last executing test programs: 2m37.983319572s ago: executing program 1 (id=321): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd=0xffffffffffffffff, 0x8, 0x3, 0x6, 0xff, @count=0xe35c, 0x0, 0x5, 0x6, 0x6, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1) shutdown$auto(0x200000003, 0x2) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x40, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [@typed={0xfffffffffffffe86, 0x10, 0x0, 0x0, @ipv4=@local}, @nested={0x0, 0xa6, 0x0, 0x1, [@generic="b24b56106196a4aedf818e112de64d18a0f01e1dd18fd7de92367dab52705827b755a1efd1dc93a0d24a9c8df49b1e196074222a98e2827650aac00a5eae10467bc8c088d73bc00a7631fc674d47fd2871027b23b0b1d2566cb37a55739d362316ba99da35b11299ef16d4db533ed9aa6d6cdc03b31e21b0aac9228be7f4b808a218e8dc9944cf25098dc2db776a9e2986de2a43a522971a2480fdb4fcd3cb7658f6866bf34520a18fb55a83a98a68db8ccde63c3f8e302771ce972813af26b3dbb266c078c58e3f", @generic="5cc1398412060ac9a38d741a04453209b0ca16bb3b255a42d1682607a4e1711803912c49aa205cae2c1559205952055d7d0202040000004565a7720f1a189da4776f6e409dd25c16ebe6f4fbfdb531f7856ba3d2989920b45dfad3a654fb4c4659309e02b7ec"]}]}]}, 0x40}}, 0x20000040) r5 = gettid() process_vm_readv$auto(r5, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x240, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x50, 0xe8, "4133391fc2ab40911a95c08974219509fb240c3155bac09f9f4084eec63dcc286f93983104706fe6ad7aca2835af6b873a9cdb2fe261c47ab56230403baacdf70cc257ed43d8bdfa2f532f9d"}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7a}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x13b}, @NL80211_ATTR_EMA_RNR_ELEMS={0x1b0, 0x145, 0x0, 0x1, [@nested={0xf3, 0xc0, 0x0, 0x1, [@nested={0x4, 0xc1}, @nested={0x4, 0xf8}, @typed={0x4, 0x142}, @nested={0x4, 0x45}, @generic="48a8c0e626ba3362210eaac4955115ec5e06fd7857e88f7692c59326c17d2b6ba6fc8d5ec1398badec5dcd2b2d13c9db82493c95224586d820c618584c063b67dc96f7a2f26d0dca3a1a7f8dcbfe8c31babdd9376cf145f811fd0f3e8e7b5d1404247e9d5db939eadc68f1a8977cc424a5a8e70e38ebe9431fc86cc7210cbc17c31bf236faa6fb18790ee5f9a15d6b21d961084030360c24ab30f2b91cfb8dd419e91d669528083fde6f30da36b520fc26103b2bf37054383c090f03ce82d940fb5fdff3a486e0", @typed={0x8, 0x6d, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x147}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0xac}, @generic="930eef08532968192050e8bb06ec355b602b373b953fdca065d66f7a8f7fdba000cd91e8807970d06519d10549e8852ff4a4da89d52c1e2650ea7facfc363e22a603e74d0c9d8e20dbee58b6c7b43d79950fd55ac98f909d459b2452cb84686b51c45fd2416f341a8c8c7d8f0f43e73a1c711f15dec5e71c6ca3a41e82059e4f4ede6c39de4b2ceadc9128c1e76a14ad80e3fa53c709b018c57ca81fb0a1ff95acdc578542827f4ed58564adbd083e3257b9ba25"]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x8000}]}, 0x240}, 0x1, 0x0, 0x0, 0xde965ce439fc20fb}, 0x20004005) open(0x0, 0x22040, 0x75) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m37.504854585s ago: executing program 2 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, 0xffffffffffffffff, 0x10000}, 0x10) r1 = getpid() pipe2$auto(&(0x7f00000000c0), 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0) ioctl$auto_I2C_RDWR(r2, 0x707, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0xfffffffffffffffe}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x12) 2m37.119405311s ago: executing program 2 (id=326): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event1\x00', 0x523800, 0x0) ioctl$auto(r0, 0xc1004519, r0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xc00000000796, 0x9b72, r0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x3, 0x0, 0x1f40) (async) read$auto(0x4, 0x0, 0xfdef) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) (async) r1 = getpid() (async, rerun: 64) r2 = gettid() (rerun: 64) rt_tgsigqueueinfo$auto(r1, r2, 0x1f, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async, rerun: 64) socket(0x2, 0x1, 0x106) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 32) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 2m36.466681239s ago: executing program 1 (id=328): mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) (async) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) (async) sysfs$auto(0x2, 0x10000000000002a, 0x4000000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2404c004) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x5, 0x6, "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"}, 0x6, 0x3, 0xff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x4000000) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) mmap$auto(0xfffffffffffffff4, 0x1000040009, 0x8, 0x74, 0x7, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) (async) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0xb, 0x10000, 0x3133, 0x401, 0x8) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioperm$auto(0x3, 0x8001, 0x2000000000000149) (async) ioctl$auto(0xffffffffffffffff, 0x401070cd, 0x5) (async) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) 2m36.161715287s ago: executing program 1 (id=330): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r1, 0x8000) syz_clone3(&(0x7f0000000a00)={0x8080000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0xf4, 0x0, 0x0, 0x0, {r2}}, 0x58) 2m36.061072623s ago: executing program 1 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x220000000000405, 0x401, 0x40000000000eb1, r0, 0x860) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0xfffffffffffff81f, 0x3, 0xffffffff7fffffff, 0xfffffffffffffffa, 0x8001) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0xffffffffffff6963, 0xde, 0x9b75, 0xffffffffffffffff, 0x1) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0xe349) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) msgrcv$auto(0x71, &(0x7f0000000040)={0x4, 0x3}, 0x59, 0x7fffffffffffffff, 0x5) msgrcv$auto(0x0, 0x0, 0x3, 0x1, 0xf1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00271ba60fe5d5", @ANYRES16=0x0, @ANYBLOB="010a2bbd7000fbdbdf250100000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20048090) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fbdbdf255a000000050074000400000008005200", @ANYRES32=0x0, @ANYBLOB="0441e301a405c278d60ad97338e9edaac6be07872c2a2987f925021cc504a587032fc48dc9952a295599c593b0bb5632063d6c6acf4fa0420cb63d569c2b90a6fa61c76c0f3d309833ed7e4065daf5df6141ece662e9e250e0d5664536215b78f264fae6a5f39c7ca3499270d536877567e8ae70da061951"], 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x4012) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto(r3, 0x5609, r4) msgrcv$auto(0x3, &(0x7f0000000080)={0x1, 0x5}, 0x8, 0x8, 0x848) 2m35.981141045s ago: executing program 2 (id=332): socket(0x10, 0x2, 0x4) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/nfsfs/servers\x00', 0x8000, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) socket(0xa, 0x1, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000101f, 0x7, 0x6d3e, 0xd786, 0x2, 0x6]}, 0x0) ioctl$auto(0xc8, 0x400454cb, 0x5) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x0, 0x4000500008, 0x1, 0x9b71, 0x2, 0x1) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0xfff, 0xf3b, 0x3, 0x16, r1, 0xffffffffffffffff) close_range$auto(r2, r3, 0x2) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x2, 0x0) r5 = epoll_create$auto(0x4) epoll_ctl$auto(r4, 0x1, r5, 0x0) epoll_ctl$auto(0x5, 0x2, 0x8000000000000000, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x4, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 2m35.450029322s ago: executing program 2 (id=333): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0) mmap$auto(0x2, 0x6, 0xdf, 0xfffffffffffffffd, 0x3fd, 0x7ffc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x100000000, 0x2020007, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) unshare$auto(0x40000080) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4a, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffff9, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) fcntl$auto(r0, 0x1, 0x0) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/mcfilter6\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) writev$auto(0xffffffffffffffff, 0x0, 0x9) fcntl$auto(r0, 0x400, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 2m33.656807564s ago: executing program 1 (id=336): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') open(0x0, 0x161342, 0x100) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, 0x0, 0x4c848) r1 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0xce24) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) socket(0x1e, 0x2, 0xc) 2m31.761914884s ago: executing program 1 (id=343): socket(0x21, 0x2, 0x2) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000040)=""/159, 0x9f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250a000000"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) fcntl$auto_F_SETLKW(r1, 0x7, 0x2) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) 2m20.144806661s ago: executing program 32 (id=333): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0) mmap$auto(0x2, 0x6, 0xdf, 0xfffffffffffffffd, 0x3fd, 0x7ffc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x100000000, 0x2020007, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) unshare$auto(0x40000080) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4a, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffff9, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) fcntl$auto(r0, 0x1, 0x0) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/mcfilter6\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) writev$auto(0xffffffffffffffff, 0x0, 0x9) fcntl$auto(r0, 0x400, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 2m16.44513746s ago: executing program 33 (id=343): socket(0x21, 0x2, 0x2) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000040)=""/159, 0x9f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250a000000"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) fcntl$auto_F_SETLKW(r1, 0x7, 0x2) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) 2m8.027266472s ago: executing program 3 (id=395): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x2, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0) mmap$auto(0x2000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x2, 0x6) epoll_create$auto(0x4) mq_open$auto(0x0, 0x5, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000201, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 2m6.061285594s ago: executing program 3 (id=398): r0 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index3/number_of_sets\x00', 0xc3280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/76, 0x4c) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9b) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) (async) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x6, 0xbb, 0x80, 0x40) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) bind$auto(0xffffffffffffffff, 0x0, 0x6e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1018, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0xfd}, [@NL80211_ATTR_MAC_HINT={0x1004, 0xc8, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x4004081}, 0x20048085) (async) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) r4 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)=0x2) ioctl$auto_I2C_SLAVE(r4, 0x703, &(0x7f0000000040)="ed7889442548984d252885ff74dc502fa4d29bdabc83d84a1dcea627b6a6d1547370309b65177ea457a7e0c7e335c9c243b227d19865ea9e0333f952e1278d8c3b5f802a2e92d1ae85e06fd5d8a3feb0880a10d55e7daf95ce3011f83eb03d2f46d12cd19b04184780a9f9d14d2f777a2e82fc3c89722f2d5f5e7dc548103dab45ab00144b8ee3d9ef0ed3148793ab10f85f11f138c649718c41db") 2m4.253559065s ago: executing program 3 (id=400): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x802) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x106) socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x400000003, 0x6, 0x0, 0x1, 0x5b8f5189, 0x2, {0x100000001, 0x10000}, 0x5, 0x6, 0xffffffffffffdffd, 0xffff0001, 0x0, 0x80000004, 0x81, 0xffffffffffff6291, 0xa745, 0xdeb1}) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x338) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) setsockopt$auto(0x3, 0x7, 0x4cfb9e28, 0x0, 0xc07) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r1 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D2\x00', 0x400101, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0xffffffffffffffff, 0x62, 0x80000001, 0x7, 0xd, 0x7, 0x1, 0xfffffffffffffffe]}, 0x0) 2m3.37336927s ago: executing program 3 (id=406): socket(0x29, 0x800, 0xfffffffd) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x8, 0x400008, 0x1ff, 0x9b76, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = socket(0x11, 0x80003, 0x300) socket(0x0, 0x80006, 0xd37) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x7fffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x20a00, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000100)=""/4096, 0x1000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x7, 0xdb, 0x12, r2, 0x4) prctl$auto(0xd6, 0x1ac, 0x0, 0x5, 0x10008007) userfaultfd$auto(0x1) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0845658, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x2) mincore$auto(0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x3, 0x300, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000001100)="322fcd9b8df4f5c84ab0423f66e3d893c3cfd0972fe5eaff53bd0d0087daea123f5539b3a74ce7e9d37aad24a662ebb7d1facc223a2d63fdffaf4728c533c66c7dedcffeb6e0b5a8b73a670e3fd20af4aae5996fda995e59aecf7be19da8d4844cf8fd2dde74cdb9abeec37d4577204d0aa5ecd680c1f0044aa2e96f6ac76a2206ec2095", 0x10, &(0x7f00000000c0)={0x0, 0x45ce}, 0x2, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x30d) 2m2.942498386s ago: executing program 3 (id=407): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) mremap$auto(0x3fff, 0xfee0, 0x3fd6, 0x3, 0x7) madvise$auto(0x0, 0xffffffffffff0002, 0x19) mbind$auto(0x1ffc, 0x100000004, 0x1000000100000000, 0x0, 0x6, 0x22) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) sendmmsg$auto(r2, 0x0, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) 1m59.170899114s ago: executing program 3 (id=422): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r1, 0x0, 0xfffffde9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0) socket(0x1f, 0x800, 0xffffff01) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4004000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8440, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x6482, 0x0) unshare$auto(0x40000080) socket(0xa, 0x801, 0x84) 1m56.365426343s ago: executing program 5 (id=429): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) mmap$auto(0xfffffffffffffffd, 0x4, 0x4, 0x15, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r2, r1, &(0x7f0000000000)=0x7, 0x8) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_FEATURES(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24004014}, 0x0) r4 = socket(0x26, 0x2, 0xffffffff) sendmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x7, &(0x7f0000000100)={0x0, 0xfc3}, 0x2, 0x0, 0x2000000000000007, 0xa505}, 0x10000009}, 0x6, 0x4008) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000040df, 0xeb2, 0xffffffffffffffff, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) readv$auto(r5, &(0x7f0000000080)={&(0x7f0000000000), 0x197188}, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b4c, 0x9) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r8 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r8, 0x0, 0x1f40) writev$auto(r7, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) setsockopt$auto(0x3, 0x1, 0x800, 0x0, 0x19) 1m55.986959487s ago: executing program 5 (id=431): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x2], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x9, 0x4, 0x6}, {0x7, 0x7, 0x2050, 0x85, 0x2, 0x1a7b870a, 0xffffffff, 0x8, 0x6}}) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x10000) mmap$auto(0x0, 0xe983, 0xdf, 0x5f5d8a55, 0x401, 0x2008000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video42\x00', 0x169000, 0x0) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x5, &(0x7f0000000180)=@test={0xffffffffffffffff, 0x0, 0xe, 0xff, 0x5, 0xee, 0x3, 0x3ff, 0x3, 0x5, 0x2000000000, 0x5, 0xaa21, 0x2, 0x9}, 0xbb26) ioctl$auto(r1, 0xc0845658, r1) socket(0xa, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x7fffffffffffffff, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x1d4) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$auto(r6, 0x0, 0x24, 0x0, 0x9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) mmap$auto(0x8, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80802, 0x0) io_uring_setup$auto(0xffffffff, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 1m54.711882044s ago: executing program 5 (id=434): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r1, 0x8000) syz_clone3(&(0x7f0000000a00)={0x8080000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 1m54.058799832s ago: executing program 5 (id=436): r0 = socket(0x10, 0x800, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x40814}, 0x400c000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xffff) r1 = socket(0x10, 0x2, 0xc) openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x301201, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/uprobe_events\x00', 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) mmap$auto(0x5, 0xfffffffffffffffc, 0x5, 0x13, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x3fb, 0x0, 0x4, 0x909) open(&(0x7f0000000100)='./bus\x00', 0x14907e, 0x72) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) socket(0x1e, 0x1, 0x0) socket(0x305153ad944199f, 0x2, 0x2) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x8001ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x3ff, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000080)='/dicZ\x05`A\xe6!\x00'/22, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0xc1, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/maps\x00', 0x30000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e1, 0x91) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) 1m51.632429361s ago: executing program 5 (id=441): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy9/rc/name\x00', 0x2, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r0, &(0x7f00000000c0)="36e775cae526417cb9eaa79aaa790f2298e30f20bd6d4513887692959f36b3c926a9b5ee2538e0a879960c6ea1fe39fda1e4e30c82d32c235e1bacbfc422309f8fc0f6952820918c058effcb0e987e46596654a4b1fd292cd7abc204defba8e776000fdce0169aa09508d705bb24ef525585f3209b07f7c408a9fe8f3e2edbee431420ff1f255ae55f17", 0x8a) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r2, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d01, 0x400, 0x1}]}) 1m50.568750493s ago: executing program 5 (id=447): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, 0x0, 0x0) read$auto(r1, &(0x7f0000000180)=':\x00\xe6\xc2\xb1\xbf\xbcuh\x90\x9c\xb9\xff\xd5\x82r&', 0x9) io_uring_setup$auto(0x9f2b, 0x0) mmap$auto(0x9, 0x20020009, 0x10000000df, 0x8000000000000010, r0, 0x7f) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x700000000000000) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r3, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r5 = open(0x0, 0x0, 0x408) fchown$auto(r5, 0x0, 0x0) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x6, 0x948b, 0xbdb, 0x15f4da02, 0xff, 0x40000003, 0xfffffffffffffffc, 0x8000001e, 0x7, 0x6d3e, 0x9, 0x2, 0x6b1d]}, 0x0) socket(0xa, 0x1, 0x6) socket(0xa, 0x800, 0x6) 1m43.982501098s ago: executing program 34 (id=422): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r1, 0x0, 0xfffffde9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0) socket(0x1f, 0x800, 0xffffff01) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4004000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8440, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x6482, 0x0) unshare$auto(0x40000080) socket(0xa, 0x801, 0x84) 1m35.449796348s ago: executing program 35 (id=447): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, 0x0, 0x0) read$auto(r1, &(0x7f0000000180)=':\x00\xe6\xc2\xb1\xbf\xbcuh\x90\x9c\xb9\xff\xd5\x82r&', 0x9) io_uring_setup$auto(0x9f2b, 0x0) mmap$auto(0x9, 0x20020009, 0x10000000df, 0x8000000000000010, r0, 0x7f) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x700000000000000) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r3, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r5 = open(0x0, 0x0, 0x408) fchown$auto(r5, 0x0, 0x0) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x6, 0x948b, 0xbdb, 0x15f4da02, 0xff, 0x40000003, 0xfffffffffffffffc, 0x8000001e, 0x7, 0x6d3e, 0x9, 0x2, 0x6b1d]}, 0x0) socket(0xa, 0x1, 0x6) socket(0xa, 0x800, 0x6) 1m21.468175411s ago: executing program 0 (id=508): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000180)={{@raw=0x2, 0x0, 0x10, 0x3, "3efa034f8e23cba217a54803506c9a36215d9c4689b64e83c0c7fd7336ea238b9ac1cd48f5a74070e8d4972d", @raw=0xf8}, 0x0, @enumerated=@item=[0x9, 0xa9, 0xe00000, 0x4a, 0x93, 0x1, 0x7, 0x1, 0x80000000, 0x6, 0x0, 0x8590, 0x9, 0xe9a7, 0x4, 0x400, 0x7, 0xd456, 0x4, 0xe348, 0x8, 0x8001, 0x80000000, 0x0, 0xf6, 0xfffffff7, 0x39, 0x4, 0x6, 0x1, 0x1, 0x5, 0x78ef, 0xe, 0x4, 0xfffffffc, 0x201d809c, 0xfffffffa, 0xffffffff, 0x8, 0x5, 0x0, 0x3, 0xa, 0xd, 0x7f, 0x1, 0x1, 0x5, 0xfffffff9, 0x6, 0x5, 0x3, 0x0, 0x2, 0x4, 0xc, 0x7, 0x0, 0xb, 0x10000, 0xffff8001, 0x2, 0x8, 0x0, 0x2, 0xa8, 0x800, 0x0, 0x6, 0x7ff, 0x6, 0x1, 0x1ff, 0x7, 0xa0, 0x4, 0x5, 0x6, 0xf87, 0x5, 0x4, 0x2, 0x7, 0x7, 0x6, 0x7fffffff, 0x15, 0x3, 0x1, 0x62, 0xeac, 0x6, 0x5, 0xfffffffa, 0x55, 0x7, 0xa11, 0x80, 0x3c5, 0x80, 0x6, 0x71, 0x9, 0x2, 0x2, 0x9, 0x8547, 0x1, 0x5, 0x5, 0x7, 0x843, 0xffffffff, 0x9, 0x35, 0x5, 0x800, 0x26, 0x8, 0x1, 0x40008, 0x6, 0x9, 0x10, 0x5, 0x2, 0xffffffff], "e5f441a783b38ef29ec180fa12db9d7095a154751cb912e7c9643173436cd409e1194f6f540dc46529dda6a350e725e5a01922baea17cf834d8087e8330727b1a728f6c283c21640c42e83851212b5faa0f7692cb7f57784365a200e1a8452f1ddbf164a5011f5afc65dc094207d04ff8b60a7466d958d4ebe889e42f54fd6dd"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptye9\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendfile$auto(r4, r3, 0x0, 0xa15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r5, 0x5646, r5) ioctl$auto(0x3, 0x541a, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = prctl$auto_PR_SYS_DISPATCH_ON(0xfffff2dd, 0x1, 0xffffffffffffffff, 0x100052e, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r7) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, r8, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='5)\x00\x00', @ANYRES16=r8, @ANYBLOB="20002dbd7000fbdbdf2520000000180003801400c100fc0200000000000000000000000000010800050009000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000c1) ioctl$auto_RNDGETENTCNT2(r6, 0x80045200, &(0x7f0000000300)=0xff) r9 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r9, 0x8, 0x1) 1m20.760231194s ago: executing program 0 (id=510): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x0) close_range$auto(r1, r0, 0x2) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x70, 0x0, &(0x7f0000000240)=0x8050009b) mmap$auto(0x0, 0x400008, 0xfffe000000000000, 0x9b72, r2, 0x8000) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) 1m19.774462034s ago: executing program 0 (id=514): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x800) r0 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) write$auto(r4, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) pidfd_getfd$auto(r0, r2, 0x3f3) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r3, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) 1m19.126806591s ago: executing program 0 (id=516): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r1, 0x8000) syz_clone3(&(0x7f0000000a00)={0x8080000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x20, 0x0, 0x0, 0x0, {r2}}, 0x58) 1m18.804080145s ago: executing program 0 (id=517): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r1, 0x2284, 0x0) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x17f, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000004, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x6, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x20000000000003, 0x8946, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x753, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0x40000b}, 0xfff}, 0x5, 0x311) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x20681, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x40008, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00", @raw=0x6}, 0x5, 0x8, 0x90f6, @raw=0x1, @enumerated={0x4, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x9e, 0x5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000000c0)={@inferred=r4, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) 1m15.353415485s ago: executing program 0 (id=524): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async, rerun: 64) socket(0x11, 0x80003, 0x300) (async, rerun: 64) socket(0x29, 0x5, 0x0) (async) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32) io_getevents$auto(0xca46, 0x1, 0xfffffffffffffffc, 0x0, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8a82, 0x0) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = open(0x0, 0x2240, 0x154) setsockopt$auto_SO_SNDBUF(r1, 0xb, 0x7, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r3, 0x400, 0x1) execve$auto(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) (async, rerun: 32) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) (rerun: 32) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/4087, 0xff7) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) 1m0.204947602s ago: executing program 36 (id=524): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async, rerun: 64) socket(0x11, 0x80003, 0x300) (async, rerun: 64) socket(0x29, 0x5, 0x0) (async) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32) io_getevents$auto(0xca46, 0x1, 0xfffffffffffffffc, 0x0, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8a82, 0x0) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = open(0x0, 0x2240, 0x154) setsockopt$auto_SO_SNDBUF(r1, 0xb, 0x7, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r3, 0x400, 0x1) execve$auto(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) (async, rerun: 32) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) (rerun: 32) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/4087, 0xff7) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) 43.924538155s ago: executing program 7 (id=586): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r1, 0x2284, 0x0) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x17f, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000004, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x6, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x20000000000003, 0x8946, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x753, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0x40000b}, 0xfff}, 0x5, 0x311) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x40008, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00", @raw=0x6}, 0x5, 0x8, 0x90f6, @raw=0x1, @enumerated={0x4, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x9e, 0x5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)="f4", 0x1) 43.834916773s ago: executing program 8 (id=552): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0x7fff, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d5574bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f3829c8a4c33fe0fbc81dd579bbdb44eda4f335d2bc512ca7f38f603c29033c94df2c9533f4422432f574a021e90a0fe3a4cf54de46e25986315b30956face49e26e8dcbcc9e1363627a9f38a2ee8304307dab4013d77f4c337551e2a6ac230788513cdd15e734263e4973c75757d9809c510977adc3be6c5b110597b09c7dad1f54e4506744710b53221e4a7982ac4c59bfae6370258b5af7864a4ca680addd736e35da579cc0e975e6cdefa3d082c8b4b10b205415c32797d9450c002895c9b405e5d7470f1800000f5ae502a5fbe5cf405", 0xd55) socket(0x5, 0x3, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x10004) mmap$auto(0x0, 0x40009, 0xdd, 0x1a, 0xffffffffffffffff, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2060009, 0x3, 0xeb2, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) writev$auto(r2, &(0x7f0000000300)={0x0, 0x1}, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r4, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) 42.011021796s ago: executing program 7 (id=591): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setgroups$auto(0xe32, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 38.915810028s ago: executing program 8 (id=594): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xeb, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x10000d, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/040/001\x00', 0x470801, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x4) mmap$auto(0x100000000, 0x8, 0x80000000, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) close_range$auto(0x2, 0xa, 0x0) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0x0, 0x2}, 0x0, 0x0, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000428bd7000ffdbdf25050000002e0002002f7379732f6b65726e656c2f73656375726974792f746f6d6f796f2f64676d61696e5f706f6c69637900000005000b002300000008001d008d0d000008000400bbb4000008001500090000007f19ce422836dd553063314f3e14fab2ae2d8958c03d7a6e2a4e55005075158e21f5f86d63a21af5aed90c79e2dd80d8791dc6c633526224d9bc5725bec6c3da66143317c1cd28e9bafa4d"], 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) read$auto(r2, 0x0, 0xe3ba) 38.305743049s ago: executing program 7 (id=595): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x10000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x7fffffff, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) socket(0x1, 0x1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f0000000180)={{0x4, 0xee01, 0xffffffffffffffff, 0x1ff, 0x5, 0x7, 0xc72c}, 0x9, 0x8, 0xb551, 0xfb6, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x800, 0x0, &(0x7f0000000280)="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", &(0x7f0000000100)="f871809acc0ff4ec73f8e204d8768770c1c7fed3e2d83922e37a448798eee55c53c6b08af48d80a84eabbd3ab1ae558ba6c14b0ca95ca058b83238a187e2d7a02e439353d798b7f8303754cdda531ec05cada9d145e284c4"}) ioctl$auto_BLKOPENZONE(r0, 0x40101286, &(0x7f0000000240)={0x7fffffff, 0x2b55}) quotactl_fd$auto(r0, 0x6, r1, &(0x7f0000000200)="2de5cab98ce7f4f6587725c1615afb0817d9ca62ae4270ddeb090ccdf6d60569e65ca6") epoll_pwait2$auto(r0, 0x0, 0x3, 0x0, 0x0, 0x8) iopl$auto(0x7ff) 36.25461389s ago: executing program 7 (id=599): open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) socket(0x1e, 0x2, 0xc) 36.155738201s ago: executing program 8 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xff}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xfffffffc}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x10}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20100, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0xff, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) (async) mmap$auto(0x2, 0x40000000008, 0x6, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x8000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0xfff6, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x6, 0x24, 0x0, 0x40) (async) mbind$auto(0x6, 0xd, 0xffffffff00000000, &(0x7f0000000080)=0x3, 0x7, 0x5) read$auto(0x3, 0x0, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x0) (async) mmap$auto(0x0, 0x2020011, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup\x00', 0x2, 0x0) r3 = getpid() (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) read$auto(0x3, 0x0, 0x1f40) (async) write$auto(0x3, 0x0, 0x3f00) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0xcd1e23e41b02d660, 0x154) 35.801750029s ago: executing program 8 (id=602): mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0xfffffffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x80) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) sendmsg$auto_NETDEV_CMD_NAPI_SET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002abd7000fcdbdf250e0000000c000700090000000000000008000500faffffff08000500000100000c00060004000000000000000c0007000100000000000000080002000600000000000079476070064e65f7d8bf962d36f385f624fa0dd795a17803065df5b2067b983a36935929752eea5b17d65a3b1b"], 0x5c}, 0x1, 0x0, 0x0, 0x44045}, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) sigaltstack$auto(0x0, &(0x7f00000003c0)={&(0x7f0000000180)="69cc8d0de6b41511259c289f8eba5cd9efe7b46018e5bfce1b542499858929869392667f4a67831f37b948cef0c793b831f019cb998179b02af53526d479eaa474255b4bad7cce70b58305c3c789dddea82c3a78568db57899f6372003e4f0fe7c68c3e6b59956bfca", 0x9, 0x8}) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x5}, 0x8) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x6b) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) 35.549066299s ago: executing program 7 (id=604): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) socket(0x2, 0x3, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1, @ANYRES64=r0], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr2/queues/tx-0/xps_rxqs\x00', 0x22701, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000027c0), 0x0) fcntl$auto_F_DUPFD(r4, 0x0, r4) setresuid$auto(0x2, 0x7, 0x8080) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r5, &(0x7f0000000040)='S\x00\x00\x00\xe8VV\x9e', 0x8587) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=@prog_bind_map={r2, r5, 0x8fcf}, 0x9) timerfd_settime$auto(0x2, 0x1, 0x0, 0xfffffffffffffffc) 35.162119786s ago: executing program 7 (id=606): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = bpf$auto(0x0, 0x0, 0x6f4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unlinkat$auto(r0, &(0x7f0000000000)='./file0\x00', 0x6584) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 20.656090348s ago: executing program 37 (id=602): mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0xfffffffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x80) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) sendmsg$auto_NETDEV_CMD_NAPI_SET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002abd7000fcdbdf250e0000000c000700090000000000000008000500faffffff08000500000100000c00060004000000000000000c0007000100000000000000080002000600000000000079476070064e65f7d8bf962d36f385f624fa0dd795a17803065df5b2067b983a36935929752eea5b17d65a3b1b"], 0x5c}, 0x1, 0x0, 0x0, 0x44045}, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) sigaltstack$auto(0x0, &(0x7f00000003c0)={&(0x7f0000000180)="69cc8d0de6b41511259c289f8eba5cd9efe7b46018e5bfce1b542499858929869392667f4a67831f37b948cef0c793b831f019cb998179b02af53526d479eaa474255b4bad7cce70b58305c3c789dddea82c3a78568db57899f6372003e4f0fe7c68c3e6b59956bfca", 0x9, 0x8}) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x5}, 0x8) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x6b) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) 19.355914077s ago: executing program 38 (id=606): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = bpf$auto(0x0, 0x0, 0x6f4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unlinkat$auto(r0, &(0x7f0000000000)='./file0\x00', 0x6584) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 13.269887933s ago: executing program 4 (id=655): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) mmap$auto(0xae, 0x287, 0x1e, 0x16, r0, 0x8000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 12.008573266s ago: executing program 4 (id=656): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/mem\x00', 0x401, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x6, 0x57a5, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred=r2, 0xfffffffc, @_sigev_thread={&(0x7f0000000380)=&(0x7f0000000100)=0x27, &(0x7f00000003c0)="7328160b142292f2ea20143b287128d4a03081e6b557ac14a3c6908f490a139f447c379811d6a79be394775434dd85d979c0c16055fa840045c3216914bc5cae2926f385a490a54f1963c4c2e6b9e09124113acd6fdecf3408e1696fb04563697c430f8c453e8f0f6fcc49d3962b673731d25a0217c3744d378d67ee38a99035f14b58024d58dfba6c9fbf7d30742c2d436954f2b2436bb3da9e89a35fae83ee9f37cf1ee696e018910bb4869139ab7295a502288276079bd74d45243ae873e2049c856aaa95f19c0aa3179598d6b67bc843b8ea79f127e2aaacea92e118070d71e057f86fdf158dc0cf96dc5920182ed841b25f384070953d04b886"}}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r4 = setfsuid$auto(0x0) keyctl$auto(0x1d, 0xffffffffffffffff, r4, 0x0, 0xfffffffffffffef9) shmctl$auto_SHM_UNLOCK(0x4, 0xc, &(0x7f0000000280)={{0x8c3, 0xee00, 0xee00, 0x2, 0xff, 0x7f, 0x8}, 0x2, 0x4, 0x4, 0xb9e5, @inferred=r3, @raw=0x7, 0x61, 0x0, &(0x7f0000000180)="5ec91029ac3a10f5f21ce466929ca790b7fa421034afc7e411e7350f1f2a1b60539c47b7e64c4720077e846472783d5ffaa88ef9dc40e37d7b79c039cd7a263f1582cdd9c3796eebbce8a3", &(0x7f0000000000)="59676dcf5bc872d69377688f5cc8258a2dbe27fc6e5d5480dee5d8ea33d1fc83a96286cb0d598397dbfbd8411939eb682db86450dbe6db3248b47114175527"}) setresuid$auto(r4, r5, 0x0) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$auto(0x3, 0x0, 0x5c8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 10.592893098s ago: executing program 6 (id=657): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r0 = socket(0x23, 0x80805, 0x0) ioctl$auto(r0, 0x89ef, 0xffffffffffffffff) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r2, 0x0, 0x80000000006) r3 = signalfd$auto(r2, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r4, 0x0, 0x80) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x4000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0xa, 0x0) write$auto(r4, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x0, 0x180) move_mount$auto(r3, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x240, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/bond0/ignore_routes_with_linkdown\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) socket(0xa, 0x1, 0x84) 10.193993233s ago: executing program 4 (id=658): socket(0x2, 0x3, 0xa) mmap$auto(0x8, 0x2020009, 0x3, 0x8000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x20082, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioperm$auto(0x1, 0x1004, 0x7f) iopl$auto(0x2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r3, 0x0) mincore$auto(0x1000, 0x8001, 0x0) 9.04207618s ago: executing program 6 (id=659): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/ieee80211/phy2/addresses\x00', 0x8a340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/112, 0x70) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$auto(r1, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mlockall$auto(0x7) mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x3ff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) 8.222143311s ago: executing program 6 (id=660): unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) rseq$auto(0x0, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0485619, 0x38) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r0, 0x5509, 0x0) unshare$auto(0x40000080) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, 0x0, 0x44044) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = getpgrp(0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, r1, 0xfffffffffffffff5, 0x7) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x0, 0x0) readv$auto(r2, &(0x7f0000001080)={&(0x7f0000000080), 0x5c2}, 0x5) r3 = socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x7, 0x2817, 0x4, 0x200004, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x5, 0x8}, 0x10) bpf$auto(0x15, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xacc, 0x5, 0x3, 0x14, r3, 0x8004) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) sched_rr_get_interval$auto(0x0, 0x0) 4.131444994s ago: executing program 6 (id=661): socket$nl_generic(0x10, 0x3, 0x10) r0 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f00000000c0)={@_si_pad}, 0x0, &(0x7f0000000280)={{0x5, 0xfffffffffffffffa}, {0x9d6, 0x7}, 0xffffffffffff9170, 0x100, 0x7, 0x2, 0x2, 0xffffffff, 0x81, 0x10001, 0xa, 0x9, 0x80000001, 0x2, 0xfffffffffffffeff, 0x1}) sched_rr_get_interval$auto(r0, &(0x7f0000000140)={0x24bd, 0x2fa}) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29d, 0x7, @old_map_fd=0x6}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0x4) socket(0x2c, 0x800, 0xffff) 3.741757472s ago: executing program 6 (id=662): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) poll$auto(&(0x7f0000002940)={r0, 0x100, 0x8}, 0x4, 0x8) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00\x00\x00\x00\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) 3.47683114s ago: executing program 4 (id=663): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8001) prctl$auto_PR_SET_FPEXC(0xc, 0x9, 0x0, 0x5, 0xfef) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000000)="cdb8941ca55f8ccb74") r0 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000380)=0x6) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000140), r0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40200081) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0xffffffffffffffff) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mprotect$auto(0x0, 0x6, 0x4) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x7, @old_prog_fd=r2}, 0xa3) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x0, 0x26, 0x4, 0x200004000001, 0x384, 0xfffffffffffffffa, 0x3, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0xb, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0e, &(0x7f00000001c0)) write$auto(r2, 0x0, 0x1000002000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r4, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)={0x24, r5, 0xbb484b3ccf0b22b, 0x70bd2b, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) 3.345712711s ago: executing program 6 (id=664): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf46", 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xfffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x1fffffffffffffe, 0x4400002, 0xdf, 0x400000400010, 0x2, 0x8001) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x9ba4133ca0d05eca, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) capset$auto(&(0x7f0000000040)={0xb}, &(0x7f0000000080)={0x4, 0x6, 0x7}) sendfile$auto(r1, r1, 0x0, 0x200) 1.511889759s ago: executing program 2 (id=644): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x40, 0x4, 0x200000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') (async) clone$auto(0x7ffd, 0x61, 0xffffffffffffffff, 0xfffffffffffffffc, 0x87) 1.325819012s ago: executing program 4 (id=665): fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x800, 0x10, 0x9, 0xff, 0xee01, 0xee01, 0x0, 0x5, 0x65a, 0x401, 0x5c, 0x6, 0x0, 0x7, 0x7fe0000000, 0xa5, 0x7}) r2 = io_uring_setup$auto(0x3, &(0x7f00000000c0)={0x1f, 0x9, 0x28e9, 0x6, 0x4, 0x7, 0xffffffffffffffff, [0x9, 0x6582, 0x2], {0x800, 0x0, 0xc2, 0xec8e, 0x1, 0x8, 0x100, 0xfff, 0x1}, {0xc936, 0x12dc, 0x6, 0xc, 0x1, 0x6, 0x3, 0x8, 0x4}}) io_uring_register$auto(r2, 0x80000001, &(0x7f0000000140)="050874588aab635364bd89e1c897f933b8e93ffd3d9c4f26a5b8719e44c26b0513a7a7bc44a9fe11a31751066d5af32d03d76db3bf513e265a059afbc20af51ec89fd4f2a4852a14db897056fe603cf9dc7a240c9d92dae53018a236553f5ddcf2f86581e0cb4316dd8de59cebfde4f85f043e2fc58561e49305be23fd128924ea70101f0f51b3296efbf1d4858035da62f09c4bc1b05fba31", 0xb) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000000280)={0x9b85, 0x7, 0x7, 0x9, 0x40, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f00000002c0)={0x5a8, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC_ADDRS={0x584, 0xa6, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x15}]}, @nested={0x257, 0xb8, 0x0, 0x1, [@generic="0cdb0c13a0aa2b97dbe8511cc321db05abd7d1445de38ba77a995da4a6fd01d1714b61261ce9563e5a0546f3f60fe2e7e4d7f0b4d0c97f516cf465aa3eb1d7811c79bc57cb998ba35bda3db73dd372df63810c1a72869d596661884ae622bc72251efdf4c10bffcf87a72ec55f989b49d467163f5b7b12215e605e4caa1fa9", @typed={0x8, 0x26, 0x0, 0x0, @u32=0x7ff}, @generic="0ed9a21401e082114595fa684aceb717aad02fc3e5a5acc163cadf46ce523baeb0107b9a28ed7b0a4b7b0fdd765db3fe2f3f2a4aba780e61a80a167e8493d17affdc706a720b7dc92ebe361ba58dfcf6ce02d93d8b3ffe74f1ba93538b254d1f9d5466ed40e6c3eb829e5100ed581b0ad333bf307c1b3c4daa203f8d7c02e58145c0d4b152", @nested={0x4, 0xb7}, @generic="29be84a9fd89ef59e247e0d61a8f012aaa5278f6b8305344d13ba691108f78417a26281da0e78444b04244e2a0cc1d22c5f11d5f1c506f066503497d91c93ebc0d8fff6690bf3ead67d57983ba7da2d397c9bb6017055dd63898fa0ccfb1fabfd48d647305f3676352aa9abedda4329f2707ecf090e6e3e0ad78b27a4f1281d1e39732ca805604e91b257c2658286da9316bbdc120d1ce015cba2bff6b", @nested={0x4, 0xaf}, @typed={0xc, 0x4b, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x40}, @generic="5c7c8ee93e0fe9441388eecb53830e17ed309abfb26bf20ebc7336715884dd6d2e3c1df7a2579c34e65cd6fc5fffa5d5fc6d83e3dcbbfa07e1927ddae6c85c8467df2baa5e85118fa58e178b486d4427cbc8aa39b11c8cbb1355700e2da2fa95e9f657e17e90b4c248ddde40c80e4ff6190b190a04508c4f58824bf8b4fdad433a223d2b75b23dd58eda7554e536", @nested={0x4, 0x58}]}, @generic="9d0fae5627e744ba1089aedc98304c2cc9f30eb2b7cbe980cc66f189772fd6fa0245a32e6358c3442f85cdecd6b0", @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x70, 0xca, 0x0, 0x0, @binary="18d5c3d16a5be7ef0664b037c3c5068a38b4621947801c66aed92ac8ba4a9da9cbf9afc2db9da7694010f0da106dc123e3a75ab8fc2b32befa1668b4c4af94649ff93945496b2346ecf2accbe9398898067fcefae8e48c1627a9ba1de45e168df95b3f8dd95c915a4a503a68"}, @generic="2b9e8b9b5c1a6486f8842540b964cd05a7b10833f2c4751be2e059d478f6327f7e0ddd52b11200f88a6a3266b5394a92cd8e34d9c80ccc66500b5dda87bd791c95200b9aba127da4ba4fe92efce7a357ff88512ea1ce7e33a794c7dfa96bb98061a1993e55daaa7255e794f637fb7b2cc5ae07bda799f4c71862", @nested={0x1e9, 0xc2, 0x0, 0x1, [@nested={0x4, 0x9a}, @generic="bcdcee8937bf05ec39b2887e8fa4b1cfcfa01b55a7c493c8233cb72d6adde24e20f7ebb2bc8eb6c61a58a02e7e5744ac2a12ed1e784cd842bb5b6771ab3e092380102498dbf065d32ad4957d95c1592438b0274f2996c569c7b1cac5b4df597422e5807fa75336ecd49931ef841e71bd572669fa8e4944df97e490194cf9cabf3e267966af9d739e", @generic="006cd0bf1464253ea44a495289111d76cb1a4ecfb46469b44e1012a5ce87d8b64a92f44499ae21b1b3afd528ebb7eb8885e5438aab3aae2325037fc2cb86189368ad04301213dec23dcf7178c8908a1fc128fc6e42aa7e787f1de8f9696ef3ad013b4c077b1d3153b65c97a10b52849f1f121dfb9c1b878beb11c96456dbb740feff6f2d83285c80c36a655c149a90d96fc34ab43a7eac394ca2d48e87d7d6f48217eaa94940aa6e1a88b690fb6a48bcf9f1c287c97917e89ef8b091f8bf6bfe", @typed={0x8, 0x9f, 0x0, 0x0, @u32=0x6}, @generic="2a8f939816558d46fc2c8db854fe684172bba202e72d817dfea71f37dbbb7dce3398f5cdd23b9f3a1fef04a6b3fdf45383bb69593861c6052762944a259f650a045ecf4884903df61d724aa50ed29a1cc99c49f6ca75baccc2b2e5ee4443ed34d2730ab30bfeff1091ede8f97165606e2936d60b3d8a897747f0c7d2f835b2ace21b46d186", @nested={0x4, 0x4c}, @typed={0x8, 0xc, 0x0, 0x0, @pid=r5}]}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=r0}, @typed={0xa, 0x6a, 0x0, 0x0, @str='\'}@#[\x00'}]}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xfff}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x404c014}, 0x4000) getpgid$auto(r5) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000940), r3) sendmsg$auto_NFC_CMD_SE_IO(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_DATA={0x41, 0x1f, "bbdafe285dfcb0c73fc8f4c7100859eb1cd00673657797301e65c35bdfe5d44b409c24e4fb3c521f3bdb8f67c7b761aba835aaae9e97f0b2f1a023d9ee"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40041) recvmmsg$auto(r2, &(0x7f0000000b80)={{&(0x7f0000000a80)="1efcf17e9868c8ce493b06bfce89a4b4ae9faf5b2177fc7df844b3556cbb6bfb5344c0b8c3f4eafa5abf22b86c9088475b1067ef92938b4e8e685b82b9", 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)="402d67d20ddc2af70cd9c0dd7506dfb1e012413f78bac8a20f2e250cf5b00ca16179d15e0d6a31ad3c082bd740", 0x3}, 0x4, &(0x7f0000000b40)="d74d9b75ff6152d34b88910ec2309fcae1b104f61e9aab4dc0", 0xac3, 0x6246e33b}}, 0x400, 0x8, &(0x7f0000000bc0)={0x8, 0x4}) semctl$auto_IPC_STAT(0x5, 0x3ff, 0x2, 0x40) mknod$auto(&(0x7f0000000c00)='./file0\x00', 0x6, 0x7) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000c80), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000cc0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'ip6_vti0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000000f00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x164, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0xb1, 0x2, 0x0, 0x1, [@generic="875cc34f83581627f7cffe22fd096309c874f8cda8129cb22ed98dc38ed788f91e57cc0dcdd077d215b157770218eea13dde8cfa4d1c6515bd347bf55ee1ce2d44f93c0fc739f9f8c8eea8b251aa816fddecb79dbcc8c693519e39302db336b139f579ce45a8a0f085c0efc4c18d765e55cb", @generic="aac4ef7992", @generic="7079da653202950d48f28f1a282fca960cce55c285dc25236f2306529248ba19de12651c0f23820426bc612f16afaaffc2f9d2ff84f3"]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xffff30bd}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffff1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x200}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xb497}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffff001}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xeb}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4800}, 0x90) r10 = eventfd2$auto(0x5, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000f40), r10) unshare$auto(0x800) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x400, 0x14, 0x21}, 0x18) mknodat$auto(r11, &(0x7f0000001000)='./file0\x00', 0x5, 0x6) mmap$auto(0xfffffffffffff9a9, 0x1, 0xc05b, 0x810, r11, 0x2) write$auto_fops_blob_file(r3, &(0x7f0000001040)="55fb7e5dc3d41b5f3fdec9b14bbc04f1759c0b5aefc03d1ad3801dbcad85171ac7098711ab70d36513bd02fba5de99e71e1825a27b", 0x35) r12 = fcntl$auto_F_WRLCK(r3, 0x40, 0x1) mmap$auto(0x9, 0x4, 0x8, 0x13, r12, 0x80000001) lstat$auto(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0xfffffffffffffffd, 0x3, 0xe, 0x78c07ed7, r0, r1, 0x0, 0x3, 0xd36, 0x80, 0xfff, 0x7, 0x81, 0x800, 0x552, 0x7, 0x1}) close_range$auto(r12, r2, 0x8) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000001180), r2) keyctl$auto(0x0, r0, r0, r1, 0xca84) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r2, &(0x7f0000001700)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={0x44c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0xdb64fa75}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r9}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xffffd529}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x9}, @NCSI_ATTR_PACKAGE_MASK={0x8}, @NCSI_ATTR_DATA={0x222, 0x5, "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"}, @NCSI_ATTR_DATA={0x1ea, 0x5, "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"}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.097730371s ago: executing program 2 (id=666): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x2, "fb2704573a53cf995e9bd50d9a038ae9ba8b6bb523af71be779551bea8bb46e0", @inferred=r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0x101000000000000, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) fstatfs$auto(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="48fca9fce87c944c01b8294348d59fc327dd2324b3227bb0f3ab8cfc9f1a2af72398441d049fa2239e00db60e040770ddc585cf93134ee5ffd950b25b6d6313d0df88c656a49c19a4ccf7cfe7734be012fb567ec156663bfc910854064afb220850b0c319971b90d70332350730381dd5aeb760a16", 0x75) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250a000000080003000000000008000200", @ANYRES32=r4, @ANYBLOB="ea1f966b080001000003004e4a906d0d2035321160597769ba33c1b260126349d7fbd3cda43b64875fad103f924c6c1b"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r0, 0xc0085504, &(0x7f00000001c0)={0x9, 0x1, 0x6}) 0s ago: executing program 4 (id=667): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x6, 0x38, 0x1000000000065f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x2, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86) connect$auto(0x3, 0x0, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/fcloop/ctl/add_remote_port\x00', 0x801, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) write$auto(0x3, 0x0, 0x5c8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/psmouse/parameters/a4tech_workaround\x00', 0x1a1042, 0x0) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000080)={0x0, 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80805, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci1: command tx timeout [ 105.421205][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.427518][ T51] Bluetooth: hci2: command tx timeout [ 105.433576][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.459820][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.467140][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.495023][ T51] Bluetooth: hci3: command tx timeout [ 105.542533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.549817][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.809460][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.961945][ T5828] veth0_vlan: entered promiscuous mode [ 105.997430][ T5828] veth1_vlan: entered promiscuous mode [ 106.111118][ T5828] veth0_macvtap: entered promiscuous mode [ 106.141469][ T5828] veth1_macvtap: entered promiscuous mode [ 106.205327][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.239916][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.252557][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.262541][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.273630][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.285266][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.329949][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.369829][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.430345][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.503578][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.518955][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.587979][ T5839] veth0_vlan: entered promiscuous mode [ 106.597530][ T5831] veth0_vlan: entered promiscuous mode [ 106.623656][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.632627][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.647423][ T5839] veth1_vlan: entered promiscuous mode [ 106.683060][ T5831] veth1_vlan: entered promiscuous mode [ 106.709734][ T5834] veth0_vlan: entered promiscuous mode [ 106.742258][ T5839] veth0_macvtap: entered promiscuous mode [ 106.769086][ T5839] veth1_macvtap: entered promiscuous mode [ 106.782373][ T5834] veth1_vlan: entered promiscuous mode [ 106.800553][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.813338][ T5831] veth0_macvtap: entered promiscuous mode [ 106.852469][ T5831] veth1_macvtap: entered promiscuous mode [ 106.908429][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.948274][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.992347][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.009822][ T5834] veth0_macvtap: entered promiscuous mode [ 107.021741][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.041084][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.050685][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.060236][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.069278][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.096829][ T5834] veth1_macvtap: entered promiscuous mode [ 107.107461][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.117726][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.126967][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.137398][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.243192][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.310103][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.370993][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.389563][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.400056][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.412324][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.487401][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.495933][ T51] Bluetooth: hci2: command tx timeout [ 107.501396][ T51] Bluetooth: hci1: command tx timeout [ 107.510907][ T5837] Bluetooth: hci0: command tx timeout [ 107.521863][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.575256][ T51] Bluetooth: hci3: command tx timeout [ 107.652038][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.666565][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.698518][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.704052][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.842930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.852755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.884211][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.902451][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.924007][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.938970][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.091472][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.128832][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.224759][ T5903] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.518564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.581895][ T51] Bluetooth: hci1: command tx timeout [ 109.587876][ T5837] Bluetooth: hci0: command tx timeout [ 109.593344][ T5837] Bluetooth: hci2: command tx timeout [ 109.623280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.653953][ T5837] Bluetooth: hci3: command tx timeout [ 110.386467][ T5941] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 110.894496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.920364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.951670][ T5837] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 111.080761][ T30] audit: type=1800 audit(1748396191.246:2): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13" name="dbroot" dev="configfs" ino=6054 res=0 errno=0 [ 111.894432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.055242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.064255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.387955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.378870][ T5983] Zero length message leads to an empty skb [ 113.910196][ T5985] ======================================================= [ 113.910196][ T5985] WARNING: The mand mount option has been deprecated and [ 113.910196][ T5985] and is ignored by this kernel. Remove the mand [ 113.910196][ T5985] option from the mount to silence this warning. [ 113.910196][ T5985] ======================================================= [ 113.945135][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.408740][ T5983] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.069977][ T6014] ICMPv6: process `syz.1.21' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 116.192844][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.531744][ T6051] mmap: syz.3.27 (6051) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.909411][ T6055] netlink: 330 bytes leftover after parsing attributes in process `syz.0.28'. [ 117.984651][ T6055] veth0_macvtap: left promiscuous mode [ 118.068301][ T6055] program syz.0.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.154856][ T6047] process 'syz.1.24' launched './file0' with NULL argv: empty string added [ 118.579448][ T6063] capability: warning: `syz.3.29' uses 32-bit capabilities (legacy support in use) [ 119.903686][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.33'. [ 119.937747][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.960092][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.982954][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.005752][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.116433][ T30] audit: type=1804 audit(6043363496.251:3): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.30" name="/newroot/8/file0" dev="tmpfs" ino=59 res=1 errno=0 [ 120.233880][ T30] audit: type=1800 audit(6043363496.251:4): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.30" name="file0" dev="tmpfs" ino=59 res=0 errno=0 [ 121.800865][ T5837] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 124.842929][ T6118] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 127.076716][ T6129] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 127.117769][ T6145] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input7 [ 127.904769][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.49'. [ 133.061983][ T6204] netlink: 334 bytes leftover after parsing attributes in process `syz.2.57'. [ 134.615924][ T6238] block nbd7: not configured, cannot reconfigure [ 138.140698][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.147616][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.210871][ T6284] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 143.169970][ T6367] FAULT_INJECTION: forcing a failure. [ 143.169970][ T6367] name failslab, interval 1, probability 0, space 0, times 1 [ 143.221356][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.3.90 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 143.221400][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.221419][ T6367] Call Trace: [ 143.221430][ T6367] [ 143.221441][ T6367] dump_stack_lvl+0x16c/0x1f0 [ 143.221494][ T6367] should_fail_ex+0x512/0x640 [ 143.221524][ T6367] ? fs_reclaim_acquire+0xae/0x150 [ 143.221589][ T6367] should_failslab+0xc2/0x120 [ 143.221630][ T6367] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 143.221668][ T6367] ? security_inode_alloc+0x3b/0x2b0 [ 143.221719][ T6367] security_inode_alloc+0x3b/0x2b0 [ 143.221763][ T6367] inode_init_always_gfp+0xce4/0x1030 [ 143.221800][ T6367] alloc_inode+0x86/0x240 [ 143.221840][ T6367] sock_alloc+0x40/0x280 [ 143.221881][ T6367] __sock_create+0xc1/0x8d0 [ 143.221935][ T6367] __sys_socket+0x14d/0x260 [ 143.221982][ T6367] ? __pfx___sys_socket+0x10/0x10 [ 143.222032][ T6367] ? do_user_addr_fault+0x843/0x1370 [ 143.222076][ T6367] __x64_sys_socket+0x72/0xb0 [ 143.222120][ T6367] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.222163][ T6367] do_syscall_64+0xcd/0x230 [ 143.222210][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.222241][ T6367] RIP: 0033:0x7f10dbf90887 [ 143.222271][ T6367] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.222305][ T6367] RSP: 002b:00007f10d9df4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 143.222344][ T6367] RAX: ffffffffffffffda RBX: 00007f10dc1b5fa0 RCX: 00007f10dbf90887 [ 143.222363][ T6367] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 143.222381][ T6367] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 143.222399][ T6367] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 143.222417][ T6367] R13: 0000000000000000 R14: 00007f10dc1b5fa0 R15: 00007ffc90271a18 [ 143.222453][ T6367] [ 143.222763][ T6367] socket: no more sockets [ 143.274896][ T6368] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.60), cmd(3) [ 144.509607][ T6400] kAFS: No cell specified [ 145.773685][ T6433] lo: entered allmulticast mode [ 145.877883][ T6442] netlink: 330 bytes leftover after parsing attributes in process `syz.2.105'. [ 145.890106][ T6427] lo: left allmulticast mode [ 148.680858][ T5837] Bluetooth: hci0: Malformed LE Event: 0x1d [ 148.785209][ T6492] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 149.844242][ T6497] could not allocate digest TFM handle [ 149.943967][ T6485] GUP no longer grows the stack in syz.1.110 (6485): 14000-401000 (4000) [ 149.952798][ T6485] CPU: 1 UID: 0 PID: 6485 Comm: syz.1.110 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 149.952844][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.952865][ T6485] Call Trace: [ 149.952875][ T6485] [ 149.952887][ T6485] dump_stack_lvl+0x16c/0x1f0 [ 149.952942][ T6485] gup_vma_lookup+0x1d2/0x220 [ 149.952991][ T6485] __get_user_pages+0x250/0x3bb0 [ 149.953065][ T6485] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 149.953109][ T6485] ? kasan_save_stack+0x42/0x60 [ 149.953144][ T6485] ? __pfx___get_user_pages+0x10/0x10 [ 149.953193][ T6485] ? register_lock_class+0x41/0x4c0 [ 149.953229][ T6485] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 149.953265][ T6485] ? do_syscall_64+0xcd/0x230 [ 149.953320][ T6485] __gup_longterm_locked+0x20d/0x1850 [ 149.953371][ T6485] ? __lock_acquire+0xb8a/0x1c90 [ 149.953414][ T6485] ? __pfx___gup_longterm_locked+0x10/0x10 [ 149.953485][ T6485] pin_user_pages_remote+0xed/0x140 [ 149.953538][ T6485] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 149.953587][ T6485] ? mm_access+0x22d/0x2e0 [ 149.953636][ T6485] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 149.953699][ T6485] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 149.953752][ T6485] ? iovec_from_user+0xbb/0x140 [ 149.953809][ T6485] ? iovec_from_user+0xbb/0x140 [ 149.953852][ T6485] process_vm_rw+0x216/0x2c0 [ 149.953895][ T6485] ? __pfx_process_vm_rw+0x10/0x10 [ 149.953946][ T6485] ? task_mm_cid_work+0x6b9/0x910 [ 149.954019][ T6485] ? __pfx_task_mm_cid_work+0x10/0x10 [ 149.954084][ T6485] ? xfd_validate_state+0x61/0x180 [ 149.954122][ T6485] ? __pfx___x64_sys_futex+0x10/0x10 [ 149.954167][ T6485] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 149.954210][ T6485] ? do_syscall_64+0x91/0x230 [ 149.954259][ T6485] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.954302][ T6485] do_syscall_64+0xcd/0x230 [ 149.954355][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.954388][ T6485] RIP: 0033:0x7fa38278e969 [ 149.954416][ T6485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.954448][ T6485] RSP: 002b:00007fa3835de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 149.954479][ T6485] RAX: ffffffffffffffda RBX: 00007fa3829b6080 RCX: 00007fa38278e969 [ 149.954501][ T6485] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000005a [ 149.954521][ T6485] RBP: 00007fa382810ab1 R08: 0000000000000003 R09: 0000000000000000 [ 149.954541][ T6485] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 149.954562][ T6485] R13: 0000000000000000 R14: 00007fa3829b6080 R15: 00007fffc5225288 [ 149.954604][ T6485] [ 150.620188][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'. [ 151.645227][ T6520] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 3PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 152.286516][ T5837] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 153.108216][ T51] Bluetooth: hci0: unexpected event 0x30 length: 47 > 3 [ 154.427092][ T6578] sd 0:0:1:0: PR command failed: 1026 [ 154.454101][ T6578] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 154.461189][ T6578] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 155.735274][ T6598] netlink: 342 bytes leftover after parsing attributes in process `syz.2.128'. [ 155.814666][ T6601] netlink: 342 bytes leftover after parsing attributes in process `syz.2.128'. [ 155.837990][ T6601] netlink: 342 bytes leftover after parsing attributes in process `syz.2.128'. [ 155.917750][ T6601] netlink: 342 bytes leftover after parsing attributes in process `syz.2.128'. [ 156.024895][ T6601] netlink: 342 bytes leftover after parsing attributes in process `syz.2.128'. [ 156.153918][ T6598] random: crng reseeded on system resumption [ 158.243889][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 160.862473][ T6683] netlink: 338 bytes leftover after parsing attributes in process `syz.2.146'. [ 160.920423][ T6683] netlink: 338 bytes leftover after parsing attributes in process `syz.2.146'. [ 160.987346][ T6684] netlink: 186 bytes leftover after parsing attributes in process `syz.2.146'. [ 161.091833][ T6683] netlink: 210 bytes leftover after parsing attributes in process `syz.2.146'. [ 161.238203][ T6690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.245277][ T6690] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.310117][ T6690] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.363285][ T6690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.390974][ T6690] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.554195][ T6690] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.578779][ T6690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.588653][ T6690] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.708751][ T6690] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.807960][ T6690] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.859864][ T6690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.954767][ T6690] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.117621][ T6690] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.453249][ T6720] FAULT_INJECTION: forcing a failure. [ 162.453249][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 162.470925][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.0.153 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 162.470984][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.471004][ T6720] Call Trace: [ 162.471016][ T6720] [ 162.471029][ T6720] dump_stack_lvl+0x16c/0x1f0 [ 162.471098][ T6720] should_fail_ex+0x512/0x640 [ 162.471133][ T6720] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 162.471177][ T6720] should_failslab+0xc2/0x120 [ 162.471218][ T6720] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 162.471255][ T6720] ? key_alloc+0x3e0/0x1390 [ 162.471308][ T6720] key_alloc+0x3e0/0x1390 [ 162.471363][ T6720] ? trace_kmalloc+0x2b/0xd0 [ 162.471404][ T6720] ? __kmalloc_noprof+0x242/0x510 [ 162.471437][ T6720] ? __pfx_key_alloc+0x10/0x10 [ 162.471494][ T6720] keyring_alloc+0x44/0xc0 [ 162.471548][ T6720] lookup_user_key+0xc51/0x1300 [ 162.471597][ T6720] ? __pfx_lookup_user_key+0x10/0x10 [ 162.471644][ T6720] ? __pfx_do_futex+0x10/0x10 [ 162.471686][ T6720] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 162.471740][ T6720] ? xfd_validate_state+0x61/0x180 [ 162.471776][ T6720] ? __pfx___x64_sys_futex+0x10/0x10 [ 162.471814][ T6720] keyctl_keyring_link+0x22/0xe0 [ 162.471855][ T6720] __do_sys_keyctl+0x2c5/0x590 [ 162.471900][ T6720] do_syscall_64+0xcd/0x230 [ 162.471947][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.471980][ T6720] RIP: 0033:0x7f3f80d8e969 [ 162.472008][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.472040][ T6720] RSP: 002b:00007f3f81c55038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 162.472263][ T6720] RAX: ffffffffffffffda RBX: 00007f3f80fb6160 RCX: 00007f3f80d8e969 [ 162.472293][ T6720] RDX: ffffffffffffffff RSI: fffffffffffffffd RDI: 0000000000000008 [ 162.472314][ T6720] RBP: 00007f3f80e10ab1 R08: 0000000000000002 R09: 0000000000000000 [ 162.472336][ T6720] R10: 0000000000005092 R11: 0000000000000246 R12: 0000000000000000 [ 162.472359][ T6720] R13: 0000000000000000 R14: 00007f3f80fb6160 R15: 00007ffc046541e8 [ 162.472402][ T6720] [ 162.624298][ T6722] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 162.777115][ T6713] zswap: compressor not available [ 163.063564][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'. [ 163.193088][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.228232][ T6729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.265984][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.282366][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.344108][ T6729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.414001][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.662998][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.895040][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.334690][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.501542][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.735980][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.980166][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.415115][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.575741][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.814552][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.054224][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.348592][ T6778] FAULT_INJECTION: forcing a failure. [ 169.348592][ T6778] name failslab, interval 1, probability 0, space 0, times 0 [ 169.387854][ T6778] CPU: 0 UID: 0 PID: 6778 Comm: syz.1.165 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 169.387900][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.387918][ T6778] Call Trace: [ 169.387929][ T6778] [ 169.387941][ T6778] dump_stack_lvl+0x16c/0x1f0 [ 169.387998][ T6778] should_fail_ex+0x512/0x640 [ 169.388033][ T6778] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 169.388256][ T6778] should_failslab+0xc2/0x120 [ 169.388299][ T6778] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 169.388336][ T6778] ? __alloc_skb+0x2b2/0x380 [ 169.388377][ T6778] __alloc_skb+0x2b2/0x380 [ 169.388411][ T6778] ? __pfx___alloc_skb+0x10/0x10 [ 169.388446][ T6778] ? genl_rcv_msg+0x4bb/0x800 [ 169.388503][ T6778] netlink_ack+0x15d/0xb80 [ 169.388557][ T6778] netlink_rcv_skb+0x347/0x440 [ 169.388599][ T6778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.388657][ T6778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.388720][ T6778] ? __pfx_down_read+0x10/0x10 [ 169.388752][ T6778] ? netlink_deliver_tap+0x1ae/0xd30 [ 169.388971][ T6778] genl_rcv+0x28/0x40 [ 169.389040][ T6778] netlink_unicast+0x53d/0x7f0 [ 169.389096][ T6778] ? __pfx_netlink_unicast+0x10/0x10 [ 169.389158][ T6778] netlink_sendmsg+0x8d1/0xdd0 [ 169.389230][ T6778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.389296][ T6778] ____sys_sendmsg+0xa98/0xc70 [ 169.389353][ T6778] ? copy_msghdr_from_user+0x10a/0x160 [ 169.389395][ T6778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.389474][ T6778] ___sys_sendmsg+0x134/0x1d0 [ 169.389514][ T6778] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.389547][ T6778] ? __lock_acquire+0x622/0x1c90 [ 169.389631][ T6778] __sys_sendmsg+0x16d/0x220 [ 169.389667][ T6778] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.389729][ T6778] do_syscall_64+0xcd/0x230 [ 169.389779][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.389812][ T6778] RIP: 0033:0x7fa38278e969 [ 169.389840][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.389877][ T6778] RSP: 002b:00007fa3835ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.389907][ T6778] RAX: ffffffffffffffda RBX: 00007fa3829b5fa0 RCX: 00007fa38278e969 [ 169.389926][ T6778] RDX: 0000000000000040 RSI: 0000200000002280 RDI: 0000000000000004 [ 169.389944][ T6778] RBP: 00007fa3835ff090 R08: 0000000000000000 R09: 0000000000000000 [ 169.389963][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.389980][ T6778] R13: 0000000000000000 R14: 00007fa3829b5fa0 R15: 00007fffc5225288 [ 169.390020][ T6778] [ 169.914127][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.167607][ T6797] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 170.465415][ T6808] random: crng reseeded on system resumption [ 171.731318][ T6829] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 173.422265][ T6809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.514158][ T6809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.523463][ T6809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.534128][ T6809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.470393][ T6847] sd 0:0:1:0: PR command failed: 1026 [ 174.488209][ T6847] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 174.540813][ T6847] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 174.933986][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.573925][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.584952][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.585013][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.782856][ T6874] netlink: 186 bytes leftover after parsing attributes in process `syz.2.184'. [ 175.863471][ T6870] netlink: 186 bytes leftover after parsing attributes in process `syz.2.184'. [ 176.415895][ T6889] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               syzkaller syzkaller login: [ 305.551768][ T7655] Bluetooth: hci7: unexpected subevent 0x01 length: 4 < 18 [ 305.713954][ T30] audit: type=1800 audit(6043363689.773:7): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.522" name="dbroot" dev="configfs" ino=21002 res=0 errno=0 [ 306.794066][ T30] audit: type=1326 audit(6043363690.963:8): auid=4294967295 uid=8 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.6.521" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfd5f8e969 code=0x0 [ 311.507720][ T8724] FAULT_INJECTION: forcing a failure. [ 311.507720][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 311.523163][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.7.532 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 311.523211][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.523232][ T8724] Call Trace: [ 311.523244][ T8724] [ 311.523257][ T8724] dump_stack_lvl+0x16c/0x1f0 [ 311.523315][ T8724] should_fail_ex+0x512/0x640 [ 311.523351][ T8724] ? __kmalloc_noprof+0xbf/0x510 [ 311.523392][ T8724] ? __netlink_kernel_create+0x17f/0x750 [ 311.523605][ T8724] should_failslab+0xc2/0x120 [ 311.523651][ T8724] __kmalloc_noprof+0xd2/0x510 [ 311.523704][ T8724] __netlink_kernel_create+0x17f/0x750 [ 311.523760][ T8724] ? __pfx___netlink_kernel_create+0x10/0x10 [ 311.523817][ T8724] fib_net_init+0x26d/0x3f0 [ 311.523862][ T8724] ? __pfx___register_sysctl_table+0x10/0x10 [ 311.523908][ T8724] ? __pfx_fib_net_init+0x10/0x10 [ 311.523949][ T8724] ? lockdep_init_map_type+0x5c/0x280 [ 311.523991][ T8724] ? __pfx_nl_fib_input+0x10/0x10 [ 311.524040][ T8724] ? devinet_init_net+0x5c2/0x910 [ 311.524090][ T8724] ? __pfx_fib_net_init+0x10/0x10 [ 311.524130][ T8724] ops_init+0x1e2/0x5f0 [ 311.524178][ T8724] setup_net+0x21e/0x850 [ 311.524230][ T8724] ? __pfx_setup_net+0x10/0x10 [ 311.524269][ T8724] ? lockdep_init_map_type+0x5c/0x280 [ 311.524308][ T8724] ? __pfx_down_read_killable+0x10/0x10 [ 311.524344][ T8724] ? debug_mutex_init+0x37/0x70 [ 311.524397][ T8724] copy_net_ns+0x2a6/0x5f0 [ 311.524480][ T8724] create_new_namespaces+0x3ea/0xa90 [ 311.524550][ T8724] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 311.524610][ T8724] ksys_unshare+0x45b/0xa40 [ 311.524651][ T8724] ? __pfx_ksys_unshare+0x10/0x10 [ 311.524689][ T8724] ? xfd_validate_state+0x61/0x180 [ 311.524744][ T8724] __x64_sys_unshare+0x31/0x40 [ 311.524784][ T8724] do_syscall_64+0xcd/0x230 [ 311.524837][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.524871][ T8724] RIP: 0033:0x7fa9b958e969 [ 311.524897][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.524929][ T8724] RSP: 002b:00007fa9b73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 311.524960][ T8724] RAX: ffffffffffffffda RBX: 00007fa9b97b5fa0 RCX: 00007fa9b958e969 [ 311.524982][ T8724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 311.525003][ T8724] RBP: 00007fa9b9610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 311.525025][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.525046][ T8724] R13: 0000000000000000 R14: 00007fa9b97b5fa0 R15: 00007ffe393d0d58 [ 311.525091][ T8724] [ 313.047030][ T8744] netlink: 'syz.6.536': attribute type 11 has an invalid length. [ 313.101202][ T8744] netlink: 'syz.6.536': attribute type 11 has an invalid length. [ 313.571665][ T8745] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7f8eec1c2 pfn:0x78000 [ 313.585369][ T8745] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 313.612827][ T8745] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 313.634205][ T8745] raw: 00000007f8eec1c2 0000000000000000 0000000400000002 0000000000000000 [ 313.644909][ T8745] page dumped because: unmovable page [ 313.650968][ T8745] page_owner tracks the page as allocated [ 313.659234][ T8745] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5823, tgid 5823 (syz-executor), ts 100567945501, free_ts 100270466730 [ 313.683778][ T8745] post_alloc_hook+0x1c0/0x230 [ 313.696882][ T8745] get_page_from_freelist+0x135c/0x3950 [ 313.703580][ T8745] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 313.724390][ T8745] alloc_pages_mpol+0x1fb/0x550 [ 313.730173][ T8745] alloc_pages_noprof+0x131/0x390 [ 313.801349][ T8745] __vmalloc_node_range_noprof+0x732/0x1520 [ 313.820751][ T8745] vmalloc_user_noprof+0x9e/0xe0 [ 313.826682][ T8745] kcov_ioctl+0x4c/0x730 [ 313.863291][ T8745] __x64_sys_ioctl+0x18b/0x210 [ 313.873111][ T8745] do_syscall_64+0xcd/0x230 [ 313.878895][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.887207][ T8745] page last free pid 5818 tgid 5818 stack trace: [ 313.894613][ T8745] free_unref_folios+0xa5f/0x17f0 [ 313.904520][ T8745] folios_put_refs+0x56f/0x740 [ 313.913117][ T8745] free_pages_and_swap_cache+0x245/0x4a0 [ 313.920578][ T8745] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 313.927870][ T8745] tlb_finish_mmu+0x168/0x7c0 [ 313.933023][ T8745] vms_clear_ptes+0x55e/0x770 [ 313.938777][ T8745] vms_complete_munmap_vmas+0x1ca/0x970 [ 313.983834][ T8745] do_vmi_align_munmap+0x43b/0x7d0 [ 313.989089][ T8745] do_vmi_munmap+0x204/0x3e0 [ 313.996055][ T8745] __vm_munmap+0x19a/0x390 [ 314.045507][ T8745] __x64_sys_munmap+0x59/0x80 [ 314.050778][ T8745] do_syscall_64+0xcd/0x230 [ 314.094470][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.299623][ T8744] could not allocate digest TFM handle binfmt_misc [ 316.814577][ T8765] tc_dump_action: action bad kind [ 321.115066][ T8808] vivid-007: ================= START STATUS ================= [ 321.124557][ T8808] vivid-007: Generate PTS: true [ 321.129905][ T8808] vivid-007: Generate SCR: true [ 321.157340][ T8808] tpg source WxH: 640x360 (Y'CbCr) [ 321.162651][ T8808] tpg field: 1 [ 321.223781][ T8808] tpg crop: (0,0)/640x360 [ 321.228431][ T8808] tpg compose: (0,0)/640x360 [ 321.233187][ T8808] tpg colorspace: 8 [ 321.428380][ T8808] tpg transfer function: 0/0 [ 321.433363][ T8808] tpg Y'CbCr encoding: 0/0 [ 321.541172][ T8808] tpg quantization: 0/0 [ 321.554941][ T8808] tpg RGB range: 0/2 [ 321.559139][ T8808] vivid-007: ================== END STATUS ================== [ 322.092705][ T30] audit: type=1800 audit(6043363706.253:9): pid=8816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.550" name="dummy_udc" dev="gadgetfs" ino=5463 res=0 errno=0 [ 322.470101][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.481735][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.354079][ T7955] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 323.374881][ T7955] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 323.393968][ T7955] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 323.426080][ T7955] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 323.437658][ T7955] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 324.060029][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.6.554'. [ 324.914472][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 325.601771][ T7955] Bluetooth: hci8: command tx timeout [ 325.989680][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.034048][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.042654][ T8842] bridge_slave_0: entered allmulticast mode [ 326.077031][ T8842] bridge_slave_0: entered promiscuous mode [ 326.100973][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.131392][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.145518][ T8842] bridge_slave_1: entered allmulticast mode [ 326.176968][ T8842] bridge_slave_1: entered promiscuous mode [ 326.448375][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.638673][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.854422][ T8842] team0: Port device team_slave_0 added [ 326.909590][ T8842] team0: Port device team_slave_1 added [ 327.288834][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.314761][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.390494][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.416844][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.457130][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.538317][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.653886][ T7955] Bluetooth: hci8: command tx timeout [ 328.400077][ T8842] hsr_slave_0: entered promiscuous mode [ 328.414966][ T8842] hsr_slave_1: entered promiscuous mode [ 328.422626][ T8842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.484409][ T8842] Cannot create hsr debugfs directory [ 329.733965][ T7955] Bluetooth: hci8: command tx timeout [ 330.743893][ T8842] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 330.818991][ T8842] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 330.915138][ T8842] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.956473][ T8842] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 331.331347][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.365812][ T8930] netlink: 350 bytes leftover after parsing attributes in process `syz.4.571'. [ 331.415463][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.469554][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.477323][ T7774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.577842][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.585724][ T7773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.826627][ T7955] Bluetooth: hci8: command tx timeout [ 333.157496][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.459493][ T8971] netlink: 330 bytes leftover after parsing attributes in process `syz.7.576'. [ 334.500285][ T8971] : renamed from gre0 (while UP) [ 334.530471][ T8971] netlink: 330 bytes leftover after parsing attributes in process `syz.7.576'. [ 334.691880][ T8842] veth0_vlan: entered promiscuous mode [ 334.717254][ T8842] veth1_vlan: entered promiscuous mode [ 334.894273][ T8842] veth0_macvtap: entered promiscuous mode [ 334.926644][ T8842] veth1_macvtap: entered promiscuous mode [ 335.012640][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.059891][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.118366][ T8842] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.132645][ T8842] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.144324][ T8842] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.154277][ T8842] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.276169][ T8983] input: f¬ as /devices/virtual/input/input23 [ 335.871869][ T937] smpboot: CPU 0 is now offline [ 335.891557][ T7775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.973085][ T7775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.280149][ T7773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.327982][ T7773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.341513][ T8995] FAULT_INJECTION: forcing a failure. [ 336.341513][ T8995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.427789][ T8995] CPU: 1 UID: 0 PID: 8995 Comm: syz.7.581 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 336.427825][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.427839][ T8995] Call Trace: [ 336.427846][ T8995] [ 336.427856][ T8995] dump_stack_lvl+0x16c/0x1f0 [ 336.427898][ T8995] should_fail_ex+0x512/0x640 [ 336.427928][ T8995] strncpy_from_user+0x3b/0x2e0 [ 336.427969][ T8995] getname_flags.part.0+0x8f/0x550 [ 336.428007][ T8995] getname_flags+0x93/0xf0 [ 336.428046][ T8995] do_sys_openat2+0xb8/0x1d0 [ 336.428078][ T8995] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.428122][ T8995] __x64_sys_openat+0x174/0x210 [ 336.428169][ T8995] ? __pfx___x64_sys_openat+0x10/0x10 [ 336.428214][ T8995] do_syscall_64+0xcd/0x230 [ 336.428251][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.428277][ T8995] RIP: 0033:0x7fa9b958e969 [ 336.428296][ T8995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.428319][ T8995] RSP: 002b:00007fa9b73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.428342][ T8995] RAX: ffffffffffffffda RBX: 00007fa9b97b5fa0 RCX: 00007fa9b958e969 [ 336.428358][ T8995] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 336.428372][ T8995] RBP: 00007fa9b9610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 336.428387][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.428401][ T8995] R13: 0000000000000000 R14: 00007fa9b97b5fa0 R15: 00007ffe393d0d58 [ 336.428430][ T8995] [ 336.608644][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.670645][ T9036] vivid-003: ================= START STATUS ================= [ 339.670686][ T9036] vivid-003: Radio HW Seek Mode: Bounded [ 339.670717][ T9036] vivid-003: Radio Programmable HW Seek: false [ 339.670740][ T9036] vivid-003: RDS Rx I/O Mode: Block I/O [ 339.670763][ T9036] vivid-003: Generate RBDS Instead of RDS: false [ 339.670788][ T9036] vivid-003: RDS Reception: true [ 339.670810][ T9036] vivid-003: RDS Program Type: 0 inactive [ 339.670839][ T9036] vivid-003: RDS PS Name: inactive [ 339.670867][ T9036] vivid-003: RDS Radio Text: inactive [ 339.670904][ T9036] vivid-003: RDS Traffic Announcement: false inactive [ 339.670933][ T9036] vivid-003: RDS Traffic Program: false inactive [ 339.670961][ T9036] vivid-003: RDS Music: false inactive [ 339.670988][ T9036] vivid-003: ================== END STATUS ================== [ 340.646065][ T9053] netlink: 266 bytes leftover after parsing attributes in process `syz.6.592'. [ 340.646092][ T9053] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.316960][ T9079] netlink: 'syz.4.596': attribute type 5 has an invalid length. [ 344.423235][ T9079] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 344.503365][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 345.023007][ T9069] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.074464][ T9069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.147001][ T9069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.197329][ T9069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.247423][ T9069] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.300530][ T9069] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 345.349439][ T9069] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 345.396400][ T9069] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 345.450049][ T9069] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 345.514347][ T9069] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 345.544485][ T9069] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 345.588311][ T9069] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 345.622642][ T9069] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 345.647748][ T9069] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 345.678390][ T9069] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 345.701993][ T9069] CPU0 is offline. [ 346.225487][ T9105] netlink: zone id is out of range [ 346.231306][ T9105] netlink: zone id is out of range [ 346.353872][ T9105] netlink: zone id is out of range [ 346.417447][ T9105] netlink: zone id is out of range [ 346.482671][ T9105] netlink: zone id is out of range [ 346.542760][ T7955] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.553809][ T9105] netlink: zone id is out of range [ 346.605458][ T9105] netlink: zone id is out of range [ 346.643965][ T9105] netlink: zone id is out of range [ 346.751231][ T9105] netlink: zone id is out of range [ 346.801699][ T9105] netlink: zone id is out of range [ 346.845040][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.604'. [ 347.096616][ T7955] Bluetooth: hci2: command 0x0c1a tx timeout [ 347.103030][ T7955] Bluetooth: hci1: command 0x0c1a tx timeout [ 347.254246][ T7655] Bluetooth: hci3: command 0x0c1a tx timeout [ 347.261275][ T7955] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.334429][ T7955] Bluetooth: hci5: command 0x0c1a tx timeout [ 347.430729][ T7955] Bluetooth: hci6: command 0x0c1a tx timeout [ 347.575480][ T7955] Bluetooth: hci7: command 0x0c1a tx timeout [ 347.658417][ T7955] Bluetooth: hci8: command 0x0c1a tx timeout [ 347.696402][ T9138] kvm: kvm [9136]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 348.144186][ T9138] netlink: 342 bytes leftover after parsing attributes in process `syz.4.607'. [ 348.577852][ T9147] QAT: failed to copy from user. [ 349.496288][ T7955] Bluetooth: hci6: command 0x0c1a tx timeout [ 349.653939][ T7955] Bluetooth: hci7: command 0x0c1a tx timeout [ 349.711607][ T9153] svc: failed to register nfsdv3 RPC service (errno 111). [ 349.734428][ T7955] Bluetooth: hci8: command 0x0c1a tx timeout [ 349.779829][ T9153] svc: failed to register nfsaclv3 RPC service (errno 111). [ 351.495821][ T9175] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 351.574033][ T7955] Bluetooth: hci6: command 0x0c1a tx timeout [ 351.734479][ T7955] Bluetooth: hci7: command 0x0c1a tx timeout [ 351.818715][ T7955] Bluetooth: hci8: command 0x0c1a tx timeout [ 352.251108][ T9182] Invalid ELF header magic: != ELF [ 352.861866][ T9191] HfR: entered promiscuous mode [ 352.900973][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 352.942750][ T9191] HfR: left promiscuous mode [ 353.012040][ T9192] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 353.406488][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.6.620'. [ 358.018129][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.632'. [ 358.125727][ T9243] FAULT_INJECTION: forcing a failure. [ 358.125727][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 358.267457][ T9243] CPU: 1 UID: 0 PID: 9243 Comm: syz.6.631 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 358.267492][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.267506][ T9243] Call Trace: [ 358.267515][ T9243] [ 358.267524][ T9243] dump_stack_lvl+0x16c/0x1f0 [ 358.267564][ T9243] should_fail_ex+0x512/0x640 [ 358.267589][ T9243] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 358.267619][ T9243] should_failslab+0xc2/0x120 [ 358.267650][ T9243] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 358.267675][ T9243] ? __proc_create+0xc3/0x8c0 [ 358.267703][ T9243] ? __proc_create+0x2ce/0x8c0 [ 358.267733][ T9243] __proc_create+0x2ce/0x8c0 [ 358.267762][ T9243] ? __pfx___proc_create+0x10/0x10 [ 358.267793][ T9243] ? proc_register+0x314/0x5f0 [ 358.267826][ T9243] proc_create_reg+0x7d/0x180 [ 358.267856][ T9243] ? __pfx_kcm_stats_seq_show+0x10/0x10 [ 358.267890][ T9243] proc_create_net_single+0x86/0x170 [ 358.267920][ T9243] ? __pfx_proc_create_net_single+0x10/0x10 [ 358.267963][ T9243] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 358.267994][ T9243] kcm_proc_init_net+0x52/0x120 [ 358.268027][ T9243] ops_init+0x1e2/0x5f0 [ 358.268060][ T9243] setup_net+0x21e/0x850 [ 358.268093][ T9243] ? __pfx_setup_net+0x10/0x10 [ 358.268131][ T9243] ? lockdep_init_map_type+0x5c/0x280 [ 358.268160][ T9243] ? __pfx_down_read_killable+0x10/0x10 [ 358.268186][ T9243] ? debug_mutex_init+0x37/0x70 [ 358.268224][ T9243] copy_net_ns+0x2a6/0x5f0 [ 358.268260][ T9243] create_new_namespaces+0x3ea/0xa90 [ 358.268306][ T9243] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 358.268347][ T9243] ksys_unshare+0x45b/0xa40 [ 358.268379][ T9243] ? __pfx_ksys_unshare+0x10/0x10 [ 358.268404][ T9243] ? xfd_validate_state+0x61/0x180 [ 358.268443][ T9243] __x64_sys_unshare+0x31/0x40 [ 358.268470][ T9243] do_syscall_64+0xcd/0x230 [ 358.268517][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.268542][ T9243] RIP: 0033:0x7fbfd5f8e969 [ 358.268562][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.268585][ T9243] RSP: 002b:00007fbfd6d82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 358.268607][ T9243] RAX: ffffffffffffffda RBX: 00007fbfd61b6160 RCX: 00007fbfd5f8e969 [ 358.268623][ T9243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 358.268637][ T9243] RBP: 00007fbfd6010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 358.268651][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.268664][ T9243] R13: 0000000000000000 R14: 00007fbfd61b6160 R15: 00007fffd30875a8 [ 358.268693][ T9243] [ 358.548208][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.033302][ T9263] nvme_fabrics: missing parameter 'transport=%s' [ 360.044501][ T9263] nvme_fabrics: missing parameter 'nqn=%s' [ 360.082960][ T9265] nvme_fabrics: unknown parameter or missing value '" ' in ctrl creation request [ 361.855531][ T9285] FAULT_INJECTION: forcing a failure. [ 361.855531][ T9285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.910934][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.6.643 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 361.910976][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.910991][ T9285] Call Trace: [ 361.911356][ T9285] [ 361.911380][ T9285] dump_stack_lvl+0x16c/0x1f0 [ 361.911427][ T9285] should_fail_ex+0x512/0x640 [ 361.911460][ T9285] should_fail_alloc_page+0xe7/0x130 [ 361.911505][ T9285] prepare_alloc_pages+0x3c2/0x610 [ 361.911547][ T9285] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 361.911574][ T9285] ? stack_trace_save+0x8e/0xc0 [ 361.911612][ T9285] ? __pfx_stack_trace_save+0x10/0x10 [ 361.911648][ T9285] ? stack_depot_save_flags+0x28/0xa40 [ 361.911679][ T9285] ? kasan_save_stack+0x42/0x60 [ 361.911702][ T9285] ? kasan_save_stack+0x33/0x60 [ 361.911724][ T9285] ? kasan_save_track+0x14/0x30 [ 361.911748][ T9285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 361.911774][ T9285] ? __handle_mm_fault+0xaac/0x5450 [ 361.911795][ T9285] ? do_user_addr_fault+0x7a6/0x1370 [ 361.911824][ T9285] ? asm_exc_page_fault+0x26/0x30 [ 361.911846][ T9285] ? __put_user_8+0xd/0x20 [ 361.911877][ T9285] ? fpu_xstate_prctl+0x5bd/0xa20 [ 361.911936][ T9285] ? __x64_sys_arch_prctl+0xb3/0x180 [ 361.911965][ T9285] ? do_syscall_64+0xcd/0x230 [ 361.911997][ T9285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.912034][ T9285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.912066][ T9285] ? policy_nodemask+0xea/0x4e0 [ 361.912097][ T9285] alloc_pages_mpol+0x1fb/0x550 [ 361.912127][ T9285] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 361.912172][ T9285] alloc_pages_noprof+0x131/0x390 [ 361.912203][ T9285] pte_alloc_one+0x19/0x380 [ 361.912236][ T9285] __pte_alloc+0x6d/0x3c0 [ 361.912265][ T9285] ? __pfx___pte_alloc+0x10/0x10 [ 361.912296][ T9285] ? _raw_spin_unlock+0x28/0x50 [ 361.912324][ T9285] ? __pmd_alloc+0x3fa/0x910 [ 361.912479][ T9285] __handle_mm_fault+0x45c8/0x5450 [ 361.912512][ T9285] ? __pfx___handle_mm_fault+0x10/0x10 [ 361.912552][ T9285] ? find_vma+0xbf/0x140 [ 361.912584][ T9285] ? __pfx_find_vma+0x10/0x10 [ 361.912621][ T9285] handle_mm_fault+0x3fe/0xad0 [ 361.912650][ T9285] do_user_addr_fault+0x7a6/0x1370 [ 361.912684][ T9285] ? rcu_is_watching+0x12/0xc0 [ 361.912725][ T9285] exc_page_fault+0x5c/0xb0 [ 361.912760][ T9285] asm_exc_page_fault+0x26/0x30 [ 361.912785][ T9285] RIP: 0010:__put_user_8+0xd/0x20 [ 361.912837][ T9285] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 [ 361.912862][ T9285] RSP: 0018:ffffc900044c7eb8 EFLAGS: 00050206 [ 361.912881][ T9285] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000003 [ 361.912897][ T9285] RDX: 0000000000080000 RSI: ffffffff8160c212 RDI: ffffffff8bf4f9c0 [ 361.912912][ T9285] RBP: 0000000000000003 R08: a23edf14cf8df726 R09: 0000000000000000 [ 361.912928][ T9285] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001021 [ 361.912941][ T9285] R13: 000000000000009e R14: 0000000000000000 R15: 0000000000000000 [ 361.912966][ T9285] ? fpu_xstate_prctl+0x5b2/0xa20 [ 361.913001][ T9285] fpu_xstate_prctl+0x5bd/0xa20 [ 361.913035][ T9285] __x64_sys_arch_prctl+0xb3/0x180 [ 361.913070][ T9285] do_syscall_64+0xcd/0x230 [ 361.913109][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.913134][ T9285] RIP: 0033:0x7fbfd5f8e969 [ 361.913155][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.913179][ T9285] RSP: 002b:00007fbfd6dc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 361.913201][ T9285] RAX: ffffffffffffffda RBX: 00007fbfd61b5fa0 RCX: 00007fbfd5f8e969 [ 361.913217][ T9285] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000001021 [ 361.913232][ T9285] RBP: 00007fbfd6010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 361.913247][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.913261][ T9285] R13: 0000000000000000 R14: 00007fbfd61b5fa0 R15: 00007fffd30875a8 [ 361.913293][ T9285] [ 362.391590][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.951360][ T7655] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 363.140380][ T7655] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 363.241785][ T7655] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 363.313899][ T7655] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 363.374422][ T7655] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 363.406196][ T7642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.449667][ T7642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.485725][ T7642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.494870][ T7642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.504705][ T7642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.812460][ T9299] block nbd7: not configured, cannot reconfigure [ 364.652231][ T9294] chnl_net:caif_netlink_parms(): no params data found [ 364.992891][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 365.496617][ T7655] Bluetooth: hci8: command tx timeout [ 365.577276][ T7655] Bluetooth: hci7: command tx timeout [ 365.602744][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.634496][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.652061][ T9294] bridge_slave_0: entered allmulticast mode [ 365.677811][ T9294] bridge_slave_0: entered promiscuous mode [ 365.716561][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.744027][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.773499][ T9294] bridge_slave_1: entered allmulticast mode [ 365.830940][ T9294] bridge_slave_1: entered promiscuous mode [ 366.144976][ T9294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.188753][ T9294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.256597][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.274838][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.294382][ T9288] bridge_slave_0: entered allmulticast mode [ 366.311882][ T9288] bridge_slave_0: entered promiscuous mode [ 366.522460][ T9329] FAULT_INJECTION: forcing a failure. [ 366.522460][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 366.554896][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.571764][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.584317][ T9288] bridge_slave_1: entered allmulticast mode [ 366.605501][ T9288] bridge_slave_1: entered promiscuous mode [ 366.621638][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.4.651 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 366.621677][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.621694][ T9329] Call Trace: [ 366.621702][ T9329] [ 366.621711][ T9329] dump_stack_lvl+0x16c/0x1f0 [ 366.621758][ T9329] should_fail_ex+0x512/0x640 [ 366.621785][ T9329] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 366.621817][ T9329] should_failslab+0xc2/0x120 [ 366.621848][ T9329] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 366.621875][ T9329] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 366.621917][ T9329] acpi_ut_create_generic_state+0x5c/0xb0 [ 366.621953][ T9329] acpi_ps_push_scope+0x22/0x230 [ 366.621978][ T9329] acpi_ps_parse_loop+0x9f3/0x1d00 [ 366.622029][ T9329] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 366.622068][ T9329] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 366.622095][ T9329] ? acpi_ut_create_thread_state+0x63/0x170 [ 366.622137][ T9329] acpi_ps_parse_aml+0x3c1/0xcb0 [ 366.622165][ T9329] acpi_ps_execute_method+0x55a/0xb30 [ 366.622195][ T9329] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 366.622228][ T9329] acpi_ns_evaluate+0x76c/0xca0 [ 366.622256][ T9329] ? kasan_save_track+0x14/0x30 [ 366.622285][ T9329] acpi_evaluate_object+0x1fa/0xa90 [ 366.622324][ T9329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.622353][ T9329] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 366.622392][ T9329] ? __mutex_trylock_common+0xe9/0x250 [ 366.622425][ T9329] acpi_evaluate_integer+0xdd/0x200 [ 366.622460][ T9329] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 366.622528][ T9329] ? __pfx_status_show+0x10/0x10 [ 366.622551][ T9329] status_show+0xa0/0x120 [ 366.622573][ T9329] ? __pfx_status_show+0x10/0x10 [ 366.622621][ T9329] dev_attr_show+0x53/0xe0 [ 366.622651][ T9329] ? __pfx_dev_attr_show+0x10/0x10 [ 366.622676][ T9329] sysfs_kf_seq_show+0x213/0x3e0 [ 366.622719][ T9329] seq_read_iter+0x506/0x12c0 [ 366.622771][ T9329] kernfs_fop_read_iter+0x40f/0x5a0 [ 366.622805][ T9329] ? rw_verify_area+0xcf/0x680 [ 366.622844][ T9329] vfs_read+0x8bc/0xc60 [ 366.622870][ T9329] ? __pfx___mutex_lock+0x10/0x10 [ 366.622907][ T9329] ? __pfx_vfs_read+0x10/0x10 [ 366.622950][ T9329] ksys_read+0x12a/0x250 [ 366.622973][ T9329] ? __pfx_ksys_read+0x10/0x10 [ 366.623004][ T9329] do_syscall_64+0xcd/0x230 [ 366.623042][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.623067][ T9329] RIP: 0033:0x7f484558e969 [ 366.623088][ T9329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.623112][ T9329] RSP: 002b:00007f4846484038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.623136][ T9329] RAX: ffffffffffffffda RBX: 00007f48457b6080 RCX: 00007f484558e969 [ 366.623153][ T9329] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 366.623168][ T9329] RBP: 00007f4845610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 366.623183][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.623197][ T9329] R13: 0000000000000000 R14: 00007f48457b6080 R15: 00007ffe8f9c71c8 [ 366.623228][ T9329] [ 367.247325][ T9329] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 367.397003][ T9294] team0: Port device team_slave_0 added [ 367.489807][ T9294] team0: Port device team_slave_1 added [ 367.567446][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.582023][ T7655] Bluetooth: hci8: command tx timeout [ 367.655243][ T7655] Bluetooth: hci7: command tx timeout [ 367.682636][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.981531][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.034782][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.105091][ T9336] netlink: 342 bytes leftover after parsing attributes in process `syz.6.652'. [ 368.152085][ T9294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.199315][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.255083][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.418131][ T9294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.500088][ T9288] team0: Port device team_slave_0 added [ 368.642988][ T9288] team0: Port device team_slave_1 added [ 369.243118][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.258384][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.331398][ T9288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.431475][ T9294] hsr_slave_0: entered promiscuous mode [ 369.452176][ T9294] hsr_slave_1: entered promiscuous mode [ 369.479493][ T9294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.504857][ T9294] Cannot create hsr debugfs directory [ 369.553590][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.580050][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.653545][ T9288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.666516][ T7655] Bluetooth: hci8: command tx timeout [ 369.735193][ T7655] Bluetooth: hci7: command tx timeout [ 370.200251][ T9288] hsr_slave_0: entered promiscuous mode [ 370.224375][ T9288] hsr_slave_1: entered promiscuous mode [ 370.264748][ T9288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.273395][ T9288] Cannot create hsr debugfs directory [ 371.381434][ T9294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.737384][ T7655] Bluetooth: hci8: command tx timeout [ 371.812985][ T9294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.836053][ T7655] Bluetooth: hci7: command tx timeout [ 372.166843][ T9294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.730107][ T9294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.568304][ T9294] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.641856][ T9294] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.725014][ T9294] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.768159][ T9294] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.120948][ T9288] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 374.225821][ T9288] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 374.348029][ T9288] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 374.406170][ T9288] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 374.883141][ T9294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.164665][ T9294] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.407649][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.416939][ T7763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.585678][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.594132][ T7775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.722354][ T9375] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.729764][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.789473][ T9375] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.906611][ T9375] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.026940][ T9375] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.104979][ T9375] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 376.267465][ T9375] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 376.348910][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.415531][ T9375] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 376.448971][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.460194][ T7641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.608881][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.619571][ T7641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.684692][ T9375] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 376.691889][ T9375] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 376.701332][ T7655] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.006275][ T9375] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 377.270641][ T9375] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 377.446115][ T9375] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 377.564970][ T9375] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 377.631350][ T9294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.683505][ T9375] CPU0 is offline. [ 377.694408][ T9390] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 377.816174][ T7655] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.976448][ T7655] Bluetooth: hci2: command 0x0c1a tx timeout [ 377.998386][ T9294] veth0_vlan: entered promiscuous mode [ 378.062708][ T7655] Bluetooth: hci3: command 0x0c1a tx timeout [ 378.144675][ T7655] Bluetooth: hci4: command 0x0c1a tx timeout [ 378.235181][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.274430][ T9294] veth1_vlan: entered promiscuous mode [ 378.298165][ T7655] Bluetooth: hci5: command 0x0c1a tx timeout [ 378.454489][ T7655] Bluetooth: hci6: command 0x0c1a tx timeout [ 378.565477][ T9294] veth0_macvtap: entered promiscuous mode [ 378.662488][ T9294] veth1_macvtap: entered promiscuous mode [ 378.787136][ T7655] Bluetooth: hci8: command 0x0c1a tx timeout [ 378.877939][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.948394][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.084384][ T9294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.129010][ T9294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.194973][ T9294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.260881][ T9294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.339359][ T7655] Bluetooth: hci7: command 0x0c1a tx timeout [ 379.551518][ T9418] netlink: 342 bytes leftover after parsing attributes in process `syz.4.663'. [ 379.630773][ T9413] Invalid ELF header magic: != ELF [ 380.125016][ T7762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.179679][ T7762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.389911][ T7641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.435859][ T7641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.542339][ T9288] veth0_vlan: entered promiscuous mode [ 380.640401][ T9288] veth1_vlan: entered promiscuous mode [ 380.854425][ T7655] Bluetooth: hci8: command 0x0c1a tx timeout [ 381.088239][ T9288] veth0_macvtap: entered promiscuous mode [ 381.165947][ T9288] veth1_macvtap: entered promiscuous mode [ 381.389958][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.423948][ T7655] Bluetooth: hci7: command 0x0c1a tx timeout [ 381.539025][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.631593][ T9288] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.690173][ T7655] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 381.718965][ T9288] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.754146][ T9288] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.806259][ T9288] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.938871][ T7655] Bluetooth: hci8: command 0x0c1a tx timeout [ 383.206855][ T9437] nvme_fcloop: unknown parameter or missing value '' [ 383.254803][ T31] INFO: task kworker/u8:20:6217 blocked for more than 143 seconds. [ 383.269605][ T31] Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 383.296362][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.379190][ T31] task:kworker/u8:20 state:D stack:24600 pid:6217 tgid:6217 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 383.426022][ T9438] nvme_fcloop: unknown parameter or missing value '' [ 383.453946][ T31] Workqueue: netns cleanup_net [ 383.479837][ T31] Call Trace: [ 383.494650][ T7655] Bluetooth: hci7: command 0x0c1a tx timeout [ 383.531973][ T31] [ 383.549901][ T31] __schedule+0x116a/0x5de0 [ 383.596188][ T31] ? __lock_acquire+0x622/0x1c90 [ 383.639686][ T31] ? __pfx___schedule+0x10/0x10 [ 383.664327][ T31] ? find_held_lock+0x2b/0x80 [ 383.691953][ T31] ? schedule+0x2d7/0x3a0 [ 383.722793][ T31] schedule+0xe7/0x3a0 [ 383.738370][ T31] schedule_timeout+0x257/0x290 [ 383.769818][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 383.787656][ T31] ? mark_held_locks+0x49/0x80 [ 383.814268][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.834004][ T31] __wait_for_common+0x2ff/0x4e0 [ 383.924817][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.932998][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.059064][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 384.113841][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 384.120875][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.203860][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 384.211988][ T31] __flush_workqueue+0x3e2/0x1230 [ 384.284248][ T31] ? __pfx___might_resched+0x10/0x10 [ 384.292284][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 384.355096][ T31] rxrpc_destroy_all_locals+0x40/0x180 [ 384.404502][ T31] rxrpc_exit_net+0x8b/0xc0 [ 384.410517][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 384.479430][ T31] ops_exit_list+0xb3/0x180 [ 384.503795][ T31] cleanup_net+0x5c1/0xb30 [ 384.509171][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 384.572726][ T31] ? rcu_is_watching+0x12/0xc0 [ 384.581843][ T31] process_one_work+0x9cc/0x1b70 [ 384.623876][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 384.629664][ T31] ? __pfx_process_one_work+0x10/0x10 [ 384.671200][ T31] ? assign_work+0x1a0/0x250 [ 384.702940][ T31] worker_thread+0x6c8/0xf10 [ 384.724656][ T31] ? __kthread_parkme+0x19e/0x250 [ 384.731632][ T31] ? __pfx_worker_thread+0x10/0x10 [ 384.765146][ T31] kthread+0x3c5/0x780 [ 384.769819][ T31] ? __pfx_kthread+0x10/0x10 [ 384.823966][ T31] ? __pfx_kthread+0x10/0x10 [ 384.829089][ T31] ? __pfx_kthread+0x10/0x10 [ 384.856501][ T31] ? __pfx_kthread+0x10/0x10 [ 384.877570][ T31] ? rcu_is_watching+0x12/0xc0 [ 384.883324][ T31] ? __pfx_kthread+0x10/0x10 [ 384.927243][ T31] ret_from_fork+0x45/0x80 [ 384.933576][ T31] ? __pfx_kthread+0x10/0x10 [ 384.995509][ T31] ret_from_fork_asm+0x1a/0x30 [ 385.023837][ T31] [ 385.043914][ T31] INFO: task syz.2.333:7720 blocked for more than 145 seconds. [ 385.063777][ T9288] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 385.095430][ T31] Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 [ 385.210139][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 385.259447][ T31] task:syz.2.333 state:D stack:26376 pid:7720 tgid:7719 ppid:5834 task_flags:0x400140 flags:0x00004006 [ 385.333891][ T31] Call Trace: [ 385.339136][ T31] [ 385.342814][ T31] __schedule+0x116a/0x5de0 [ 385.366377][ T31] ? __pfx___schedule+0x10/0x10 [ 385.401770][ T31] ? find_held_lock+0x2b/0x80 [ 385.414936][ T31] ? schedule+0x2d7/0x3a0 [ 385.420482][ T31] schedule+0xe7/0x3a0 [ 385.443775][ T31] schedule_timeout+0x257/0x290 [ 385.449877][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 385.481822][ T31] ? mark_held_locks+0x49/0x80 [ 385.495093][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.515736][ T31] __wait_for_common+0x2ff/0x4e0 [ 385.534764][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 385.543534][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 385.586703][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.603843][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 385.611819][ T31] __flush_workqueue+0x3e2/0x1230 [ 385.655211][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 385.663192][ T31] ? find_held_lock+0x2b/0x80 [ 385.688492][ T31] ? rxrpc_discard_prealloc+0xb6/0x970 [ 385.714068][ T31] ? rxrpc_release_calls_on_socket+0x18a/0x300 [ 385.741309][ T31] rxrpc_release+0x1d9/0x560 [ 385.755956][ T31] sock_release+0x91/0x1d0 [ 385.775559][ T31] afs_open_socket+0x2c3/0x380 [ 385.781591][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 385.824594][ T31] ? proc_create_net_single_write+0x141/0x1b0 [ 385.832480][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 385.873471][ T31] afs_net_init+0x746/0x9f0 [ 385.895368][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 385.924566][ T31] ops_init+0x1e2/0x5f0 [ 385.929740][ T31] setup_net+0x21e/0x850 [ 385.953974][ T31] ? __pfx_setup_net+0x10/0x10 [ 385.962728][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 386.015459][ T31] ? __pfx_down_read_killable+0x10/0x10 [ 386.028247][ T31] ? debug_mutex_init+0x37/0x70 [ 386.054861][ T31] copy_net_ns+0x2a6/0x5f0 [ 386.061386][ T31] create_new_namespaces+0x3ea/0xa90 [ 386.092938][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 386.107413][ T31] ksys_unshare+0x45b/0xa40 [ 386.112606][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 386.143794][ T31] ? xfd_validate_state+0x61/0x180 [ 386.150014][ T31] __x64_sys_unshare+0x31/0x40 [ 386.173785][ T31] do_syscall_64+0xcd/0x230 [ 386.180989][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.203846][ T31] RIP: 0033:0x7f25b598e969 [ 386.223791][ T31] RSP: 002b:00007f25b6887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 386.253789][ T31] RAX: ffffffffffffffda RBX: 00007f25b5bb5fa0 RCX: 00007f25b598e969 [ 386.263403][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 386.300435][ T31] RBP: 00007f25b5a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 386.333835][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.342768][ T31] R13: 0000000000000000 R14: 00007f25b5bb5fa0 R15: 00007ffd8718c038 [ 386.384501][ T31] [ 386.417834][ T31] INFO: task syz.1.343:7794 blocked for more than 146 seconds. [ 386.489564][ T31] Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 [ 386.539844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.598872][ T31] task:syz.1.343 state:D stack:23608 pid:7794 tgid:7793 ppid:5839 task_flags:0x400140 flags:0x00004004 [ 386.654129][ T31] Call Trace: [ 386.658603][ T31] [ 386.662053][ T31] __schedule+0x116a/0x5de0 [ 386.688229][ T31] ? __pfx___schedule+0x10/0x10 [ 386.709176][ T31] ? find_held_lock+0x2b/0x80 [ 386.734843][ T31] ? schedule+0x2d7/0x3a0 [ 386.741757][ T31] schedule+0xe7/0x3a0 [ 386.753756][ T31] schedule_timeout+0x257/0x290 [ 386.759350][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 386.785967][ T31] ? mark_held_locks+0x49/0x80 [ 386.791267][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.841442][ T31] __wait_for_common+0x2ff/0x4e0 [ 386.856189][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 386.863186][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 386.886946][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.893594][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 386.926097][ T31] __flush_workqueue+0x3e2/0x1230 [ 386.931796][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 386.964580][ T31] ? find_held_lock+0x2b/0x80 [ 386.971782][ T31] ? rxrpc_discard_prealloc+0xb6/0x970 [ 386.994143][ T31] ? rxrpc_release_calls_on_socket+0x18a/0x300 [ 387.003121][ T31] rxrpc_release+0x1d9/0x560 [ 387.034808][ T31] __sock_release+0xb0/0x270 [ 387.040506][ T31] ? __pfx_sock_close+0x10/0x10 [ 387.064663][ T31] sock_close+0x1c/0x30 [ 387.070906][ T31] __fput+0x402/0xb70 [ 387.086574][ T31] task_work_run+0x14d/0x240 [ 387.092056][ T31] ? __pfx_task_work_run+0x10/0x10 [ 387.144693][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 387.164001][ T31] syscall_exit_to_user_mode+0x25f/0x290 [ 387.170810][ T31] do_syscall_64+0xda/0x230 [ 387.193851][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.200323][ T31] RIP: 0033:0x7fa38278e969 [ 387.214469][ T31] RSP: 002b:00007fa3835ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 387.243520][ T31] RAX: 0000000000000000 RBX: 00007fa3829b5fa0 RCX: 00007fa38278e969 [ 387.274199][ T31] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 387.296170][ T31] RBP: 00007fa382810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 387.337436][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.374163][ T31] R13: 0000000000000000 R14: 00007fa3829b5fa0 R15: 00007fffc5225288 [ 387.403858][ T31] [ 387.409941][ T31] [ 387.409941][ T31] Showing all locks held in the system: [ 387.544809][ T31] 1 lock held by pool_workqueue_/3: [ 387.550985][ T31] #0: ffffffff8e3cd838 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 387.614923][ T31] 1 lock held by khungtaskd/31: [ 387.620344][ T31] #0: ffffffff8e3c2280 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 387.674245][ T31] 3 locks held by kworker/1:1/44: [ 387.681493][ T31] #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 387.723736][ T31] #1: ffffc90000b47d18 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 387.774016][ T31] #2: ffffffff8e3cd700 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 387.805169][ T31] 3 locks held by kworker/u8:20/6217: [ 387.812029][ T31] #0: ffff88801c2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 387.863768][ T31] #1: ffffc90003557d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 387.894354][ T31] #2: ffffffff90124710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 387.957231][ T31] 1 lock held by syz.2.333/7720: [ 387.962712][ T31] #0: ffffffff90124710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 388.003803][ T31] 3 locks held by kworker/u10:6/7762: [ 388.009351][ T31] #0: ffff88801b489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.050283][ T31] #1: ffffc90003467d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.067671][ T31] #2: ffffffff9013a5a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 388.078825][ T31] 3 locks held by kworker/u10:7/7763: [ 388.085369][ T31] #0: ffff88814c5a0148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.100348][ T31] #1: ffffc90003457d18 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.115799][ T31] #2: ffffffff9013a5a8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 388.127829][ T31] 1 lock held by syz.1.343/7794: [ 388.146044][ T31] #0: ffff888062118e08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 388.165728][ T31] 1 lock held by syz-executor/7954: [ 388.176831][ T31] #0: ffffffff9013a5a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 388.189053][ T31] 1 lock held by syz.3.422/8186: [ 388.197765][ T31] #0: ffffffff90124710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 388.214635][ T31] 1 lock held by syz.5.447/8287: [ 388.222144][ T31] #0: ffff88805ee8b808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 388.236581][ T31] 2 locks held by syz-executor/8349: [ 388.247085][ T31] #0: ffffffff9013a5a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 388.265710][ T31] #1: ffffffff8e3cd838 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 388.286178][ T31] 2 locks held by getty/8648: [ 388.292364][ T31] #0: ffff888031b250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 388.305997][ T31] #1: ffffc90004bb32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 388.321252][ T31] 1 lock held by syz.0.524/8678: [ 388.327191][ T31] #0: ffffffff90124710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 388.347857][ T31] 1 lock held by syz.8.602/9125: [ 388.364057][ T31] #0: ffff88804a873808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 388.393312][ T31] 1 lock held by syz.7.606/9134: [ 388.401946][ T31] #0: ffffffff90124710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 388.414386][ T31] 1 lock held by syz-executor/9288: [ 388.422165][ T31] #0: ffffffff9013a5a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 388.448492][ T31] 2 locks held by syz.2.666/9430: [ 388.456565][ T31] #0: ffffffff90124710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 388.483270][ T31] #1: ffffffff9013a5a8 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0 [ 388.500446][ T31] 2 locks held by syz.2.666/9431: [ 388.510373][ T31] #0: ffffffff90124710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 388.527107][ T31] #1: ffffffff9013a5a8 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0 [ 388.585598][ T31] [ 388.588725][ T31] ============================================= [ 388.588725][ T31] [ 388.689906][ T31] NMI backtrace for cpu 1 [ 388.689928][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 388.689959][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.689972][ T31] Call Trace: [ 388.689980][ T31] [ 388.689989][ T31] dump_stack_lvl+0x116/0x1f0 [ 388.690031][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 388.690057][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 388.690091][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.690120][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 388.690150][ T31] watchdog+0xf70/0x12c0 [ 388.690186][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.690214][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 388.690249][ T31] ? __kthread_parkme+0x19e/0x250 [ 388.690276][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.690305][ T31] kthread+0x3c5/0x780 [ 388.690335][ T31] ? __pfx_kthread+0x10/0x10 [ 388.690362][ T31] ? __pfx_kthread+0x10/0x10 [ 388.690389][ T31] ? __pfx_kthread+0x10/0x10 [ 388.690417][ T31] ? __pfx_kthread+0x10/0x10 [ 388.690454][ T31] ? rcu_is_watching+0x12/0xc0 [ 388.690503][ T31] ? __pfx_kthread+0x10/0x10 [ 388.690531][ T31] ret_from_fork+0x45/0x80 [ 388.690557][ T31] ? __pfx_kthread+0x10/0x10 [ 388.690585][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.690620][ T31] [ 388.690640][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 388.870452][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 388.885244][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.898638][ T31] Call Trace: [ 388.903326][ T31] [ 388.906630][ T31] dump_stack_lvl+0x3d/0x1f0 [ 388.911678][ T31] panic+0x71c/0x800 [ 388.918307][ T31] ? __pfx_panic+0x10/0x10 [ 388.923522][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 388.928869][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 388.937099][ T31] ? irq_work_queue+0xce/0x100 [ 388.942781][ T31] ? watchdog+0xdda/0x12c0 [ 388.947894][ T31] ? watchdog+0xdcd/0x12c0 [ 388.952577][ T31] watchdog+0xdeb/0x12c0 [ 388.957348][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.962971][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 388.968891][ T31] ? __kthread_parkme+0x19e/0x250 [ 388.975049][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.981627][ T31] kthread+0x3c5/0x780 [ 388.986182][ T31] ? __pfx_kthread+0x10/0x10 [ 388.991327][ T31] ? __pfx_kthread+0x10/0x10 [ 388.998050][ T31] ? __pfx_kthread+0x10/0x10 [ 389.003446][ T31] ? __pfx_kthread+0x10/0x10 [ 389.008567][ T31] ? rcu_is_watching+0x12/0xc0 [ 389.017010][ T31] ? __pfx_kthread+0x10/0x10 [ 389.025147][ T31] ret_from_fork+0x45/0x80 [ 389.029955][ T31] ? __pfx_kthread+0x10/0x10 [ 389.037251][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.042823][ T31] [ 389.046581][ T31] Kernel Offset: disabled [ 389.052617][ T31] Rebooting in 86400 seconds..