last executing test programs: 22m30.776663119s ago: executing program 32 (id=69): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x0, 0x407, 0x100000) 8m17.817586529s ago: executing program 33 (id=4646): openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) open(0x0, 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r2, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 4m32.759096857s ago: executing program 0 (id=5277): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) read$auto_hwsim_fops_group_(r0, &(0x7f0000000300)=""/238, 0xee) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='5', 0x1) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000004ec0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_NOOP(r3, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000004f00)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m31.725165602s ago: executing program 0 (id=5278): madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x4, 0x80, 0x401) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xa0e00, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) ioctl$auto(r1, 0x4001af83, r0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r2, 0x0, 0x5) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) syslog$auto(0x3, 0x0, 0x5) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) 4m31.274174486s ago: executing program 0 (id=5280): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) setrlimit$auto(0xb, 0x0) r1 = getpid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x21, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 4m30.921497923s ago: executing program 0 (id=5282): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) fanotify_init$auto(0x8, 0x401) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) mmap$auto(0x0, 0x400000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x100, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x40aa2, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/wg1/retrans_time\x00', 0x82, 0x0) write$auto(r1, &(0x7f0000000040)='\xd9\xc8f\xc4\xe6', 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x1}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x810) 4m30.413141725s ago: executing program 0 (id=5283): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd10/range\x00', 0x70004, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) mmap$auto(0x6, 0x2, 0x4, 0x15, r0, 0xe8dd) write$auto(r0, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/zram0/max_comp_streams\x00', 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) read$auto(r3, 0x0, 0x7ff) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0x5c8) write$auto(0x3, 0x0, 0x5c8) 4m30.043020384s ago: executing program 0 (id=5284): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001000200"], 0x30}}, 0x4000) connect$auto(0x3, 0x0, 0x55) write$auto(0x3, 0x0, 0xfdef) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x4080000, 0x9, 0x3, 0xb, 0x5, 0x4fff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0xfffffffffffffffd]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) 4m14.984193838s ago: executing program 34 (id=5284): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001000200"], 0x30}}, 0x4000) connect$auto(0x3, 0x0, 0x55) write$auto(0x3, 0x0, 0xfdef) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x4080000, 0x9, 0x3, 0xb, 0x5, 0x4fff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0xfffffffffffffffd]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) 2m46.895973646s ago: executing program 4 (id=5492): r0 = pidfd_open$auto(0x1, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x72582, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000040)) madvise$auto(0x8000000000000000, 0x0, 0xe) setns(r0, 0x4000000) umount2$auto(&(0x7f0000000000)='.\x00', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8001, 0x40) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq0/address\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x20) 2m45.881097671s ago: executing program 4 (id=5497): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x340, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) msgctl$auto(0x3, 0xb7, &(0x7f0000000180)={{0x4, 0x0, 0xffffffffffffffff, 0x3, 0x418, 0xf, 0x2}, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x8, 0x9, 0x967, 0xc, 0xffffffffffffffff, 0x6, 0x3, 0x11d4, 0x8, @raw=0x5, @inferred=0xffffffffffffffff}) msgctl$auto_IPC_STAT(0x3ff, 0x2, &(0x7f0000000280)={{0x9, 0xee01, 0xee01, 0x4, 0x5, 0x7f, 0x3}, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x1, 0x496, 0xd, 0x100, 0x7, 0x80000001, 0x5, 0xff00, 0x9, @inferred=0x0, @inferred=0xffffffffffffffff}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000480)={{0x1, r2, r3, 0x10001, 0xfffffff7, 0x5, 0x6}, &(0x7f0000000380), &(0x7f00000003c0)=0x2, 0x0, 0x5, 0x9, 0x3, 0x8001, 0x1, 0xf72, 0x8, @inferred=r4, @raw=0x3}) socket(0x2, 0x1, 0x106) fcntl$auto(0x3, 0x4, 0xa553) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000001880)={0x3c0, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINKS={0x364, 0x138, 0x0, 0x1, [{0x360, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [@nested={0xc, 0x9c, 0x0, 0x1, [@generic, @generic, @nested={0x4, 0xf3}, @nested={0x4, 0x4}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x34a, 0x2d, 0x0, 0x1, [@nested={0x1ae, 0xd1, 0x0, 0x1, [@generic="135c7bbec3a2d8138f0795b620e57bdc203bb28f9d262d8efe4eb98f54eb7e9e9a02825245a0f974a4841c97673cb55c3e9a317a2f7b8a877dd7853013e47220663d709e7ca942fe636e094645cf764e4ea3921a073f7dba7db11c6fce51b76ef91e746f0021cf67206dc9c823208a876dcd7d7e8070f2a0ec12ae4d1cb276bca12de5a7db8ce1f79d8002d767b3bc5a68320d5e856c2e373f8127bbdedd99a0", @generic="2e8ec4d04fbe750368f6155bea25f83deba909dca6c890f8ceeba60c01fe75013a2c913d793200b312", @generic="5709e05b5a1a9ce9c0bc43ebaba5f76e15df55510a1941b242b094a76d8c8ac7528854f88f2b5ea9bac12ce565e397f2f2a426b48a471cce7a520f0133a91b7955bef18004b9b329260de5f2ec29181e2282b04bbbc078b6c161a798ca783f227a55715dff808a33e9f997bea35811233eb4a7a77d19878784d1f90fb012d17cec0f9d9dcf143c97d0c170545a5bbd45", @generic="8a3e5b7a749500a7cbc816a64a055707cafe74fb12b515cceb8110ab66f424099929078111bbae094fb0de291751ce61d35887936355b22baaf740b880b992980de6e6c28a6d813ee8e8036bb6a52bc650"]}, @nested={0x34, 0xf7, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x9, 0x0}}, @nested={0x4, 0xe0}, @nested={0x4, 0x89}, @typed={0x8, 0x97, 0x0, 0x0, @pid}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x97}, @nested={0x4, 0xc8}]}, @nested={0x97, 0x135, 0x0, 0x1, [@generic="3e005002c992c6c4bc72f0c7b607cf5d24b21525647d081e9eaeb73abad9b0c3a035503deae0d1d1aa3b274a9f9bd80c74d8d1bcfeb98c904b32ba7ba740d4bcd5db502c0e549e1cf3cb28335b08dca1c7c9c95a1bbe9b20d004967f9393128beb078be9f7fc059040065e9316e075aa0b81176b4505a9aab0d2671a26f4e817abc2d4c0f9664c77f78be4235da507", @nested={0x4, 0x60}]}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=r5}, @generic="74d3082ba4d43874b338915f88eb5b06a1774adee7dccb432405222f81c98f15159b135d0cca44518d5ef91c16b38fa1a01c4a6a1a7c84ae60d5109a5565d9da9ad357684df8d6bc65e104bc4c36d39d502c15da87a2e44c33103d581b2d0e148c999a53371816ceae0de22820e7630e9099f97eafea66c55d84c031b78d9ea94c50a0f69ebd2b4cd3b094c0e1a69edf53ceba6795e0fc11e392f90f35902d63e38f6406c9c7eb0be1b3159a74afaeb08ce5883fda09b807023638bfd9db0822049a"]}]}]}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x9}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe2, 0xb}}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}, @NL80211_ATTR_MLD_ADDR={0x30, 0x13a, "6c775a7b0f7d76366b313a9bb950fa8e4e60753f791b88277054b89fff3cc02154edc02e204952689dda3ce6"}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x840}, 0x800) unshare$auto(0x40000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r7, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x2c, r8, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) r9 = timerfd_create$auto(0x6b, 0x7fff) ioctl$auto_XFS_IOC_ALLOCSP(r9, 0x4030580a, &(0x7f0000000400)={0x2, 0x3, 0x8, 0x8, 0x4, r6}) ptrace$auto_PTRACE_SETREGS(0xd, r10, 0x5, 0xc) 2m44.880913656s ago: executing program 4 (id=5499): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, 0x0, 0x3, 0x3) r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_PRIORITY(r0, 0x3, 0xc, 0x0, &(0x7f0000000340)=0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) userfaultfd$auto(0x1) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(r1, 0x400, 0x46, &(0x7f00000000c0)='/proc/self/net/dev\x00', 0x3ff) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x80040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xf, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x4, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mkdir$auto(0x0, 0xb) 2m43.550666559s ago: executing program 4 (id=5505): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) mmap$auto(0x8, 0x9, 0x4151, 0x12, r1, 0xa) read$auto(0x3, 0x0, 0x80) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) mremap$auto(0xfffff000, 0x7, 0x4, 0x7, 0x1001ff000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 2m42.477971979s ago: executing program 4 (id=5509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0x8004}, 0x2000c880) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) getcwd$auto(&(0x7f0000000000)='TIPCv2\x00', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) getxattr$auto(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=':*@,]\x00', &(0x7f0000000640)="6c3cb016e9724cf4701f3febcb773446f063884717bcdc46ce5baca342c6ba7cb8dd656e269b4676e32e74557754b79f9702776495e047dbf524c12bd165ce1f64d677", 0x5) syz_clone(0x82010000, &(0x7f00000001c0)="8c554abbe16400960d89a1bff9cd5e051186ce3025de0047b8133f1d2ee58047436df8ac2e788b61307f2ce3cd7aa6cef55c4fb7a3fddf06eadfd573044c96309977f8d51229f0e2fef94d4ba11709b6c4f916ddbe304f72a77d50e2d257f1515562a1710070367858e51fb120af5d95e8aa4a10197c2e3837f5dfeb28d4a50aaa468a685223a98a790e653c69a7e2151ceb70deb531a9afcb713d0a90f92d3baacfd6d014567186d1d42ca0c81a8a31c23ae7e6a4c90d18", 0xb8, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000300)="535852b4ddaeee86d36bcb16df8d8a904e9f21333dde8aa52cfdf25bd807bd07d6b375d977af89a0f332b4bf45c05a466f5a1f9631e69e9932a32dfcba0ad60afb1e97d4138cd7df835ac12619dab9014a4d7a96ec21479087b7e47fa58d35b1948ad0317a2f570a21489f0eae9928d369949abab646591119c6cda2fa762375f2499509295c426d3438e66270f3068200500f246abae1764c21eab4b75be94092f0f09664ba68daae6cadecb436e99e1c930a3c1cf4dc20ae1a6decf66f52bd58fd9cd5ccf75dca56afb46de7d99b5f3e4de0b4a8") r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) getcwd$auto(&(0x7f0000000400)='[^!#~^\x00', 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x4002040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bpq4/queues/tx-0/xps_rxqs\x00', 0x2, 0x0) write$auto(r5, &(0x7f00000002c0)='0QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x03\x00\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabtB\xdf\x98\n\x0f\x9e\xd1\xaf\xe0c;i\t\xe4\xbd\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xd7\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\xa0\x0f\xc7i\xe2VQ\x95\xa5 \xbdx\xa4\x01\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x7f\x00\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x02\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0e\x02\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x4, 0x0, 0x3a, 0x6e2e, 0xfffffffb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(0x3, 0x0, 0xfdef) lseek$auto(0x3, 0xfffffffffffffff7, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m34.458168649s ago: executing program 6 (id=5531): ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) futex$auto(0x0, 0xd, 0x4, &(0x7f0000000000)={0x200000000000a, 0x6}, 0x0, 0x8) open(0x0, 0x183242, 0x154) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x10011, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r0, 0x0, 0xfffbfd72) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) mlockall$auto(0x8000000000000001) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 2m32.077682773s ago: executing program 6 (id=5537): socket(0x10, 0x2, 0x0) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media5\x00', 0x202, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) socketpair$auto(0x3, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 2m31.634360864s ago: executing program 6 (id=5538): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7fb, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x5, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) 2m29.390948732s ago: executing program 6 (id=5544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0x8004}, 0x2000c880) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) getcwd$auto(&(0x7f0000000000)='TIPCv2\x00', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) getxattr$auto(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=':*@,]\x00', &(0x7f0000000640)="6c3cb016e9724cf4701f3febcb773446f063884717bcdc46ce5baca342c6ba7cb8dd656e269b4676e32e74557754b79f9702776495e047dbf524c12bd165ce1f64d677", 0x5) syz_clone(0x82010000, &(0x7f00000001c0)="8c554abbe16400960d89a1bff9cd5e051186ce3025de0047b8133f1d2ee58047436df8ac2e788b61307f2ce3cd7aa6cef55c4fb7a3fddf06eadfd573044c96309977f8d51229f0e2fef94d4ba11709b6c4f916ddbe304f72a77d50e2d257f1515562a1710070367858e51fb120af5d95e8aa4a10197c2e3837f5dfeb28d4a50aaa468a685223a98a790e653c69a7e2151ceb70deb531a9afcb713d0a90f92d3baacfd6d014567186d1d42ca0c81a8a31c23ae7e6a4c90d18", 0xb8, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000300)="535852b4ddaeee86d36bcb16df8d8a904e9f21333dde8aa52cfdf25bd807bd07d6b375d977af89a0f332b4bf45c05a466f5a1f9631e69e9932a32dfcba0ad60afb1e97d4138cd7df835ac12619dab9014a4d7a96ec21479087b7e47fa58d35b1948ad0317a2f570a21489f0eae9928d369949abab646591119c6cda2fa762375f2499509295c426d3438e66270f3068200500f246abae1764c21eab4b75be94092f0f09664ba68daae6cadecb436e99e1c930a3c1cf4dc20ae1a6decf66f52bd58fd9cd5ccf75dca56afb46de7d99b5f3e4de0b4a8") r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) getcwd$auto(&(0x7f0000000400)='[^!#~^\x00', 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x4002040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bpq4/queues/tx-0/xps_rxqs\x00', 0x2, 0x0) write$auto(r5, &(0x7f00000002c0)='0QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x03\x00\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabtB\xdf\x98\n\x0f\x9e\xd1\xaf\xe0c;i\t\xe4\xbd\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xd7\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\xa0\x0f\xc7i\xe2VQ\x95\xa5 \xbdx\xa4\x01\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x7f\x00\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x02\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0e\x02\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 2m26.361514928s ago: executing program 35 (id=5511): socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @remote}, 0x54) mmap$auto(0x0, 0x2020009, 0x1000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty59\x00', 0x802, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram11/queue/add_random\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101401, 0x0) pipe$auto(0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdf3) 2m13.953371572s ago: executing program 36 (id=5545): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 1m33.423535506s ago: executing program 7 (id=5628): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mmap$auto(0x235, 0x40000a, 0x20000000000d, 0x208018, 0xffffffffffffffff, 0x200000001) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40800, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0xa, 0x40000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x781a82, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) 1m30.812030731s ago: executing program 7 (id=5635): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, 0x0) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000240), 0x400) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24008001) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x8200, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1001, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m27.885345857s ago: executing program 7 (id=5641): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0x74c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x4040080) prctl$auto(0x42, 0x78f, 0x0, 0x8, 0x1000000f759) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) r5 = open(0x0, 0x261c2, 0x8c) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f0000000300)=@bpf_attr_4={0x4, r6, 0x10, r1}, 0xc) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80580, 0x0) 1m26.800891949s ago: executing program 7 (id=5645): unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) sendfile$auto(r2, r2, 0x0, 0x4000000a1f) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 1m24.844841961s ago: executing program 7 (id=5649): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) getpid() r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r3, 0x0, 0x4000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xec}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x922e}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1000}]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 1m22.259609775s ago: executing program 7 (id=5653): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) msgctl$auto_MSG_STAT(0x91b, 0xb, &(0x7f0000000140)={{0x8, 0x0, 0xee01, 0x8, 0x38a2, 0x40, 0x7}, &(0x7f0000000080)=0x7f, &(0x7f0000000100)=0x8, 0x0, 0x0, 0x80000000, 0x8, 0x7fffffff, 0xd, 0xfffe, 0x3, @raw=0x2, @inferred=0xffffffffffffffff}) setuid$auto(r1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000200), 0x221400, 0x0) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd1) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) set_tid_address$auto(&(0x7f0000000300)=0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x183042, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="4f72b0", 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) mmap$auto(0x0, 0x6, 0x100000004000de, 0x9b72, 0x2, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x4180, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r4, &(0x7f0000000380)="78e7a617635438c521f9097ff627243b672ec56607f02b1efbe9d6d14d71d8114e364536d840fe124423c62e4c67a27ea3ee6b7fb12cf578aac45ae4f66cce7f9a89b05f24a1f18addbcd04dbfce399fe46d714ea0f15f9f78d4a05098656623c94f374cf94ee90620a92d4f12b273990cd50ee5cd1593dfa23728409240eb8fc70990c4b3a97205f1bfeb62f523b58f5a4a0c92596c23cde17e40909cd4af7f6c40075f2bd21cf6581499e6193c8c118e7f04ebb54bc045a35bbe2eaa9a4f5fd28080aff01a3f5e0fd62b11538a3347bf788c8dbad95ddfddaad5fa4000d2239635000efd789aea861724a2cfd0f481d9063fa0", 0xf4) write$auto(0x3, 0x0, 0xffd8) 1m21.801118541s ago: executing program 2 (id=5655): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x400, 0x0) read$auto(r0, 0x0, 0x1f43) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = epoll_create$auto(0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdc00, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) sendmsg$auto_HANDSHAKE_CMD_DONE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r1}, @HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r6}, @HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0x4}, @HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0x7cb6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r6, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyd5\x00', 0x10280, 0x0) ioctl$auto_TCSBRKP2(r9, 0x5425, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x9e, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x80003}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x194, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_CSA_IES={0x170, 0xb9, 0x0, 0x1, [@nested={0xe8, 0x64, 0x0, 0x1, [@generic="3068bb43919758d8b9000ccbb9243ca0e7af2686b399db2c30ce6ea46eb81d8166b0cf6f66ccf411fd782d35c327d7cfb370fe37be9431bc49ebe54515ef7595ebccf565e64e6cd338228aa013ba1941a8b0bfe42b0bd6c2e675d17670c0ed383853790e6450d5febbb1e6b67106f2624af346f5093acfebb18bca19023baf48664ac49ad78f4e0297ae", @generic="46690d7318d45aa003fadc365dd98a9bf134387e23da344dd5ccd894cf07abb20a4d9de2088823d5ed95ed073b71ca65bce423eae67ca748a7b30cbba7001c48234b59bdaa55b748643df96c7701cc953c3aae8a846e13c1b438"]}, @generic="8a6f4ba13f29294325aabf20834ac03e809dd7a8c948c766138a1a984db5c03d1c6d2da9427ebadff66c6a055a30ff2fd316388b9bfd38580f7a64bf84cdd0b5809b72848fa511a3db686415d20c8cc0575a93f2c1e324a6bfea5e79fb019fb79d607cc482ce82bb916548c89a3ab0ac15d6ee2c5737a20134898097c7b598c1b541e2a2"]}]}, 0x194}}, 0x24040000) 1m20.406746508s ago: executing program 2 (id=5657): mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r0, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fchmodat$auto(r2, &(0x7f0000000080)='./cgroup\x00', 0x2003) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) setreuid$auto(0x80000000, 0x7fffffffffffffff) ioctl$auto_SNDCTL_DSP_POST(r4, 0x5008, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000080), 0x20901, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x1000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) setreuid$auto(0x7, 0x806) ioctl$auto(0x3, 0x8b0b, 0x91) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000000c0)={0x101, 0x0}) keyctl$auto(0x7, 0xfffffffb, 0x2, r6, 0x8) 1m18.16351512s ago: executing program 2 (id=5663): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x3, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) 1m16.677893143s ago: executing program 2 (id=5665): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x40, 0x0) mmap$auto(0x1, 0x20009, 0x8, 0xebf, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r0, 0x0, 0x1fdc) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x165840, 0x151) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0xfffffffffffffff8, 0x2, 0xeb1, r0, 0x2) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x1, 0x0, 0x1e) write$auto(r1, &(0x7f0000000280)='/d\n\xaf\x00\xea\xff\x00\x00\x01\x90\xd9\x15\x01\x8b\xc2\xc6\xb3\xb7\'>\x7f\xb1s=\xb9\x10\x00\x04\x00\x00\x00\x00\xec\x85\xbbO\xa6\xd3\x83\x86\x1c\xf7,\xa72\xb2F%\xf0\xef\xe3\x8e#K\xb0\xcd\xd2\xb9FH\xb2#l\xb8\xa6\\>\x80\x89\xfa\xc7\xc5\a9\v\xc5[\xdb\xd3\xd8\xc0\xd8\x91\xf3\x99\xad%\xd2B\x82\xb2\x96$8^z\x7f\x97p\x84\xd8\x80\t\xc6\xec\x84N\xa8G\x1e\xce\x8e7\x9aV\xaa\xbd\x16\xde\xf6\x02\x89LM4\xfa\x96\xf8\x15\xaa\x03\xab\xecN\xaa\x1d\f', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45f, 0x7e, 0x6, 0x100, 0x2, 0x1, 0x3, 0x24, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) 1m13.900326536s ago: executing program 2 (id=5671): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x80044704, 0x0) 1m13.594986876s ago: executing program 2 (id=5672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) 1m7.268313376s ago: executing program 37 (id=5653): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) msgctl$auto_MSG_STAT(0x91b, 0xb, &(0x7f0000000140)={{0x8, 0x0, 0xee01, 0x8, 0x38a2, 0x40, 0x7}, &(0x7f0000000080)=0x7f, &(0x7f0000000100)=0x8, 0x0, 0x0, 0x80000000, 0x8, 0x7fffffff, 0xd, 0xfffe, 0x3, @raw=0x2, @inferred=0xffffffffffffffff}) setuid$auto(r1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000200), 0x221400, 0x0) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd1) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) set_tid_address$auto(&(0x7f0000000300)=0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x183042, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="4f72b0", 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) mmap$auto(0x0, 0x6, 0x100000004000de, 0x9b72, 0x2, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x4180, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r4, &(0x7f0000000380)="78e7a617635438c521f9097ff627243b672ec56607f02b1efbe9d6d14d71d8114e364536d840fe124423c62e4c67a27ea3ee6b7fb12cf578aac45ae4f66cce7f9a89b05f24a1f18addbcd04dbfce399fe46d714ea0f15f9f78d4a05098656623c94f374cf94ee90620a92d4f12b273990cd50ee5cd1593dfa23728409240eb8fc70990c4b3a97205f1bfeb62f523b58f5a4a0c92596c23cde17e40909cd4af7f6c40075f2bd21cf6581499e6193c8c118e7f04ebb54bc045a35bbe2eaa9a4f5fd28080aff01a3f5e0fd62b11538a3347bf788c8dbad95ddfddaad5fa4000d2239635000efd789aea861724a2cfd0f481d9063fa0", 0xf4) write$auto(0x3, 0x0, 0xffd8) 58.186388739s ago: executing program 38 (id=5672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) 52.507521231s ago: executing program 5 (id=5712): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r3, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r4, 0x0, 0x7ff, 0x400) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 50.982854282s ago: executing program 5 (id=5715): socket(0x25, 0x1, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 48.626772917s ago: executing program 5 (id=5717): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000008c0)=""/61, 0x3d) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1206c2, 0x0) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r4, 0x5425, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x5408, 0x0) mremap$auto(0x200000, 0x7, 0x3fd6, 0x3, 0x20000000) 46.083662031s ago: executing program 5 (id=5721): mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES64=r0], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) 45.538364267s ago: executing program 5 (id=5723): mmap$auto(0x0, 0x200006, 0x4, 0x40eb1, 0x602, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x401, 0x1) r0 = getpgid(0x0) prctl$auto_PR_SET_MM_END_DATA(0xfc13, 0x4, r0, 0x3625, 0x670) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x4, 0xffb, 0x8000000008012, 0x3, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x5) sysfs$auto(0x2, 0x2, 0x0) fsmount$auto(0x4, 0x0, 0x200003) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x80009, 0xb, 0x8000000008011, r1, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xe8, 0xec, 0x6, 0x0}) 44.885491998s ago: executing program 5 (id=5725): write$auto_fault_around_bytes_fops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)=0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x80184947, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mq_timedreceive$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/tap63\x00', 0x3949, 0x0, &(0x7f0000000140)={0x200, 0x5}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x440640, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x560a, 0x38) landlock_create_ruleset$auto(0x0, 0xfff, 0x10000) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/trace\x00', 0x40, 0x0) read$auto_tracing_fops_trace(r1, &(0x7f0000000400)=""/191, 0xbf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0xff, 0x9, 0x4, 0xfffffffd, 0x40000007, 0x3, 0xffffffffffffffff, [0xfffffff6, 0x9, 0x4], {0xffffff80, 0x9, 0xe, 0xb831, 0x0, 0x2, 0x3, 0xc, 0x2}, {0x9, 0xa, 0x8, 0x1, 0xa, 0x0, 0x4, 0x6, 0xf}}) semtimedop$auto(0x0, &(0x7f0000000300)={0x0, 0xffff, 0x70}, 0x1f4, 0x0) 29.611744079s ago: executing program 39 (id=5725): write$auto_fault_around_bytes_fops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)=0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x80184947, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mq_timedreceive$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/tap63\x00', 0x3949, 0x0, &(0x7f0000000140)={0x200, 0x5}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x440640, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x560a, 0x38) landlock_create_ruleset$auto(0x0, 0xfff, 0x10000) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/trace\x00', 0x40, 0x0) read$auto_tracing_fops_trace(r1, &(0x7f0000000400)=""/191, 0xbf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0xff, 0x9, 0x4, 0xfffffffd, 0x40000007, 0x3, 0xffffffffffffffff, [0xfffffff6, 0x9, 0x4], {0xffffff80, 0x9, 0xe, 0xb831, 0x0, 0x2, 0x3, 0xc, 0x2}, {0x9, 0xa, 0x8, 0x1, 0xa, 0x0, 0x4, 0x6, 0xf}}) semtimedop$auto(0x0, &(0x7f0000000300)={0x0, 0xffff, 0x70}, 0x1f4, 0x0) 12.268585281s ago: executing program 9 (id=5783): unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) sendfile$auto(r2, r2, 0x0, 0x4000000a1f) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) init_module$auto(0x0, 0xffff9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 11.535277366s ago: executing program 3 (id=5784): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671f264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b4c", 0x24) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001080)=""/4076, 0xfec) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 10.601737216s ago: executing program 9 (id=5787): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x101, 0x8000, 0x3fa, 0x200000401, 0x1000008000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr4/statistics/tx_window_errors\x00', 0x40000, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) 10.339213033s ago: executing program 3 (id=5788): mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x204100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) io_uring_setup$auto(0x6, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) gettid() rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 8.952610029s ago: executing program 8 (id=5790): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) mmap$auto(0x0, 0x580f, 0x1, 0x8082000008011, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x2, 0x4, 0x5) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) socket(0x3, 0x80000, 0x6) prctl$auto(0x21, 0x0, 0x0, 0x0, 0xc) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) socket(0x3, 0x800, 0x5) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) 8.50644086s ago: executing program 9 (id=5791): unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) socketpair$auto(0x1, 0x2, 0x5053, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000580)="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", 0x6fd) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_conn\x00', 0x62240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)=""/7, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40100, 0x0) 7.156318198s ago: executing program 1 (id=5792): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x1000, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x8b}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/sit0/dev_port\x00', 0x100, 0x0) socket(0x2c, 0x5, 0x4) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) close_range$auto(0x2, r0, 0x0) 6.910952863s ago: executing program 8 (id=5793): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x1000, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x8b}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/sit0/dev_port\x00', 0x100, 0x0) socket(0x2c, 0x5, 0x4) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) r3 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r3, &(0x7f0000000140)={0x0, 0xa0}, 0x4) 6.507833428s ago: executing program 8 (id=5794): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) madvise$auto(0x0, 0x3, 0x66) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) mq_getsetattr$auto(r1, 0x0, 0x0) 6.189847811s ago: executing program 3 (id=5795): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x2d, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40, 0x3, 0x1, 0x9, 0x1, 0xffffffdffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$auto_regulator_summary_fops_(0xffffffffffffffff, &(0x7f0000000400)=""/17, 0x11) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$auto(r3, 0xab04, 0xffffffffffffffff) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) 6.025760049s ago: executing program 9 (id=5796): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0xc02, 0x0) write$auto(r0, 0x0, 0xc3) 5.616018102s ago: executing program 1 (id=5797): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x800, 0x0, &(0x7f00000001c0)) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8983, 0x4) write$auto(r1, 0x0, 0x100000a3d9) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) kcmp$auto(0x1, 0x1, 0x0, r2, r2) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0xb02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 5.593779922s ago: executing program 9 (id=5798): mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0x2a8380, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x83, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x2, 0x0) close_range$auto(r0, r1, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x60c40, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x105000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x7, 0x4, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x5408, 0x0) 4.234492913s ago: executing program 9 (id=5799): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) setsockopt$auto(0xffffffffffffffff, 0x3a, 0x9, 0x0, 0x4) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r1, &(0x7f0000000080)=""/228, 0xe4) 4.147613915s ago: executing program 1 (id=5800): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x2100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) prctl$auto(0x1, 0x5, 0x0, 0x51, 0xf2a3) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/oss\x00', 0x101000, 0x0) r3 = getpgrp(0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)=@task_fd_query={r3, r1, 0x81, 0x220, 0x2, 0x4, r2, 0x7, 0x2}, 0x9) pread64$auto(r2, 0x0, 0x8, 0x8000) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000240)={@padding, 0xfe}) socket(0xa, 0x1, 0x100) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) mmap$auto(0x2, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) 3.880696905s ago: executing program 8 (id=5801): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket(0xa, 0x6, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r2, 0x8, 0xd0, 0x0, 0x107) setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r1) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x80802, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3}, 0x55) sendmsg$auto_NFC_CMD_LLC_SDREQ(r3, 0x0, 0x4c010) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x6, 0x5, 0xfffffffffffffe81, 0x8015, 0x3, 0x8000) r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r4, &(0x7f00000000c0)=""/4096, 0x1000) 3.704909829s ago: executing program 3 (id=5802): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x261c2, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, 0x0, 0x8) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x3c41, 0x0) r0 = getpid() r1 = gettid() r2 = open(0x0, 0x80400, 0xb5d1af1605322dd2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$auto_lowpan_enable_fops_(r2, &(0x7f00000002c0)=""/120, 0x78) rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}}) 2.674999921s ago: executing program 3 (id=5803): syz_clone(0x124a000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8008000) shmctl$auto(0x9, 0xd, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/xt_recent/parameters/ip_list_uid\x00', 0x301000, 0x0) read$auto(r0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x229602, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r2, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0) madvise$auto(0xfffffffffffffffe, 0x100000, 0x17) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0xb877d7ae5150abdb, 0x3, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x81, 0x0, 0x1, 0x3ffc) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0xd49) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) ioctl$auto_RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x8, 0x9, 0x8, 0x4b, 0xb828, 0xffffffff, 0x7, 0x4, 0x400}) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0x2, 0xb}, 0x800008}, 0x1ff, 0x1ffffff8) semget$auto(0x1, 0x138, 0x201) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) 2.545953259s ago: executing program 1 (id=5804): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x799) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x2ff) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x101}, 0x5}, 0x2, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0xd, 0x2, 0x8, 0x9, 0x4, 0x1fc, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) 2.529827227s ago: executing program 8 (id=5805): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x5}, @GTPA_O_TEI={0x8, 0x9, 0x5}, @GTPA_O_TEI={0x8, 0x9, 0x40}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x24, 0x0, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) close_range$auto(0x2, 0x8000, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(0xffffffffffffffff, 0x6, 0xd4, 0x4) rseq$auto(&(0x7f0000000000)={0x7fffffff, 0x8, 0x7ff, 0xf408, 0xa4, 0x119e, "79604761836cd3eb86b1cebc6be58bf07eb26cd9b1e4a9c60768972edd28ab076828122c855d828addf134dd5f5705582c71f35deb6f4a7c7c077f17ff09a6a330e3947634a545daa1454f5d5fb26f97bd6b34de"}, 0x56, 0x4, 0x2) 1.375405717s ago: executing program 3 (id=5806): socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/info\x00', 0x1c1282, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) 1.26741931s ago: executing program 8 (id=5807): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) listmount$auto(&(0x7f0000000100)={0xba, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000044) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.058432177s ago: executing program 1 (id=5808): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x301, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.3/usb4/power/wakeup_last_time_ms\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x108002, 0x0) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) eventfd$auto(0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/iosched/front_merges\x00', 0xc0202, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) 0s ago: executing program 1 (id=5809): symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x11, 0x3, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x5, 0xffff) kernel console output (not intermixed with test programs): dump_stack_lvl+0x16c/0x1f0 [ 1023.884056][T22032] should_fail_ex+0x512/0x640 [ 1023.884086][T22032] ? __kmalloc_noprof+0xbf/0x510 [ 1023.884113][T22032] ? unregister_netdevice_many_notify+0x626/0x24c0 [ 1023.884144][T22032] should_failslab+0xc2/0x120 [ 1023.884173][T22032] __kmalloc_noprof+0xd2/0x510 [ 1023.884203][T22032] unregister_netdevice_many_notify+0x626/0x24c0 [ 1023.884234][T22032] ? __pfx___might_resched+0x10/0x10 [ 1023.884259][T22032] ? trace_contention_end+0xdd/0x130 [ 1023.884289][T22032] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1023.884320][T22032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1023.884354][T22032] ? __fsnotify_parent+0x24b/0xc40 [ 1023.884377][T22032] ? __pfx___mutex_lock+0x10/0x10 [ 1023.884409][T22032] unregister_netdevice_queue+0x305/0x3f0 [ 1023.884440][T22032] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1023.884471][T22032] ? __pfx_locks_remove_file+0x10/0x10 [ 1023.884497][T22032] ? __pfx_ppp_release+0x10/0x10 [ 1023.884542][T22032] ppp_release+0x209/0x230 [ 1023.884573][T22032] __fput+0x3ff/0xb70 [ 1023.884610][T22032] task_work_run+0x150/0x240 [ 1023.884646][T22032] ? __pfx_task_work_run+0x10/0x10 [ 1023.884680][T22032] ? __pfx___do_sys_close_range+0x10/0x10 [ 1023.884713][T22032] exit_to_user_mode_loop+0xeb/0x110 [ 1023.884747][T22032] do_syscall_64+0x3f6/0x490 [ 1023.884791][T22032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.884814][T22032] RIP: 0033:0x7f5082b8ebe9 [ 1023.884831][T22032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.884852][T22032] RSP: 002b:00007f5083998038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1023.884874][T22032] RAX: 0000000000000000 RBX: 00007f5082db5fa0 RCX: 00007f5082b8ebe9 [ 1023.884889][T22032] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1023.884902][T22032] RBP: 00007f5082c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1023.884915][T22032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.884928][T22032] R13: 00007f5082db6038 R14: 00007f5082db5fa0 R15: 00007fffe3bd3408 [ 1023.884956][T22032] [ 1024.882138][T22041] Invalid ELF header magic: != ELF [ 1027.500570][T22071] HfR: entered promiscuous mode [ 1027.533500][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4815'. [ 1027.695717][T20658] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1027.815742][T22071] HfR: left promiscuous mode [ 1027.992982][T22072] HfR: entered promiscuous mode [ 1028.271152][T22081] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1029.768708][T20658] Bluetooth: hci2: command 0x0c1a tx timeout [ 1030.322770][T22091] kexec: Could not allocate control_code_buffer [ 1042.213014][T22221] FAULT_INJECTION: forcing a failure. [ 1042.213014][T22221] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.297791][T22221] CPU: 1 UID: 0 PID: 22221 Comm: syz.5.4851 Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1042.297876][T22221] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1042.297892][T22221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1042.297913][T22221] Call Trace: [ 1042.297925][T22221] [ 1042.297939][T22221] dump_stack_lvl+0x16c/0x1f0 [ 1042.297988][T22221] should_fail_ex+0x512/0x640 [ 1042.298038][T22221] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1042.298087][T22221] should_failslab+0xc2/0x120 [ 1042.298135][T22221] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1042.298175][T22221] ? find_held_lock+0x2b/0x80 [ 1042.298209][T22221] ? vm_area_dup+0x27/0x8d0 [ 1042.298244][T22221] ? dup_mmap+0x5cb/0x21d0 [ 1042.298301][T22221] vm_area_dup+0x27/0x8d0 [ 1042.298340][T22221] dup_mmap+0x877/0x21d0 [ 1042.298408][T22221] ? __pfx_dup_mmap+0x10/0x10 [ 1042.298491][T22221] copy_process+0x4081/0x7690 [ 1042.298535][T22221] ? __pfx___futex_wait+0x10/0x10 [ 1042.298604][T22221] ? __pfx_copy_process+0x10/0x10 [ 1042.298646][T22221] ? futex_private_hash_put+0x176/0x300 [ 1042.298694][T22221] ? futex_private_hash_put+0x18a/0x300 [ 1042.298744][T22221] kernel_clone+0xfc/0x930 [ 1042.298789][T22221] ? __pfx_kernel_clone+0x10/0x10 [ 1042.298867][T22221] __do_sys_clone+0xce/0x120 [ 1042.298910][T22221] ? __pfx___do_sys_clone+0x10/0x10 [ 1042.298952][T22221] ? ksys_unshare+0x687/0xa40 [ 1042.299014][T22221] ? xfd_validate_state+0x61/0x180 [ 1042.299099][T22221] do_syscall_64+0xcd/0x490 [ 1042.299143][T22221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.299175][T22221] RIP: 0033:0x7f78a338ebe9 [ 1042.299200][T22221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.299231][T22221] RSP: 002b:00007f78a42d7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1042.299263][T22221] RAX: ffffffffffffffda RBX: 00007f78a35b5fa0 RCX: 00007f78a338ebe9 [ 1042.299284][T22221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1042.299304][T22221] RBP: 00007f78a3411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1042.299324][T22221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1042.299343][T22221] R13: 00007f78a35b6038 R14: 00007f78a35b5fa0 R15: 00007ffc5d4979a8 [ 1042.299384][T22221] [ 1042.918523][T22253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4860'. [ 1043.081259][T22258] FAULT_INJECTION: forcing a failure. [ 1043.081259][T22258] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.116403][T22258] CPU: 1 UID: 0 PID: 22258 Comm: syz.2.4862 Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1043.116460][T22258] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1043.116498][T22258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1043.116518][T22258] Call Trace: [ 1043.116530][T22258] [ 1043.116542][T22258] dump_stack_lvl+0x16c/0x1f0 [ 1043.116587][T22258] should_fail_ex+0x512/0x640 [ 1043.116631][T22258] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1043.116668][T22258] should_failslab+0xc2/0x120 [ 1043.116709][T22258] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1043.116743][T22258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1043.116786][T22258] ? kvm_set_irq_routing+0x24f/0x970 [ 1043.116837][T22258] kvm_set_irq_routing+0x24f/0x970 [ 1043.116892][T22258] kvm_arch_vm_ioctl+0x8e8/0x1860 [ 1043.116938][T22258] ? lock_acquire+0x179/0x350 [ 1043.116980][T22258] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1043.117029][T22258] ? __lock_acquire+0x62e/0x1ce0 [ 1043.117077][T22258] ? __lock_acquire+0x62e/0x1ce0 [ 1043.117128][T22258] ? __lock_acquire+0x62e/0x1ce0 [ 1043.117177][T22258] ? __lock_acquire+0x62e/0x1ce0 [ 1043.117245][T22258] ? is_bpf_text_address+0x8a/0x1a0 [ 1043.117284][T22258] ? bpf_ksym_find+0x124/0x1c0 [ 1043.117313][T22258] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1043.117352][T22258] ? is_bpf_text_address+0x94/0x1a0 [ 1043.117392][T22258] ? kernel_text_address+0x8d/0x100 [ 1043.117421][T22258] ? __kernel_text_address+0xd/0x40 [ 1043.117449][T22258] ? unwind_get_return_address+0x59/0xa0 [ 1043.117489][T22258] ? arch_stack_walk+0xa6/0x100 [ 1043.117537][T22258] ? stack_trace_save+0x8e/0xc0 [ 1043.117572][T22258] ? __pfx_stack_trace_save+0x10/0x10 [ 1043.117606][T22258] ? stack_depot_save_flags+0x29/0x9c0 [ 1043.117642][T22258] ? __lock_acquire+0xb97/0x1ce0 [ 1043.117674][T22258] ? kasan_save_stack+0x42/0x60 [ 1043.117699][T22258] ? kasan_save_stack+0x33/0x60 [ 1043.117723][T22258] ? kasan_save_track+0x14/0x30 [ 1043.117747][T22258] ? kasan_save_free_info+0x3b/0x60 [ 1043.117781][T22258] ? __kasan_slab_free+0x60/0x70 [ 1043.117811][T22258] ? kfree+0x2b4/0x4d0 [ 1043.117834][T22258] kvm_vm_ioctl+0x1a91/0x4000 [ 1043.117884][T22258] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1043.117925][T22258] ? kasan_quarantine_put+0x10a/0x240 [ 1043.117951][T22258] ? lockdep_hardirqs_on+0x7c/0x110 [ 1043.117983][T22258] ? find_held_lock+0x2b/0x80 [ 1043.118006][T22258] ? tomoyo_path_number_perm+0x295/0x580 [ 1043.118040][T22258] ? tomoyo_path_number_perm+0x18d/0x580 [ 1043.118071][T22258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1043.118099][T22258] ? futex_wake+0x1ad/0x530 [ 1043.118143][T22258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1043.118180][T22258] ? do_vfs_ioctl+0x128/0x14f0 [ 1043.118217][T22258] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1043.118263][T22258] ? find_held_lock+0x2b/0x80 [ 1043.118284][T22258] ? hook_file_ioctl_common+0x145/0x410 [ 1043.118322][T22258] ? __fget_files+0x20e/0x3c0 [ 1043.118351][T22258] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1043.118375][T22258] __x64_sys_ioctl+0x18e/0x210 [ 1043.118413][T22258] do_syscall_64+0xcd/0x490 [ 1043.118446][T22258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.118479][T22258] RIP: 0033:0x7f5082b8ebe9 [ 1043.118498][T22258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1043.118522][T22258] RSP: 002b:00007f5083998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1043.118544][T22258] RAX: ffffffffffffffda RBX: 00007f5082db5fa0 RCX: 00007f5082b8ebe9 [ 1043.118560][T22258] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 1043.118575][T22258] RBP: 00007f5082c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1043.118590][T22258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.118604][T22258] R13: 00007f5082db6038 R14: 00007f5082db5fa0 R15: 00007fffe3bd3408 [ 1043.118634][T22258] [ 1045.853342][T22279] HfR: entered promiscuous mode [ 1046.095667][T22279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4866'. [ 1046.219989][T22279] HfR: left promiscuous mode [ 1046.635080][T22283] HfR: entered promiscuous mode [ 1052.160131][T22355] netlink: 206 bytes leftover after parsing attributes in process `syz.2.4881'. [ 1052.777255][T22360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4883'. [ 1054.207268][T22377] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4888'. [ 1054.345590][T22377] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 1054.408117][T19188] smpboot: CPU 1 is now offline [ 1054.440236][T22383] ERROR: Out of memory at tomoyo_memory_ok. [ 1054.475725][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.490691][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.208964][T22402] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1056.597940][T22408] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 1057.913042][T22409] ovs_ÿþ: entered promiscuous mode [ 1061.238783][T22463] mtrr: base(0x400000000001000) is not aligned on a size(0x0000) boundary [ 1061.840120][T22474] random: crng reseeded on system resumption [ 1062.384162][T22476] Unrecognized hibernate image header format! [ 1062.414853][T22476] PM: hibernation: Image mismatch: architecture specific data [ 1062.791055][T22479] netlink: set zone limit has 8 unknown bytes [ 1063.741198][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4919'. [ 1065.575271][T22514] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4926'. [ 1067.125154][T22543] random: crng reseeded on system resumption [ 1067.491550][T22549] Unrecognized hibernate image header format! [ 1067.537631][T22549] PM: hibernation: Image mismatch: architecture specific data [ 1069.473092][T22570] FAULT_INJECTION: forcing a failure. [ 1069.473092][T22570] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.550016][T22570] CPU: 0 UID: 0 PID: 22570 Comm: syz.4.4937 Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1069.550061][T22570] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1069.550071][T22570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1069.550085][T22570] Call Trace: [ 1069.550092][T22570] [ 1069.550101][T22570] dump_stack_lvl+0x16c/0x1f0 [ 1069.550136][T22570] should_fail_ex+0x512/0x640 [ 1069.550168][T22570] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1069.550194][T22570] should_failslab+0xc2/0x120 [ 1069.550225][T22570] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1069.550246][T22570] ? trace_kmalloc+0x2b/0xd0 [ 1069.550277][T22570] ? __kvmalloc_node_noprof+0x298/0x620 [ 1069.550301][T22570] ? single_open+0x4d/0x1f0 [ 1069.550333][T22570] ? single_open_size+0x4e/0x160 [ 1069.550355][T22570] ? __pfx_show_stat+0x10/0x10 [ 1069.550380][T22570] single_open+0x4d/0x1f0 [ 1069.550411][T22570] ? __pfx_show_stat+0x10/0x10 [ 1069.550436][T22570] single_open_size+0x6d/0x160 [ 1069.550455][T22570] ? __pfx_stat_open+0x10/0x10 [ 1069.550481][T22570] proc_reg_open+0x134/0x5f0 [ 1069.550512][T22570] do_dentry_open+0x97f/0x1530 [ 1069.550541][T22570] ? __pfx_proc_reg_open+0x10/0x10 [ 1069.550575][T22570] vfs_open+0x82/0x3f0 [ 1069.550611][T22570] path_openat+0x1de4/0x2cb0 [ 1069.550645][T22570] ? __pfx_path_openat+0x10/0x10 [ 1069.550679][T22570] do_filp_open+0x20b/0x470 [ 1069.550705][T22570] ? __pfx_do_filp_open+0x10/0x10 [ 1069.550750][T22570] ? alloc_fd+0x471/0x7d0 [ 1069.550780][T22570] do_sys_openat2+0x11b/0x1d0 [ 1069.550814][T22570] ? __pfx_do_sys_openat2+0x10/0x10 [ 1069.550847][T22570] ? __fget_files+0x204/0x3c0 [ 1069.550879][T22570] __x64_sys_openat+0x174/0x210 [ 1069.550925][T22570] ? __pfx___x64_sys_openat+0x10/0x10 [ 1069.550985][T22570] do_syscall_64+0xcd/0x490 [ 1069.551030][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.551054][T22570] RIP: 0033:0x7f0cc678ebe9 [ 1069.551084][T22570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.551122][T22570] RSP: 002b:00007f0cc751c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1069.551144][T22570] RAX: ffffffffffffffda RBX: 00007f0cc69b5fa0 RCX: 00007f0cc678ebe9 [ 1069.551159][T22570] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1069.551173][T22570] RBP: 00007f0cc6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1069.551187][T22570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.551200][T22570] R13: 00007f0cc69b6038 R14: 00007f0cc69b5fa0 R15: 00007ffd85af4008 [ 1069.551227][T22570] [ 1072.183290][T22584] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1072.522098][T22588] FAULT_INJECTION: forcing a failure. [ 1072.522098][T22588] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.615554][T22588] CPU: 0 UID: 0 PID: 22588 Comm: syz.4.4944 Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1072.615596][T22588] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1072.615606][T22588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1072.615619][T22588] Call Trace: [ 1072.615626][T22588] [ 1072.615634][T22588] dump_stack_lvl+0x16c/0x1f0 [ 1072.615665][T22588] should_fail_ex+0x512/0x640 [ 1072.615695][T22588] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1072.615724][T22588] should_failslab+0xc2/0x120 [ 1072.615753][T22588] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1072.615778][T22588] ? __proc_create+0xc3/0x8e0 [ 1072.615808][T22588] ? __proc_create+0x2ce/0x8e0 [ 1072.615842][T22588] __proc_create+0x2ce/0x8e0 [ 1072.615874][T22588] ? __pfx___proc_create+0x10/0x10 [ 1072.615908][T22588] ? _raw_write_unlock+0x28/0x50 [ 1072.615932][T22588] ? proc_register+0x314/0x5f0 [ 1072.615967][T22588] proc_create_reg+0x7d/0x180 [ 1072.615999][T22588] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 1072.616026][T22588] proc_create_net_single+0x86/0x180 [ 1072.616058][T22588] ? __pfx_proc_create_net_single+0x10/0x10 [ 1072.616091][T22588] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1072.616126][T22588] ? fib4_semantics_init+0x25/0x100 [ 1072.616153][T22588] fib_proc_init+0xa3/0x1b0 [ 1072.616180][T22588] fib_net_init+0x2af/0x3f0 [ 1072.616208][T22588] ? __pfx___register_sysctl_table+0x10/0x10 [ 1072.616239][T22588] ? __pfx_fib_net_init+0x10/0x10 [ 1072.616267][T22588] ? lockdep_init_map_type+0x5c/0x280 [ 1072.616296][T22588] ? __pfx_nl_fib_input+0x10/0x10 [ 1072.616328][T22588] ? devinet_init_net+0x5c2/0x910 [ 1072.616361][T22588] ? __pfx_fib_net_init+0x10/0x10 [ 1072.616388][T22588] ops_init+0x1e2/0x5f0 [ 1072.616418][T22588] setup_net+0x10f/0x380 [ 1072.616444][T22588] ? lockdep_init_map_type+0x5c/0x280 [ 1072.616473][T22588] ? __pfx_setup_net+0x10/0x10 [ 1072.616501][T22588] ? debug_mutex_init+0x37/0x70 [ 1072.616524][T22588] copy_net_ns+0x2a6/0x5f0 [ 1072.616557][T22588] create_new_namespaces+0x3ea/0xa90 [ 1072.616587][T22588] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1072.616613][T22588] ksys_unshare+0x45b/0xa40 [ 1072.616642][T22588] ? __pfx_ksys_unshare+0x10/0x10 [ 1072.616691][T22588] ? xfd_validate_state+0x61/0x180 [ 1072.616731][T22588] __x64_sys_unshare+0x31/0x40 [ 1072.616761][T22588] do_syscall_64+0xcd/0x490 [ 1072.616791][T22588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.616814][T22588] RIP: 0033:0x7f0cc678ebe9 [ 1072.616830][T22588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.616852][T22588] RSP: 002b:00007f0cc751c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1072.616873][T22588] RAX: ffffffffffffffda RBX: 00007f0cc69b5fa0 RCX: 00007f0cc678ebe9 [ 1072.616888][T22588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1072.616901][T22588] RBP: 00007f0cc6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1072.616915][T22588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.616928][T22588] R13: 00007f0cc69b6038 R14: 00007f0cc69b5fa0 R15: 00007ffd85af4008 [ 1072.616955][T22588] [ 1072.929904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.231189][T22608] zswap: compressor 000 not available [ 1076.739522][T22626] FAULT_INJECTION: forcing a failure. [ 1076.739522][T22626] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.820900][T22626] CPU: 0 UID: 0 PID: 22626 Comm: syz.4.4951 Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1076.820946][T22626] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1076.820956][T22626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1076.820968][T22626] Call Trace: [ 1076.820977][T22626] [ 1076.820985][T22626] dump_stack_lvl+0x16c/0x1f0 [ 1076.821015][T22626] should_fail_ex+0x512/0x640 [ 1076.821045][T22626] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1076.821073][T22626] should_failslab+0xc2/0x120 [ 1076.821102][T22626] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1076.821127][T22626] ? __alloc_disk_node+0x5a/0x630 [ 1076.821160][T22626] __alloc_disk_node+0x5a/0x630 [ 1076.821192][T22626] __blk_mq_alloc_disk+0x89/0x120 [ 1076.821220][T22626] loop_add+0x490/0xb70 [ 1076.821243][T22626] ? __pfx_loop_add+0x10/0x10 [ 1076.821281][T22626] ? find_held_lock+0x2b/0x80 [ 1076.821305][T22626] loop_control_ioctl+0x13e/0x630 [ 1076.821328][T22626] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1076.821354][T22626] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1076.821378][T22626] __x64_sys_ioctl+0x18e/0x210 [ 1076.821413][T22626] do_syscall_64+0xcd/0x490 [ 1076.821443][T22626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.821464][T22626] RIP: 0033:0x7f0cc678ebe9 [ 1076.821480][T22626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.821500][T22626] RSP: 002b:00007f0cc751c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1076.821520][T22626] RAX: ffffffffffffffda RBX: 00007f0cc69b5fa0 RCX: 00007f0cc678ebe9 [ 1076.821534][T22626] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 1076.821547][T22626] RBP: 00007f0cc6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1076.821560][T22626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.821572][T22626] R13: 00007f0cc69b6038 R14: 00007f0cc69b5fa0 R15: 00007ffd85af4008 [ 1076.821604][T22626] [ 1078.402159][T22635] snd_aloop snd_aloop.0: control 16781581:65539:6:é'x?F¢é/èìzFË·fCªáª:7 is already present [ 1078.475860][T22639] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4954'. [ 1079.254177][T22653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4957'. [ 1085.635894][T22723] FAULT_INJECTION: forcing a failure. [ 1085.635894][T22723] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.731379][T22723] CPU: 0 UID: 0 PID: 22723 Comm: syz.5.4975 Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1085.731423][T22723] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1085.731433][T22723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1085.731450][T22723] Call Trace: [ 1085.731458][T22723] [ 1085.731467][T22723] dump_stack_lvl+0x16c/0x1f0 [ 1085.731500][T22723] should_fail_ex+0x512/0x640 [ 1085.731532][T22723] ? __kmalloc_noprof+0xbf/0x510 [ 1085.731573][T22723] ? xfrm_hash_alloc+0xd1/0x100 [ 1085.731599][T22723] should_failslab+0xc2/0x120 [ 1085.731627][T22723] __kmalloc_noprof+0xd2/0x510 [ 1085.731650][T22723] ? xfrm_state_init+0x377/0x630 [ 1085.731676][T22723] ? xfrm_state_init+0x341/0x630 [ 1085.731705][T22723] xfrm_hash_alloc+0xd1/0x100 [ 1085.731732][T22723] xfrm_net_init+0x35f/0xcc0 [ 1085.731766][T22723] ? __pfx_xfrm_net_init+0x10/0x10 [ 1085.731795][T22723] ops_init+0x1e2/0x5f0 [ 1085.731826][T22723] setup_net+0x10f/0x380 [ 1085.731852][T22723] ? lockdep_init_map_type+0x5c/0x280 [ 1085.731883][T22723] ? __pfx_setup_net+0x10/0x10 [ 1085.731912][T22723] ? debug_mutex_init+0x37/0x70 [ 1085.731935][T22723] copy_net_ns+0x2a6/0x5f0 [ 1085.731969][T22723] create_new_namespaces+0x3ea/0xa90 [ 1085.731999][T22723] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1085.732026][T22723] ksys_unshare+0x45b/0xa40 [ 1085.732056][T22723] ? __pfx_ksys_unshare+0x10/0x10 [ 1085.732085][T22723] ? xfd_validate_state+0x61/0x180 [ 1085.732133][T22723] __x64_sys_unshare+0x31/0x40 [ 1085.732161][T22723] do_syscall_64+0xcd/0x490 [ 1085.732191][T22723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.732212][T22723] RIP: 0033:0x7f78a338ebe9 [ 1085.732228][T22723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.732248][T22723] RSP: 002b:00007f78a42d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1085.732268][T22723] RAX: ffffffffffffffda RBX: 00007f78a35b5fa0 RCX: 00007f78a338ebe9 [ 1085.732281][T22723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1085.732294][T22723] RBP: 00007f78a3411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1085.732306][T22723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.732318][T22723] R13: 00007f78a35b6038 R14: 00007f78a35b5fa0 R15: 00007ffc5d4979a8 [ 1085.732344][T22723] [ 1085.967515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.899041][T22724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1086.905256][T22724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1086.963449][T22724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1086.997319][T22724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1087.120295][T22724] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1087.126282][T22724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1087.339020][T22724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1087.370431][T22724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1087.549896][T22724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1087.784768][T22724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1088.969019][T20658] Bluetooth: hci1: command 0x0c1a tx timeout [ 1088.975137][T20658] Bluetooth: hci0: command 0x0c1a tx timeout [ 1089.053447][T20658] Bluetooth: hci2: command 0x0c1a tx timeout [ 1089.216638][T20658] Bluetooth: hci4: command 0x0c1a tx timeout [ 1089.366250][T20658] Bluetooth: hci3: command 0x0c1a tx timeout [ 1091.116808][T20658] Bluetooth: hci2: command 0x0c1a tx timeout [ 1091.279350][T20658] Bluetooth: hci4: command 0x0c1a tx timeout [ 1091.435125][T20658] Bluetooth: hci3: command 0x0c1a tx timeout [ 1093.466933][T22773] kexec: Could not allocate control_code_buffer [ 1093.512852][T20658] Bluetooth: hci3: command 0x0c1a tx timeout [ 1094.889997][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4994'. [ 1094.959456][T22807] netlink: 354 bytes leftover after parsing attributes in process `syz.5.4994'. [ 1095.436880][ T30] audit: type=1804 audit(4294967317.952:28): pid=22815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4997" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1095.574464][T20658] Bluetooth: hci3: command 0x0c1a tx timeout [ 1098.036865][T22845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1098.238824][T22845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1098.452101][T22845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1098.713897][T22845] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1098.827999][T22845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1099.425662][T22879] netlink: 'syz.0.5006': attribute type 1 has an invalid length. [ 1099.873114][T22873] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1100.110009][T20658] Bluetooth: hci0: command 0x0c1a tx timeout [ 1100.271434][T20658] Bluetooth: hci1: command 0x0c1a tx timeout [ 1100.508056][T20658] Bluetooth: hci2: command 0x0c1a tx timeout [ 1100.683584][T22885] ERROR: Out of memory at tomoyo_memory_ok. [ 1100.747039][T20658] Bluetooth: hci4: command 0x0c1a tx timeout [ 1100.826548][T20658] Bluetooth: hci3: command 0x0c1a tx timeout [ 1101.171084][T22892] Invalid ELF header magic: != ELF [ 1101.871103][T22892] netlink: 330 bytes leftover after parsing attributes in process `syz.5.5011'. [ 1103.782253][T22927] netlink: 346 bytes leftover after parsing attributes in process `syz.4.5021'. [ 1106.707764][T22957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5028'. [ 1107.932308][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5029'. [ 1108.005788][T22959] netlink: 'syz.5.5029': attribute type 1 has an invalid length. [ 1108.065556][T22959] netlink: 'syz.5.5029': attribute type 6 has an invalid length. [ 1108.851661][T22967] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1112.160596][T23007] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1112.338116][T23007] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1112.344464][T23007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1112.645621][T23007] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1112.822427][T23007] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1113.780757][T23039] netlink: 338 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1114.120961][T23036] could not allocate digest TFM handle [ 1114.196831][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 1114.355941][T20658] Bluetooth: hci1: command 0x0c1a tx timeout [ 1114.362147][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 1114.674281][ T5869] Bluetooth: hci4: command 0x0c1a tx timeout [ 1114.867036][ T5869] Bluetooth: hci3: command 0x0c1a tx timeout [ 1116.678858][T23075] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 1116.763790][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.770106][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.891094][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5058'. [ 1117.086120][T23080] netlink: 25 bytes leftover after parsing attributes in process `syz.5.5059'. [ 1119.142106][T23104] Invalid ELF header magic: != ELF [ 1119.719526][T23104] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5064'. [ 1122.482209][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5072'. [ 1122.554821][T23143] netlink: 354 bytes leftover after parsing attributes in process `syz.5.5072'. [ 1123.551698][T23160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5077'. [ 1123.726118][T23162] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5077'. [ 1125.055293][T23174] zswap: compressor not available [ 1125.094717][T23172] Setting dangerous option i915.mitigations - tainting kernel [ 1125.466107][T23180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1125.600554][T23180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1125.678380][T23180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1125.886863][T23180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1125.893258][T23180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1126.451552][T20658] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 1127.488137][T20658] Bluetooth: hci0: command 0x0c1a tx timeout [ 1127.647730][T20658] Bluetooth: hci1: command 0x0c1a tx timeout [ 1127.733733][T20658] Bluetooth: hci2: command 0x0c1a tx timeout [ 1127.802398][T23217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5090'. [ 1127.967758][T20658] Bluetooth: hci3: command 0x0c1a tx timeout [ 1127.973905][ T5869] Bluetooth: hci4: command 0x0c1a tx timeout [ 1129.715497][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5094'. [ 1129.812147][T23242] netlink: 354 bytes leftover after parsing attributes in process `syz.4.5094'. [ 1130.398554][T23246] program syz.4.5095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1135.831135][T23305] ERROR: Out of memory at tomoyo_memory_ok. [ 1136.173852][T23312] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5112'. [ 1136.292980][T23304] zswap: compressor not available [ 1137.398280][T23328] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input21 [ 1137.504800][ T5218] ERROR: Out of memory at tomoyo_memory_ok. [ 1137.573094][T23327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1137.656578][T23327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1137.720026][T23327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1137.884712][T23327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1138.003976][T23327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1138.345963][T23339] Invalid ELF header magic: != ELF [ 1139.585099][T20658] Bluetooth: hci0: command 0x0c1a tx timeout [ 1139.655690][T23356] random: crng reseeded on system resumption [ 1139.664455][T20658] Bluetooth: hci1: command 0x0c1a tx timeout [ 1139.766071][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 1139.911532][ T5869] Bluetooth: hci3: command 0x0c1a tx timeout [ 1139.920858][ T5869] Bluetooth: hci4: command 0x0c1a tx timeout [ 1144.094670][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5137'. [ 1144.204619][T23394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5137'. [ 1144.999772][T23389] ipvlan1: entered allmulticast mode [ 1145.005197][T23389] veth0_vlan: entered allmulticast mode [ 1145.178139][T23394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5137'. [ 1145.986871][T23409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5133'. [ 1148.603489][T23439] netlink: 'syz.5.5143': attribute type 15 has an invalid length. [ 1148.663709][T23439] netlink: 252 bytes leftover after parsing attributes in process `syz.5.5143'. [ 1148.738529][T23442] netlink: 'syz.5.5143': attribute type 15 has an invalid length. [ 1148.800096][T23442] netlink: 252 bytes leftover after parsing attributes in process `syz.5.5143'. [ 1154.427176][T23504] [U]  [ 1154.430018][T23504] [U] [ 1154.432714][T23504] [U] [ 1154.435408][T23504] [U] [ 1154.581548][T23504] [U] [ 1154.584294][T23504] [U] [ 1154.587004][T23504] [U] [ 1154.589698][T23504] [U] [ 1154.747264][T23504] [U] [ 1154.750035][T23504] [U] [ 1154.752734][T23504] [U] [ 1154.755441][T23504] [U] [ 1154.918686][T23504] [U] [ 1154.921439][T23504] [U] [ 1154.924138][T23504] [U] [ 1154.926842][T23504] [U] [ 1155.005127][T23504] [U] [ 1155.146474][T23513] random: crng reseeded on system resumption [ 1156.167102][T23525] netlink: 'syz.2.5161': attribute type 1 has an invalid length. [ 1156.365820][T23525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1156.589074][T23529] program syz.5.5162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1157.422463][T23541] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 1157.760617][T23531] capability: warning: `syz.4.5163' uses deprecated v2 capabilities in a way that may be insecure [ 1159.337661][T23544] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 1161.223827][T23568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5169'. [ 1161.484909][T23570] random: crng reseeded on system resumption [ 1161.647167][T23568] bond0: (slave bond_slave_1): Releasing backup interface                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 [ 1448.631253][T24934] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1448.647566][T24934] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1448.656617][T24934] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1448.666240][T24934] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1448.677709][T24934] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1450.146574][T26500] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1450.641882][T26477] chnl_net:caif_netlink_parms(): no params data found [ 1450.766653][T24934] Bluetooth: hci9: command tx timeout [ 1451.984913][T26477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.050070][T26477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.089337][T26477] bridge_slave_0: entered allmulticast mode [ 1452.096738][T26477] bridge_slave_0: entered promiscuous mode [ 1452.204120][T26477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.240561][T26477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.299855][T26477] bridge_slave_1: entered allmulticast mode [ 1452.343949][T26477] bridge_slave_1: entered promiscuous mode [ 1452.482981][T26539] FAULT_INJECTION: forcing a failure. [ 1452.482981][T26539] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.775973][T26539] CPU: 0 UID: 0 PID: 26539 Comm: syz.8.5762 Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1452.776019][T26539] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1452.776038][T26539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1452.776053][T26539] Call Trace: [ 1452.776062][T26539] [ 1452.776071][T26539] dump_stack_lvl+0x16c/0x1f0 [ 1452.776105][T26539] should_fail_ex+0x512/0x640 [ 1452.776138][T26539] ? __kmalloc_noprof+0xbf/0x510 [ 1452.776168][T26539] ? __register_sysctl_table+0xb3/0x1900 [ 1452.776204][T26539] should_failslab+0xc2/0x120 [ 1452.776235][T26539] __kmalloc_noprof+0xd2/0x510 [ 1452.776269][T26539] __register_sysctl_table+0xb3/0x1900 [ 1452.776308][T26539] ? is_module_address+0x5f/0xf0 [ 1452.776346][T26539] ? __pfx___register_sysctl_table+0x10/0x10 [ 1452.776402][T26539] ? is_module_address+0x69/0xf0 [ 1452.776436][T26539] ? register_net_sysctl_sz+0x228/0x3e0 [ 1452.776471][T26539] ? __asan_memcpy+0x3c/0x60 [ 1452.776499][T26539] xfrm4_net_init+0xf0/0x1c0 [ 1452.776530][T26539] ? __pfx_xfrm4_net_init+0x10/0x10 [ 1452.776559][T26539] ops_init+0x1e2/0x5f0 [ 1452.776595][T26539] setup_net+0x10f/0x380 [ 1452.776625][T26539] ? lockdep_init_map_type+0x5c/0x280 [ 1452.776660][T26539] ? __pfx_setup_net+0x10/0x10 [ 1452.776694][T26539] ? debug_mutex_init+0x37/0x70 [ 1452.776721][T26539] copy_net_ns+0x2a6/0x5f0 [ 1452.776760][T26539] create_new_namespaces+0x3ea/0xa90 [ 1452.776795][T26539] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1452.776826][T26539] ksys_unshare+0x45b/0xa40 [ 1452.776860][T26539] ? __pfx_ksys_unshare+0x10/0x10 [ 1452.776894][T26539] ? xfd_validate_state+0x61/0x180 [ 1452.776939][T26539] __x64_sys_unshare+0x31/0x40 [ 1452.776972][T26539] do_syscall_64+0xcd/0x490 [ 1452.777006][T26539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.777037][T26539] RIP: 0033:0x7f4f6f78ebe9 [ 1452.777057][T26539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.777082][T26539] RSP: 002b:00007f4f70621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1452.777105][T26539] RAX: ffffffffffffffda RBX: 00007f4f6f9b6180 RCX: 00007f4f6f78ebe9 [ 1452.777121][T26539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1452.777135][T26539] RBP: 00007f4f6f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1452.777150][T26539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.777165][T26539] R13: 00007f4f6f9b6218 R14: 00007f4f6f9b6180 R15: 00007ffe68036fb8 [ 1452.777195][T26539] [ 1453.083715][T26477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.095569][T26477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.166663][T26477] team0: Port device team_slave_0 added [ 1453.174602][T26477] team0: Port device team_slave_1 added [ 1453.202001][T26477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.209046][T26477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.235243][T26477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.250239][T26477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.257349][T26477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.283949][T26477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.322710][T24934] Bluetooth: hci9: command tx timeout [ 1453.740745][T26477] hsr_slave_0: entered promiscuous mode [ 1453.767801][T26477] hsr_slave_1: entered promiscuous mode [ 1453.791771][T26477] debugfs: 'hsr0' already exists in 'hsr' [ 1453.831428][T26477] Cannot create hsr debugfs directory [ 1454.413766][T26560] netlink: 29 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1454.556191][T26561] netlink: 25 bytes leftover after parsing attributes in process `syz.9.5763'. [ 1455.385247][T24934] Bluetooth: hci9: command tx timeout [ 1455.674302][T26581] ERROR: Out of memory at tomoyo_memory_ok. [ 1455.711712][T26577] ERROR: Out of memory at tomoyo_memory_ok. [ 1457.074159][T26573] ima: policy update failed [ 1457.086689][ T30] audit: type=1802 audit(4294967517.349:38): pid=26573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.5767" res=0 errno=0 [ 1457.354386][T26477] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1457.434919][T26477] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1457.463140][T26601] Bluetooth: hci9: command tx timeout [ 1457.513236][T26477] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1457.582012][T26477] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1458.119036][T26477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.251260][T26477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.328692][T26604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.335966][T26604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.440502][T26604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.447764][T26604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.846225][T26605] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1353 with max blocks 45 with error 117 [ 1459.944031][T26605] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1459.944031][T26605] [ 1460.182929][T26477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.397023][T26648] [U]  [ 1460.399865][T26648] [U] [ 1460.402571][T26648] [U] [ 1460.405292][T26648] [U] [ 1460.503719][T26648] [U] [ 1460.506464][T26648] [U] [ 1460.509171][T26648] [U] [ 1460.511875][T26648] [U] [ 1460.533934][T26477] veth0_vlan: entered promiscuous mode [ 1460.584261][T26648] [U] [ 1460.587530][T26648] [U] [ 1460.590235][T26648] [U] [ 1460.592934][T26648] [U] [ 1460.612736][T26477] veth1_vlan: entered promiscuous mode [ 1460.728305][T26648] [U] [ 1461.168176][T26477] veth0_macvtap: entered promiscuous mode [ 1461.278013][T26477] veth1_macvtap: entered promiscuous mode [ 1461.572648][T26477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1461.722193][T26477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.938502][T26598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.947329][T26598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.409715][T26598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.475265][T26598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.994220][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5781'. [ 1463.164774][T26670] ptrace attach of "./syz-executor exec"[25368] was attempted by "./syz-executor exec"[26670] [ 1463.199082][T26598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.258744][T26598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.596932][T26604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.651588][T26604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.938963][T26720] ecryptfs_miscdev_write: Invalid packet size [0] [ 1471.399539][T26833] can0: slcan on ttyS2. [ 1471.671895][T26830] can0 (unregistered): slcan off ttyS2. [ 1472.285673][T26858] QAT: Stopping all acceleration devices. [ 1474.826433][T26613] Bluetooth: hci9: unexpected event 0x0f length: 440 > 4 [ 1475.319194][T26910] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1476.385422][T26924] netlink: 186 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1476.473825][ T31] INFO: task syz-executor:6374 blocked for more than 143 seconds. [ 1476.510551][ T31] Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1476.621029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1476.690725][ T31] task:syz-executor state:D stack:23944 pid:6374 tgid:6374 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1476.729183][T26877] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1476.834296][ T31] Call Trace: [ 1476.837801][ T31] [ 1476.873585][ T31] __schedule+0x1190/0x5de0 [ 1476.912309][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1476.917470][ T31] ? __pfx___schedule+0x10/0x10 [ 1476.990032][ T31] ? find_held_lock+0x2b/0x80 [ 1476.994772][ T31] ? schedule+0x2d7/0x3a0 [ 1477.061279][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1477.066718][ T31] schedule+0xe7/0x3a0 [ 1477.139527][ T31] schedule_preempt_disabled+0x13/0x30 [ 1477.169032][ T31] __mutex_lock+0x82a/0x10b0 [ 1477.173764][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1477.178718][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1477.278357][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1477.328399][ T31] ? net_generic+0xea/0x2a0 [ 1477.370653][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1477.376088][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1477.424056][ T31] nfsd_umount+0x48/0xe0 [ 1477.468489][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1477.474022][ T31] deactivate_super+0xde/0x100 [ 1477.537880][ T31] cleanup_mnt+0x225/0x450 [ 1477.542355][ T31] task_work_run+0x150/0x240 [ 1477.546961][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1477.620587][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1477.666541][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1477.671904][ T31] do_syscall_64+0x3f6/0x490 [ 1477.729108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.775926][ T31] RIP: 0033:0x7f0cc678ff17 [ 1477.895463][ T31] RSP: 002b:00007ffd85af3298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1477.903929][ T31] RAX: 0000000000000000 RBX: 00007f0cc6811c05 RCX: 00007f0cc678ff17 [ 1478.066964][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd85af43e0 [ 1478.135037][ T31] RBP: 00007ffd85af43cc R08: 0000000000000000 R09: 0000000000000000 [ 1478.143251][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd85af43e0 [ 1478.248843][ T31] R13: 00007f0cc6811c05 R14: 0000000000142380 R15: 00007ffd85af4420 [ 1478.304534][ T31] [ 1478.335177][ T31] INFO: task syz-executor:24198 blocked for more than 145 seconds. [ 1478.422555][ T31] Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 [ 1478.431797][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1478.647783][ T31] task:syz-executor state:D stack:24216 pid:24198 tgid:24198 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1478.730891][ T31] Call Trace: [ 1478.734214][ T31] [ 1478.737148][ T31] __schedule+0x1190/0x5de0 [ 1478.810559][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1478.862406][ T31] ? __pfx___schedule+0x10/0x10 [ 1478.867337][ T31] ? find_held_lock+0x2b/0x80 [ 1478.872273][T26613] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 1478.881798][T26613] Bluetooth: hci9: Injecting HCI hardware error event [ 1478.890301][T26613] Bluetooth: hci9: hardware error 0x00 [ 1478.960227][ T31] ? schedule+0x2d7/0x3a0 [ 1478.989641][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1478.995065][ T31] schedule+0xe7/0x3a0 [ 1478.999149][ T31] schedule_preempt_disabled+0x13/0x30 [ 1479.099348][ T31] __mutex_lock+0x82a/0x10b0 [ 1479.104096][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1479.158865][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1479.164221][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1479.200281][ T31] ? net_generic+0xea/0x2a0 [ 1479.204965][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1479.261970][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1479.267153][ T31] nfsd_umount+0x48/0xe0 [ 1479.307887][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1479.313314][ T31] deactivate_super+0xde/0x100 [ 1479.340724][ T31] cleanup_mnt+0x225/0x450 [ 1479.345191][ T31] task_work_run+0x150/0x240 [ 1479.367637][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1479.372809][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1479.410987][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1479.416341][ T31] do_syscall_64+0x3f6/0x490 [ 1479.441289][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.473302][ T31] RIP: 0033:0x7f018bb8ff17 [ 1479.486307][ T31] RSP: 002b:00007ffc40585598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1479.516012][ T31] RAX: 0000000000000000 RBX: 00007f018bc11c05 RCX: 00007f018bb8ff17 [ 1479.543131][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc405866e0 [ 1479.569665][ T31] RBP: 00007ffc405866cc R08: 0000000000000000 R09: 0000000000000000 [ 1479.606728][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc405866e0 [ 1479.614844][ T31] R13: 00007f018bc11c05 R14: 000000000014553e R15: 00007ffc40586720 [ 1479.657977][ T31] [ 1479.666429][ T31] [ 1479.666429][ T31] Showing all locks held in the system: [ 1479.674159][ T31] 1 lock held by khungtaskd/31: [ 1479.764013][ T31] #0: ffffffff8e5c1060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1479.785652][ T31] 2 locks held by udevd/5233: [ 1479.857190][ T31] 2 locks held by syz-executor/6374: [ 1479.862521][ T31] #0: ffff888081a3e0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1479.922817][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1479.959651][ T31] 1 lock held by dhcpcd/6860: [ 1479.984458][ T31] #0: ffff88805ac5d608 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1480.024243][ T31] 2 locks held by syz-executor/21440: [ 1480.029648][ T31] #0: ffff88808e85e0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1480.083903][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1480.093547][ T31] 2 locks held by syz.0.5284/24037: [ 1480.134072][ T31] #0: ffffffff90428a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1480.164648][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1480.203343][ T31] 2 locks held by syz-executor/24198: [ 1480.208759][ T31] #0: ffff888041f200e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1480.263025][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1480.272667][ T31] 2 locks held by syz-executor/25301: [ 1480.322711][ T31] #0: ffff8880641ae0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1480.352904][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1480.399098][ T31] 1 lock held by syz-executor/25368: [ 1480.422416][ T31] #0: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1480.431643][ T31] 2 locks held by syz.2.5672/25934: [ 1480.471949][ T31] #0: ffffffff90428a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1480.480314][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1480.538263][ T31] 3 locks held by syz-executor/26020: [ 1480.561976][ T31] #0: ffff888064f70dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1480.601232][ T31] #1: ffff888064f700b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1480.631027][ T31] #2: ffffffff905ed5a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1480.663656][ T31] 2 locks held by getty/26465: [ 1480.668454][ T31] #0: ffff88814cef90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1480.709035][ T31] #1: ffffc90002fd22f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1480.749813][ T31] 4 locks held by kworker/u10:1/26604: [ 1480.765547][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1480.800374][ T31] #1: ffffc90004c47d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1480.846141][ T31] #2: ffffffff9036f370 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1480.882513][ T31] #3: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 1480.909620][ T31] 6 locks held by kworker/u11:1/26613: [ 1480.915276][ T31] #0: ffff888141b75148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1480.969929][ T31] #1: ffffc9000490fd10 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1481.009570][ T31] #2: ffff888028d48dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1481.039196][ T31] #3: ffff888028d480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1481.083059][ T31] #4: ffffffff905ed5a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1481.113117][ T31] #5: ffff8880292cb338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1481.148355][ T31] 1 lock held by syz.3.5806/26901: [ 1481.153504][ T31] #0: ffffffff8e5cc5f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1481.196303][ T31] 1 lock held by syz.1.5809/26923: [ 1481.227944][ T31] #0: ffff888078984408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1481.259616][ T31] 1 lock held by dhcpcd-run-hook/26969: [ 1481.310405][ T31] [ 1481.312857][ T31] ============================================= [ 1481.312857][ T31] [ 1481.568178][ T31] NMI backtrace for cpu 0 [ 1481.568200][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1481.568236][ T31] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1481.568246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1481.568259][ T31] Call Trace: [ 1481.568266][ T31] [ 1481.568274][ T31] dump_stack_lvl+0x116/0x1f0 [ 1481.568306][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1481.568340][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1481.568365][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1481.568399][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1481.568439][ T31] watchdog+0xf0e/0x1260 [ 1481.568475][ T31] ? __pfx_watchdog+0x10/0x10 [ 1481.568510][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1481.568537][ T31] ? __kthread_parkme+0x19e/0x250 [ 1481.568565][ T31] ? __pfx_watchdog+0x10/0x10 [ 1481.568596][ T31] kthread+0x3c5/0x780 [ 1481.568627][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.568660][ T31] ? rcu_is_watching+0x12/0xc0 [ 1481.568682][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.568714][ T31] ret_from_fork+0x5d4/0x6f0 [ 1481.568746][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.568777][ T31] ret_from_fork_asm+0x1a/0x30 [ 1481.568815][ T31] [ 1481.568829][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1481.702380][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: GF R U 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1481.715753][ T31] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1481.722763][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1481.732903][ T31] Call Trace: [ 1481.736181][ T31] [ 1481.739128][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1481.743738][ T31] vpanic+0x6e8/0x7a0 [ 1481.747730][ T31] ? __pfx_vpanic+0x10/0x10 [ 1481.752253][ T31] panic+0xca/0xd0 [ 1481.756001][ T31] ? __pfx_panic+0x10/0x10 [ 1481.760427][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1481.766147][ T31] ? irq_work_queue+0xce/0x100 [ 1481.770922][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1481.776914][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1481.782387][ T31] ? watchdog+0xd78/0x1260 [ 1481.786817][ T31] ? watchdog+0xd6b/0x1260 [ 1481.791249][ T31] watchdog+0xd89/0x1260 [ 1481.795509][ T31] ? __pfx_watchdog+0x10/0x10 [ 1481.800403][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1481.805619][ T31] ? __kthread_parkme+0x19e/0x250 [ 1481.810653][ T31] ? __pfx_watchdog+0x10/0x10 [ 1481.815354][ T31] kthread+0x3c5/0x780 [ 1481.819435][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.824048][ T31] ? rcu_is_watching+0x12/0xc0 [ 1481.828811][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.833413][ T31] ret_from_fork+0x5d4/0x6f0 [ 1481.838025][ T31] ? __pfx_kthread+0x10/0x10 [ 1481.842627][ T31] ret_from_fork_asm+0x1a/0x30 [ 1481.847414][ T31] [ 1481.850508][ T31] Kernel Offset: disabled [ 1481.854835][ T31] Rebooting in 86400 seconds..