueue: hci2 hci_rx_work [ 1454.716030][T27976] Call Trace: [ 1454.716036][T27976] [ 1454.716043][T27976] dump_stack_lvl+0x16c/0x1f0 [ 1454.716067][T27976] sysfs_warn_dup+0x7f/0xa0 [ 1454.716089][T27976] sysfs_create_dir_ns+0x24b/0x2b0 [ 1454.716110][T27976] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1454.716131][T27976] ? find_held_lock+0x2b/0x80 [ 1454.716155][T27976] ? do_raw_spin_unlock+0x172/0x230 [ 1454.716174][T27976] kobject_add_internal+0x2c4/0x9b0 [ 1454.716192][T27976] kobject_add+0x16e/0x240 [ 1454.716206][T27976] ? __pfx_kobject_add+0x10/0x10 [ 1454.716222][T27976] ? do_raw_spin_unlock+0x172/0x230 [ 1454.716239][T27976] ? kobject_put+0xab/0x5a0 [ 1454.716258][T27976] device_add+0x288/0x1aa0 [ 1454.716273][T27976] ? __pfx_dev_set_name+0x10/0x10 [ 1454.716289][T27976] ? __pfx_device_add+0x10/0x10 [ 1454.716303][T27976] ? mgmt_send_event_skb+0x2fb/0x460 [ 1454.716329][T27976] hci_conn_add_sysfs+0x17e/0x230 [ 1454.716343][T27976] le_conn_complete_evt+0x1260/0x2150 [ 1454.716369][T27976] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1454.716388][T27976] ? bt_warn+0xe4/0x120 [ 1454.716405][T27976] ? __pfx_bt_warn+0x10/0x10 [ 1454.716428][T27976] hci_le_conn_complete_evt+0x23c/0x370 [ 1454.716453][T27976] hci_le_meta_evt+0x357/0x5e0 [ 1454.716474][T27976] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1454.716496][T27976] hci_event_packet+0x685/0x11c0 [ 1454.716516][T27976] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1454.716538][T27976] ? __pfx_hci_event_packet+0x10/0x10 [ 1454.716560][T27976] ? kcov_remote_start+0x3c9/0x6d0 [ 1454.716578][T27976] ? lockdep_hardirqs_on+0x7c/0x110 [ 1454.716604][T27976] hci_rx_work+0x2c5/0x16b0 [ 1454.716625][T27976] ? rcu_is_watching+0x12/0xc0 [ 1454.716648][T27976] process_one_work+0x9cf/0x1b70 [ 1454.716673][T27976] ? __pfx_process_one_work+0x10/0x10 [ 1454.716695][T27976] ? assign_work+0x1a0/0x250 [ 1454.716713][T27976] worker_thread+0x6c8/0xf10 [ 1454.716739][T27976] ? __pfx_worker_thread+0x10/0x10 [ 1454.716756][T27976] kthread+0x3c5/0x780 [ 1454.716772][T27976] ? __pfx_kthread+0x10/0x10 [ 1454.716789][T27976] ? rcu_is_watching+0x12/0xc0 [ 1454.716808][T27976] ? __pfx_kthread+0x10/0x10 [ 1454.716824][T27976] ret_from_fork+0x675/0x7d0 [ 1454.716841][T27976] ? __pfx_kthread+0x10/0x10 [ 1454.716856][T27976] ret_from_fork_asm+0x1a/0x30 [ 1454.716881][T27976] [ 1454.716902][T27976] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1455.009502][T27976] Bluetooth: hci2: failed to register connection device [ 1455.360071][T29918] overlayfs: missing 'lowerdir' [ 1456.768502][T29933] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1457.286194][T29944] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4407'. [ 1457.979510][T29949] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1459.079695][T29973] zswap: compressor not available [ 1460.058465][T28001] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1460.303541][T30001] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1461.551046][T30023] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1464.695789][T30072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4429'. [ 1464.760227][T30072] : entered allmulticast mode [ 1464.801169][T30072] bond_slave_0: entered allmulticast mode [ 1464.829675][T30072] 8021q: adding VLAN 0 to HW filter on device  [ 1465.412851][T30090] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4432'. [ 1467.170213][T30131] FAULT_INJECTION: forcing a failure. [ 1467.170213][T30131] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.277991][T30131] CPU: 0 UID: 0 PID: 30131 Comm: syz.6.4440 Tainted: G U syzkaller #0 PREEMPT(full) [ 1467.278019][T30131] Tainted: [U]=USER [ 1467.278025][T30131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1467.278034][T30131] Call Trace: [ 1467.278040][T30131] [ 1467.278045][T30131] dump_stack_lvl+0x16c/0x1f0 [ 1467.278085][T30131] should_fail_ex+0x512/0x640 [ 1467.278099][T30131] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1467.278122][T30131] should_failslab+0xc2/0x120 [ 1467.278138][T30131] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1467.278157][T30131] ? alloc_empty_file+0x55/0x1e0 [ 1467.278176][T30131] ? alloc_empty_file+0x55/0x1e0 [ 1467.278191][T30131] alloc_empty_file+0x55/0x1e0 [ 1467.278207][T30131] alloc_file_clone+0x5f/0x110 [ 1467.278223][T30131] create_pipe_files+0x412/0x9a0 [ 1467.278247][T30131] do_pipe2+0xaf/0x1c0 [ 1467.278266][T30131] ? __pfx_do_pipe2+0x10/0x10 [ 1467.278287][T30131] ? xfd_validate_state+0x61/0x180 [ 1467.278302][T30131] ? __pfx_do_writev+0x10/0x10 [ 1467.278325][T30131] __x64_sys_pipe+0x33/0x50 [ 1467.278336][T30131] do_syscall_64+0xcd/0xfa0 [ 1467.278359][T30131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.278373][T30131] RIP: 0033:0x7f563e38efc9 [ 1467.278385][T30131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1467.278399][T30131] RSP: 002b:00007f563f1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1467.278413][T30131] RAX: ffffffffffffffda RBX: 00007f563e5e6180 RCX: 00007f563e38efc9 [ 1467.278422][T30131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.278431][T30131] RBP: 00007f563e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1467.278439][T30131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1467.278448][T30131] R13: 00007f563e5e6218 R14: 00007f563e5e6180 R15: 00007fff01bb6a38 [ 1467.278467][T30131] [ 1467.468454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1468.060648][T30141] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4441'. [ 1468.942899][T30151] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1469.552063][T30159] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1469.947570][T30165] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4444'. [ 1470.820379][T30185] FAULT_INJECTION: forcing a failure. [ 1470.820379][T30185] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.956987][T30185] CPU: 0 UID: 0 PID: 30185 Comm: syz.0.4451 Tainted: G U syzkaller #0 PREEMPT(full) [ 1470.957015][T30185] Tainted: [U]=USER [ 1470.957020][T30185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1470.957029][T30185] Call Trace: [ 1470.957035][T30185] [ 1470.957041][T30185] dump_stack_lvl+0x16c/0x1f0 [ 1470.957068][T30185] should_fail_ex+0x512/0x640 [ 1470.957083][T30185] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1470.957104][T30185] should_failslab+0xc2/0x120 [ 1470.957120][T30185] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1470.957138][T30185] ? alloc_empty_file+0x55/0x1e0 [ 1470.957158][T30185] ? alloc_empty_file+0x55/0x1e0 [ 1470.957172][T30185] alloc_empty_file+0x55/0x1e0 [ 1470.957188][T30185] alloc_file_clone+0x5f/0x110 [ 1470.957204][T30185] create_pipe_files+0x412/0x9a0 [ 1470.957227][T30185] do_pipe2+0xaf/0x1c0 [ 1470.957247][T30185] ? __pfx_do_pipe2+0x10/0x10 [ 1470.957271][T30185] ? xfd_validate_state+0x61/0x180 [ 1470.957285][T30185] ? __pfx_do_writev+0x10/0x10 [ 1470.957308][T30185] __x64_sys_pipe+0x33/0x50 [ 1470.957320][T30185] do_syscall_64+0xcd/0xfa0 [ 1470.957343][T30185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.957357][T30185] RIP: 0033:0x7f4b99b8efc9 [ 1470.957370][T30185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.957383][T30185] RSP: 002b:00007f4b9aa06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1470.957398][T30185] RAX: ffffffffffffffda RBX: 00007f4b99de6180 RCX: 00007f4b99b8efc9 [ 1470.957407][T30185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1470.957416][T30185] RBP: 00007f4b99c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1470.957424][T30185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.957432][T30185] R13: 00007f4b99de6218 R14: 00007f4b99de6180 R15: 00007ffc6981dd88 [ 1470.957451][T30185] [ 1471.149077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.123836][T30215] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1476.659968][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1476.688325][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1476.756395][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1476.801796][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1476.854821][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 1477.433682][T30240] FAULT_INJECTION: forcing a failure. [ 1477.433682][T30240] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.521257][T30240] CPU: 0 UID: 0 PID: 30240 Comm: syz.3.4469 Tainted: G U syzkaller #0 PREEMPT(full) [ 1477.521285][T30240] Tainted: [U]=USER [ 1477.521290][T30240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1477.521300][T30240] Call Trace: [ 1477.521305][T30240] [ 1477.521312][T30240] dump_stack_lvl+0x16c/0x1f0 [ 1477.521346][T30240] should_fail_ex+0x512/0x640 [ 1477.521361][T30240] ? fs_reclaim_acquire+0xae/0x150 [ 1477.521378][T30240] should_failslab+0xc2/0x120 [ 1477.521393][T30240] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1477.521412][T30240] ? __pfx_map_id_range_down+0x10/0x10 [ 1477.521431][T30240] ? security_inode_alloc+0x3b/0x2b0 [ 1477.521451][T30240] ? security_inode_alloc+0x3b/0x2b0 [ 1477.521466][T30240] security_inode_alloc+0x3b/0x2b0 [ 1477.521483][T30240] inode_init_always_gfp+0xce4/0x1030 [ 1477.521506][T30240] alloc_inode+0x86/0x240 [ 1477.521520][T30240] sock_alloc+0x40/0x280 [ 1477.521536][T30240] sock_create_lite+0x82/0x120 [ 1477.521552][T30240] __netlink_kernel_create+0xbd/0x750 [ 1477.521567][T30240] ? __lock_acquire+0x622/0x1c90 [ 1477.521583][T30240] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1477.521603][T30240] rtnetlink_net_init+0xb9/0x140 [ 1477.521624][T30240] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1477.521645][T30240] ? lockdep_init_map_type+0x5c/0x280 [ 1477.521661][T30240] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 1477.521679][T30240] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1477.521699][T30240] ? lockdep_init_map_type+0x5c/0x280 [ 1477.521714][T30240] ? debug_mutex_init+0x37/0x70 [ 1477.521735][T30240] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1477.521754][T30240] ops_init+0x1e2/0x5f0 [ 1477.521770][T30240] setup_net+0x100/0x390 [ 1477.521784][T30240] ? __pfx_setup_net+0x10/0x10 [ 1477.521799][T30240] ? debug_mutex_init+0x37/0x70 [ 1477.521819][T30240] copy_net_ns+0x2f8/0x690 [ 1477.521837][T30240] create_new_namespaces+0x3ea/0xa90 [ 1477.521863][T30240] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1477.521885][T30240] ksys_unshare+0x45b/0xa40 [ 1477.521900][T30240] ? __pfx_ksys_unshare+0x10/0x10 [ 1477.521914][T30240] ? xfd_validate_state+0x61/0x180 [ 1477.521936][T30240] __x64_sys_unshare+0x31/0x40 [ 1477.521950][T30240] do_syscall_64+0xcd/0xfa0 [ 1477.521972][T30240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.521986][T30240] RIP: 0033:0x7f94dd78efc9 [ 1477.521999][T30240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.522012][T30240] RSP: 002b:00007f94de5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1477.522027][T30240] RAX: ffffffffffffffda RBX: 00007f94dd9e5fa0 RCX: 00007f94dd78efc9 [ 1477.522038][T30240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1477.522046][T30240] RBP: 00007f94dd811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1477.522056][T30240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.522065][T30240] R13: 00007f94dd9e6038 R14: 00007f94dd9e5fa0 R15: 00007ffe3bd40a38 [ 1477.522086][T30240] [ 1477.823160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.615357][T30257] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1481.859465][T30313] Invalid ELF header magic: != ELF [ 1482.516399][T30321] HfR: entered promiscuous mode [ 1482.976514][T30339] FAULT_INJECTION: forcing a failure. [ 1482.976514][T30339] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.085746][T30339] CPU: 0 UID: 0 PID: 30339 Comm: syz.0.4481 Tainted: G U syzkaller #0 PREEMPT(full) [ 1483.085773][T30339] Tainted: [U]=USER [ 1483.085778][T30339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1483.085787][T30339] Call Trace: [ 1483.085793][T30339] [ 1483.085802][T30339] dump_stack_lvl+0x16c/0x1f0 [ 1483.085830][T30339] should_fail_ex+0x512/0x640 [ 1483.085845][T30339] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1483.085867][T30339] should_failslab+0xc2/0x120 [ 1483.085882][T30339] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1483.085902][T30339] ? __proc_create+0x2ce/0x8e0 [ 1483.085922][T30339] ? __proc_create+0x2ce/0x8e0 [ 1483.085943][T30339] __proc_create+0x2ce/0x8e0 [ 1483.085959][T30339] ? __pfx___proc_create+0x10/0x10 [ 1483.085979][T30339] ? mark_held_locks+0x49/0x80 [ 1483.085998][T30339] _proc_mkdir+0xb9/0x210 [ 1483.086015][T30339] ? __pfx__proc_mkdir+0x10/0x10 [ 1483.086039][T30339] sctp_proc_init+0x59/0x270 [ 1483.086061][T30339] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1483.086082][T30339] sctp_defaults_init+0x758/0xd90 [ 1483.086104][T30339] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1483.086125][T30339] ops_init+0x1e2/0x5f0 [ 1483.086141][T30339] setup_net+0x100/0x390 [ 1483.086155][T30339] ? __pfx_setup_net+0x10/0x10 [ 1483.086170][T30339] ? debug_mutex_init+0x37/0x70 [ 1483.086192][T30339] copy_net_ns+0x2f8/0x690 [ 1483.086210][T30339] create_new_namespaces+0x3ea/0xa90 [ 1483.086236][T30339] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1483.086258][T30339] ksys_unshare+0x45b/0xa40 [ 1483.086272][T30339] ? __pfx_ksys_unshare+0x10/0x10 [ 1483.086287][T30339] ? xfd_validate_state+0x61/0x180 [ 1483.086308][T30339] __x64_sys_unshare+0x31/0x40 [ 1483.086322][T30339] do_syscall_64+0xcd/0xfa0 [ 1483.086349][T30339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.086364][T30339] RIP: 0033:0x7f4b99b8efc9 [ 1483.086378][T30339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.086393][T30339] RSP: 002b:00007f4b9aa48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1483.086407][T30339] RAX: ffffffffffffffda RBX: 00007f4b99de5fa0 RCX: 00007f4b99b8efc9 [ 1483.086417][T30339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1483.086426][T30339] RBP: 00007f4b99c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1483.086435][T30339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.086444][T30339] R13: 00007f4b99de6038 R14: 00007f4b99de5fa0 R15: 00007ffc6981dd88 [ 1483.086464][T30339] [ 1483.337040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.174363][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4484'. [ 1484.214092][T30356] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4485'. [ 1485.147196][T30374] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4490'. [ 1485.270438][T30382] FAULT_INJECTION: forcing a failure. [ 1485.270438][T30382] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.283835][T30382] CPU: 0 UID: 0 PID: 30382 Comm: syz.3.4492 Tainted: G U syzkaller #0 PREEMPT(full) [ 1485.283859][T30382] Tainted: [U]=USER [ 1485.283863][T30382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1485.283872][T30382] Call Trace: [ 1485.283880][T30382] [ 1485.283887][T30382] dump_stack_lvl+0x116/0x1f0 [ 1485.283915][T30382] should_fail_ex+0x512/0x640 [ 1485.283932][T30382] should_failslab+0xc2/0x120 [ 1485.283947][T30382] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1485.283966][T30382] ? __send_signal_locked+0x159/0x12c0 [ 1485.283988][T30382] ? __send_signal_locked+0x159/0x12c0 [ 1485.284005][T30382] __send_signal_locked+0x159/0x12c0 [ 1485.284026][T30382] group_send_sig_info+0x2a4/0x300 [ 1485.284048][T30382] ? __pfx_group_send_sig_info+0x10/0x10 [ 1485.284075][T30382] ? kill_pid_info_type+0x1a/0x2a0 [ 1485.284094][T30382] kill_pid_info_type+0x92/0x2a0 [ 1485.284117][T30382] kill_proc_info+0x6f/0x1b0 [ 1485.284139][T30382] kill_something_info+0x2a2/0x310 [ 1485.284151][T30382] ? __task_pid_nr_ns+0x1ff/0x500 [ 1485.284168][T30382] __x64_sys_kill+0xd7/0x140 [ 1485.284182][T30382] ? __pfx___x64_sys_kill+0x10/0x10 [ 1485.284201][T30382] ? rcu_is_watching+0x12/0xc0 [ 1485.284222][T30382] do_syscall_64+0xcd/0xfa0 [ 1485.284245][T30382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.284260][T30382] RIP: 0033:0x7f94dd78efc9 [ 1485.284274][T30382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1485.284288][T30382] RSP: 002b:00007f94de5da038 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 1485.284302][T30382] RAX: ffffffffffffffda RBX: 00007f94dd9e5fa0 RCX: 00007f94dd78efc9 [ 1485.284312][T30382] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 000000000000065c [ 1485.284320][T30382] RBP: 00007f94dd811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1485.284329][T30382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1485.284337][T30382] R13: 00007f94dd9e6038 R14: 00007f94dd9e5fa0 R15: 00007ffe3bd40a38 [ 1485.284356][T30382] [ 1485.486487][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.571789][T30374] veth0_vlan: entered allmulticast mode [ 1486.180488][T30392] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1486.284105][T30393] blktrace: Concurrent blktraces are not allowed on loop2 [ 1487.454959][T30411] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 1487.465954][T30409] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1487.685376][T30387] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1489.199788][T30431] random: crng reseeded on system resumption [ 1490.318825][T30442] ptrace attach of "./syz-executor exec"[30444] was attempted by "./syz-executor exec"[30442] [ 1490.415423][T30447] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1493.499388][T27976] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1493.788593][T30485] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4516'. [ 1494.683818][T30494] FAULT_INJECTION: forcing a failure. [ 1494.683818][T30494] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.728140][T30494] CPU: 0 UID: 0 PID: 30494 Comm: syz.4.4518 Tainted: G U syzkaller #0 PREEMPT(full) [ 1494.728167][T30494] Tainted: [U]=USER [ 1494.728172][T30494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1494.728181][T30494] Call Trace: [ 1494.728188][T30494] [ 1494.728194][T30494] dump_stack_lvl+0x16c/0x1f0 [ 1494.728222][T30494] should_fail_ex+0x512/0x640 [ 1494.728236][T30494] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1494.728259][T30494] should_failslab+0xc2/0x120 [ 1494.728274][T30494] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1494.728294][T30494] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1494.728315][T30494] ? sock_alloc_inode+0x25/0x1c0 [ 1494.728334][T30494] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1494.728348][T30494] ? sock_alloc_inode+0x25/0x1c0 [ 1494.728362][T30494] sock_alloc_inode+0x25/0x1c0 [ 1494.728383][T30494] alloc_inode+0x64/0x240 [ 1494.728400][T30494] sock_alloc+0x40/0x280 [ 1494.728416][T30494] __sock_create+0xc1/0x8d0 [ 1494.728436][T30494] smc_create_clcsk+0x37/0xd0 [ 1494.728456][T30494] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 1494.728472][T30494] inet6_create+0xb30/0x12b0 [ 1494.728488][T30494] ? inet6_create+0x7f/0x12b0 [ 1494.728503][T30494] __sock_create+0x338/0x8d0 [ 1494.728523][T30494] __sys_socket+0x14d/0x260 [ 1494.728541][T30494] ? __pfx___sys_socket+0x10/0x10 [ 1494.728558][T30494] ? xfd_validate_state+0x61/0x180 [ 1494.728573][T30494] ? __pfx_ksys_write+0x10/0x10 [ 1494.728596][T30494] __x64_sys_socket+0x72/0xb0 [ 1494.728612][T30494] ? lockdep_hardirqs_on+0x7c/0x110 [ 1494.728633][T30494] do_syscall_64+0xcd/0xfa0 [ 1494.728656][T30494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.728670][T30494] RIP: 0033:0x7fa27338efc9 [ 1494.728683][T30494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.728698][T30494] RSP: 002b:00007fa27419d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1494.728712][T30494] RAX: ffffffffffffffda RBX: 00007fa2735e5fa0 RCX: 00007fa27338efc9 [ 1494.728722][T30494] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 1494.728731][T30494] RBP: 00007fa273411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1494.728741][T30494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1494.728750][T30494] R13: 00007fa2735e6038 R14: 00007fa2735e5fa0 R15: 00007ffcfbb6a7b8 [ 1494.728770][T30494] [ 1494.728778][T30494] socket: no more sockets [ 1495.770014][T30513] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4522'. [ 1496.022406][ T30] audit: type=1400 audit(4294967314.220:54): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=30518 comm="syz.6.4524" [ 1496.322017][T30527] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4525'. [ 1496.920643][T30539] random: crng reseeded on system resumption [ 1497.042168][T30540] Unrecognized hibernate image header format! [ 1497.051104][T30540] PM: hibernation: Image mismatch: architecture specific data [ 1497.671349][T30550] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1497.671349][T30550] program syz.3.4529 not setting count and/or reply_len properly [ 1498.438901][T30557] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4531'. [ 1499.220979][T30562] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1499.542978][T30573] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4535'. [ 1500.547935][T30581] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4537'. [ 1501.189839][T30573] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1501.263119][T30573] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1501.339852][T30573] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1501.405584][T30587] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1501.405584][T30587] program syz.4.4538 not setting count and/or reply_len properly [ 1501.503809][T30589] FAULT_INJECTION: forcing a failure. [ 1501.503809][T30589] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.600996][T30589] CPU: 0 UID: 0 PID: 30589 Comm: syz.6.4539 Tainted: G U syzkaller #0 PREEMPT(full) [ 1501.601022][T30589] Tainted: [U]=USER [ 1501.601028][T30589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1501.601037][T30589] Call Trace: [ 1501.601043][T30589] [ 1501.601049][T30589] dump_stack_lvl+0x16c/0x1f0 [ 1501.601078][T30589] should_fail_ex+0x512/0x640 [ 1501.601092][T30589] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1501.601114][T30589] should_failslab+0xc2/0x120 [ 1501.601130][T30589] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1501.601149][T30589] ? __pfx___might_resched+0x10/0x10 [ 1501.601170][T30589] ? sock_alloc_inode+0x25/0x1c0 [ 1501.601189][T30589] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1501.601203][T30589] ? sock_alloc_inode+0x25/0x1c0 [ 1501.601217][T30589] sock_alloc_inode+0x25/0x1c0 [ 1501.601232][T30589] alloc_inode+0x64/0x240 [ 1501.601247][T30589] sock_alloc+0x40/0x280 [ 1501.601262][T30589] __sock_create+0xc1/0x8d0 [ 1501.601282][T30589] __sys_socket+0x14d/0x260 [ 1501.601299][T30589] ? __x64_sys_openat+0x174/0x210 [ 1501.601315][T30589] ? __pfx___sys_socket+0x10/0x10 [ 1501.601334][T30589] ? xfd_validate_state+0x61/0x180 [ 1501.601355][T30589] __x64_sys_socket+0x72/0xb0 [ 1501.601372][T30589] ? lockdep_hardirqs_on+0x7c/0x110 [ 1501.601392][T30589] do_syscall_64+0xcd/0xfa0 [ 1501.601414][T30589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.601428][T30589] RIP: 0033:0x7f563e38efc9 [ 1501.601441][T30589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.601455][T30589] RSP: 002b:00007f563f205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1501.601470][T30589] RAX: ffffffffffffffda RBX: 00007f563e5e5fa0 RCX: 00007f563e38efc9 [ 1501.601479][T30589] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 1501.601488][T30589] RBP: 00007f563e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1501.601496][T30589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1501.601504][T30589] R13: 00007f563e5e6038 R14: 00007f563e5e5fa0 R15: 00007fff01bb6a38 [ 1501.601523][T30589] [ 1501.601531][T30589] socket: no more sockets [ 1502.489779][T30615] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4544'. [ 1502.503231][T30620] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4545'. [ 1502.977341][T30622] input: jJǸ-¶š9ã%vø“û¨lÐQ  J8fi‘ as /devices/virtual/input/input50 [ 1503.480504][T30634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 1503.744166][T30631] openvswitch: netlink: Key type 261 is out of range max 32 [ 1503.922390][T30641] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4549'. [ 1504.799624][T30655] random: crng reseeded on system resumption [ 1504.973783][T30652] zswap: compressor not available [ 1505.045651][T30662] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1505.045651][T30662] program syz.6.4552 not setting count and/or reply_len properly [ 1505.343772][T30666] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1505.343772][T30666] program syz.6.4553 not setting count and/or reply_len properly [ 1505.495425][T30666] FAULT_INJECTION: forcing a failure. [ 1505.495425][T30666] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.536395][T30668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1505.614128][T30666] CPU: 0 UID: 0 PID: 30666 Comm: syz.6.4553 Tainted: G U syzkaller #0 PREEMPT(full) [ 1505.614154][T30666] Tainted: [U]=USER [ 1505.614158][T30666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1505.614166][T30666] Call Trace: [ 1505.614172][T30666] [ 1505.614178][T30666] dump_stack_lvl+0x16c/0x1f0 [ 1505.614204][T30666] should_fail_ex+0x512/0x640 [ 1505.614218][T30666] ? fs_reclaim_acquire+0xae/0x150 [ 1505.614233][T30666] should_failslab+0xc2/0x120 [ 1505.614248][T30666] __kmalloc_noprof+0xdd/0x880 [ 1505.614265][T30666] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1505.614291][T30666] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1505.614316][T30666] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1505.614338][T30666] ? tomoyo_profile+0x47/0x60 [ 1505.614353][T30666] tomoyo_path_number_perm+0x245/0x580 [ 1505.614369][T30666] ? tomoyo_path_number_perm+0x237/0x580 [ 1505.614388][T30666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1505.614406][T30666] ? find_held_lock+0x2b/0x80 [ 1505.614441][T30666] ? find_held_lock+0x2b/0x80 [ 1505.614459][T30666] ? hook_file_ioctl_common+0x145/0x410 [ 1505.614482][T30666] ? __fget_files+0x20e/0x3c0 [ 1505.614503][T30666] security_file_ioctl+0x9b/0x240 [ 1505.614523][T30666] __x64_sys_ioctl+0xb7/0x210 [ 1505.614541][T30666] do_syscall_64+0xcd/0xfa0 [ 1505.614563][T30666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.614578][T30666] RIP: 0033:0x7f563e38efc9 [ 1505.614590][T30666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1505.614604][T30666] RSP: 002b:00007f563f205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1505.614619][T30666] RAX: ffffffffffffffda RBX: 00007f563e5e5fa0 RCX: 00007f563e38efc9 [ 1505.614628][T30666] RDX: 0000200000000040 RSI: 0000000000002286 RDI: 0000000000000003 [ 1505.614637][T30666] RBP: 00007f563f205090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.614645][T30666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.614654][T30666] R13: 00007f563e5e6038 R14: 00007f563e5e5fa0 R15: 00007fff01bb6a38 [ 1505.614673][T30666] [ 1505.614679][T30666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1506.042185][T30674] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1506.070769][T30674] : renamed from gre0 (while UP) [ 1506.114106][T30674] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1506.170602][T30675] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1506.170602][T30675] program syz.4.4556 not setting count and/or reply_len properly [ 1506.650535][T30682] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-1) [ 1507.389624][T30697] openvswitch: netlink: Key type 261 is out of range max 32 [ 1507.571277][T30676] ima: policy update failed [ 1507.624565][ T30] audit: type=1802 audit(4294967325.820:55): pid=30676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4557" res=0 errno=0 [ 1507.709811][T30700] random: crng reseeded on system resumption [ 1507.850232][T30702] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1507.850232][T30702] program syz.3.4562 not setting count and/or reply_len properly [ 1508.081888][T30705] __vm_enough_memory: pid: 30705, comm: syz.0.4563, bytes: 4398046511104 not enough memory for the allocation [ 1508.584442][T30708] zswap: compressor not available [ 1508.729431][T30705] hub 1-0:1.0: USB hub found [ 1508.789440][T30722] random: crng reseeded on system resumption [ 1508.829416][T30705] hub 1-0:1.0: 1 port detected [ 1509.065557][T30705] FAULT_INJECTION: forcing a failure. [ 1509.065557][T30705] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.114165][T30727] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1509.114165][T30727] program syz.3.4567 not setting count and/or reply_len properly [ 1509.274717][T30705] CPU: 0 UID: 0 PID: 30705 Comm: syz.0.4563 Tainted: G U syzkaller #0 PREEMPT(full) [ 1509.274744][T30705] Tainted: [U]=USER [ 1509.274750][T30705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1509.274759][T30705] Call Trace: [ 1509.274765][T30705] [ 1509.274772][T30705] dump_stack_lvl+0x16c/0x1f0 [ 1509.274801][T30705] should_fail_ex+0x512/0x640 [ 1509.274816][T30705] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1509.274841][T30705] should_failslab+0xc2/0x120 [ 1509.274857][T30705] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1509.274876][T30705] ? __kernfs_new_node+0xd2/0x8e0 [ 1509.274894][T30705] ? __kernfs_new_node+0xd2/0x8e0 [ 1509.274906][T30705] __kernfs_new_node+0xd2/0x8e0 [ 1509.274922][T30705] ? __pfx___kernfs_new_node+0x10/0x10 [ 1509.274940][T30705] ? find_held_lock+0x2b/0x80 [ 1509.274960][T30705] ? kernfs_root+0xee/0x2a0 [ 1509.274977][T30705] kernfs_new_node+0x13c/0x1e0 [ 1509.274996][T30705] __kernfs_create_file+0x53/0x350 [ 1509.275017][T30705] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1509.275053][T30705] internal_create_group+0x578/0xf30 [ 1509.275072][T30705] ? sysfs_create_file_ns+0x154/0x1d0 [ 1509.275094][T30705] ? __pfx_internal_create_group+0x10/0x10 [ 1509.275108][T30705] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1509.275128][T30705] ? down_read+0x13d/0x480 [ 1509.275145][T30705] ? acpi_device_notify+0x351/0x480 [ 1509.275165][T30705] ? lockdep_init_map_type+0x5c/0x280 [ 1509.275183][T30705] internal_create_groups+0x9d/0x150 [ 1509.275199][T30705] device_add+0x77f/0x1aa0 [ 1509.275216][T30705] ? __pfx_device_add+0x10/0x10 [ 1509.275229][T30705] ? lockdep_init_map_type+0x5c/0x280 [ 1509.275244][T30705] ? __init_waitqueue_head+0xca/0x150 [ 1509.275267][T30705] usb_create_ep_devs+0x160/0x2b0 [ 1509.275286][T30705] create_intf_ep_devs.isra.0+0x161/0x200 [ 1509.275313][T30705] usb_set_configuration+0x11a7/0x1e20 [ 1509.275341][T30705] bConfigurationValue_store+0x100/0x180 [ 1509.275356][T30705] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 1509.275371][T30705] ? find_held_lock+0x2b/0x80 [ 1509.275390][T30705] ? sysfs_file_kobj+0xe4/0x290 [ 1509.275411][T30705] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 1509.275425][T30705] dev_attr_store+0x58/0x80 [ 1509.275446][T30705] ? __pfx_dev_attr_store+0x10/0x10 [ 1509.275467][T30705] sysfs_kf_write+0xf2/0x150 [ 1509.275489][T30705] kernfs_fop_write_iter+0x3af/0x570 [ 1509.275505][T30705] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1509.275527][T30705] iter_file_splice_write+0xa24/0x12e0 [ 1509.275559][T30705] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1509.275582][T30705] ? __pfx_copy_splice_read+0x10/0x10 [ 1509.275611][T30705] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1509.275631][T30705] direct_splice_actor+0x192/0x6c0 [ 1509.275652][T30705] splice_direct_to_actor+0x345/0xa30 [ 1509.275672][T30705] ? __pfx_direct_splice_actor+0x10/0x10 [ 1509.275694][T30705] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1509.275718][T30705] do_splice_direct+0x174/0x240 [ 1509.275737][T30705] ? __pfx_do_splice_direct+0x10/0x10 [ 1509.275755][T30705] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1509.275777][T30705] ? rw_verify_area+0xcf/0x6c0 [ 1509.275797][T30705] do_sendfile+0xb06/0xe50 [ 1509.275819][T30705] ? __pfx_do_sendfile+0x10/0x10 [ 1509.275841][T30705] ? __x64_sys_futex+0x1e0/0x4c0 [ 1509.275855][T30705] ? __x64_sys_futex+0x1e9/0x4c0 [ 1509.275871][T30705] __x64_sys_sendfile64+0x1d8/0x220 [ 1509.275886][T30705] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1509.275906][T30705] do_syscall_64+0xcd/0xfa0 [ 1509.275929][T30705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.275944][T30705] RIP: 0033:0x7f4b99b8efc9 [ 1509.275957][T30705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.275972][T30705] RSP: 002b:00007f4b9aa48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1509.275987][T30705] RAX: ffffffffffffffda RBX: 00007f4b99de5fa0 RCX: 00007f4b99b8efc9 [ 1509.275997][T30705] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1509.276006][T30705] RBP: 00007f4b99c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1509.276015][T30705] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1509.276024][T30705] R13: 00007f4b99de6038 R14: 00007f4b99de5fa0 R15: 00007ffc6981dd88 [ 1509.276053][T30705] [ 1509.691776][ C0] vkms_vblank_simulate: vblank timer overrun [ 1509.788578][T30730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4569'. [ 1511.246767][T30753] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1511.870406][T30754] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-1) [ 1512.599547][T30767] openvswitch: netlink: Key type 261 is out of range max 32 [ 1513.209880][T30749] ima: policy update failed [ 1513.224683][ T30] audit: type=1802 audit(4294967331.410:56): pid=30749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4572" res=0 errno=0 [ 1513.549872][T30779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4577'. [ 1513.630220][T30779] netlink: 'syz.3.4577': attribute type 1 has an invalid length. [ 1513.665177][T30779] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4577'. [ 1513.695376][T30783] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1513.695376][T30783] program syz.4.4579 not setting count and/or reply_len properly [ 1513.744655][T30784] FAULT_INJECTION: forcing a failure. [ 1513.744655][T30784] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.770902][T30781] netlink: 146 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1513.820294][T30784] CPU: 0 UID: 0 PID: 30784 Comm: syz.3.4577 Tainted: G U syzkaller #0 PREEMPT(full) [ 1513.820320][T30784] Tainted: [U]=USER [ 1513.820326][T30784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1513.820335][T30784] Call Trace: [ 1513.820341][T30784] [ 1513.820347][T30784] dump_stack_lvl+0x16c/0x1f0 [ 1513.820375][T30784] should_fail_ex+0x512/0x640 [ 1513.820390][T30784] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1513.820413][T30784] should_failslab+0xc2/0x120 [ 1513.820430][T30784] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1513.820451][T30784] ? __x64_sys_openat+0x174/0x210 [ 1513.820466][T30784] ? do_syscall_64+0xcd/0xfa0 [ 1513.820486][T30784] ? fuse_request_alloc+0x22/0x200 [ 1513.820506][T30784] ? fuse_request_alloc+0x22/0x200 [ 1513.820521][T30784] fuse_request_alloc+0x22/0x200 [ 1513.820538][T30784] fuse_get_req+0x748/0xfd0 [ 1513.820559][T30784] ? __pfx_fuse_get_req+0x10/0x10 [ 1513.820585][T30784] fuse_simple_background+0x464/0x5f0 [ 1513.820602][T30784] ? kasan_save_track+0x14/0x30 [ 1513.820624][T30784] cuse_channel_open+0x561/0x7f0 [ 1513.820645][T30784] ? __pfx_cuse_channel_open+0x10/0x10 [ 1513.820667][T30784] misc_open+0x26d/0x450 [ 1513.820681][T30784] ? __pfx_misc_open+0x10/0x10 [ 1513.820694][T30784] chrdev_open+0x234/0x6a0 [ 1513.820715][T30784] ? __pfx_apparmor_file_open+0x10/0x10 [ 1513.820734][T30784] ? __pfx_chrdev_open+0x10/0x10 [ 1513.820767][T30784] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1513.820793][T30784] do_dentry_open+0x982/0x1530 [ 1513.820816][T30784] ? __pfx_chrdev_open+0x10/0x10 [ 1513.820844][T30784] vfs_open+0x82/0x3f0 [ 1513.820863][T30784] path_openat+0x1de4/0x2cb0 [ 1513.820890][T30784] ? __pfx_path_openat+0x10/0x10 [ 1513.820911][T30784] ? __lock_acquire+0xb8a/0x1c90 [ 1513.820929][T30784] do_filp_open+0x20b/0x470 [ 1513.820949][T30784] ? __pfx_do_filp_open+0x10/0x10 [ 1513.820982][T30784] ? alloc_fd+0x471/0x7d0 [ 1513.821006][T30784] do_sys_openat2+0x11b/0x1d0 [ 1513.821022][T30784] ? __pfx_do_sys_openat2+0x10/0x10 [ 1513.821056][T30784] __x64_sys_openat+0x174/0x210 [ 1513.821074][T30784] ? __pfx___x64_sys_openat+0x10/0x10 [ 1513.821102][T30784] do_syscall_64+0xcd/0xfa0 [ 1513.821126][T30784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.821141][T30784] RIP: 0033:0x7f94dd78efc9 [ 1513.821154][T30784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.821169][T30784] RSP: 002b:00007f94de5b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1513.821184][T30784] RAX: ffffffffffffffda RBX: 00007f94dd9e6090 RCX: 00007f94dd78efc9 [ 1513.821195][T30784] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1513.821205][T30784] RBP: 00007f94dd811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1513.821215][T30784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.821225][T30784] R13: 00007f94dd9e6128 R14: 00007f94dd9e6090 R15: 00007ffe3bd40a38 [ 1513.821247][T30784] [ 1514.117358][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.574435][T30803] FAULT_INJECTION: forcing a failure. [ 1515.574435][T30803] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.673745][T30803] CPU: 0 UID: 0 PID: 30803 Comm: syz.3.4585 Tainted: G U syzkaller #0 PREEMPT(full) [ 1515.673774][T30803] Tainted: [U]=USER [ 1515.673779][T30803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1515.673788][T30803] Call Trace: [ 1515.673794][T30803] [ 1515.673800][T30803] dump_stack_lvl+0x16c/0x1f0 [ 1515.673828][T30803] should_fail_ex+0x512/0x640 [ 1515.673843][T30803] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1515.673864][T30803] should_failslab+0xc2/0x120 [ 1515.673879][T30803] __kmalloc_cache_noprof+0x72/0x780 [ 1515.673900][T30803] ? kvm_io_bus_register_dev+0x505/0x720 [ 1515.673922][T30803] ? kvm_ioapic_init+0x4f/0x590 [ 1515.673944][T30803] ? kvm_ioapic_init+0x4f/0x590 [ 1515.673962][T30803] kvm_ioapic_init+0x4f/0x590 [ 1515.673984][T30803] kvm_arch_vm_ioctl+0x912/0x18b0 [ 1515.674006][T30803] ? register_lock_class+0x41/0x4c0 [ 1515.674021][T30803] ? find_held_lock+0x2b/0x80 [ 1515.674040][T30803] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1515.674060][T30803] ? ima_match_policy+0x7f9/0x22e0 [ 1515.674081][T30803] ? __lock_acquire+0x622/0x1c90 [ 1515.674098][T30803] ? __lock_acquire+0x622/0x1c90 [ 1515.674118][T30803] ? __lock_acquire+0x622/0x1c90 [ 1515.674136][T30803] ? __lock_acquire+0x622/0x1c90 [ 1515.674163][T30803] ? bpf_ksym_find+0x124/0x1c0 [ 1515.674183][T30803] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1515.674205][T30803] ? is_bpf_text_address+0x94/0x1a0 [ 1515.674220][T30803] ? kernel_text_address+0x8d/0x100 [ 1515.674237][T30803] ? widen_string+0xdc/0x2d0 [ 1515.674252][T30803] ? __kernel_text_address+0xd/0x40 [ 1515.674269][T30803] ? unwind_get_return_address+0x59/0xa0 [ 1515.674289][T30803] ? arch_stack_walk+0xa6/0x100 [ 1515.674316][T30803] ? stack_trace_save+0x8e/0xc0 [ 1515.674335][T30803] ? __pfx_stack_trace_save+0x10/0x10 [ 1515.674356][T30803] ? stack_depot_save_flags+0x29/0x9c0 [ 1515.674370][T30803] ? __lock_acquire+0xb8a/0x1c90 [ 1515.674386][T30803] ? kasan_save_stack+0x42/0x60 [ 1515.674406][T30803] ? kasan_save_stack+0x33/0x60 [ 1515.674424][T30803] ? kasan_save_track+0x14/0x30 [ 1515.674443][T30803] ? __kasan_save_free_info+0x3b/0x60 [ 1515.674473][T30803] ? __kasan_slab_free+0x5f/0x80 [ 1515.674489][T30803] ? kfree+0x2b8/0x6d0 [ 1515.674504][T30803] ? tomoyo_path_number_perm+0x470/0x580 [ 1515.674524][T30803] kvm_vm_ioctl+0x1a91/0x3fd0 [ 1515.674552][T30803] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1515.674584][T30803] ? kasan_quarantine_put+0x10a/0x240 [ 1515.674603][T30803] ? lockdep_hardirqs_on+0x7c/0x110 [ 1515.674626][T30803] ? find_held_lock+0x2b/0x80 [ 1515.674651][T30803] ? tomoyo_path_number_perm+0x295/0x580 [ 1515.674672][T30803] ? tomoyo_path_number_perm+0x18d/0x580 [ 1515.674692][T30803] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1515.674710][T30803] ? futex_wake+0x1ad/0x530 [ 1515.674733][T30803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1515.674754][T30803] ? do_vfs_ioctl+0x128/0x14f0 [ 1515.674770][T30803] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1515.674792][T30803] ? find_held_lock+0x2b/0x80 [ 1515.674810][T30803] ? hook_file_ioctl_common+0x145/0x410 [ 1515.674833][T30803] ? __fget_files+0x20e/0x3c0 [ 1515.674854][T30803] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1515.674874][T30803] __x64_sys_ioctl+0x18e/0x210 [ 1515.674893][T30803] do_syscall_64+0xcd/0xfa0 [ 1515.674916][T30803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.674930][T30803] RIP: 0033:0x7f94dd78efc9 [ 1515.674944][T30803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1515.674959][T30803] RSP: 002b:00007f94de5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1515.674973][T30803] RAX: ffffffffffffffda RBX: 00007f94dd9e5fa0 RCX: 00007f94dd78efc9 [ 1515.674983][T30803] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 1515.674992][T30803] RBP: 00007f94dd811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1515.675001][T30803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1515.675009][T30803] R13: 00007f94dd9e6038 R14: 00007f94dd9e5fa0 R15: 00007ffe3bd40a38 [ 1515.675030][T30803] [ 1516.070270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.749567][T30794] can: request_module (can-proto-5) failed. [ 1518.271530][T30819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4590'. [ 1518.390553][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4591'. [ 1519.011199][T30837] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4593'. [ 1519.561995][T30847] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1520.023247][T30850] ubi0: attaching mtd1 [ 1520.049601][T30850] ubi0 error: ubi_attach_mtd_dev: bad VID header (12) or data offsets (76) [ 1520.202521][T30857] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 1520.202521][T30857] MÅ' is too long [ 1520.245966][T30857] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 1520.245966][T30857] ††½WÏõ›ú «ú' is too long [ 1520.435816][T30865] bond0: option arp_interval: invalid value () [ 1520.479624][T30865] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1520.519021][T30854] FAULT_INJECTION: forcing a failure. [ 1520.519021][T30854] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.531959][T30867] netlink: 'syz.0.4599': attribute type 3 has an invalid length. [ 1520.719525][T30854] CPU: 0 UID: 0 PID: 30854 Comm: syz.6.4596 Tainted: G U syzkaller #0 PREEMPT(full) [ 1520.719551][T30854] Tainted: [U]=USER [ 1520.719556][T30854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1520.719565][T30854] Call Trace: [ 1520.719570][T30854] [ 1520.719577][T30854] dump_stack_lvl+0x16c/0x1f0 [ 1520.719603][T30854] should_fail_ex+0x512/0x640 [ 1520.719617][T30854] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1520.719637][T30854] should_failslab+0xc2/0x120 [ 1520.719652][T30854] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1520.719671][T30854] ? dup_fd+0x4e/0xb90 [ 1520.719692][T30854] ? dup_fd+0x4e/0xb90 [ 1520.719709][T30854] dup_fd+0x4e/0xb90 [ 1520.719733][T30854] ksys_unshare+0x831/0xa40 [ 1520.719748][T30854] ? __pfx_ksys_unshare+0x10/0x10 [ 1520.719763][T30854] ? xfd_validate_state+0x61/0x180 [ 1520.719784][T30854] __x64_sys_unshare+0x31/0x40 [ 1520.719797][T30854] do_syscall_64+0xcd/0xfa0 [ 1520.719820][T30854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.719835][T30854] RIP: 0033:0x7f563e38efc9 [ 1520.719847][T30854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.719860][T30854] RSP: 002b:00007f563f205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1520.719875][T30854] RAX: ffffffffffffffda RBX: 00007f563e5e5fa0 RCX: 00007f563e38efc9 [ 1520.719884][T30854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1520.719893][T30854] RBP: 00007f563e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1520.719901][T30854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.719910][T30854] R13: 00007f563e5e6038 R14: 00007f563e5e5fa0 R15: 00007fff01bb6a38 [ 1520.719928][T30854] [ 1520.902818][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.850496][T30903] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4606'. [ 1524.671976][T30911] ptrace attach of "./syz-executor exec"[30914] was attempted by "./syz-executor exec"[30911] [ 1524.778023][T30913] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1524.915290][T30911] FAULT_INJECTION: forcing a failure. [ 1524.915290][T30911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.955494][T30911] CPU: 0 UID: 0 PID: 30911 Comm: syz.6.4608 Tainted: G U syzkaller #0 PREEMPT(full) [ 1524.955521][T30911] Tainted: [U]=USER [ 1524.955527][T30911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1524.955536][T30911] Call Trace: [ 1524.955542][T30911] [ 1524.955549][T30911] dump_stack_lvl+0x16c/0x1f0 [ 1524.955575][T30911] should_fail_ex+0x512/0x640 [ 1524.955592][T30911] _copy_from_user+0x2e/0xd0 [ 1524.955608][T30911] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1524.955637][T30911] snd_rawmidi_write+0x26e/0xc10 [ 1524.955661][T30911] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1524.955681][T30911] ? __pfx_default_wake_function+0x10/0x10 [ 1524.955703][T30911] ? bpf_lsm_file_permission+0x9/0x10 [ 1524.955724][T30911] ? security_file_permission+0x71/0x210 [ 1524.955744][T30911] ? rw_verify_area+0xcf/0x6c0 [ 1524.955763][T30911] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1524.955781][T30911] vfs_write+0x2a0/0x11d0 [ 1524.955805][T30911] ? __pfx_vfs_write+0x10/0x10 [ 1524.955822][T30911] ? find_held_lock+0x2b/0x80 [ 1524.955841][T30911] ? __fget_files+0x204/0x3c0 [ 1524.955863][T30911] ? __fget_files+0x20e/0x3c0 [ 1524.955886][T30911] ksys_write+0x1f8/0x250 [ 1524.955905][T30911] ? __pfx_ksys_write+0x10/0x10 [ 1524.955930][T30911] do_syscall_64+0xcd/0xfa0 [ 1524.955963][T30911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.955979][T30911] RIP: 0033:0x7f563e38efc9 [ 1524.955991][T30911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1524.956005][T30911] RSP: 002b:00007f563f205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1524.956020][T30911] RAX: ffffffffffffffda RBX: 00007f563e5e5fa0 RCX: 00007f563e38efc9 [ 1524.956030][T30911] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 000000000000000d [ 1524.956039][T30911] RBP: 00007f563e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1524.956047][T30911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1524.956055][T30911] R13: 00007f563e5e6038 R14: 00007f563e5e5fa0 R15: 00007fff01bb6a38 [ 1524.956074][T30911] [ 1525.164647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.703858][T30903] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1525.774971][T30903] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1525.864881][T30903] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1525.991731][T30920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4610'. [ 1526.017080][T30921] random: crng reseeded on system resumption [ 1526.285116][T30926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4612'. [ 1528.097807][T30947] can: request_module (can-proto-5) failed. [ 1528.560138][T30959] FAULT_INJECTION: forcing a failure. [ 1528.560138][T30959] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.661182][T30959] CPU: 0 UID: 0 PID: 30959 Comm: syz.4.4619 Tainted: G U syzkaller #0 PREEMPT(full) [ 1528.661208][T30959] Tainted: [U]=USER [ 1528.661213][T30959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1528.661221][T30959] Call Trace: [ 1528.661227][T30959] [ 1528.661232][T30959] dump_stack_lvl+0x16c/0x1f0 [ 1528.661259][T30959] should_fail_ex+0x512/0x640 [ 1528.661273][T30959] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1528.661295][T30959] should_failslab+0xc2/0x120 [ 1528.661309][T30959] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1528.661328][T30959] ? __alloc_skb+0x2b2/0x380 [ 1528.661357][T30959] ? __alloc_skb+0x2b2/0x380 [ 1528.661374][T30959] __alloc_skb+0x2b2/0x380 [ 1528.661394][T30959] ? __pfx___alloc_skb+0x10/0x10 [ 1528.661415][T30959] ? genl_rcv_msg+0x4bb/0x800 [ 1528.661436][T30959] netlink_ack+0x15d/0xb80 [ 1528.661455][T30959] netlink_rcv_skb+0x332/0x420 [ 1528.661469][T30959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1528.661486][T30959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1528.661507][T30959] ? netlink_deliver_tap+0x1ae/0xd30 [ 1528.661531][T30959] genl_rcv+0x28/0x40 [ 1528.661545][T30959] netlink_unicast+0x5aa/0x870 [ 1528.661561][T30959] ? __pfx_netlink_unicast+0x10/0x10 [ 1528.661582][T30959] netlink_sendmsg+0x8c8/0xdd0 [ 1528.661599][T30959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1528.661615][T30959] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1528.661634][T30959] ____sys_sendmsg+0xa98/0xc70 [ 1528.661656][T30959] ? copy_msghdr_from_user+0x10a/0x160 [ 1528.661677][T30959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1528.661702][T30959] ___sys_sendmsg+0x134/0x1d0 [ 1528.661724][T30959] ? __pfx____sys_sendmsg+0x10/0x10 [ 1528.661744][T30959] ? __lock_acquire+0x622/0x1c90 [ 1528.661782][T30959] __sys_sendmsg+0x16d/0x220 [ 1528.661804][T30959] ? __pfx___sys_sendmsg+0x10/0x10 [ 1528.661837][T30959] do_syscall_64+0xcd/0xfa0 [ 1528.661860][T30959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.661874][T30959] RIP: 0033:0x7fa27338efc9 [ 1528.661886][T30959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.661900][T30959] RSP: 002b:00007fa27419d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1528.661914][T30959] RAX: ffffffffffffffda RBX: 00007fa2735e5fa0 RCX: 00007fa27338efc9 [ 1528.661924][T30959] RDX: 0000000000000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1528.661932][T30959] RBP: 00007fa27419d090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.661941][T30959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.661949][T30959] R13: 00007fa2735e6038 R14: 00007fa2735e5fa0 R15: 00007ffcfbb6a7b8 [ 1528.661968][T30959] [ 1528.929343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1529.286984][T30966] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4621'. [ 1529.773840][T30968] random: crng reseeded on system resumption [ 1529.839253][T30975] ptp ptp0: only physical clock in use now [ 1529.868207][T30975] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1529.926363][T30975] : renamed from bond0 (while UP) [ 1529.976807][T30975] bridge0: port 3() entered disabled state [ 1530.176794][T30978] sp0: Synchronizing with TNC [ 1530.243797][T30978] sp0: Found TNC [ 1531.237989][T30998] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4633'. [ 1531.804520][ T30] audit: type=1804 audit(4294967350.000:57): pid=31008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4636" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=17 res=1 errno=0 [ 1531.842348][T31013] ubi0: attaching mtd1 [ 1531.846455][T31013] ubi0 error: ubi_attach_mtd_dev: bad VID header (12) or data offsets (76) [ 1532.161668][T30995] can: request_module (can-proto-5) failed. [ 1532.583112][T31019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1533.111527][T31033] random: crng reseeded on system resumption [ 1533.554543][T31047] snd_aloop snd_aloop.0: control 1:262152:7:ª¸è:0 is already present [ 1535.669514][T31081] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1536.438039][T27976] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1536.578369][T31105] FAULT_INJECTION: forcing a failure. [ 1536.578369][T31105] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.659884][T31105] CPU: 0 UID: 0 PID: 31105 Comm: syz.6.4658 Tainted: G U syzkaller #0 PREEMPT(full) [ 1536.659909][T31105] Tainted: [U]=USER [ 1536.659914][T31105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1536.659923][T31105] Call Trace: [ 1536.659928][T31105] [ 1536.659934][T31105] dump_stack_lvl+0x16c/0x1f0 [ 1536.659960][T31105] should_fail_ex+0x512/0x640 [ 1536.659974][T31105] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1536.659990][T31105] should_failslab+0xc2/0x120 [ 1536.660005][T31105] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1536.660024][T31105] ? skb_clone+0x190/0x3f0 [ 1536.660040][T31105] ? skb_clone+0x190/0x3f0 [ 1536.660051][T31105] skb_clone+0x190/0x3f0 [ 1536.660065][T31105] netlink_deliver_tap+0xabd/0xd30 [ 1536.660091][T31105] netlink_unicast+0x71f/0x870 [ 1536.660108][T31105] ? __pfx_netlink_unicast+0x10/0x10 [ 1536.660123][T31105] ? genl_rcv_msg+0x4bb/0x800 [ 1536.660150][T31105] netlink_ack+0x696/0xb80 [ 1536.660170][T31105] netlink_rcv_skb+0x332/0x420 [ 1536.660184][T31105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1536.660201][T31105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1536.660222][T31105] ? netlink_deliver_tap+0x1ae/0xd30 [ 1536.660247][T31105] genl_rcv+0x28/0x40 [ 1536.660260][T31105] netlink_unicast+0x5aa/0x870 [ 1536.660277][T31105] ? __pfx_netlink_unicast+0x10/0x10 [ 1536.660298][T31105] netlink_sendmsg+0x8c8/0xdd0 [ 1536.660315][T31105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.660331][T31105] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1536.660350][T31105] ____sys_sendmsg+0xa98/0xc70 [ 1536.660368][T31105] ? copy_msghdr_from_user+0x10a/0x160 [ 1536.660390][T31105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.660415][T31105] ___sys_sendmsg+0x134/0x1d0 [ 1536.660437][T31105] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.660457][T31105] ? __lock_acquire+0x622/0x1c90 [ 1536.660496][T31105] __sys_sendmsg+0x16d/0x220 [ 1536.660518][T31105] ? __pfx___sys_sendmsg+0x10/0x10 [ 1536.660551][T31105] do_syscall_64+0xcd/0xfa0 [ 1536.660574][T31105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.660588][T31105] RIP: 0033:0x7f563e38efc9 [ 1536.660600][T31105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1536.660614][T31105] RSP: 002b:00007f563f205038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.660628][T31105] RAX: ffffffffffffffda RBX: 00007f563e5e5fa0 RCX: 00007f563e38efc9 [ 1536.660637][T31105] RDX: 0000000000000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1536.660646][T31105] RBP: 00007f563f205090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.660654][T31105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.660663][T31105] R13: 00007f563e5e6038 R14: 00007f563e5e5fa0 R15: 00007fff01bb6a38 [ 1536.660682][T31105] [ 1536.938205][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.960445][T31107] netlink: 'syz.3.4659': attribute type 4 has an invalid length. [ 1536.969539][T31107] netlink: 'syz.3.4659': attribute type 4 has an invalid length. [ 1537.498699][T31115] random: crng reseeded on system resumption [ 1538.598765][T31129] FAULT_INJECTION: forcing a failure. [ 1538.598765][T31129] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1538.671523][T31129] CPU: 0 UID: 0 PID: 31129 Comm: syz.6.4663 Tainted: G U syzkaller #0 PREEMPT(full) [ 1538.671551][T31129] Tainted: [U]=USER [ 1538.671557][T31129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1538.671566][T31129] Call Trace: [ 1538.671571][T31129] [ 1538.671578][T31129] dump_stack_lvl+0x16c/0x1f0 [ 1538.671606][T31129] should_fail_ex+0x512/0x640 [ 1538.671624][T31129] get_futex_key+0x1d0/0x1560 [ 1538.671650][T31129] ? __pfx_css_rstat_updated+0x10/0x10 [ 1538.671672][T31129] ? __pfx_get_futex_key+0x10/0x10 [ 1538.671698][T31129] ? __cgroup_account_cputime+0xcc/0x120 [ 1538.671721][T31129] futex_wait_setup+0x9d/0x550 [ 1538.671743][T31129] __futex_wait+0x193/0x2f0 [ 1538.671761][T31129] ? __pfx___futex_wait+0x10/0x10 [ 1538.671777][T31129] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1538.671797][T31129] ? lockdep_hardirqs_on+0x7c/0x110 [ 1538.671820][T31129] ? __pfx_futex_wake_mark+0x10/0x10 [ 1538.671840][T31129] ? futex_private_hash_put+0x176/0x300 [ 1538.671864][T31129] ? futex_private_hash_put+0x18a/0x300 [ 1538.671887][T31129] futex_wait+0xe8/0x380 [ 1538.671904][T31129] ? __pfx_futex_wait+0x10/0x10 [ 1538.671927][T31129] ? up_write+0x1b2/0x520 [ 1538.671946][T31129] do_futex+0x229/0x350 [ 1538.671960][T31129] ? __pfx_do_futex+0x10/0x10 [ 1538.671980][T31129] __x64_sys_futex+0x1e0/0x4c0 [ 1538.672007][T31129] ? __pfx___x64_sys_futex+0x10/0x10 [ 1538.672022][T31129] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1538.672035][T31129] ? xfd_validate_state+0x61/0x180 [ 1538.672052][T31129] ? __sys_setsockopt+0x140/0x1a0 [ 1538.672079][T31129] do_syscall_64+0xcd/0xfa0 [ 1538.672101][T31129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.672116][T31129] RIP: 0033:0x7f563e38efc9 [ 1538.672129][T31129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1538.672143][T31129] RSP: 002b:00007f563f2050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1538.672157][T31129] RAX: ffffffffffffffda RBX: 00007f563e5e5fa8 RCX: 00007f563e38efc9 [ 1538.672167][T31129] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f563e5e5fa8 [ 1538.672176][T31129] RBP: 00007f563e5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1538.672185][T31129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1538.672194][T31129] R13: 00007f563e5e6038 R14: 00007fff01bb6950 R15: 00007fff01bb6a38 [ 1538.672214][T31129] [ 1539.266667][T31141] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4666'. [ 1540.145242][T31158] phram: parameter too long [ 1540.702425][T31169] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4672'. [ 1540.749006][T31172] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4673'. [ 1541.809909][T31182] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1541.828838][T31182] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1541.851529][T31182] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1541.874581][T31182] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1543.496417][T31208] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1543.820630][T27976] Bluetooth: hci4: command 0x0c1a tx timeout [ 1543.901357][T27976] Bluetooth: hci0: command 0x0c1a tx timeout [ 1543.907403][T27976] Bluetooth: hci3: command 0x0c1a tx timeout [ 1544.151052][T31215] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1545.340227][T31182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1545.346172][T31182] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1545.500639][T31182] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1545.979518][T27976] Bluetooth: hci0: command 0x0c1a tx timeout [ 1547.421823][T27976] Bluetooth: hci2: command 0x0c1a tx timeout [ 1547.910478][T31258] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1548.172634][T31260] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 1548.524144][T31268] deleting an unspecified loop device is not supported. [ 1548.613782][T31269] FAULT_INJECTION: forcing a failure. [ 1548.613782][T31269] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.689258][T31269] CPU: 0 UID: 0 PID: 31269 Comm: syz.3.4699 Tainted: G U syzkaller #0 PREEMPT(full) [ 1548.689289][T31269] Tainted: [U]=USER [ 1548.689294][T31269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1548.689304][T31269] Call Trace: [ 1548.689309][T31269] [ 1548.689316][T31269] dump_stack_lvl+0x16c/0x1f0 [ 1548.689342][T31269] should_fail_ex+0x512/0x640 [ 1548.689357][T31269] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1548.689382][T31269] should_failslab+0xc2/0x120 [ 1548.689398][T31269] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1548.689421][T31269] ? __kthread_create_on_node+0x186/0x3f0 [ 1548.689440][T31269] ? kvasprintf+0xbc/0x160 [ 1548.689455][T31269] kvasprintf+0xbc/0x160 [ 1548.689470][T31269] ? __pfx_kvasprintf+0x10/0x10 [ 1548.689491][T31269] ? __pfx_rescuer_thread+0x10/0x10 [ 1548.689508][T31269] __kthread_create_on_node+0x186/0x3f0 [ 1548.689523][T31269] ? __pfx___kthread_create_on_node+0x10/0x10 [ 1548.689542][T31269] ? __pfx_vsnprintf+0x10/0x10 [ 1548.689565][T31269] ? __pfx_rescuer_thread+0x10/0x10 [ 1548.689582][T31269] kthread_create_on_node+0xc7/0x100 [ 1548.689596][T31269] ? __pfx_kthread_create_on_node+0x10/0x10 [ 1548.689627][T31269] ? __pfx_scnprintf+0x10/0x10 [ 1548.689656][T31269] init_rescuer+0x320/0x640 [ 1548.689672][T31269] ? __pfx_init_rescuer+0x10/0x10 [ 1548.689692][T31269] ? wq_adjust_max_active+0x39d/0x4a0 [ 1548.689711][T31269] __alloc_workqueue+0xda1/0x1810 [ 1548.689728][T31269] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1548.689751][T31269] alloc_workqueue_noprof+0xd2/0x200 [ 1548.689765][T31269] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1548.689784][T31269] ? __pfx___debug_object_init+0x10/0x10 [ 1548.689807][T31269] nci_register_device+0x511/0xb80 [ 1548.689827][T31269] ? __pfx_nci_register_device+0x10/0x10 [ 1548.689848][T31269] ? lockdep_init_map_type+0x5c/0x280 [ 1548.689866][T31269] virtual_ncidev_open+0x141/0x220 [ 1548.689885][T31269] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1548.689902][T31269] misc_open+0x26d/0x450 [ 1548.689916][T31269] ? __pfx_misc_open+0x10/0x10 [ 1548.689928][T31269] chrdev_open+0x234/0x6a0 [ 1548.689950][T31269] ? __pfx_apparmor_file_open+0x10/0x10 [ 1548.689966][T31269] ? __pfx_chrdev_open+0x10/0x10 [ 1548.689988][T31269] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1548.690011][T31269] do_dentry_open+0x982/0x1530 [ 1548.690033][T31269] ? __pfx_chrdev_open+0x10/0x10 [ 1548.690058][T31269] vfs_open+0x82/0x3f0 [ 1548.690075][T31269] path_openat+0x1de4/0x2cb0 [ 1548.690101][T31269] ? __pfx_path_openat+0x10/0x10 [ 1548.690123][T31269] ? __lock_acquire+0xb8a/0x1c90 [ 1548.690139][T31269] do_filp_open+0x20b/0x470 [ 1548.690159][T31269] ? __pfx_do_filp_open+0x10/0x10 [ 1548.690193][T31269] ? alloc_fd+0x471/0x7d0 [ 1548.690217][T31269] do_sys_openat2+0x11b/0x1d0 [ 1548.690232][T31269] ? __pfx_do_sys_openat2+0x10/0x10 [ 1548.690260][T31269] ? __pfx___might_resched+0x10/0x10 [ 1548.690285][T31269] __x64_sys_openat+0x174/0x210 [ 1548.690302][T31269] ? __pfx___x64_sys_openat+0x10/0x10 [ 1548.690327][T31269] do_syscall_64+0xcd/0xfa0 [ 1548.690350][T31269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.690365][T31269] RIP: 0033:0x7f94dd78efc9 [ 1548.690378][T31269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.690392][T31269] RSP: 002b:00007f94de5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1548.690407][T31269] RAX: ffffffffffffffda RBX: 00007f94dd9e5fa0 RCX: 00007f94dd78efc9 [ 1548.690417][T31269] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1548.690427][T31269] RBP: 00007f94dd811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1548.690436][T31269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.690445][T31269] R13: 00007f94dd9e6038 R14: 00007f94dd9e5fa0 R15: 00007ffe3bd40a38 [ 1548.690466][T31269] [ 1549.062581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.639426][T27976] Bluetooth: hci2: command 0x0c1a tx timeout [ 1549.799788][T31277] futex_wake_op: syz.0.4700 tries to shift op by -2048; fix this program [ 1550.111987][T31269] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -ENOMEM [ 1550.626277][T31277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1550.697267][T31285] zswap: compressor not available [ 1550.723111][T31277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1550.769508][T31277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1550.808802][T31277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1552.303475][T29523] Bluetooth: hci4: command 0x0c1a tx timeout [ 1552.783713][T29523] Bluetooth: hci0: command 0x0c1a tx timeout [ 1552.790048][T27976] Bluetooth: hci3: command 0x0c1a tx timeout [ 1552.893648][T29523] Bluetooth: hci2: command 0x0c1a tx timeout [ 1553.147567][T31334] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4709'. [ 1554.240357][T31356] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1554.240357][T31356] program syz.3.4714 not setting count and/or reply_len properly [ 1554.814488][T31363] zswap: compressor not available [ 1554.844614][T31365] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1555.248414][T31376] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1555.410436][T31378] nvme_fcloop: unknown parameter or missing value '0' [ 1556.491854][T31400] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4723'. [ 1557.409549][T31416] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4726'. [ 1557.617566][T31425] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1557.617566][T31425] program syz.3.4729 not setting count and/or reply_len properly [ 1557.842356][T31431] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1558.007143][T31438] netlink: 146 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1558.696049][T31465] FAULT_INJECTION: forcing a failure. [ 1558.696049][T31465] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.778648][T31465] CPU: 0 UID: 0 PID: 31465 Comm: syz.3.4743 Tainted: G U syzkaller #0 PREEMPT(full) [ 1558.778673][T31465] Tainted: [U]=USER [ 1558.778678][T31465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1558.778688][T31465] Call Trace: [ 1558.778693][T31465] [ 1558.778699][T31465] dump_stack_lvl+0x16c/0x1f0 [ 1558.778725][T31465] should_fail_ex+0x512/0x640 [ 1558.778739][T31465] ? __kmalloc_noprof+0xca/0x880 [ 1558.778758][T31465] should_failslab+0xc2/0x120 [ 1558.778772][T31465] __kmalloc_noprof+0xdd/0x880 [ 1558.778793][T31465] ? alloc_pipe_info+0x1ec/0x590 [ 1558.778818][T31465] ? alloc_pipe_info+0x1ec/0x590 [ 1558.778837][T31465] alloc_pipe_info+0x1ec/0x590 [ 1558.778859][T31465] splice_direct_to_actor+0x77d/0xa30 [ 1558.778879][T31465] ? __pfx_direct_splice_actor+0x10/0x10 [ 1558.778898][T31465] ? __pfx_aa_file_perm+0x10/0x10 [ 1558.778919][T31465] ? find_held_lock+0x2b/0x80 [ 1558.778938][T31465] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1558.778954][T31465] ? get_pid_task+0xfc/0x250 [ 1558.778973][T31465] do_splice_direct+0x174/0x240 [ 1558.778991][T31465] ? __pfx_do_splice_direct+0x10/0x10 [ 1558.779009][T31465] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1558.779030][T31465] ? rw_verify_area+0xcf/0x6c0 [ 1558.779049][T31465] do_sendfile+0xb06/0xe50 [ 1558.779070][T31465] ? __pfx_do_sendfile+0x10/0x10 [ 1558.779089][T31465] ? __fget_files+0x20e/0x3c0 [ 1558.779111][T31465] __x64_sys_sendfile64+0x1d8/0x220 [ 1558.779124][T31465] ? ksys_write+0x1ac/0x250 [ 1558.779143][T31465] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1558.779161][T31465] do_syscall_64+0xcd/0xfa0 [ 1558.779184][T31465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.779198][T31465] RIP: 0033:0x7f94dd78efc9 [ 1558.779210][T31465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.779224][T31465] RSP: 002b:00007f94de5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1558.779238][T31465] RAX: ffffffffffffffda RBX: 00007f94dd9e5fa0 RCX: 00007f94dd78efc9 [ 1558.779247][T31465] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1558.779256][T31465] RBP: 00007f94de5da090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.779264][T31465] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1558.779272][T31465] R13: 00007f94dd9e6038 R14: 00007f94dd9e5fa0 R15: 00007ffe3bd40a38 [ 1558.779291][T31465] [ 1559.015624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.561323][T31470] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4744'. [ 1559.673794][T31477] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1559.673794][T31477] program syz.0.4745 not setting count and/or reply_len properly [ 1559.716166][T31480] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4747'. [ 1559.763733][T31480] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 1560.151212][T31486] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 1560.385990][T31489] FAULT_INJECTION: forcing a failure. [ 1560.385990][T31489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1560.479798][T31489] CPU: 0 UID: 0 PID: 31489 Comm: syz.3.4749 Tainted: G U syzkaller #0 PREEMPT(full) [ 1560.479824][T31489] Tainted: [U]=USER [ 1560.479829][T31489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1560.479838][T31489] Call Trace: [ 1560.479844][T31489] [ 1560.479850][T31489] dump_stack_lvl+0x16c/0x1f0 [ 1560.479880][T31489] should_fail_ex+0x512/0x640 [ 1560.479897][T31489] _copy_to_user+0x32/0xd0 [ 1560.479918][T31489] simple_read_from_buffer+0xcb/0x170 [ 1560.479938][T31489] proc_fail_nth_read+0x197/0x240 [ 1560.479958][T31489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1560.479978][T31489] ? rw_verify_area+0xcf/0x6c0 [ 1560.479996][T31489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1560.480015][T31489] vfs_read+0x1e4/0xcf0 [ 1560.480036][T31489] ? __pfx___mutex_lock+0x10/0x10 [ 1560.480050][T31489] ? __pfx_vfs_read+0x10/0x10 [ 1560.480074][T31489] ? __fget_files+0x20e/0x3c0 [ 1560.480097][T31489] ksys_read+0x12a/0x250 [ 1560.480116][T31489] ? __pfx_ksys_read+0x10/0x10 [ 1560.480140][T31489] do_syscall_64+0xcd/0xfa0 [ 1560.480162][T31489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.480177][T31489] RIP: 0033:0x7f94dd78d9dc [ 1560.480189][T31489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1560.480202][T31489] RSP: 002b:00007f94de5da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1560.480216][T31489] RAX: ffffffffffffffda RBX: 00007f94dd9e5fa0 RCX: 00007f94dd78d9dc [ 1560.480225][T31489] RDX: 000000000000000f RSI: 00007f94de5da0a0 RDI: 0000000000000004 [ 1560.480234][T31489] RBP: 00007f94de5da090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.480242][T31489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.480251][T31489] R13: 00007f94dd9e6038 R14: 00007f94dd9e5fa0 R15: 00007ffe3bd40a38 [ 1560.480270][T31489] [ 1560.674375][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.858991][T31494] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1560.868699][T31494] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1561.715971][ T30] audit: type=1804 audit(8277292042.050:58): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4753" name="/newroot/477/file0" dev="tmpfs" ino=2506 res=1 errno=0 [ 1561.839450][T31506] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1561.839450][T31506] program syz.3.4753 not setting count and/or reply_len properly [ 1561.866799][ T30] audit: type=1804 audit(8277292042.050:59): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4753" name="/newroot/477/file0" dev="tmpfs" ino=2506 res=1 errno=0 [ 1561.914070][T31507] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1561.940162][T31513] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1562.135621][T31507] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1562.255203][T31522] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4755'. [ 1563.964520][T31550] zswap: compressor not available [ 1564.106936][T31561] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1564.488961][T31563] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1565.746530][T31569] zswap: compressor not available [ 1566.373260][T31579] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1566.409927][T31579] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1566.439583][T31579] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1566.464418][T31579] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1567.118541][T31601] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1567.819402][T29523] Bluetooth: hci4: command 0x0c1a tx timeout [ 1568.185067][T31599] svc: failed to register nfsdv3 RPC service (errno 111). [ 1568.336457][T31599] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1568.459555][T29523] Bluetooth: hci0: command 0x0c1a tx timeout [ 1568.465693][T27976] Bluetooth: hci3: command 0x0c1a tx timeout [ 1568.542824][T29523] Bluetooth: hci2: command 0x0c1a tx timeout [ 1568.672452][T28020] netdevsim netdevsim842 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.087880][T31617] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1569.783401][T31571] kexec: Could not allocate control_code_buffer [ 1569.872885][T31627] ima: policy update failed [ 1569.913087][ T30] audit: type=1802 audit(8277292050.240:60): pid=31627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4778" res=0 errno=0 [ 1569.939911][T31627] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4778'. [ 1570.256872][T31636] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1573.201657][T31691] zswap: compressor not available [ 1573.653634][T31714] bdi 250:0: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 1573.669541][T31715] sg_write: data in/out 2359516/4 bytes for SCSI command 0x0-- guessing data in; [ 1573.669541][T31715] program syz.6.4796 not setting count and/or reply_len properly [ 1576.760517][T29523] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1 [ 1576.855019][T31773] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4809'. [ 1579.392957][T31832] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4821'. [ 1580.537555][T31842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1580.573438][T31842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1580.609785][T31842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1580.649948][T31842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1580.858718][T31844] netlink: zone id is out of range [ 1580.889517][T31844] netlink: zone id is out of range [ 1580.894675][T31844] netlink: zone id is out of range [ 1580.967545][T31844] netlink: zone id is out of range [ 1581.019009][T31855] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1581.048059][T31844] netlink: zone id is out of range [ 1581.123944][T31844] netlink: zone id is out of range [ 1581.207028][T31844] netlink: zone id is out of range [ 1581.260209][T31844] netlink: zone id is out of range [ 1581.311172][T31844] netlink: zone id is out of range [ 1581.335898][T31844] netlink: zone id is out of range [ 1581.651891][T31873] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4827'. [ 1582.139577][T29523] Bluetooth: hci4: command 0x0c1a tx timeout [ 1582.307130][T31888] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1582.534604][T31888] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4830'. [ 1582.621647][T29523] Bluetooth: hci0: command 0x0c1a tx timeout [ 1582.627693][T27983] Bluetooth: hci3: command 0x0c1a tx timeout [ 1582.703427][T29523] Bluetooth: hci2: command 0x0c1a tx timeout [ 1583.306712][T31896] FAULT_INJECTION: forcing a failure. [ 1583.306712][T31896] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.491163][T31896] CPU: 0 UID: 0 PID: 31896 Comm: syz.3.4833 Tainted: G U syzkaller #0 PREEMPT(full) [ 1583.491190][T31896] Tainted: [U]=USER [ 1583.491195][T31896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1583.491205][T31896] Call Trace: [ 1583.491211][T31896] [ 1583.491217][T31896] dump_stack_lvl+0x16c/0x1f0 [ 1583.491244][T31896] should_fail_ex+0x512/0x640 [ 1583.491259][T31896] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1583.491282][T31896] should_failslab+0xc2/0x120 [ 1583.491297][T31896] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1583.491318][T31896] ? __d_alloc+0x32/0xae0 [ 1583.491344][T31896] ? __d_alloc+0x32/0xae0 [ 1583.491362][T31896] __d_alloc+0x32/0xae0 [ 1583.491385][T31896] d_alloc_pseudo+0x1c/0xc0 [ 1583.491400][T31896] alloc_file_pseudo+0xcf/0x230 [ 1583.491416][T31896] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1583.491432][T31896] ? alloc_fd+0x471/0x7d0 [ 1583.491452][T31896] sock_alloc_file+0x50/0x210 [ 1583.491468][T31896] __sys_socket+0x1c0/0x260 [ 1583.491486][T31896] ? __pfx___sys_socket+0x10/0x10 [ 1583.491504][T31896] ? xfd_validate_state+0x61/0x180 [ 1583.491518][T31896] ? __pfx_ksys_write+0x10/0x10 [ 1583.491542][T31896] __x64_sys_socket+0x72/0xb0 [ 1583.491558][T31896] ? lockdep_hardirqs_on+0x7c/0x110 [ 1583.491579][T31896] do_syscall_64+0xcd/0xfa0 [ 1583.491601][T31896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.491615][T31896] RIP: 0033:0x7f94dd78efc9 [ 1583.491628][T31896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.491641][T31896] RSP: 002b:00007f94de5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1583.491656][T31896] RAX: ffffffffffffffda RBX: 00007f94dd9e5fa0 RCX: 00007f94dd78efc9 [ 1583.491665][T31896] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000002 [ 1583.491674][T31896] RBP: 00007f94dd811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1583.491682][T31896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.491691][T31896] R13: 00007f94dd9e6038 R14: 00007f94dd9e5fa0 R15: 00007ffe3bd40a38 [ 1583.491710][T31896] [ 1583.707157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1584.133040][T31914] can: request_module (can-proto-4) failed. [ 1584.219620][T31917] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 1584.441134][T31912] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1584.447614][T31912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1584.457862][T31912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1584.483190][T31912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1586.143376][T31948] zswap: compressor not available [ 1586.263865][T31958] sd 0:0:1:0: PR command failed: 1026 [ 1586.350257][T31958] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1586.357052][T31958] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1586.459496][T27983] Bluetooth: hci0: command 0x0c1a tx timeout [ 1586.465559][T29523] Bluetooth: hci3: command 0x0c1a tx timeout [ 1586.471740][T27976] Bluetooth: hci4: command 0x0c1a tx timeout [ 1586.542099][T27983] Bluetooth: hci2: command 0x0c1a tx timeout [ 1586.827600][T31958] random: crng reseeded on system resumption [ 1587.496122][T31983] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4851'. [ 1587.568593][T31983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.576230][T31983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.010664][T31989] ACPI: Can not change Invalid GPE/Fixed Event status [ 1588.066698][T31991] FAULT_INJECTION: forcing a failure. [ 1588.066698][T31991] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.183714][T31991] CPU: 0 UID: 0 PID: 31991 Comm: syz.6.4854 Tainted: G U syzkaller #0 PREEMPT(full) [ 1588.183741][T31991] Tainted: [U]=USER [ 1588.183747][T31991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1588.183757][T31991] Call Trace: [ 1588.183763][T31991] [ 1588.183769][T31991] dump_stack_lvl+0x16c/0x1f0 [ 1588.183796][T31991] should_fail_ex+0x512/0x640 [ 1588.183811][T31991] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1588.183834][T31991] should_failslab+0xc2/0x120 [ 1588.183849][T31991] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1588.183868][T31991] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 1588.183891][T31991] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 1588.183909][T31991] mem_cgroup_css_alloc+0xa8f/0x1e80 [ 1588.183934][T31991] cgroup_apply_control_enable+0x4b0/0xbb0 [ 1588.183963][T31991] cgroup_mkdir+0x5e0/0x12e0 [ 1588.183983][T31991] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1588.184003][T31991] kernfs_iop_mkdir+0x111/0x190 [ 1588.184018][T31991] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1588.184039][T31991] vfs_mkdir+0x593/0x8c0 [ 1588.184058][T31991] do_mkdirat+0x304/0x3e0 [ 1588.184079][T31991] ? __pfx_do_mkdirat+0x10/0x10 [ 1588.184102][T31991] ? getname_flags.part.0+0x1c5/0x550 [ 1588.184120][T31991] __x64_sys_mkdir+0xef/0x140 [ 1588.184141][T31991] do_syscall_64+0xcd/0xfa0 [ 1588.184163][T31991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.184178][T31991] RIP: 0033:0x7f563e38efc9 [ 1588.184190][T31991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1588.184204][T31991] RSP: 002b:00007f563f205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1588.184219][T31991] RAX: ffffffffffffffda RBX: 00007f563e5e5fa0 RCX: 00007f563e38efc9 [ 1588.184229][T31991] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1588.184238][T31991] RBP: 00007f563e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1588.184246][T31991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.184255][T31991] R13: 00007f563e5e6038 R14: 00007f563e5e5fa0 R15: 00007fff01bb6a38 [ 1588.184274][T31991] [ 1588.397169][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.675005][T31986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1588.718485][T31986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1588.747330][T31986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1588.785853][T31986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1589.233946][T32003] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 1589.304848][T32003] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1589.349548][T32003] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1589.389745][T32003] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1589.469566][T32003] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 1589.607128][T32003] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1589.688077][T32003] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 1589.727488][T32018] FAULT_INJECTION: forcing a failure. [ 1589.727488][T32018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1589.868288][T32018] CPU: 0 UID: 0 PID: 32018 Comm: syz.0.4860 Tainted: G U syzkaller #0 PREEMPT(full) [ 1589.868315][T32018] Tainted: [U]=USER [ 1589.868320][T32018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1589.868329][T32018] Call Trace: [ 1589.868335][T32018] [ 1589.868342][T32018] dump_stack_lvl+0x16c/0x1f0 [ 1589.868370][T32018] should_fail_ex+0x512/0x640 [ 1589.868387][T32018] should_fail_alloc_page+0xe7/0x130 [ 1589.868404][T32018] prepare_alloc_pages+0x3c2/0x610 [ 1589.868422][T32018] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1589.868449][T32018] ? mas_find+0x156/0x6d0 [ 1589.868463][T32018] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1589.868481][T32018] ? validate_mm+0x403/0x560 [ 1589.868501][T32018] ? __pfx_validate_mm+0x10/0x10 [ 1589.868523][T32018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1589.868541][T32018] ? vma_wants_writenotify+0x10b/0x390 [ 1589.868560][T32018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1589.868579][T32018] ? policy_nodemask+0xea/0x4e0 [ 1589.868595][T32018] alloc_pages_mpol+0x1fb/0x550 [ 1589.868610][T32018] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1589.868629][T32018] alloc_pages_noprof+0x131/0x390 [ 1589.868644][T32018] __pmd_alloc+0x3b/0x8b0 [ 1589.868658][T32018] ? find_held_lock+0x2b/0x80 [ 1589.868679][T32018] __handle_mm_fault+0xada/0x2aa0 [ 1589.868701][T32018] ? __pfx___handle_mm_fault+0x10/0x10 [ 1589.868734][T32018] handle_mm_fault+0x589/0xd10 [ 1589.868754][T32018] __get_user_pages+0x54e/0x3530 [ 1589.868778][T32018] ? __pfx___get_user_pages+0x10/0x10 [ 1589.868797][T32018] populate_vma_page_range+0x267/0x3f0 [ 1589.868814][T32018] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1589.868829][T32018] ? __pfx_find_vma_intersection+0x10/0x10 [ 1589.868852][T32018] ? do_mmap+0x69c/0x1210 [ 1589.868867][T32018] __mm_populate+0x1d8/0x380 [ 1589.868883][T32018] ? __pfx___mm_populate+0x10/0x10 [ 1589.868899][T32018] ? up_write+0x1b2/0x520 [ 1589.868917][T32018] vm_mmap_pgoff+0x37f/0x470 [ 1589.868933][T32018] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1589.868950][T32018] ? __x64_sys_futex+0x1e0/0x4c0 [ 1589.868964][T32018] ? __x64_sys_futex+0x1e9/0x4c0 [ 1589.868981][T32018] ksys_mmap_pgoff+0x7d/0x5c0 [ 1589.868994][T32018] ? xfd_validate_state+0x61/0x180 [ 1589.869012][T32018] __x64_sys_mmap+0x125/0x190 [ 1589.869030][T32018] do_syscall_64+0xcd/0xfa0 [ 1589.869053][T32018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.869068][T32018] RIP: 0033:0x7f4b99b8efc9 [ 1589.869080][T32018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1589.869094][T32018] RSP: 002b:00007f4b9aa27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1589.869108][T32018] RAX: ffffffffffffffda RBX: 00007f4b99de6090 RCX: 00007f4b99b8efc9 [ 1589.869118][T32018] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1589.869127][T32018] RBP: 00007f4b99c11f91 R08: ffffffffffffffff R09: 0000000000008000 [ 1589.869136][T32018] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1589.869146][T32018] R13: 00007f4b99de6128 R14: 00007f4b99de6090 R15: 00007ffc6981dd88 [ 1589.869166][T32018] [ 1590.173655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1590.182691][T32003] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1590.191540][T32003] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1590.200381][T32003] page dumped because: unmovable page [ 1590.205743][T32003] page_owner tracks the page as allocated [ 1590.211610][T32003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 29607, tgid 29607 (syz.3.4333), ts 1440357365957, free_ts 1440353460474 [ 1590.231644][T32003] post_alloc_hook+0x1c0/0x230 [ 1590.236847][T32003] get_page_from_freelist+0x10a3/0x3a30 [ 1590.242502][T32003] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1590.248450][T32003] alloc_pages_mpol+0x1fb/0x550 [ 1590.253399][T32003] alloc_pages_noprof+0x131/0x390 [ 1590.258446][T32003] skb_page_frag_refill+0x186/0x5c0 [ 1590.263767][T32003] try_fill_recv+0x7e4/0x2930 [ 1590.268444][T32003] virtnet_poll+0x1e11/0x3c10 [ 1590.273167][T32003] __napi_poll.constprop.0+0xba/0x550 [ 1590.278622][T32003] net_rx_action+0x97f/0xef0 [ 1590.283664][T32003] handle_softirqs+0x219/0x8e0 [ 1590.288432][T32003] __irq_exit_rcu+0x109/0x170 [ 1590.293406][T32003] irq_exit_rcu+0x9/0x30 [ 1590.297703][T32003] common_interrupt+0xbf/0xe0 [ 1590.302537][T32003] asm_common_interrupt+0x26/0x40 [ 1590.307623][T32003] page last free pid 25324 tgid 25324 stack trace: [ 1590.314171][T32003] __free_frozen_pages+0x7df/0x1160 [ 1590.319467][T32003] __put_partials+0x130/0x170 [ 1590.324166][T32003] qlist_free_all+0x4d/0x120 [ 1590.328798][T32003] kasan_quarantine_reduce+0x195/0x1e0 [ 1590.334686][T32003] __kasan_slab_alloc+0x69/0x90 [ 1590.339648][T32003] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1590.345185][T32003] getname_flags.part.0+0x4c/0x550 [ 1590.350358][T32003] getname_flags+0x93/0xf0 [ 1590.354768][T32003] user_path_at+0x24/0x60 [ 1590.359144][T32003] __x64_sys_umount+0x10a/0x1a0 [ 1590.364041][T32003] do_syscall_64+0xcd/0xfa0 [ 1590.368561][T32003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.609474][T29523] Bluetooth: hci4: command 0x0c1a tx timeout [ 1590.946867][T29523] Bluetooth: hci0: command 0x0c1a tx timeout [ 1590.954268][T29523] Bluetooth: hci3: command 0x0c1a tx timeout [ 1590.960617][T29523] Bluetooth: hci2: command 0x0c1a tx timeout [ 1591.056842][T31960] kexec: Could not allocate control_code_buffer [ 1592.372490][T32051] FAULT_INJECTION: forcing a failure. [ 1592.372490][T32051] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.451411][T32051] CPU: 0 UID: 0 PID: 32051 Comm: syz.0.4866 Tainted: G U syzkaller #0 PREEMPT(full) [ 1592.451438][T32051] Tainted: [U]=USER [ 1592.451444][T32051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1592.451454][T32051] Call Trace: [ 1592.451460][T32051] [ 1592.451468][T32051] dump_stack_lvl+0x16c/0x1f0 [ 1592.451495][T32051] should_fail_ex+0x512/0x640 [ 1592.451513][T32051] should_failslab+0xc2/0x120 [ 1592.451529][T32051] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1592.451549][T32051] ? skb_clone+0x190/0x3f0 [ 1592.451567][T32051] ? skb_clone+0x190/0x3f0 [ 1592.451579][T32051] skb_clone+0x190/0x3f0 [ 1592.451593][T32051] netlink_deliver_tap+0xabd/0xd30 [ 1592.451621][T32051] netlink_unicast+0x71f/0x870 [ 1592.451638][T32051] ? __pfx_netlink_unicast+0x10/0x10 [ 1592.451652][T32051] ? idr_get_next+0xec/0x150 [ 1592.451677][T32051] ctrl_getfamily+0x40a/0x540 [ 1592.451695][T32051] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1592.451712][T32051] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1592.451729][T32051] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1592.451751][T32051] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1592.451770][T32051] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1592.451786][T32051] ? genl_get_cmd+0x194/0x580 [ 1592.451807][T32051] ? __radix_tree_lookup+0x21f/0x2c0 [ 1592.451829][T32051] genl_rcv_msg+0x55c/0x800 [ 1592.451847][T32051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1592.451864][T32051] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1592.451888][T32051] netlink_rcv_skb+0x158/0x420 [ 1592.451902][T32051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1592.451919][T32051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1592.451941][T32051] ? netlink_deliver_tap+0x1ae/0xd30 [ 1592.451966][T32051] genl_rcv+0x28/0x40 [ 1592.451980][T32051] netlink_unicast+0x5aa/0x870 [ 1592.451997][T32051] ? __pfx_netlink_unicast+0x10/0x10 [ 1592.452018][T32051] netlink_sendmsg+0x8c8/0xdd0 [ 1592.452036][T32051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.452052][T32051] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1592.452082][T32051] __sys_sendto+0x4a3/0x520 [ 1592.452104][T32051] ? __pfx___sys_sendto+0x10/0x10 [ 1592.452131][T32051] ? find_held_lock+0x2b/0x80 [ 1592.452166][T32051] __x64_sys_sendto+0xe0/0x1c0 [ 1592.452185][T32051] ? do_syscall_64+0x91/0xfa0 [ 1592.452206][T32051] ? lockdep_hardirqs_on+0x7c/0x110 [ 1592.452226][T32051] do_syscall_64+0xcd/0xfa0 [ 1592.452248][T32051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.452263][T32051] RIP: 0033:0x7f4b99b90e5c [ 1592.452276][T32051] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1592.452290][T32051] RSP: 002b:00007f4b9aa46ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1592.452306][T32051] RAX: ffffffffffffffda RBX: 00007f4b9aa46fc0 RCX: 00007f4b99b90e5c [ 1592.452319][T32051] RDX: 000000000000001c RSI: 00007f4b9aa47010 RDI: 000000000000000d [ 1592.452330][T32051] RBP: 0000000000000000 R08: 00007f4b9aa46f14 R09: 000000000000000c [ 1592.452338][T32051] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 1592.452347][T32051] R13: 00007f4b9aa46f68 R14: 00007f4b9aa47010 R15: 0000000000000000 [ 1592.452367][T32051] [ 1592.767609][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.150635][T32061] netlink: 306 bytes leftover after parsing attributes in process `syz.3.4870'. [ 1593.400563][T32057] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1593.407138][T32057] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1593.459656][T32057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1593.465735][T32057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1593.675872][T32070] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1593.849714][T32071] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1594.812478][T29523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1594.822703][T29523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1594.831559][T29523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1594.839152][T29523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1594.847448][T29523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1595.508045][T29523] Bluetooth: hci2: command 0x0c1a tx timeout [ 1595.514260][T27983] Bluetooth: hci0: command 0x0c1a tx timeout [ 1595.520380][T27976] Bluetooth: hci3: command 0x0c1a tx timeout [ 1596.074724][T28013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.156697][T32096] could not allocate digest TFM handle [ 1596.372456][T28013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.545063][T32110] netlink: 268 bytes leftover after parsing attributes in process `syz.6.4880'. [ 1596.740346][T28013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.940217][T27983] Bluetooth: hci1: command tx timeout [ 1597.131302][T28013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.271227][T32091] chnl_net:caif_netlink_parms(): no params data found [ 1597.931924][T32091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.983606][T32091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.021012][T32091] bridge_slave_0: entered allmulticast mode [ 1598.061680][T32091] bridge_slave_0: entered promiscuous mode [ 1598.104528][T32091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.144493][T32091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.169247][T32091] bridge_slave_1: entered allmulticast mode [ 1598.208304][T32091] bridge_slave_1: entered promiscuous mode [ 1598.241361][T28013] bridge_slave_1: left allmulticast mode [ 1598.252947][T28013] bridge_slave_1: left promiscuous mode [ 1598.282972][T28013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.313626][T28013] bridge_slave_0: left allmulticast mode [ 1598.344545][T28013] bridge_slave_0: left promiscuous mode [ 1598.370887][T28013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.019464][T27983] Bluetooth: hci1: command tx timeout [ 1599.430690][T32160] random: crng reseeded on system resumption [ 1599.875946][T32164] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81654e6a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 1599.891831][T32164] Call Trace: [ 1599.895106][T32164] [ 1599.898027][T32164] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 1599.904693][T32164] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1599.910501][T32164] ? debug_object_deactivate+0x1ec/0x3a0 [ 1599.916144][T32164] mce_cpu_restart+0xd9/0x1f0 [ 1599.920834][T32164] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1599.926221][T32164] smp_call_function_many_cond+0x122a/0x1600 [ 1599.932217][T32164] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1599.937502][T32164] ? mark_held_locks+0x49/0x80 [ 1599.942256][T32164] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1599.948068][T32164] ? lockdep_hardirqs_on+0x7c/0x110 [ 1599.953277][T32164] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1599.959089][T32164] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1599.965413][T32164] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1599.971392][T32164] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1599.976670][T32164] on_each_cpu_cond_mask+0x40/0x90 [ 1599.981782][T32164] set_bank+0x240/0x3a0 [ 1599.985933][T32164] ? __pfx_set_bank+0x10/0x10 [ 1599.990602][T32164] ? find_held_lock+0x2b/0x80 [ 1599.995569][T32164] ? __pfx_set_bank+0x10/0x10 [ 1600.000418][T32164] dev_attr_store+0x58/0x80 [ 1600.004919][T32164] ? __pfx_dev_attr_store+0x10/0x10 [ 1600.010125][T32164] sysfs_kf_write+0xf2/0x150 [ 1600.014727][T32164] kernfs_fop_write_iter+0x3af/0x570 [ 1600.020101][T32164] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1600.025315][T32164] vfs_write+0x7d3/0x11d0 [ 1600.029652][T32164] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1600.035477][T32164] ? __pfx___mutex_lock+0x10/0x10 [ 1600.040488][T32164] ? __pfx_vfs_write+0x10/0x10 [ 1600.045256][T32164] ksys_write+0x12a/0x250 [ 1600.049577][T32164] ? __pfx_ksys_write+0x10/0x10 [ 1600.054428][T32164] do_syscall_64+0xcd/0xfa0 [ 1600.058929][T32164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.064822][T32164] RIP: 0033:0x7f4b99b8efc9 [ 1600.069227][T32164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.088912][T32164] RSP: 002b:00007f4b9aa27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1600.097314][T32164] RAX: ffffffffffffffda RBX: 00007f4b99de6090 RCX: 00007f4b99b8efc9 [ 1600.105269][T32164] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 1600.113224][T32164] RBP: 00007f4b99c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1600.121181][T32164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.129137][T32164] R13: 00007f4b99de6128 R14: 00007f4b99de6090 R15: 00007ffc6981dd88 [ 1600.137105][T32164] [ 1600.140288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1600.810459][T28013]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.840090][T28013] bond_slave_0: left allmulticast mode [ 1600.856898][T28013]  (unregistering): Released all slaves [ 1601.099756][T27983] Bluetooth: hci1: command tx timeout [ 1601.195784][T32091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.333549][T32091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.614587][T32091] team0: Port device team_slave_0 added [ 1601.652107][T32091] team0: Port device team_slave_1 added [ 1601.854861][T32091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.868425][T32183] QAT: Stopping all acceleration devices. [ 1601.886886][T32091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.912934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.044364][T32091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.059239][T27983] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1602.059265][T27983] Bluetooth: hci3: unexpected subevent 0x0a length: 725 > 30 [ 1602.233317][T28013] veth1_vlan: left promiscuous mode [ 1602.270280][T28013] veth0_vlan: left promiscuous mode [ 1603.180508][T29523] Bluetooth: hci1: command tx timeout [ 1603.842235][T28013] team0 (unregistering): Port device team_slave_1 removed [ 1603.959751][T28013] team0 (unregistering): Port device team_slave_0 removed [ 1604.914711][T32091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.926352][T32091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.952336][ C0] vkms_vblank_simulate: vblank timer overrun [ 1605.000349][T32091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.295729][T32091] hsr_slave_0: entered promiscuous mode [ 1605.317429][T32091] hsr_slave_1: entered promiscuous mode [ 1607.433966][T32091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1607.493029][T32091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1607.552593][T32091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1607.614762][T32091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1607.640754][T32233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1607.672846][T32233] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1607.731317][T32233] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1607.737371][T32233] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1607.799564][T32233] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1608.019967][T32233] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1608.426125][T32091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.613427][T32091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.703158][T28025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.710609][T28025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.780939][T28025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.788107][T28025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.019537][T29523] Bluetooth: hci3: command 0x0c1a tx timeout [ 1609.172967][T32091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1609.255750][T32091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1609.660229][T29523] Bluetooth: hci0: command 0x0c1a tx timeout [ 1609.781404][T32284] ================================================================== [ 1609.789702][T32284] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 1609.797423][T32284] Read of size 8 at addr ffff888140bc5418 by task syz.0.4900/32284 [ 1609.805307][T32284] [ 1609.807623][T32284] CPU: 0 UID: 0 PID: 32284 Comm: syz.0.4900 Tainted: G U syzkaller #0 PREEMPT(full) [ 1609.807646][T32284] Tainted: [U]=USER [ 1609.807652][T32284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1609.807662][T32284] Call Trace: [ 1609.807671][T32284] [ 1609.807677][T32284] dump_stack_lvl+0x116/0x1f0 [ 1609.807703][T32284] print_report+0xcd/0x630 [ 1609.807717][T32284] ? __virt_addr_valid+0x81/0x610 [ 1609.807731][T32284] ? __phys_addr+0xe8/0x180 [ 1609.807745][T32284] ? dvb_device_open+0x36a/0x3b0 [ 1609.807763][T32284] kasan_report+0xe0/0x110 [ 1609.807782][T32284] ? dvb_device_open+0x36a/0x3b0 [ 1609.807801][T32284] ? __pfx_dvb_device_open+0x10/0x10 [ 1609.807819][T32284] dvb_device_open+0x36a/0x3b0 [ 1609.807837][T32284] ? __pfx_dvb_device_open+0x10/0x10 [ 1609.807855][T32284] chrdev_open+0x234/0x6a0 [ 1609.807876][T32284] ? __pfx_apparmor_file_open+0x10/0x10 [ 1609.807892][T32284] ? __pfx_chrdev_open+0x10/0x10 [ 1609.807913][T32284] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1609.807934][T32284] do_dentry_open+0x982/0x1530 [ 1609.807955][T32284] ? __pfx_chrdev_open+0x10/0x10 [ 1609.807978][T32284] vfs_open+0x82/0x3f0 [ 1609.807993][T32284] path_openat+0x1de4/0x2cb0 [ 1609.808015][T32284] ? __pfx_path_openat+0x10/0x10 [ 1609.808034][T32284] ? __lock_acquire+0xb8a/0x1c90 [ 1609.808050][T32284] do_filp_open+0x20b/0x470 [ 1609.808069][T32284] ? __pfx_do_filp_open+0x10/0x10 [ 1609.808094][T32284] ? alloc_fd+0x471/0x7d0 [ 1609.808114][T32284] do_sys_openat2+0x11b/0x1d0 [ 1609.808129][T32284] ? __pfx_do_sys_openat2+0x10/0x10 [ 1609.808144][T32284] ? find_held_lock+0x2b/0x80 [ 1609.808165][T32284] __x64_sys_openat+0x174/0x210 [ 1609.808180][T32284] ? __pfx___x64_sys_openat+0x10/0x10 [ 1609.808199][T32284] do_syscall_64+0xcd/0xfa0 [ 1609.808221][T32284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.808236][T32284] RIP: 0033:0x7f4b99b8efc9 [ 1609.808249][T32284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.808265][T32284] RSP: 002b:00007f4b9aa48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1609.808279][T32284] RAX: ffffffffffffffda RBX: 00007f4b99de5fa0 RCX: 00007f4b99b8efc9 [ 1609.808289][T32284] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1609.808299][T32284] RBP: 00007f4b99c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1609.808309][T32284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.808319][T32284] R13: 00007f4b99de6038 R14: 00007f4b99de5fa0 R15: 00007ffc6981dd88 [ 1609.808334][T32284] [ 1609.808339][T32284] [ 1610.066282][T32284] Allocated by task 1: [ 1610.070345][T32284] kasan_save_stack+0x33/0x60 [ 1610.075051][T32284] kasan_save_track+0x14/0x30 [ 1610.079725][T32284] __kasan_kmalloc+0xaa/0xb0 [ 1610.084311][T32284] dvb_register_device+0x1e4/0x2370 [ 1610.089498][T32284] dvb_register_frontend+0x5a6/0x880 [ 1610.094770][T32284] vidtv_bridge_probe+0x459/0xa90 [ 1610.099780][T32284] platform_probe+0x106/0x1d0 [ 1610.104445][T32284] really_probe+0x241/0xa90 [ 1610.108944][T32284] __driver_probe_device+0x1de/0x440 [ 1610.114660][T32284] driver_probe_device+0x4c/0x1b0 [ 1610.119676][T32284] __driver_attach+0x283/0x580 [ 1610.124462][T32284] bus_for_each_dev+0x13e/0x1d0 [ 1610.129302][T32284] bus_add_driver+0x2e9/0x690 [ 1610.133966][T32284] driver_register+0x15c/0x4b0 [ 1610.138720][T32284] vidtv_bridge_init+0x45/0x80 [ 1610.143473][T32284] do_one_initcall+0x123/0x6e0 [ 1610.148222][T32284] kernel_init_freeable+0x5c8/0x920 [ 1610.153409][T32284] kernel_init+0x1c/0x2b0 [ 1610.157737][T32284] ret_from_fork+0x675/0x7d0 [ 1610.162336][T32284] ret_from_fork_asm+0x1a/0x30 [ 1610.167092][T32284] [ 1610.169410][T32284] Freed by task 32070: [ 1610.173477][T32284] kasan_save_stack+0x33/0x60 [ 1610.178151][T32284] kasan_save_track+0x14/0x30 [ 1610.182822][T32284] __kasan_save_free_info+0x3b/0x60 [ 1610.188018][T32284] __kasan_slab_free+0x5f/0x80 [ 1610.192780][T32284] kfree+0x2b8/0x6d0 [ 1610.196659][T32284] dvb_device_put.part.0+0x60/0x90 [ 1610.201845][T32284] dvb_device_open+0x2a4/0x3b0 [ 1610.206600][T32284] chrdev_open+0x234/0x6a0 [ 1610.211010][T32284] do_dentry_open+0x982/0x1530 [ 1610.215795][T32284] vfs_open+0x82/0x3f0 [ 1610.219851][T32284] path_openat+0x1de4/0x2cb0 [ 1610.224432][T32284] do_filp_open+0x20b/0x470 [ 1610.228924][T32284] do_sys_openat2+0x11b/0x1d0 [ 1610.233621][T32284] __x64_sys_openat+0x174/0x210 [ 1610.238468][T32284] do_syscall_64+0xcd/0xfa0 [ 1610.243001][T32284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.248903][T32284] [ 1610.251300][T32284] The buggy address belongs to the object at ffff888140bc5400 [ 1610.251300][T32284] which belongs to the cache kmalloc-256 of size 256 [ 1610.265712][T32284] The buggy address is located 24 bytes inside of [ 1610.265712][T32284] freed 256-byte region [ffff888140bc5400, ffff888140bc5500) [ 1610.279429][T32284] [ 1610.281762][T32284] The buggy address belongs to the physical page: [ 1610.288162][T32284] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888140bc5400 pfn:0x140bc4 [ 1610.298572][T32284] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1610.307336][T32284] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 1610.316097][T32284] page_type: f5(slab) [ 1610.320079][T32284] raw: 057ff00000000240 ffff88813ffa6b40 ffff888140400708 ffffea000535e310 [ 1610.328650][T32284] raw: ffff888140bc5400 000000000010000f 00000000f5000000 0000000000000000 [ 1610.339180][T32284] head: 057ff00000000240 ffff88813ffa6b40 ffff888140400708 ffffea000535e310 [ 1610.347878][T32284] head: ffff888140bc5400 000000000010000f 00000000f5000000 0000000000000000 [ 1610.356547][T32284] head: 057ff00000000001 ffffea000502f101 00000000ffffffff 00000000ffffffff [ 1610.365207][T32284] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1610.373861][T32284] page dumped because: kasan: bad access detected [ 1610.380257][T32284] page_owner tracks the page as allocated [ 1610.385962][T32284] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19435539342, free_ts 0 [ 1610.405745][T32284] post_alloc_hook+0x1c0/0x230 [ 1610.410502][T32284] get_page_from_freelist+0x10a3/0x3a30 [ 1610.416037][T32284] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1610.422003][T32284] alloc_pages_mpol+0x1fb/0x550 [ 1610.427024][T32284] new_slab+0x24a/0x360 [ 1610.431182][T32284] ___slab_alloc+0xdc4/0x1ae0 [ 1610.435913][T32284] __slab_alloc.constprop.0+0x63/0x110 [ 1610.441376][T32284] __kmalloc_cache_noprof+0x477/0x780 [ 1610.446749][T32284] bus_add_driver+0x92/0x690 [ 1610.451334][T32284] driver_register+0x15c/0x4b0 [ 1610.456098][T32284] usb_register_driver+0x216/0x4d0 [ 1610.461190][T32284] sd_mod_init+0x1e/0x30 [ 1610.465438][T32284] do_one_initcall+0x123/0x6e0 [ 1610.470203][T32284] kernel_init_freeable+0x5c8/0x920 [ 1610.475444][T32284] kernel_init+0x1c/0x2b0 [ 1610.479777][T32284] ret_from_fork+0x675/0x7d0 [ 1610.484357][T32284] page_owner free stack trace missing [ 1610.489710][T32284] [ 1610.492028][T32284] Memory state around the buggy address: [ 1610.497731][T32284] ffff888140bc5300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1610.505799][T32284] ffff888140bc5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1610.513958][T32284] >ffff888140bc5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1610.522002][T32284] ^ [ 1610.526850][T32284] ffff888140bc5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1610.535056][T32284] ffff888140bc5500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1610.543196][T32284] ================================================================== [ 1610.551364][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1610.640124][T29523] Bluetooth: hci1: command 0x0c1a tx timeout [ 1610.646647][T29523] Bluetooth: hci2: command 0x0c1a tx timeout [ 1611.834775][T32284] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1611.842004][T32284] CPU: 0 UID: 0 PID: 32284 Comm: syz.0.4900 Tainted: G U syzkaller #0 PREEMPT(full) [ 1611.852927][T32284] Tainted: [U]=USER [ 1611.856712][T32284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1611.866748][T32284] Call Trace: [ 1611.870013][T32284] [ 1611.872926][T32284] dump_stack_lvl+0x3d/0x1f0 [ 1611.877536][T32284] vpanic+0x640/0x6f0 [ 1611.881503][T32284] panic+0xca/0xd0 [ 1611.885211][T32284] ? __pfx_panic+0x10/0x10 [ 1611.889618][T32284] ? dvb_device_open+0x36a/0x3b0 [ 1611.894722][T32284] ? preempt_schedule_common+0x44/0xc0 [ 1611.900172][T32284] ? preempt_schedule_thunk+0x16/0x30 [ 1611.905532][T32284] check_panic_on_warn+0xab/0xb0 [ 1611.910456][T32284] end_report+0x107/0x170 [ 1611.914781][T32284] kasan_report+0xee/0x110 [ 1611.919273][T32284] ? dvb_device_open+0x36a/0x3b0 [ 1611.924200][T32284] ? __pfx_dvb_device_open+0x10/0x10 [ 1611.929474][T32284] dvb_device_open+0x36a/0x3b0 [ 1611.934225][T32284] ? __pfx_dvb_device_open+0x10/0x10 [ 1611.939497][T32284] chrdev_open+0x234/0x6a0 [ 1611.943906][T32284] ? __pfx_apparmor_file_open+0x10/0x10 [ 1611.949438][T32284] ? __pfx_chrdev_open+0x10/0x10 [ 1611.954375][T32284] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1611.960692][T32284] do_dentry_open+0x982/0x1530 [ 1611.965449][T32284] ? __pfx_chrdev_open+0x10/0x10 [ 1611.970381][T32284] vfs_open+0x82/0x3f0 [ 1611.974436][T32284] path_openat+0x1de4/0x2cb0 [ 1611.979106][T32284] ? __pfx_path_openat+0x10/0x10 [ 1611.984035][T32284] ? __lock_acquire+0xb8a/0x1c90 [ 1611.988960][T32284] do_filp_open+0x20b/0x470 [ 1611.993452][T32284] ? __pfx_do_filp_open+0x10/0x10 [ 1611.998472][T32284] ? alloc_fd+0x471/0x7d0 [ 1612.002796][T32284] do_sys_openat2+0x11b/0x1d0 [ 1612.007460][T32284] ? __pfx_do_sys_openat2+0x10/0x10 [ 1612.012653][T32284] ? find_held_lock+0x2b/0x80 [ 1612.017322][T32284] __x64_sys_openat+0x174/0x210 [ 1612.022159][T32284] ? __pfx___x64_sys_openat+0x10/0x10 [ 1612.027522][T32284] do_syscall_64+0xcd/0xfa0 [ 1612.032385][T32284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.038297][T32284] RIP: 0033:0x7f4b99b8efc9 [ 1612.042708][T32284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1612.062322][T32284] RSP: 002b:00007f4b9aa48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1612.070724][T32284] RAX: ffffffffffffffda RBX: 00007f4b99de5fa0 RCX: 00007f4b99b8efc9 [ 1612.078688][T32284] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1612.086649][T32284] RBP: 00007f4b99c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1612.094612][T32284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.102662][T32284] R13: 00007f4b99de6038 R14: 00007f4b99de5fa0 R15: 00007ffc6981dd88 [ 1612.110626][T32284] [ 1612.113720][T32284] Kernel Offset: disabled [ 1612.118054][T32284] Rebooting in 86400 seconds..