last executing test programs: 25m54.484731661s ago: executing program 32 (id=210): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x6) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$auto(r1, 0x0, 0x80001) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, 0x0, 0x4000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) open(0x0, 0x2a4c0, 0x40) execve$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/set_event\x00', 0x105a03, 0x0) writev$auto(r2, &(0x7f0000000140)={0x0, 0xc}, 0x3) madvise$auto(0x10001, 0x7fffffffffffffff, 0xe817) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, r4, 0x10008000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r5, &(0x7f0000000100)={&(0x7f0000000080), 0xe001}, 0x3, 0xe, 0x3) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$auto_SO_PEERCRED(r4, 0x10000, 0x11, &(0x7f0000000080)='/sys/kernel/tracing/set_event\x00', &(0x7f00000000c0)=0x8001) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, 0x0) mmap$auto(0x7fffffe, 0x6, 0x40005, 0x13, 0x3fd, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) 25m1.712628711s ago: executing program 33 (id=413): mmap$auto(0x0, 0xe, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20000000000004, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) timer_create$auto(0x3, 0x0, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x7f, 0x0, 0x0) 14m59.234159379s ago: executing program 34 (id=2974): r0 = fsopen$auto(&(0x7f00000005c0)='/!@*k+\x00', 0x6) getsockopt$auto_SO_PEERSEC(r0, 0x9, 0x1f, 0x0, &(0x7f0000000640)=0x2) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x105802, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/psaux\x00', 0x48100, 0x0) (async) r3 = socket(0x1a, 0x1, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000040)={[0x2, 0x22, 0xd, 0x6, 0x948b, 0x1000003, 0x15f4da0a, 0xf2, 0xa, 0x3, 0x7ffffffe, 0x5, 0x1, 0x200, 0x4a8c, 0x2]}, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x7, 0xd, 0x1, 0xc5e1, 0x3, 0x87, 0x2000200000000002, 0x4, 0x62, 0x8, 0x80000000010, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) (rerun: 64) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4ad83, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0xaea2, &(0x7f0000000040)={0x2}) (async) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240400c1}, 0x0) (async) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="000425bd7000fedbdf2501000000060003002f00000004000a80080003002b242500a70003002f4565762f617564696f31005649a3aab13b9d4ac64027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4149d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc00"], 0xd0}, 0x1, 0x0, 0x0, 0x20008844}, 0x48000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) (async) socket(0xa, 0x2, 0x73) (async, rerun: 64) close_range$auto(r2, r4, 0x7) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 14m46.692007337s ago: executing program 35 (id=3027): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000000c0)={0x8, 0x6, 0x5, 0x93, 0x400, 0xffffffffffffffff}) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"799da3a1d8bb8464cfc25f8f0c65538c560313313b163214d3a31dc6e79bce96", 0x0, 0x7f, 0x6, 0xfa, 0x1000, 0x0}) r3 = geteuid() keyctl$auto(0x1e, r3, r3, 0x5, 0x8) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r1, 0x5, &(0x7f0000000180)={@siginfo_0_0={0x6, 0xa, 0x4, @_sigchld={r2, r3, 0x3e63, 0x7, 0x7}}}) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40c00, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0xc08) write$auto(0x3, 0x0, 0x5c8) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000020c0)=""/4093, 0xffd) 13m59.668013603s ago: executing program 36 (id=3161): close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x6, 0x1, 0x5, 0x12, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8300, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) write$auto(r1, 0x0, 0xc) (async) socket(0x3, 0x1, 0x6) (async) r2 = socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) (async) socket(0x2, 0x3, 0x2) (async) socket(0x2, 0x3, 0x104) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000040)=0x2) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, r2, 0xe8f7) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r3, r3, 0x0) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) ioctl$auto(r4, 0xc0285629, r4) (async) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (async) bind$auto(0x3, 0x0, 0x6b) (async) connect$auto(r0, 0x0, 0x55) 12m38.304313658s ago: executing program 37 (id=3445): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r0, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, 0x0, 0x3, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty60\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000480)={0x6, 0xc753, 0x400}, 0x4756) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x80400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) getrandom$auto(&(0x7f0000000040)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x3, 0x7) landlock_create_ruleset$auto(&(0x7f0000000140)={0x5, 0x3, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000080)={{@raw=0x6, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @integer64={0x9, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) write$auto(0x3, 0x0, 0x7) getpgid(0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) 11m26.007553539s ago: executing program 7 (id=3758): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x72) socketpair$auto(0x80000001, 0x3, 0x8000000000000000, 0x0) r0 = fcntl$auto(0x3, 0xb8b, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r1 = socket(0x25, 0x6, 0x0) mmap$auto(0x800000000, 0x20009, 0x9, 0x40000000000eb1, 0x401, 0x8001) r2 = socket(0x1b, 0x3, 0x76) open(&(0x7f0000000180)='./file0\x00', 0x30840, 0x2e) madvise$auto(0x0, 0x2000040080000004, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r2, 0x0, 0x52, 0x0, &(0x7f0000000300)=0x5) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000740)=ANY=[@ANYBLOB="095c9ae9e003000083d8e22c681914cba3730448f16f1355afee6615001b41d6ff592cec4179455fb1d13a723b71eda420eec05b6f14d80f1f3e0e355796d6f200b13da4169f2ca6ae544e2d35cbbc6b0085820f876a7f2bc20b2fe5627e182223fabaa6a2eba994ed259396624f9e495ed44c80865704bbb17ea5b3b58210d8c4f64ab55da0b57f098cf12b9df425", @ANYRES16=r5, @ANYBLOB="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"], 0x3e0}, 0x1, 0x0, 0x0, 0xc000}, 0x4005) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x8001, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x6, 0x100000000004, 0xd, 0x18, r0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r1) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x2419d6159e7d4f8a, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x3, 0x1) 11m23.492729113s ago: executing program 7 (id=3762): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syslog$auto(0x1, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) setuid$auto(0xe) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x1f, 0x0, 0x3d) (async) mmap$auto(0x0, 0xf7, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) write$auto(0x3, 0x0, 0x81) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, 0x0, 0x20000010) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50643, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x519c41, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd14\x00', 0x8001, 0x0) (async) personality$auto(0xfffffffc) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) socket(0x2b, 0x1, 0x0) (async) prctl$auto(0xf, 0x49, 0x0, 0x4, 0x3) (async) mmap$auto(0x8, 0xe983, 0xdf, 0x100000000000016, 0xffffffffffffffff, 0x7ffd) (async) close_range$auto(0x2, 0x8000, 0x0) 11m7.976798665s ago: executing program 38 (id=3762): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syslog$auto(0x1, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) setuid$auto(0xe) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x1f, 0x0, 0x3d) (async) mmap$auto(0x0, 0xf7, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) write$auto(0x3, 0x0, 0x81) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, 0x0, 0x20000010) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50643, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x519c41, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd14\x00', 0x8001, 0x0) (async) personality$auto(0xfffffffc) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) socket(0x2b, 0x1, 0x0) (async) prctl$auto(0xf, 0x49, 0x0, 0x4, 0x3) (async) mmap$auto(0x8, 0xe983, 0xdf, 0x100000000000016, 0xffffffffffffffff, 0x7ffd) (async) close_range$auto(0x2, 0x8000, 0x0) 10m33.735608001s ago: executing program 39 (id=3873): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) unshare$auto(0x40000080) fstatfs$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@CIFS_GENL_ATTR_SWN_USER_NAME={0x4}, @CIFS_GENL_ATTR_SWN_NET_NAME_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_RESOURCE_NAME={0x16, 0xe, '/dev/snd/pcmC0D0p\x00'}, @CIFS_GENL_ATTR_SWN_DOMAIN_NAME={0x16, 0xb, '/dev/snd/pcmC0D0p\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000800) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0xfffffffffffffffd, 0x5, 0x3, 0x2000000000230006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002}, 0x1fe, 0x81) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c02, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x2ba2) semctl$auto(0x7, 0x2, 0x13, 0x1) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC0D0p\x00', 0x40, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, 0x0) 2m39.821408303s ago: executing program 1 (id=5476): openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) mlockall$auto(0x7) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000000c0)='(\x00', 0x2) mmap$auto(0x0, 0x2020008, 0xb, 0xb811, 0xfffffffffffffffa, 0x1000008004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = open(0x0, 0x40000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_BLKSECTGET2(r0, 0x1267, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zram0\x00', 0x14f402, 0x0) write$auto(r1, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0005, 0x17) shmget$auto(0x400, 0x10563, 0x568c12f2) socket(0xa, 0x80806, 0x7ff) r2 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) write$auto(r2, 0x0, 0x0) writev$auto(0x3, 0x0, 0x8) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2m38.181272234s ago: executing program 1 (id=5484): unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) sendfile$auto(r2, r2, 0x0, 0x4000000a1f) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) 2m37.022737537s ago: executing program 1 (id=5489): mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x4503c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0x7ff, 0x8000, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xffffffffffffffff, 0x2003f5, 0x5) madvise$auto(0x0, 0x200007, 0x19) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0xaf, 0x3, 0x1, 0x3, 0x80000000, 0x5f, 0x7ffffffd, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x814) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2m36.403353526s ago: executing program 3 (id=5492): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async, rerun: 64) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x9, &(0x7f0000000000)={0x50, 0xf4, 0xb0, @inferred=r0}}) (async, rerun: 64) write$auto(0x3, 0x0, 0xfdef) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x9) 2m35.595618227s ago: executing program 3 (id=5494): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket(0xa, 0x1, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x6, 0xd, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 2m35.175140264s ago: executing program 1 (id=5495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) keyctl$auto(0xe, 0x2, 0x76f, 0x9, 0xf13) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000300)=""/187, 0xbb) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x6) bind$auto(r4, &(0x7f0000000080)=@generic={0x1d, 'my\b\x00\x00\x00\x00\x00\x00\x00\f\x00'}, 0x13) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, 0x0, 0x48080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/integrity/device_is_integrity_capable\x00', 0x109080, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) prctl$auto(0x23, 0x20000000000000c, 0x7fffffffefff, 0xfffffffffffffffe, 0x0) r5 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r5) mkdir$auto(&(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xff) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x2711, 0xfffffffffffffffc, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D1p\x00', 0xc880, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC0\x00', 0x80040, 0x0) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), 0xffffffffffffffff) fanotify_init$auto(0x800, 0x100000000) 2m34.305898091s ago: executing program 1 (id=5497): r0 = socket(0xa, 0x802, 0x3a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2272, r1) setsockopt$auto(r0, 0x29, 0x821, &(0x7f0000000140)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) getpeername$auto(0x3, 0x0, 0x0) 2m33.74596528s ago: executing program 1 (id=5501): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/hugepages/hugepages-2048kB/resv_hugepages\x00', 0x40200, 0x0) socket(0x26, 0x1, 0x300) kill$auto(0x80000007, 0x24) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x20000) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, 0x0, 0x10, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/cmdline\x00', 0x101000, 0x0) preadv$auto(r2, &(0x7f00000003c0)={&(0x7f0000000340), 0xc36}, 0x1, 0x77f7, 0x1) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x403) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{0x0, 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0xe392, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r5, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r5, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/65, 0x41) mmap$auto(0x1, 0x100020006, 0xdf, 0xfffffffffffff379, 0x401, 0x8000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x9, 0xe0, 0xeb1, 0x401, 0x7fffffff) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) swapoff$auto(&(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00') shutdown$auto(0x200000003, 0x2) 2m32.166555882s ago: executing program 0 (id=5508): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x60342, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) socket(0x1a, 0x1, 0xe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0xa0342, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket(0xa, 0x1, 0x3399) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000240)={r0}) setsockopt$auto(r3, 0x29, 0x3e, 0x0, 0x110) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1438bf, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x5, 0x14) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x408080, 0x0) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, 0x0, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x26, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) bind$auto(0x3, &(0x7f0000000000)=@generic={0x1d, "300d591f2aa59b764486be5aa222"}, 0x69) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttye5\x00', 0x24280, 0x0) 2m31.216706517s ago: executing program 0 (id=5509): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) semctl$auto_SETVAL(0x53e, 0x7, 0x10, 0x8) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd5/requeue_list\x00', 0x40002, 0x0) write$auto(0x3, 0x0, 0xfdef) getsockopt$auto_SO_PASSCRED(r0, 0x3ff, 0x10, &(0x7f0000000040)='\x92^}./\x00', &(0x7f00000000c0)=0x9a2) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r1 = setfsuid$auto(0xee01) keyctl$auto(0x1d, 0xffffffffffffffff, r1, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/platform/drivers/snd_dummy/unbind\x00', 0xd6480, 0x0) msgctl$auto_IPC_RMID(0xdda7, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="00080100"/18], 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0xc802) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xff4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000400) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x10) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) fremovexattr$auto(r0, &(0x7f0000000080)='TIPCv2\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r4, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xff80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fdef) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) 2m30.593143051s ago: executing program 0 (id=5511): r0 = prctl$auto(0x4, 0x3, 0x0, 0x1, 0x0) (async) ioperm$auto(0xfb, 0x5, 0xe) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2, 0xdf, 0x9b73, 0x2, 0x8000008000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) (async) setsockopt$auto_SO_DETACH_FILTER(r0, 0x10001, 0x1b, &(0x7f0000000000)='-\x00', 0x3000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x108000) (async) eventfd$auto(0x1) (async) socket(0x2, 0x1, 0x0) socketpair$auto(0x0, 0xb7, 0x30003, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, 0x0, 0x0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) open(0x0, 0x6041, 0x0) (async) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) 2m30.027588413s ago: executing program 0 (id=5514): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000200)='/Eev-audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7\x00\x00\x00\x00\x00\x00\x00\x00>f\xb8&\x959-\n\xccWw\xe2\x9cK\f\x95]8\x83\xcf\xc5D\xcc', 0x2a4) mmap$auto(0x800000000, 0x428, 0xdf, 0xeb1, 0x401, 0xda) close_range$auto(0x0, 0xffffeffe, 0x2) r2 = io_uring_setup$auto(0x7, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x181902, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) mbind$auto(0x5, 0x111f, 0x28, &(0x7f0000000180)=0x13fffffff, 0xfffffffffffffffc, 0x3f) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000180), 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) set_mempolicy$auto(0x7, 0x0, 0x1d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={0x0, 0x1000}, 0x3) close_range$auto(r0, r3, 0x21) socket(0x21, 0x1, 0x4) ioctl$auto_TCSBRK2(r1, 0x5409, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x4000000, 0x6}) signalfd$auto(0xffffffff, &(0x7f0000000000)={0x7}, 0x8) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x6) madvise$auto(0x0, 0x200007, 0x19) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$auto(0xffffffffffffffff, 0x5427, r2) 2m29.03410245s ago: executing program 0 (id=5516): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0x1a, 0x3, 0x2) mmap$auto(0x10, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80200", @ANYRES8, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead8"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x24040000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) lseek$auto(0x3, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x109002, 0x0) ioctl$auto_BLKSECTGET2(r0, 0x1267, 0x200000000000000) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000240)='.\x00', 0x202, 0x54c) lseek$auto(0x0, 0xfff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) read$auto(r1, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34) r2 = socket(0x11, 0x800, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000200)="4c06000002000000000000007f00000000000000071b", 0x4b}, 0x1, 0x0, 0x5, 0x3ff}, 0x4000a2}, 0x2, 0x100) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtdblock0\x00', 0x80, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000002c0)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x405, 0x1000, 0x400004, 0x200000000040000d}) mmap$auto(0x0, 0x2020009, 0x100000000000003, 0xeb1, r1, 0x8000) bpf$auto(0x24, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003ec, 0x14) 2m28.837504341s ago: executing program 0 (id=5517): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x5, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$auto(r1, 0x400454d0, 0x6f) setresgid$auto(0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x2000000ffff}, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev_snmp6/gre0\x00', 0x208000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda\x00', 0x2080, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x2003ed, 0x19) write$auto(r2, &(0x7f0000000040)='j\xc27\x00\\\xa1\xe9v*\xb6]a\xf8\x04', 0x81) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd3/hctx0/sched_tags_bitmap\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x6c, 0xfc) fsopen$auto(&(0x7f00000001c0)='j\xc27\x00\\\xa1\xe9v*\xb6]a\xf8\x04^\x06\xf5@\xbb\xa4\xc2|\xf7A\xcc\x9a\xd4\xc9\xac\x89\xde\x94\xbd\x8c\xe9\xbb\xe7\x15\x8a\xbb\xd2+_}\f\xb3f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x6, 0xd, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 2m18.178093128s ago: executing program 41 (id=5501): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/hugepages/hugepages-2048kB/resv_hugepages\x00', 0x40200, 0x0) socket(0x26, 0x1, 0x300) kill$auto(0x80000007, 0x24) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x20000) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, 0x0, 0x10, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/cmdline\x00', 0x101000, 0x0) preadv$auto(r2, &(0x7f00000003c0)={&(0x7f0000000340), 0xc36}, 0x1, 0x77f7, 0x1) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x403) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{0x0, 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0xe392, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r5, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r5, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/65, 0x41) mmap$auto(0x1, 0x100020006, 0xdf, 0xfffffffffffff379, 0x401, 0x8000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x9, 0xe0, 0xeb1, 0x401, 0x7fffffff) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) swapoff$auto(&(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00') shutdown$auto(0x200000003, 0x2) 2m13.043278925s ago: executing program 42 (id=5517): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x5, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$auto(r1, 0x400454d0, 0x6f) setresgid$auto(0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x2000000ffff}, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev_snmp6/gre0\x00', 0x208000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda\x00', 0x2080, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x2003ed, 0x19) write$auto(r2, &(0x7f0000000040)='j\xc27\x00\\\xa1\xe9v*\xb6]a\xf8\x04', 0x81) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd3/hctx0/sched_tags_bitmap\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x6c, 0xfc) fsopen$auto(&(0x7f00000001c0)='j\xc27\x00\\\xa1\xe9v*\xb6]a\xf8\x04^\x06\xf5@\xbb\xa4\xc2|\xf7A\xcc\x9a\xd4\xc9\xac\x89\xde\x94\xbd\x8c\xe9\xbb\xe7\x15\x8a\xbb\xd2+_}\f\xb3f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) write$auto(r1, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xffffffffffffffba) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000) 1m55.231265402s ago: executing program 2 (id=5580): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x1a9602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x88202, 0x0) socket(0x2, 0x3, 0xa) socket(0x11, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x2, 0xc) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES8=r3, @ANYRES8=r1, @ANYRES64], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r5, 0x0, r5, 0x0, 0x8001, 0x1b208608) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x40000000, 0xffffffffffff0005, 0x19) 1m54.546082841s ago: executing program 2 (id=5582): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/tcp_dctcp/parameters/dctcp_shift_g\x00', 0x101202, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@query={@target_fd=r0, 0x8, 0x7, 0x8, 0x9, @count=0x1, 0x0, 0x4, 0x40, 0x4, 0x8}, 0x100) ioctl$auto_SG_GET_VERSION_NUM2(r1, 0x2282, &(0x7f0000000100)="cbfb68bc3b61f60c255d976a70d0f7af80c5ca14f1d2dc205314ecf8052d736339e89a364081d2755f6c11624b5f0cd5af44ad4c89525ba8f0b6413a9f5cc17f228077b114ccf6ac40d0b6bf") write$auto(0x3, 0x0, 0xfdef) 1m54.281735424s ago: executing program 2 (id=5583): mmap$auto(0x0, 0xd, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x8, 0x6, 0xd4, 0xffffffffffffffff, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) waitid$auto_P_PGID(0x2, r3, &(0x7f0000000340)={@siginfo_0_0={0x6, 0x7, 0x6, @_sigpoll={0x200, r0}}}, 0x7, &(0x7f00000003c0)={{0xa, 0x8000000000000000}, {0x5}, 0x7, 0xfce3, 0xfffffffffffffffc, 0x8, 0x224, 0x80000000, 0x7ff, 0x0, 0x5, 0x101, 0x50b, 0x5, 0x9, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r4, 0x1, 0x33, &(0x7f0000000280)='o\x00\xfb\x00\x00\x00\xe4(\xe5\xb9Y\xacS\xbe\xcc4\xf9!\xd0\x92<\x9bf\x01j\x83\xb3\xd7a.\x92\xf5\xb0j\xd3\x01\xfe:\x93\xed\xe4\x16\a\xcemS\xeb\x93D\b\xdb\x0f\x9f\x903\xad?\x17\xddF2\x7f\x15~\x94\x1d\x1c\x83\x03\xb9K\x04\xd3\x99\xe6[\xf8\xddn`\xdb\x19\xa9R\xc2\x00\x8a\xc7>\xfbC\x9e\xcfY\xaa\xc9\x99_\x8d\xc14o\xd9\x97\xf9\xb6\x80\xc0Tf\xea\x82\x8f\x82^\xf7\x01\x894?\xf7\xb8\"\x9dd/\x15\xf5\x013\x84\xe8\xdev\x8eW\xfaym\x8a_\x0e\xc5\xde\x90\xc4$\xbb\xaa\x839]\x14m{R,i\x80\xecM.\xa9\'<\xd6\xc8\xd6\xc4\x1b\xd2\xd6\x193<\".\x85\xea\xb7\x9d\xa3r\xca\xeeP\xdeu4\xf2s\x9b\x03\xbex.\x17\xf2\xa4\xba\x9a$\x1f.e\v3.\xd1{}\x94\xd9\xc4\xf1\xa9\x9aK\xbc?0x\xa1G\xf5\xd3K\xf7\xa25=\x9f+\x1d\xe7\x00', 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) r5 = socket(0x15, 0x5, 0x0) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000001b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000000940)=ANY=[@ANYBLOB="b0040000", @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf250400000005000900040000008f030780980144800c003e00000000000000000008003d00", @ANYRES32=0x0, @ANYBLOB="00000000000000076bc3dee35e117c01fcc38bc11a77d7ce75b87393f29ef448dc5f4258d73ad07126e9441b565791d8e8677343e9795bc92ff921068045261201050d1dd1c6558c7faf03c2609042fd7d4bd08051000000008f0027b550c02a296b737162124eb857ec72def8b7edd0cd3ee5b2c78a5cdb52df2c53ccab5be519555afc5f1994b67419ff2e06f337a5af1eaf29209bc3dd9fe08f5923efb5003b8b98d115d29f5075485c120e6b4ffad341ad2440b85139398c5e614d3406aeb45e955863ce445b67d8f5548a822efdd2dc6bfe0630fece98fe7e6c62a6e2fd48c56e404611c59194e2981296e0f9f079755e9a", @ANYRES32=r5, @ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x8884}, 0x800) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r7, 0x0, 0x4000) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) fspick$auto(0xffffffffffffffff, 0x0, 0x6) 1m53.056641399s ago: executing program 2 (id=5586): write$auto(0xffffffffffffffff, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x111d80, 0x0) write$auto(r0, 0x0, 0x7ef) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(r0, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(r2, r0, 0x8) r3 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f00000001c0)=""/160, 0xa0) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r3, 0x8010661b, &(0x7f0000000040)="cd0c0864cb7845cf2a936ec1fbdd9279") keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2000b, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1e0) 1m37.345358698s ago: executing program 43 (id=5586): write$auto(0xffffffffffffffff, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x111d80, 0x0) write$auto(r0, 0x0, 0x7ef) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(r0, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(r2, r0, 0x8) r3 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f00000001c0)=""/160, 0xa0) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r3, 0x8010661b, &(0x7f0000000040)="cd0c0864cb7845cf2a936ec1fbdd9279") keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2000b, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1e0) 1m19.930612839s ago: executing program 4 (id=5664): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff8000"}, 0x66) r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x200001, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) 1m19.601114919s ago: executing program 4 (id=5665): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000004ec0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000004f00)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) madvise$auto(0x0, 0x20499d, 0x9) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 1m18.217575467s ago: executing program 4 (id=5668): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000300)=""/251, 0xfb) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/54, 0x36) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x1a, 0x2, 0x0) mkdir$auto(&(0x7f0000000000)='./file0\x00', 0x4e4d) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r3, 0x5457, 0xd8) ioctl$auto(r3, 0xe, r2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r4 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim4/trap_flow_action_cookie\x00', 0x20100, 0x0) epoll_ctl$auto(r1, 0x7, r4, &(0x7f00000000c0)={0x8, 0xfffffffffffffff4}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) inotify_init1$auto(0x34) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @empty}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000040)={0x0, 0x8d}, 0x1, 0x0, 0x7, 0xa505}, 0x800}, 0x400, 0x4004) read$auto(r1, 0x0, 0x80000000006) signalfd$auto(r1, 0x0, 0x8) 1m17.275002518s ago: executing program 4 (id=5673): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0x602000, 0x0) ioctl$auto_HDIO_GETGEO(r1, 0x301, &(0x7f00000001c0)="c6cac9f6cbbf5dfbac962bd1") setsockopt$auto(r0, 0x10000000084, 0xb, 0x0, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r4 = socket(0x10, 0x2, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x50434903, 0x1) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r5, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xc00}}, 0x14}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x210000, 0x0) preadv$auto(r6, &(0x7f0000000140)={&(0x7f0000000040)="4801d09754a58fbb3b5c730346045a0100bc81a9ddf4e68b26c642316254b4b65b05e38c77ad7438cceff820bfcf1631fe50da0c90e8f35e037c8b00eb986b0212575eb177b242b953813fc70358fcb0252bff0082403a8cf71fd1a0b18043d44ff6ba1dd5bb288da4f2a312a55db90d2dbb6e0fc0304510a01fcac73fa0c70f877b0e3dbfc9dd2a304448c672f3ab33e20dc0b6a32139bad57167bc4823d22e01566e5555ba11e7e6ea89dfe6a3ac76aa31e77d9d8004ee2d559aff51efdd5e8a6ef14c12ff501975ea55d4925bcc92951dfb08cefe7cbf2587a26ce4d4c193a53808", 0x80000000}, 0x7, 0x2, 0x9) 1m16.803005707s ago: executing program 4 (id=5676): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") (async) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) r3 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto(r3, 0x9, 0x0, &(0x7f0000000080)='\x00', &(0x7f0000000200)=0x1691) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd4/queue/optimal_io_size\x00', 0x40000, 0x0) (rerun: 32) read$auto(r6, 0x0, 0x20) (async, rerun: 64) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) r7 = socket(0x23, 0x4, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r7) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001d40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) (async) sendfile$auto(r2, r2, 0x0, 0x1000200) close_range$auto(0x0, 0x5, 0x0) 1m12.435530144s ago: executing program 4 (id=5686): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0x4020aea5, 0x38) 1m10.643635711s ago: executing program 8 (id=5695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810000, 0x1, 0x8000000008011, 0x3, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x81fe, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x4, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, 0x0, 0x100000002, 0x100000001) pipe$auto(&(0x7f0000000040)=r1) bpf$auto(0xeb, &(0x7f0000001840)=@query={@target_fd=r1, 0x1, 0xbadd, 0x7, 0x656, @count=0x4, 0x0, 0xfff, 0x19e, 0x8, 0x1}, 0x10) write$auto_tracing_mark_raw_fops_trace(r3, &(0x7f0000000080)="832814e318e918ecca892a4b584ed48f8d7bcea32fcbdc92f54e7cb50a037976bce7ed8d0d47badf84409329ae76e04ab1281461ca4c485db3d8fcca79526877bfc99871b4ccbdf7ed6bc8dae4acd52f2b19330b707bcb03969f3a1dfc39ce6a37a763af4c0ca287be46549bb6b7e265e0cf1bc4c6ed1e14cda4344d93a3a72c2bd8806eeb63c991c40c1f73b40791a18b0577d2399e83044cef0c7b2643b48981448c0cedf9feb5c11adaa35029bfd895b1dcffbcec8263e5d92b373cf8a4ae53224fa7d92b96af764679", 0xcb) msync$auto(0x477, 0xfffffffffffffff9, 0xff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) 1m9.493598914s ago: executing program 8 (id=5699): mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) r0 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000ffdb06001c000000000014001f00fe88000000000000000000000000010100"/49], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) (async) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121902, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0x7, 0xf, 0x40000000008fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x4, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_hcd.7/usbmon/usbmon8/power/runtime_suspended_time\x00', 0xa02, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/192, 0xc0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) (async) finit_module$auto(0xffffffffffffffff, 0x0, 0x6) (async) unshare$auto(0x40000080) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0f0000"], 0x14}}, 0x40005) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x147602, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) 1m8.435657803s ago: executing program 8 (id=5701): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/hid/drivers/gt683r_led/uevent\x00', 0x80302, 0x0) (async) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0x3ff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async) r2 = ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r3) (async) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) (async) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) socket(0x10, 0x2, 0x14) ioctl$auto(0xffffffffffffffff, 0x3, r2) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 1m7.498819379s ago: executing program 8 (id=5706): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b3f3b6c", 0x26) close_range$auto(0x2, 0x8, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, r1, 0x8000) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0, 0x1d}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) close_range$auto(0x2, r1, 0x0) socket(0x2, 0x801, 0x6) setresgid$auto(0x9, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r2) write$auto(r2, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xffffffffffffffba) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x5, 0xffffffffffff0002, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1m6.728873714s ago: executing program 8 (id=5709): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r0 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x80003, 0x0) 1m6.55897963s ago: executing program 8 (id=5710): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async) futex_waitv$auto(&(0x7f0000000000)={0x2, 0xe, 0x85}, 0x1, 0x1, &(0x7f0000000080)={0xffff, 0x7ff}, 0x3) (async) socket(0x23, 0x2, 0xfffffffe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop14\x00', 0xe6e43, 0x0) fcntl$auto(r0, 0x4, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 57.327433381s ago: executing program 44 (id=5686): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0x4020aea5, 0x38) 50.698609358s ago: executing program 45 (id=5710): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async) futex_waitv$auto(&(0x7f0000000000)={0x2, 0xe, 0x85}, 0x1, 0x1, &(0x7f0000000080)={0xffff, 0x7ff}, 0x3) (async) socket(0x23, 0x2, 0xfffffffe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop14\x00', 0xe6e43, 0x0) fcntl$auto(r0, 0x4, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 46.215241797s ago: executing program 7 (id=5728): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0x3, 0x0, 0x7fffffff) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(r0, 0x0, 0x4000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x7, 0xfffffffffffffffc, 0x9) r1 = semctl$auto_GETPID(0xaf3, 0x0, 0xb, 0x6) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00') r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0xc63e, &(0x7f0000000100)={@siginfo_0_0={0x2, 0x1, 0x2, @_timer={r1, 0xffff301b, @sival_ptr=&(0x7f0000000040)="c2f1d294d0a78cd4802407883214456010c3522ecb728d7b1feece6b02bfbebced76866daba9160d4c03feca9e187dbe53160f22552a264f3be61503be21f07445f7ac1d6fc393f0ab844c73fc45287bd10f7dc5963d9c0e6af1569535d3c09f3c0fe323d65e304dc56c03ce347a01d6025d65ce8a", 0xf182}}}, 0x6dc6) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) tkill$auto(r1, 0xffffff73) read$auto_proc_pid_maps_operations_internal(r2, 0x0, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x10000) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlockall$auto(0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80000, 0x0) 44.148129833s ago: executing program 7 (id=5747): r0 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000080)={@siginfo_0_0={0x1, 0x0, 0x1, @_sigsys={&(0x7f0000000000)="646b0f87d3b5f0f478eed044559c7391f4720b52d9e66e9f092049c32e6d5206248ed271a93735a1e4a35675b34cd00619f14e823488c403d27e3289fe39c5d3408c4e05fbd09478b44beee0afe4e7630c3b0976483beb8975ecacfac66e6a97a434b67d5db005349b122813", 0x7}}}, 0x10, &(0x7f0000000100)={{0x2, 0x1}, {0x4, 0x24}, 0xfffffffffffffffe, 0x7b8, 0x3, 0x7, 0xf, 0x1000, 0x80000001, 0x200, 0x9, 0x1, 0x2, 0x1a, 0x3, 0x6}) r1 = prctl$auto(0x8, 0x3, r0, 0x100, 0x8) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x20083, 0x0) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/13u\x00', 0x2005c0, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg0\x00', 0x501040, 0x0) r4 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/tx_filtered\x00', 0x0, 0x0) splice$auto(r1, &(0x7f0000000300)=0x3, r1, &(0x7f0000000340)=0x6, 0x4, 0x8bb5) r5 = prctl$auto_PR_SET_SECCOMP(0x16, 0x3, 0x8000, 0x2c, 0x200) r6 = io_uring_setup$auto(0xfff, &(0x7f0000000380)={0x4, 0xee5f, 0x11, 0x6, 0x7, 0x9, r1, [0x1, 0xe, 0x1ff], {0x5, 0x8, 0x7fcf, 0xd0, 0x2, 0x3ff, 0x4, 0x8, 0x1}, {0x2, 0x80000001, 0xd, 0x5, 0x0, 0x47, 0x9, 0x8, 0x6}}) ioctl$auto_VHOST_SET_VRING_CALL2(r7, 0x4008af21, &(0x7f0000000400)={0x0, r7}) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000480)={0x5, &(0x7f0000000440)={0x0, 0x5, 0x6, @inferred=r8}}) ioctl$auto_FIOASYNC(0xffffffffffffffff, 0x5452, 0xe) connect$auto(r2, &(0x7f00000004c0)=@ethernet={0x6, @broadcast}, 0x6) r9 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)=@test={r4, 0x8, 0xd7, 0x5, 0x80000000, 0x4080000, 0x1000, 0x6, 0x5, 0x3, 0xf, 0xb509, 0x86, 0x8, 0x7}, 0xb) readv$auto(r9, &(0x7f0000000600)={&(0x7f00000005c0), 0xfffffffffffffff8}, 0x0) mmap$auto(0xd75, 0x29, 0x7, 0x400000000010, r7, 0x2) r11 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r10, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r11, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) munmap$auto(0x5, 0x62) munmap$auto(0xfffffffffffffffc, 0xf) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=@bpf_attr_7={@btf_id=0x29b8, 0x1, 0x5, r3}, 0x8001) r14 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000008c0), r7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, r14, 0xa04, 0x70bd2c, 0x25dfdbfc, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x3ef}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x76}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r15}, @NCSI_ATTR_PACKAGE_LIST={0x3c, 0x2, 0x0, 0x1, [@nested={0x1c, 0x5e, 0x0, 0x1, [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xf0}]}, @typed={0x8, 0x143, 0x0, 0x0, @pid=r0}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@mcast1}]}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x4}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040045}, 0x20000801) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/thread-self/clear_refs\x00', 0x101000, 0x0) r16 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000ac0), r10) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r16, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$auto__ctl_fops_dm_ioctl(r13, 0x100, &(0x7f0000000bc0)="8c3a33f88fe1a25f9317812152d7579269811486d7c7048ba02ba6e74f296bae7caddf6f62cd97f515343e3253ec4c397c5d738f694fb059484ef2222e547263206b49aea1f5968e8ea5c1c876fbd05d8279418230dbe730871f62dc53744436fa7bacd8303576ab520bd0b3c0007d0e3d3ff428f5cdf9c0034fdf8548e4c3f1c673be9f506d744136b6f2ef9d7d802cf1ecce48635464d6a1042a66bab35bf32168233c22fde868c7a1ac89695e0e68e1600bcf6180f050e39657fdf7b0faab82e21148da0d9e1cec317925352a24aafba4ab295db7f0d991652e850649d832f5968b277d") write$auto_seq_oss_f_ops_seq_oss(r9, &(0x7f0000000cc0)="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", 0x1000) 43.877669354s ago: executing program 7 (id=5748): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x107, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200005, 0x2, 0x586, 0x5, 0x8000000000000006, 0x4, 0xb6, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffffffffffe, 0x3, 0x400000000000, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x9c2]}, 0x1fe, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="f8ff0280"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x2000004020009, 0xdf, 0xebf, 0xffffffffffffffff, 0x2000000008000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0xffff, 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020005, 0x2, 0x110, r0, 0x7fff) r4 = socket(0x10, 0x2, 0x0) init_module$auto(&(0x7f0000000000), 0xfffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x3, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x72]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf250300000005000200040000003800018008000300e8ff2132d6ee03020a0000000800011b82cf28b21b4b59935bd308e97ba535fcfe86bcdc262680ee6fb0d2e8310c4f9f7fb11c62f12679e1cad266cbc9356ffa5fb117a8adebbacbbc2b1b4b703df1c46a77a7", @ANYRES32=r2, @ANYBLOB="080003000000000014000200736974300000000000000000000000000500020005000000040001800500030006000000050005006e000000050003000a00000005000500030000000500050008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4044004}, 0x8000) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) ioctl$auto_TIOCSWINSZ(r6, 0x5414, &(0x7f0000001840)) ioctl$auto(r5, 0x8901, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 42.448514178s ago: executing program 7 (id=5749): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) socket(0x1e, 0x6, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) (async) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r2) (async) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000015c0), r2) sendmsg$auto_NFC_CMD_STOP_POLL(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001600)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4010) (async) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000227bd7000fedbdf250213f4667da6b4a503000000"], 0x1c}}, 0x4040840) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) (async) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) (async) getrandom$auto(0x0, 0x5ffffff, 0x3) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) 26.601894907s ago: executing program 46 (id=5749): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) socket(0x1e, 0x6, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) (async) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r2) (async) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000015c0), r2) sendmsg$auto_NFC_CMD_STOP_POLL(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001600)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4010) (async) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000227bd7000fedbdf250213f4667da6b4a503000000"], 0x1c}}, 0x4040840) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) (async) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) (async) getrandom$auto(0x0, 0x5ffffff, 0x3) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) 15.546346165s ago: executing program 6 (id=5795): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0xc0040, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xe, 0x0, 0x9) ppoll$auto(&(0x7f0000000180)={r0, 0x4, 0x8}, 0x3, 0x0, 0x0, 0x8) getpgid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen_full\x00', 0x2085c2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x400c058) io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) 13.203489492s ago: executing program 6 (id=5800): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_NAME(0xf, 0x3, 0x0, 0x7ff, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(r0, 0xfffffffffffffff8, &(0x7f0000000340)) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b37, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0xf663, 0x15) pipe$auto(0x0) write$auto(0x3, 0x0, 0xffd8) pread64$auto(r1, &(0x7f0000000340)='/proc/thread-sel\b\x94!\ff/net/tcp6\x00\xd2)\x0e\x892\x82\x19\xfd\x03\xc3\x8du4\xdd\t\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\x01I3\x88;x\xe9\xdbk{F\x18G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\x97\fn\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\x00\x0f\xd6\x00\f57\x83\xdd\xaa\xf0\x9c\b\x00\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\xf5+\t\xf0^X\xf3y&\xc7]\xcb\xef\xd6\xe4\a|\x87\xe6\xb68//1@\a.t\xac\xc6\xf54\x90\x196\x9c#6\xf8\x06\xf9\x04\xc3\x13c\x12v\x9a_o\xfe\xf0\xca\xee\x90\xbb3\xa8\xc8\xad\xab\xe9\xc7v\xd57\xb1\x04QN\x15O;\xc4\x0e\x10\xd1\x1e\x80\t]/l\x1f\xca\xf5W5}\x12%\x86\x88 \x1a{\xce\x8c\x9e3\x8fa\xcf\a\x06\xff\x1e\xcb[\xf5]\xd8\xbf2\xc38\xbd', 0x458, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_int=0xc7, @raw=0x8, 0x790, @_tid}) socket(0xa, 0x4, 0x84) clock_nanosleep$auto(0x5, 0x1ff, &(0x7f0000000000)={0x7, 0x8}, &(0x7f0000000040)={0x7, 0x7}) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 12.529549629s ago: executing program 3 (id=5772): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/loop8/hctx0/dispatch_busy\x00', 0x80, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000180)=""/93, 0x5d) r1 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(&(0x7f0000000000)='/sys/kernel/debug/sync/sw_sync\x00', 0xffffffff) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r3) r4 = open(&(0x7f0000000040)='./file0\x00', 0x133802, 0x0) getdents64$auto(r4, 0x0, 0x7fe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) io_uring_setup$auto(0x7e1b, 0x0) read$auto_ftrace_set_event_fops_trace_events(r4, &(0x7f0000000200)=""/153, 0x99) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x0, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r5, 0x454f, 0x5f, 0x0, 0x0, r5, 0x80000001}, 0x6d4) socketpair$auto(0xfefffffd, 0x80, 0x8000000000000000, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) read$auto(r7, 0x0, 0x2) ioctl$auto(0x3, 0x80000541b, 0x38) fstatfs$auto(r1, &(0x7f00000000c0)={0x4, 0x8000000000, 0x5, 0x7fff, 0x0, 0x4, 0x6, {[0x9, 0x3]}, 0x0, 0x5, 0x7, [0x9, 0x7e5, 0x9, 0x26]}) 11.73487578s ago: executing program 6 (id=5802): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/011/001\x00', 0x2, 0x0) read$auto(r0, &(0x7f0000000100)='/dev/bus/usb/011/001\x00', 0x7f) unshare$auto(0x40000080) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) getuid() msync$auto(0x1ffff000, 0x1800000ff00fffe, 0x400000004) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x4004) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r3, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 10.863985529s ago: executing program 6 (id=5805): socket(0x1e, 0x4, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pnp0/00:05/rtc/rtc0/hctosys\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) 10.5769474s ago: executing program 6 (id=5806): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d}) getsockopt$auto_SO_BROADCAST(r0, 0x6, 0x6, &(0x7f0000000000)='/dev/bcachefs-ctl\x00', &(0x7f0000000040)=0x1) close_range$auto(0x2, 0x8, 0x0) 10.353378801s ago: executing program 6 (id=5807): mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="5b86085dc903f66aeb2cf90f36a6"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r3, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/journal_task\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x7fffffff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HSR_A_IFINDEX={0x8, 0x2, r8}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) timer_delete$auto(0x2) 8.741785525s ago: executing program 3 (id=5808): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x8081, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd5/queue/iosched/writes_starved\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r2, 0x4b3a, 0x1) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001140), r2) stat$auto(&(0x7f0000001380)='./file0\x00', &(0x7f00000011c0)={0xd, 0x10, 0xd04, 0xfff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xa7, 0x4, 0x5, 0x1, 0xad, 0x10000, 0x3, 0x5}) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000005c80)={0x172c, r4, 0x201, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_UNSPEC={0x56, 0x0, "b7372785e2fd01479cd24a08801011413009f28b89a5850c1d99c109ad8bbd3929f03b2b4354934becb041ca8517cc442d7a12da849e7a47fe2d698f56d6805b6cfa2fe9f36d819d73e1d9c7a961e7db3a1f"}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x1313, 0x7, 0x0, 0x1, [@nested={0x1140, 0x4c, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x7}, @nested={0x1134, 0x16, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @uid=r5}, @nested={0x103d, 0x151, 0x0, 0x1, [@typed={0x5, 0x132, 0x0, 0x0, @str='\x00'}, @generic="a6bc5adea36a5f6a517349149003fb300cae24941a5167e243c26e0afd43c517c3383882", @generic="605091ebfe2c37b0f82d1f5629918c358b81aea18165fda2f5dba38cf025416a4dafa05ec971100a8adf765fadf3fd263301d309d7802d5345c914159e39151bb0595cabfdd8c473ecb5deb97ce4e8dc25d4727938646cc43fa066d6199a16d09febc1aca2b116c1b1df6e39a7e55967c7249c5d93fb1391bd579db49fe51fff8a3b6808be0760701b37b407f4a48d4761972f21f7b2251db994594bd850bfc6a61a4d10899c2a23fd730cfc1740417a6eb2e82f8866cbcfcd792b3d2f4a7abee47e3323558ca8a4b94e0d53747e616c8683b372462c394461a4aba78f2dee7467556cc8a6f7888f36c9796a84403face4767f6a8b20a5b7f444593a2e85cee8b5147d7e4337b006cc46c3b39a9b874fd444796897a88ee0c6acce386134ba0adfd893fa374a47e4e9c87a35d6477b4e036e370e6ec6c7e85a43656222517ce6ea2250bb2b98353aafcb8436c4aa6855b1171c72264aeeef445d39907fe1c3860fa04512bb5dfa38a299655e65f3ad43751010f80624000762813f5061414e274ee9e274afb9696990d8e11c1aa77d9094c036b20cd3e67de115782aecf6d7fd6e9f73769c3432a65257341418d06d7f620b3a401df11a65a0ccc0708da393c7e7d8d13aa0a24f4032e80d0e521939cae3b376635bebfe2a81fc20179a3e9a1d93b031dbd4b1731f97caf3efcba6addff2f3c6b98e84c6d62fb8ec3cc8e4ffc174019e654e8792128cc8db47e53f2566349bc7619e2e720ea0abcd3cadbb8078bf7ffdade8aa4a6e568f27ba79d28b038e0b52957caf4e6b8aa62259d840a7e6a077b84b9f72c2f8f50968fa7d5e401fc7ad915bb86e5e4cfee8040742b09ec8a543031b9e5dfbe61d64b362220b164f07be42c777b9ffef1446265683a75efbf3166eda6a172f8ae7d8e1ec445f67822922f3b9f5dd0daf32a4ee80552fc32de9f16b348bd146d232bfcff40fd4d2fdd1e119acdb09f87147b92e4eaf2ea10c6a24b8ddf234b3cb440e066855e60a5aec83356435b4330c97cf9dadf37219c3064bbb346abc5c1a61350314bc2785fcb4c2d2298ef9cf2db3f015cc408b6d54fa40045056b9a8c3493cb4047c095e6d745d3026cb1a56608cb8050a9260fe0ae467be1ced46d22c5dadfe41bb0e2807fb73f244d922efac130236b6e86846f259fad3f88c043e84350410a69918ed8b5c20e1436c4529b73c4e43967f4b46f534442bd49269752a92c19b9ea3caff730c1fac9ac32c3ec293ec9d1597dc16f6289bb97911bf9de9b88f7bfc9dfef6626a2a25dca131ff8ace4c3b043ec14552a479dd1e512a18bc7ab7dbb22abe8574450664927f79c18b306c504ed5d35ae29d16f3d509d5419b0bad1794415c72161d7b1dbe02f23b164d845f67a9a40e5944cef8e51e9f1dc3e579ecb7547103ad843dfec80850393d2fda60ef0a9324f49b28396e5dc0a02285e8052e9dad0acf6034802242701f488f0aac42a810d146454598d1c81a5b894999c65824cb2be1bd5acb1a08ec7153287dc59880552cbcb82d4fc7f64d41867607f1025d954838e620b4627c52da6e3c2241d88a99da628cfb8530cafe57b67f179629d6a5b17a90fba5c902057715d65ffd485a2442bef30acc94450e9b9451baa616e822e0a5027a3035295f2a288fdae8543c45e496d92276c44e632af5943647b8627ee00dff35d4968db07616a47ebe1d62c9862bb7482203f07b5fdeefe4ce725aec2362a1dfdd6b8e08c556e131039a3ba057662c8b5587d5317d22ef2f70a4c61126377c3788edc32c4e5068d3f942e7179fed9ff07189994e236cfdfece6fc4dd91f6d6b4d514775632e8dbb336b45d3eba74f319127256f53b635796730229b26bbdc97baacd85fc27f259e646baca3d8f322d798f35d66406d3892c9282c00552e17f8a56ddc0c57bf4778cd4328dcaea4278ea700a1c251624abf126bee2e9074ec0bd21504a215fe46e85222989d5b096e24e18930fd431d4c3d4a1b957832b3d32e54fa5b735baaf9788718e7f2e1439a0d573bc3968e3602d9f81826c2ad041b6bb65e209781b6644d7cdc603a97315522b0a670002da09d8401d61e7623d934a63e2e6302e3df2ca8cfa664f71e24bfd5a59ef2a2cf27de55d2da1993102c1915268f6b9d5bc4c6f2a33af650c64cbb05955d917dbe9c807438524006c8ce4f30483f1025ad954d84e4da3421fbf2e0cca89deeab9f23d95f2477810cf55d7f011d81465920c89e7b7fd1ca6370caf8bc261c86da3c00c6b459d9b2bceeb136f2c41978610a236ade91c9d15e4faee0ab8f9b49e61e700dd7cbb72df989a4b77f90cb27b3b6ea62f5834ceceb32f4d93588fea6ba6aba87d34dd46f5b5b76df0ae68207f81285a52896d210e833fe36a81ac45f3f9bb31b6888ace24c767fa595538f00f14d720826e780b1b468d5d3c3beb30e1612e9a7eda00a36cb5240410f8f40c6c7718b069d68878852921309e16f828f4ccc38ead71a3e2882f16e4c62d8f834e55548158ceb16ae67ec8dce30716b75ae3cb5082b6e2962d4619640184f0e3898ef28d47c560e8ed8797432c1607736c6239c939a7c0a88f6581600eea3518e7af0fd46e998d8218683682634598ae45e2b5fbb8585bc42ecc6e88e713af24f4bbf428e0658884b3cabb8a04e1b5dbe6aa7c9f357b59e07aa6dad0a3dfcd710ad149c3b3133018b09a0d8e64896b62a8b79fc53ca25b5d813970f9c93d2515e69398048ec4eea88384e7e4e680e33f848654b286e40b2d276165be6ec15f6d0b6eed33be8bbb18980f0ae0e4ca60551526398312a92c5af523944d1b5e8c365240459d20a0038a781c4c0752288b04e19e4cdc850a8fe0fbb1675316edbcaf5daf7b5a161e0023109d68b6ba39eac9ec32b58220d9501d94b7c07f9749ea2030754a0f284f7de63fa15b6c8f0becf1e56497cace6527484b2a1be2a70ffc37a2a9540356330d101972b17eba68da5f44d92df5319c3a26b41b2ac7d4cb3c5284022e2525ec07c1d192981fe23dedc700dd84fb6b668988f13faeaf8e87d2b836c0ff55ed821f9c0039d5e79a2dbdb72afd0edfb5fa8b41e80672fd9f3d9dd0f5b440877d3abf01958ee8fcbb2a0693b8a6a0044a2c601a766f98571128186a4f27bc019ca3812112224f6f776776fdcef36ecbaf79fd9ab0325a81d9f17ddb9083cc68dc4778fa0d247028a5ab48f8dcfde9c3d1fde7f8402f8a3db5bb490b850af89e66f32c9e633b94d2d4c333afa818e132e3a1ec24ea7897c20bf329fadec45338f099e56c632115fcbb8379cc815e10c9e929f2ea9c63a56c6484185868fe1500a157ddac726c5bb9f99f37f10365380174fa15953f2f5777ac4aec29b5995a85c3e20621a57df70eceeb8296364f53b1dc08823508ebf799a3d3207755f26bccc1cc4e76108982dbc596fa3e1b6f8938fcae2baf01819ae4d2d045a5673ad17d78437da4aa1e89d54338ebe3b3aaaff9dfd8ffeece0416cf106b4efb4eaccf8069d2b113e532f99c38c604fe15cbc7f17df584fbc8edf2f24e45d880ce18b621dee092ae35bec0bf0b455425923049090b37a5fa347e1d3966cbc02f8b75027888c0a66b7d281470bd98fbce91d9bc7f83722154ffc9fa039433303e1e964ca0bd9eb98534f5597c8c6b483e20174766e21cf3da8ff86f305b48b9cb0cc7fb3069edb46b07e86af895f088faf7b5da9b0b3037d85ddabf71a7b54f94a17fbf4f20741d2633a8e611b09614d85b6b1b7b5f13009bd865fc8e57b90bb20c805e7c005aeec2d6635786a48fc405dcedbd3a31e8159aa12b6b29eac1cd9ce87073e06b09be4421b300554dac30897e952f0319b36932bfd5e55ea07f8a6fe6e2cfd5e6e79ad0806623f80cfe324ed8d3a83be6f25ba25294e188230a7f3abe1421b4749c9184359ed58d1f0cfd037eddf76b1c6a227ab5a7bb60fca81549dad3b7c644ca383a881d7bd9646c5e79d62b794da4e8db1dda157f2599d5034af54ddb5822059433764e38716b0a31ff318c61fb1abb386ab88f76326e0a47d9c1ed7f23ad5a1701ff002114dca34096c9f68bcd2d51e6f49b91251fb4defb0d04f054418e38cf9b14f2ac9434da65f7ad82b1a2f00d99089eca6bf104d991f29cafa30b14448064bdee61b812d0858d111c4948a5f3448b267bd0bb0abde82d04f1ee5f910f958706fce564c921b2d1022072e8da809ffe73792aac9f39d6e523d91af2e520d50fafb6e3b4492316c0be3993abdd691ca2bb77ffc7cc2d768841449f690735696c2bd56fa61f1d499ba9474d1d639f4c9305cf83a85d64b1643e4f5a70ae9a0ecd993e7cff98e88cc8f489cc979f43b8073e9eec8c44b368ad26a5ace32055fcc04fd3b1b7ec9dd31916bc3f584ea6015c21694086b6438b0018e7ae40dcac696e28794e8277c22fd9090af78a5a52544b7f1c3a87df9cd3cc0bcb6e138ed4bc631caf02e3b8afac8ce7c16fd7b3af8dce640ef641c86519838ef9236f40aa92cdfdf747f85d4d18b109e4168628081f0f5c2c1fbd00cb9c92550d4db335595f4b74917465ab92b7e0e2df8cfa8fc8e8f361c66e8c1a18b65350c170925df7a7d2a6598adb43b41231503e557906e6bcae74ac453a6d55d623411db59405cc2bf30612fea45790325275ff7ed1521ccf0a9897ff5968edba310b1d27b92722e36d460624d0558dee30f96d52742418cccea27e9c1d7e225772aac45fb27f3914396d6197f98a76014080cee093d67cf84f54305cd4c26cd8922e3771b3f5df2a36fbf7f76092b44709dd0f53cbaaff271e15e4d94b2b8d0c09acc0d13b55938ddc68fbf59ff43e15a9f8851912fc69f196789cd59bb9bcf9a2dac31a92dd47e3031d9c7f614bf9644a10eff53d2a79144b5c742ab602a426d99f8908c3e040091e107e41fb6040626588e0db7a041c4efadd9ab12844a6a0bcd037201b325f63fce60e5ba267800f63d60263619ff600459d114b8fb4d4a6afe1f44a6abe864a799cd664570bf3e3e83f8b655b884a57526fd6ce08613fbd3744635e0fe0e8a4d6077dfcc87b1bbebc527d050239c72057e771b2c40a2b73110a14603895f9277c858533e64195e316ac3e6f3c1b9bdbcfb16d29632600fe43852038e8c83fe82424c3d67cf20c0782da7b55d553417230067e9f54c44418855838800265b8ccc05d92e37133b75600937958707e0e9acc7b558739525ceb3b4fa4693968f929406a2a53c1398dd5105e191b6839dea4056d5e2336a5d6f97c32bf30d2e994e73dc4abf6a278317e2fe496146316358c893a4b062097340c6d31f7f4694fc07f6baadf7d69d8f133887d400ed4cbc02dc70adc4f230880049e5cf971a40b32c4fd3de509a9dccd86af94f77a7372de96a7a6bb936423a88538f58c3e9bb4e896cbe3e33c7a9b191fa016d15deed7c9db059c750a17e0316e0f7ec31062fae099c7b1714cf6781d5dc3505f8e661e51a79c28cac0a13b17b8253361d37509478ee2e2af1180f45953744204f18a04984a80bb231d3f69ad3e129f02347cf737afb9362b4ff4e2b37412f3abada41b32866f3ff9b062948a2901c4f22cd7a99348082e124f12b0549d6b092f373fb560487d70c6fe162d111f0447d0cc11486414a0fc64beb6eaecdfd78c868adad111b3fd219ef62130853b2af0b5d169f6a312f58530eafb5eaddd05f34b0af1d24056f8077f7b3626d1930d4b98d3eb1cafc34a648a3d9a1c6dcb158e52379c1d207e2172689b0b4d02a726399cbb5bb37cfca625e7b6f4", @generic="0e19d00743b703e27365940c80"]}, @nested={0xe3, 0x9b, 0x0, 0x1, [@typed={0x16, 0x13d, 0x0, 0x0, @binary="e224af59fa2637d8fd0101cb1fcd3eb89aca"}, @typed={0xc, 0xe6, 0x0, 0x0, @u64=0x1ff}, @generic="bfb29097d8a113d273a86e52feb8ec995a286a9190a4046e43188e962ae9ef5a1f56c57e2753e4429d43ae0cf572dff1f778a1d63f342f47728562f97557767612af97238c4218007f9e846c414742f1233593f97f9ca52053bb941b1f9bb983fa0372380f0d89f0939ed2108f05102ad98686", @generic="26507891708d4b0c6a3c584ae82ca95c8472ebfc80c0225b40b4c3fce1f22667010ccac1b431a888c1e27116eafdd4be242130055d43cd680b143dcb328bbc4dffd191400637f22b"]}, @typed={0x4, 0xf9}]}]}, @generic="a83ad733b6bc29f193aadc64a06613b23969e06698ba2c1d35b07a6a534bec8a148a35ccc922c65780cd83796bd13d922c387785e4b667cf75ffda6b7a93085415322f7634fd004d7a321e7120d30bdfb3bf0ea37d26214cd1549cacf75b04", @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x82, 0x0, 0x1, [@generic]}, @typed={0x4, 0x2}, @nested={0x13f, 0xaa, 0x0, 0x1, [@nested={0x4, 0x2a}, @generic="26395f4c9e214674ae535527dd225f3ed7c220eec1d23905008bdac35d3d9972723da60f5c8ca2f2400a55310b72d5d66956d90c0b2c1eaa889abbf1026120c4bcdcda6e8dad54689500b3d225dfbcd9fe8f324147d7aa98ca06bd896bb604ab57e670b9665e3d4effcd9086b8e238ea5ebbddad7cefaab2a3e5b5717ac74d5315eaa211e7f8e7433e5861d7105dff44a64bd2e0d57cb689059de77e0e4107a84e15075fdfe1fd4a2b2e5b39fedc0a796c590523594deebab0223ed382360e5236c0a5b4edc9cbdeb5b2631e2cb467477feb983ebcc6633b96e5b35be54171272919de6e6990b30a89cd6458c8482b0d62727b", @nested={0x4, 0x104}, @nested={0x4, 0x60}, @nested={0x4, 0x1a}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x125, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x1f}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x74}]}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}}]}, @TIPC_NLA_MEDIA={0x3a4, 0x5, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @u32=0xfffff001}, @generic="27999acebbed1f4c2c4b6de1e3f7c16cf03f9b0c929fd54d86047028102714e4b829e44d9d255a1997965abcf114a8accbb4d9877cc71f3af5ce86780a82c991f3516d9dad1a541d9cf31b7e7bf9dd5df4de8d9125740ca962a43be14b86173ea0e63047d085cd1bfa6b71ccf073108f3a255d4c7e9b203e6bce76cb4121e1a7c6736423216d975e73da7094644b3d8f8529e0b703bb20658cc197df", @nested={0x2fb, 0x10, 0x0, 0x1, [@nested={0x4, 0x3c}, @nested={0x4, 0x7d}, @typed={0x8, 0xd3, 0x0, 0x0, @uid=r5}, @generic="872e41eeea37c9829c55cc510d441d69e0fde0d17191912cd7fc81c6d80362bb6fa5bf080ec6df5dccf398e475c81dcffe6207033ec2e0588a361266cc5d335a26519bcb", @generic="6370f634e1e171d039a95b189c5f6385b30fd08faf4534b04d5e823f3b4164812542d796cdd03718b83b0ad73fa91d2b0916435845aa12ca664339e29dabd015971df709b9f7f01bdfa7a9e4a8d8e513e4c8f5a7b772e369e7f877c9f81d15ccda6ec2d3fc9107ba9fec5a83b09ab614b307551fefe4db41aae07f0c3e8c3ab48674dc407484fca0619e234bb93e239695017c09e3ecb02dd219bd7dc477344b47f1feb5285abfacecbb326df4a19906e8078a1bdf8be6ba4ce06d522f14674e86bf666e934c07c0aff505d48837cd13024bb79f812e311bc4c2ca845e6111f39f530053412ebe51e5d97cc46a6267fb004bc4690e51a613bf56c132c2bf2eb32a682eb4ea336cd38523b097967fd1ae8cfedc7abbdb0a00d4f8da9815ee4f63187ea82578da1f0080e9227df50b5bbe8cc01162ab62138096cbef597a96e15e9ed5bf00876fdc52a3670c3f33f36496aaca0e0f3c8537a22e96f09731bfc884939031b6821872552c4ea9e47bc7cd962ebc68762bb811d0c7ad96e12b4b3eb396b212865d13db0ed704148197dbd8d21cc59f66bd2d892e37ec", @generic="ef69123ab57222d0827a9a165f692cdc4ecb3c3bb727eac2280c1b15d2665a2b52d6d3cd788f34c1124aba3afac7a0a446f2e477583dbe77f47ccc0c92f21bfbac331d4ab403144814a46084e6bb69dfdd1374a6d057cf22cf45520d1f1189c6dd00841bb698a50170199097d8221e16d0b939e10a71bfdd0fe4b33c71101379df542d994a55271d79835ecfef4126b2f70c1dc48c7ff224843300fec51124aaee78f79bae8604c2f5683ce045fec4abb21ff496c8b23b19e437ca4e62c3e0c8cc7547be94593bfa096793654d2c450b2f398c964c56cf7f2a7ed4d68dc104d257d291e7494096f533c1ebb593b11867cb1e36ae50", @typed={0x14, 0xac, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}]}]}]}, 0x172c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = prctl$auto(0xffffffff, 0x2, 0x0, 0x6, 0x780b) syz_genetlink_get_family_id$auto_nl80211(0x0, r6) msgctl$auto_IPC_SET(0x81, 0x1, &(0x7f0000001300)={{0x6, 0x0, 0x0, 0xa9, 0xd, 0x80000000, 0x2}, &(0x7f0000001980)=0x2, &(0x7f00000019c0)=0x5, 0x2, 0x5, 0xffffffff, 0x0, 0x3, 0x9, 0x7d8, 0x1, @inferred, @raw=0x5}) mlock2$auto(0x1, 0x8001, 0x0) ioctl$auto(r0, 0x40104d05, 0x8) r7 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r7, 0x1) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) r9 = pipe$auto(&(0x7f0000000000)) write$auto_def_blk_fops_fs(r9, 0x0, 0x0) r10 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r10, &(0x7f0000000040)=':\'*&\x04!\x00', 0x1, 0x27) write$auto(r9, &(0x7f0000000480)='0[.[\x00\xf8?~\xbc\x06\x0f\x81Iq=B\vr6\x19\xd3\xd4\xd6\xab\xd0\nl\x8cb\xe7@\xbb\x0f\xe43\xe2R\x91V\xc1N\xae\xd3B\xb8,\xd0\"W\x1c\x14\xda\xf3>\xe5]\x98\xd6KLyY\x02\xbdD\a\x06\x93\x9d\x0f\xb9\x0f\x8e\xb4*\x8a\xb9\xebo+\xa6\x15\x9b\x8f\xbd\xaf\xc4\x9aW+\xc5\x82\xe1\x95\xa1A\xe4\xca\xb1~H\x91\x1d\x95\xe5\xf7ZN\xb1\xaa:a\xf6\x1ed:\v}\xdd\xc4\xb0\xb2\x11\x81<|J\xce\xf7pU03#w\xcaZbj\xa1*4\xac\x8e\xcc\xb8=\xe3\x88\xffj\xde\xca\x1fk\x97\xefU\x92\x911\xd6v!Y@\xa3\x89\xc4s\x8a\x1aRz6[\x903\x8ck\a\xc6\xe4\xb7\xa7i\\\xa9i\x002*M\xb4$|\xe1,\xa7\x93y\x12\x15\xe9F9\xeaL\x98\xe9b\xbc\xd6^\x03\xda\x8e\xbbP12\xc1\xa8\xeeh\"\xc6D\xc2\xdcoP\xbe\xe7F\xaem\xb6\x12\xd9\t\xf4L4\x03u\xb7\xde\xc2F\xf0\xca\xb8[\xa1\xdcO\xa6\xc5\n\xb3\xd5|\x89\xb4g,L\x12\x1aK\xcc\xa6\xa9\x0e\xb3\xe4#:\xf6\xdf#\x11\f\xd93\xe3\xe0\xf3\x86\x06\xbd(\xbdb\x91e\xdb\x17#\xf0\x0f}\x99\xfd\xa0\x84w\xc0\xfbX\xb9c\xf6x\xc3Q\xdd\x83a\xacy\x1e\xab\x84X\xc1\xf7R\xa2\xee%\x0eLI\x93\x9a9ht\xa3\xd3(\x97\xd9\xdc:\xacR\xb0mp\xc1\xe9\xa8\x91A\x95\xba\\8\n>x\x8dx\x1d\xe8\xc2\xdc\x13\xf1\xd3C\\\x01\xf4\x90\xc4}Z4\x04\x04}\xbc\xdb\xf7\xa3\v\xc6\xfb\x87\xf2\xd2\xa7?r&\xf9C\x7f\xa2\xfd\xf6\xf5\x1f\xc0\x00-\xadl\xd4lK#\x1b\xab\x96\"\x06\x1eE\x11\xba3\a\xd0\xee\x87\'\x8a\a\xd0\xfe\x11}.\xef\xc0\xacG\xd2\xb7\x8at\xe7\xf4_', 0x109) read$auto_hwsim_fops_ps_(r9, &(0x7f00000010c0)=""/17, 0x11) ioctl$auto(r8, 0x9000643c, 0xc35) read$auto_sync_info_debugfs_fops_(r9, &(0x7f00000000c0)=""/4090, 0x1043) 8.266240471s ago: executing program 3 (id=5809): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0xf3b, 0x0, 0x0, 0x440a48ce) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x6, 0x2, 0x10000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x800a6f2f, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x20) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x80000, 0x0) r4 = epoll_create$auto(0x5a5d) epoll_ctl$auto(r4, 0x1, r3, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 7.453791252s ago: executing program 3 (id=5811): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/min_links\x00', 0x88282, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) fstat$auto(0x2, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = open(0x0, 0x261c2, 0x195) (async) close_range$auto(0x2, r0, 0x0) (async) socket(0x9, 0x4, 0x6) (async) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffffd) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) timerfd_create$auto_CLOCK_TAI(0xb, 0xde58) adjtimex$auto(&(0x7f00000005c0)={0xffff, 0x0, 0x6, 0x9, 0x7, 0x7f, 0xfff, 0x0, 0xc15, 0x7, 0x592efafe, {0x3, 0xffffffffffffff57}, 0x100000001, 0xffffffffffffffff, 0x857e, 0x5, 0x0, 0x3, 0x9, 0x240000000000, 0x400000, 0x10000, 0x7ff}) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a5, 0xb00000) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) (async) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0xa, 0x3, 0x3a) bind$auto(r5, &(0x7f0000000040)=@generic={0xa, "2c551d00"}, 0x66) (async) r6 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r4, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) (async) sysinfo$auto(&(0x7f0000000100)={0x6, [0x4, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x9, 0x6, 0x1, 0x7f, 0x0, 0x100000000, 0x7, 0x6}) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) (async) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) (async) sendfile$auto(r6, r3, 0x0, 0x401) 5.263712569s ago: executing program 9 (id=5815): socket(0x80000000000000a, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x14, 0x0, 0xdb589d63fce79fc7, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc031}, 0x44) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) pread64$auto(r1, 0x0, 0x8, 0xffff) 4.209989618s ago: executing program 9 (id=5817): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/loop8/hctx0/dispatch_busy\x00', 0x80, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000180)=""/93, 0x5d) r1 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(&(0x7f0000000000)='/sys/kernel/debug/sync/sw_sync\x00', 0xffffffff) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r3) r4 = open(&(0x7f0000000040)='./file0\x00', 0x133802, 0x0) getdents64$auto(r4, 0x0, 0x7fe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) io_uring_setup$auto(0x7e1b, 0x0) read$auto_ftrace_set_event_fops_trace_events(r4, &(0x7f0000000200)=""/153, 0x99) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x0, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r5, 0x454f, 0x5f, 0x0, 0x0, r5, 0x80000001}, 0x6d4) socketpair$auto(0xfefffffd, 0x80, 0x8000000000000000, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) read$auto(r7, 0x0, 0x2) ioctl$auto(0x3, 0x80000541b, 0x38) fstatfs$auto(r1, &(0x7f00000000c0)={0x4, 0x8000000000, 0x5, 0x7fff, 0x0, 0x4, 0x6, {[0x9, 0x3]}, 0x0, 0x5, 0x7, [0x9, 0x7e5, 0x9, 0x26]}) 3.243287081s ago: executing program 5 (id=5819): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x100000009, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x6, 0x1, 0x4, 0x62, 0x80000001, 0x4, 0x6d3f, 0x2000000, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x26, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/xfs/stats/stats\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001180)=""/187, 0xbb) close_range$auto(0x2, 0x8, 0x0) 2.681098555s ago: executing program 9 (id=5820): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xfffffffffffffffe, 0x3, 0x66) madvise$auto(0x0, 0x20000a, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen_full\x00', 0xc0000, 0x0) r2 = socket(0x1e, 0x6, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2f0081, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(r0, 0x3, 0x69cd, &(0x7f0000000500)='*\x04}\x01\x00\x01\xa5\xe2S;(\x88\x9ey \x9c\xd5f\xc86?\x7f\x1f[\xde\xcf\xd1\xf6P\xb1R\xb3A(\x19NW\xa40\xdd\xab\x80K\xcd\x0f\x06&\xf8\xfbsN0}U\a\x00\x00\x00\x00\x00\x00\x00\x1f\xeeCa)\xcb`<\x1d\xc2\x8d\xe4\xbf\xe3\x9e\xb7(\xc1\xad\xe8lN\xa2BZ\xb7P\r\x9d\x03\xd3\x1d\xd8\x8fQWP.\x9d|\x99\xcf\x96\x9444&\x8fD~\xbb4\xcd\x00\f\xdf\f@C\xb6\x85\x16\t\xde\xbe/5\xddg~\x14\xd3]\xe2F\xfa\x9db\x94\a\x16\xbf\xfd', 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/rose5/statistics/rx_missed_errors\x00', 0x4c300, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040844) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002dbd7000fddb0025140000000800080002a0bdae668d95561c3051633b8a73af00000008001105000c000700000008000f000900000008000f0009000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0x5, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x40402, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) 2.191201262s ago: executing program 9 (id=5821): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0xa, 0xffff) (async) close_range$auto(0xffffffffffffffff, 0xa, 0xffff) socket(0xf, 0x3, 0x2) socket(0x2, 0x801, 0x106) (async) socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = getpid() sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x48054) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D0c\x00', 0x101b00, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20011}, 0x40c0) (async) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20011}, 0x40c0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto_PR_SET_MM_ENV_START(0x28fa, 0xa, r0, 0x40, 0x1) (async) prctl$auto_PR_SET_MM_ENV_START(0x28fa, 0xa, r0, 0x40, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)\xa4=\xb3\xd9\xba\xba\xf2^\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xffffffffffffffff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) syz_clone(0x40000000, &(0x7f00000001c0)="ef4c0dd7b8109ef8099b9244adba35afd09af635c28b4b6721e29774d715fdc151d5b9d0b38064a04854b3e5079dc2ebb8f2174a44dcfd6942c3229ef3c4b8c41aadc3436fe1344cbc7f00a13f733dd518001820a1ea1331c5e7d03056874063c01963f18002840c218400504d27159224927770ba7721ff8f42b9332cfa6b1c0994c48c5376f741942142e40e0869a11d9ab40bf9eb12040b796a44382fc5214ca4d932649d98bab280a85d994470eee1098f30fa", 0xb5, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0)="9907297c2297e9c0d5a985f6a39843f0e4645470610328734a9bbc2596bdcc5f0bfff5f9fa88f91181096d61def0da721fa49fdeb7492991346d42ce7e6b5f7b2ee4f2e91b871df9221a6f519a264eef462b66bc233e9dadf55294d6aa") (async) syz_clone(0x40000000, &(0x7f00000001c0)="ef4c0dd7b8109ef8099b9244adba35afd09af635c28b4b6721e29774d715fdc151d5b9d0b38064a04854b3e5079dc2ebb8f2174a44dcfd6942c3229ef3c4b8c41aadc3436fe1344cbc7f00a13f733dd518001820a1ea1331c5e7d03056874063c01963f18002840c218400504d27159224927770ba7721ff8f42b9332cfa6b1c0994c48c5376f741942142e40e0869a11d9ab40bf9eb12040b796a44382fc5214ca4d932649d98bab280a85d994470eee1098f30fa", 0xb5, &(0x7f0000000380), &(0x7f0000000280), &(0x7f00000003c0)="9907297c2297e9c0d5a985f6a39843f0e4645470610328734a9bbc2596bdcc5f0bfff5f9fa88f91181096d61def0da721fa49fdeb7492991346d42ce7e6b5f7b2ee4f2e91b871df9221a6f519a264eef462b66bc233e9dadf55294d6aa") socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D0p\x00', 0x402, 0x0) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) (async) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100, @private=0xa010100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1.973061211s ago: executing program 5 (id=5822): r0 = socket(0x1b, 0x3, 0x77) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, 0x0, &(0x7f0000000300)=0x5) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000740)=ANY=[@ANYBLOB="095c9ae9e003000083d8e22c681914cba3730448f16f1355afee6615001b41d6ff592cec4179455fb1d13a723b71eda420eec05b6f14d80f1f3e0e355796d6f200b13da4169f2ca6ae544e2d35cbbc6b0085820f876a7f2bc20b2fe5627e182223fabaa6a2eba994ed259396624f9e495ed44c80865704bbb17ea5b3b58210d8c4f64ab55da0b57f098cf12b9df425", @ANYRES16=r4, @ANYBLOB="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"], 0x3e0}, 0x1, 0x0, 0x0, 0xc000}, 0x4005) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x8001, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) (async) mmap$auto(0x3, 0xbef, 0x9, 0x8000000000000011, r5, 0x755c913d) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) syz_clone(0x2419d6159e7d4f8a, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket(0x1d, 0x3, 0x1) (async) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bind$auto(0x3, 0x0, 0x6a) write$auto(r7, &(0x7f00000002c0)='@*\x00', 0xf) sendfile$auto(r6, r3, 0x0, 0x8) (async) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x1ac}}, 0x810) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) 1.667712892s ago: executing program 5 (id=5823): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ocfs2_dlmfs/parameters/capabilities\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000840)=""/41, 0x29) r1 = open(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x8734e30457582d08) open_by_handle_at$auto(r1, &(0x7f0000000500)={0x8, 0x200fe, "0100000000000000"}, 0xffffffff) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/devices\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0xf42c, 0x400) 1.46498366s ago: executing program 5 (id=5824): mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x541001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptywc\x00', 0x2200, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0xffffffffffffffb7, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) connect$auto(0x3, 0x0, 0x10) (async) unshare$auto(0x40000080) r3 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) bind$auto(r3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x3) r4 = socket(0xa, 0x2, 0x73) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/sysname\x00', 0x145381, 0x0) (async) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xc1}, 0x8, 0x4) (async) symlink$auto(0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x80000, 0x1f) 1.422323531s ago: executing program 9 (id=5825): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x20c2, 0x0) mmap$auto(0x2, 0x400408, 0x1000000000df, 0x800000009b72, r0, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) connect$auto(r0, &(0x7f0000000040)=@xdp={0x2c, 0x2, r1, 0x28}, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) clock_adjtime$auto(0x1, &(0x7f0000000280)={0xffffff00, 0x0, 0x6fe, 0x40004, 0x7, 0x800000000004, 0x8227, 0x0, 0x2, 0x0, 0x8, {0x2b3, 0x800}, 0x101, 0xf8, 0xa, 0xd94, 0x0, 0x1, 0x7, 0x6, 0xa9, 0x3, 0xfffffffe}) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/sysname\x00', 0x80002, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x7ff, 0xeb1, r0, 0x8000) (async) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) (async, rerun: 64) r3 = socket(0x10, 0x2, 0x4) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) (async, rerun: 32) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) (rerun: 32) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/enable\x00', 0x3afb00, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) 467.526057ms ago: executing program 5 (id=5826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') r3 = syz_clone3(&(0x7f0000001200)={0x1000000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x4}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/39, &(0x7f00000011c0)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r0, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x4}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x373}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xfffffffc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x7}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x40}]}, 0x68}}, 0x1) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000013c0), r0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001400)={0x144, r7, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MLD_ADDR={0xf5, 0x13a, "ac5766c2f7dcbd31b6afe478d72da8d2f78098b3b10045aa63ff1c104abb4a7a19e1152184af408e3c14451bfe18bd44ebf3f4fd3ef49427c60b514991999ae3fe9c75c2c48e671e543607a11914163b4751a41be5b5dfb9b0c212bf86b5372b6faa6a27d1117e84e31e55c49e980d9f9d7be5297bd49aaeb93f51f5cf889fe12762a05aeaab713e6c111e6facd97b88519828f348003a93112dc7b5fdfe1f8632c026eb4364c75dd773494d397d9661c98c4b644ad444424ea081ae94628d4ebee6551a432565d62354d97f9904f17f362f2e6c9cbc9cc04f808b6a3d1466d627c20c2dd17549be17ccb2e28635d915b9"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x8}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0xfa}]}, 0x144}}, 0x4008005) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001600), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001680), r0) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r8, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004000) r10 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000001780), 0x2088c0, 0x0) r11 = ioctl$auto_TUNGETDEVNETNS(r10, 0x54e3, 0x0) setsockopt$auto_SO_BUF_LOCK(r8, 0x57b, 0x48, &(0x7f00000017c0)='nl80211\x00', 0xb) inotify_init1$auto(0x4) r12 = getpid() syz_genetlink_get_family_id$auto_cifs(&(0x7f0000001800), r11) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001840)='/dev/loop12\x00', 0x80, 0x0) msgctl$auto(0x7fffffff, 0x9, &(0x7f0000001900)={{0x7, 0xee01, 0xffffffffffffffff, 0x3360, 0x200, 0x401, 0x8}, &(0x7f0000001880)=0x1, &(0x7f00000018c0)=0x5, 0xd44, 0x6, 0x7fff, 0x6, 0x5, 0x4, 0x4, 0x1, @inferred=r5, @inferred=r5}) msgctl$auto_IPC_STAT(0x3, 0x2, &(0x7f0000001a00)={{0x4, 0xee01, 0xee01, 0xffff5ae0, 0x9, 0x5, 0x9}, &(0x7f0000001980)=0x5, &(0x7f00000019c0)=0x20, 0x100000000, 0x2, 0x3, 0x2, 0x5, 0x0, 0x9, 0x945f, @raw=0x7, @inferred=r6}) shmctl$auto(0x40, 0x0, &(0x7f0000001b80)={{0xffff, r13, r16, 0xffffffc0, 0xaac, 0x2, 0x259a}, 0x0, 0x1, 0x1, 0xb, @raw=0x101, @raw=0x3, 0xe0, 0x0, &(0x7f0000001a80)="a6e95bafa118fb3b2ecc8bc8aad8bea84dbbcebc9e9261937123b8006ce4e81becc5d5708f2f6dff056bfb89d47d0cafdefb77680a5c5707236a1f497cf1a8d4e61f12e24706bf57c1049decf6063a41dca2", &(0x7f0000001b00)="468e9fcda9af179a9d9639bd355fa73413ea20ef5f6d1e9daf8580dcc264d9e14a2033e5e4e458cfb2d1201900b637393aee618d2f63cd44c062d40971af39a4ead9d71ac7250870f43756f9aebae09156490f3b4ecb0be36112744e2cab0d7e325ca199"}) read$auto(r10, &(0x7f0000001c00)='nl802154\x00', 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000001c40), 0x24000, 0x0) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000001c80)="df5dff748475c47c2f941a12d5cff2f9c1dc6c82324f1e037994ad6316db7336d076dc3dd4f9eb85a5070f491259c85dc171c3fe5ff508075e20027dc66b3c082263f5fa1dccd152e0d280bd22f9dd903819", 0x6) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/thread-self/cmdline\x00', 0x80, 0x0) write$auto(r4, &(0x7f0000001d40)='\x00', 0x9) ioctl$auto_SNDCTL_TMR_METRONOME(r11, 0x40045407, &(0x7f0000001d80)="bb4279cb45f430748a89d570bd8115f53603bfdb5129c14df6d18f3b0d7b566267cd2ac665774405cc504386cb68776c712c9bb66602928669052ba01ee3b59e5a5f08dd21e04edb39c11ec5d777066cb2dd3f07b27ca3eb8ccda61fd267a1767780470d84e3376c5d0e5279d50ebc8ad83b45b0d68a291939503f8f341e273145174051eb52d9b20aa286678bd59a6ce6ca559db547ad00beacbe3b99e8b83fa8e2594755e5172dc1c54c32773c2b3ddf8fad46c76a") msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f0000001ec0)={{0x9, r13, r14, 0x3, 0xf, 0x2, 0x2}, &(0x7f0000001e40)=0x4, &(0x7f0000001e80)=0x7, 0x8, 0x11c, 0xfffffffffffffffe, 0x228d, 0x934, 0xa000, 0x89f, 0x9, @inferred=r3, @raw=0x3}) msgctl$auto_IPC_RMID(0xdee, 0x0, &(0x7f0000001fc0)={{0x101, r15, r17, 0x6, 0x7, 0x2, 0x6}, &(0x7f0000001f40)=0x40, &(0x7f0000001f80)=0x8, 0x3, 0x4, 0x8, 0x7, 0x6, 0xfff8, 0xb1, 0x4, @raw, @inferred=r12}) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0xec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x24048080) 148.062149ms ago: executing program 9 (id=5827): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop5\x00', 0x14ba02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptybd\x00', 0x6202, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3d, 0x9, 0x0, 0x6, 0xe9) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0x3, 0x1, 0x40, 0x80000022, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm$auto(0xffffffffffffffff, 0x389, 0xd) 0s ago: executing program 5 (id=5828): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1, 0x5, 0x0) socket(0x2, 0x2, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cpu/0/msr\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0) close_range$auto(r0, r0, 0x6) socket(0x2, 0x1, 0x0) socket(0x25, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xf, 0x200000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/aqm\x00', 0x80, 0x0) pread64$auto(r1, 0x0, 0xe5, 0x40) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x6600, 0x0) ioctl$auto_BLKPG(r2, 0x1269, 0x300) mmap$auto(0x0, 0xb, 0x7f, 0xeb1, 0x3fd, 0x6) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x24400, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) unshare$auto(0x40000080) mmap$auto(0xa401000000000000, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): ][T12994] ? rcu_is_watching+0x12/0xc0 [ 1395.747052][T12994] tomoyo_file_open+0x6b/0x90 [ 1395.747074][T12994] security_file_open+0x84/0x1e0 [ 1395.747108][T12994] do_dentry_open+0x596/0x1530 [ 1395.747143][T12994] vfs_open+0x82/0x3f0 [ 1395.747180][T12994] path_openat+0x1de4/0x2cb0 [ 1395.747213][T12994] ? __pfx_path_openat+0x10/0x10 [ 1395.747244][T12994] do_filp_open+0x20b/0x470 [ 1395.747272][T12994] ? __pfx_do_filp_open+0x10/0x10 [ 1395.747310][T12994] ? alloc_fd+0x471/0x7d0 [ 1395.747339][T12994] do_sys_openat2+0x11b/0x1d0 [ 1395.747376][T12994] ? __pfx_do_sys_openat2+0x10/0x10 [ 1395.747413][T12994] ? posix_cpu_clock_get+0x2a3/0x340 [ 1395.747439][T12994] ? rcu_is_watching+0x12/0xc0 [ 1395.747466][T12994] __x64_sys_openat+0x174/0x210 [ 1395.747504][T12994] ? __pfx___x64_sys_openat+0x10/0x10 [ 1395.747548][T12994] do_syscall_64+0xcd/0x490 [ 1395.747586][T12994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.747611][T12994] RIP: 0033:0x7f6e0cd8ebe9 [ 1395.747629][T12994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1395.747654][T12994] RSP: 002b:00007f6e0dc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1395.747681][T12994] RAX: ffffffffffffffda RBX: 00007f6e0cfb5fa0 RCX: 00007f6e0cd8ebe9 [ 1395.747697][T12994] RDX: 0000000000000001 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 1395.747719][T12994] RBP: 00007f6e0ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1395.747734][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1395.747748][T12994] R13: 00007f6e0cfb6038 R14: 00007f6e0cfb5fa0 R15: 00007ffcc8217398 [ 1395.747772][T12994] [ 1397.130448][T13033] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4930'. [ 1397.148204][T12994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1397.304689][T13039] __vm_enough_memory: pid: 13039, comm: syz.3.4931, bytes: 4398046511104 not enough memory for the allocation [ 1399.712561][T13107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1400.092605][T13099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1400.263832][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4940'. [ 1400.531675][T13154] netlink: zone id is out of range [ 1400.552622][T13154] netlink: zone id is out of range [ 1400.625264][T13154] netlink: zone id is out of range [ 1400.732148][T13154] netlink: zone id is out of range [ 1400.808830][T13154] netlink: zone id is out of range [ 1400.859048][T13154] netlink: zone id is out of range [ 1400.931199][T13154] netlink: zone id is out of range [ 1401.010692][T13154] netlink: zone id is out of range [ 1401.116706][T13154] netlink: zone id is out of range [ 1401.183929][T13154] netlink: zone id is out of range [ 1401.294139][T13164] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1401.600603][T13172] random: crng reseeded on system resumption [ 1402.466516][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1402.481919][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1403.572259][T13300] FAULT_INJECTION: forcing a failure. [ 1403.572259][T13300] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.635057][T13300] CPU: 1 UID: 0 PID: 13300 Comm: syz.6.4953 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1403.635093][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1403.635108][T13300] Call Trace: [ 1403.635115][T13300] [ 1403.635124][T13300] dump_stack_lvl+0x16c/0x1f0 [ 1403.635159][T13300] should_fail_ex+0x512/0x640 [ 1403.635196][T13300] should_failslab+0xc2/0x120 [ 1403.635229][T13300] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1403.635254][T13300] ? __sys_getsockopt+0x123/0x1b0 [ 1403.635284][T13300] ? __x64_sys_getsockopt+0xbd/0x160 [ 1403.635313][T13300] ? do_syscall_64+0xcd/0x490 [ 1403.635344][T13300] ? subflow_create_ctx+0x9b/0x2c0 [ 1403.635378][T13300] subflow_create_ctx+0x9b/0x2c0 [ 1403.635410][T13300] subflow_ulp_init+0xc3/0x4d0 [ 1403.635442][T13300] tcp_set_ulp+0x326/0x7f0 [ 1403.635479][T13300] mptcp_subflow_create_socket+0x361/0xed0 [ 1403.635520][T13300] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1403.635559][T13300] ? try_to_wake_up+0xa67/0x1870 [ 1403.635584][T13300] __mptcp_nmpc_sk+0x182/0x7d0 [ 1403.635606][T13300] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1403.635628][T13300] ? mptcp_getsockopt+0x7a5/0xe20 [ 1403.635663][T13300] ? mptcp_getsockopt+0x7a5/0xe20 [ 1403.635698][T13300] ? rcu_is_watching+0x12/0xc0 [ 1403.635722][T13300] ? mptcp_getsockopt+0x7a5/0xe20 [ 1403.635759][T13300] mptcp_getsockopt+0xcf8/0xe20 [ 1403.635795][T13300] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1403.635832][T13300] ? __might_fault+0xe3/0x190 [ 1403.635858][T13300] ? __might_fault+0x13b/0x190 [ 1403.635884][T13300] ? rcu_is_watching+0x12/0xc0 [ 1403.635907][T13300] ? __might_fault+0xe3/0x190 [ 1403.635932][T13300] ? lock_release+0x201/0x2f0 [ 1403.635967][T13300] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1403.636011][T13300] do_sock_getsockopt+0x34a/0x440 [ 1403.636049][T13300] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1403.636086][T13300] ? lock_release+0x201/0x2f0 [ 1403.636123][T13300] __sys_getsockopt+0x123/0x1b0 [ 1403.636155][T13300] __x64_sys_getsockopt+0xbd/0x160 [ 1403.636186][T13300] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1403.636224][T13300] do_syscall_64+0xcd/0x490 [ 1403.636256][T13300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.636281][T13300] RIP: 0033:0x7f58d858ebe9 [ 1403.636300][T13300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.636324][T13300] RSP: 002b:00007f58d67f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1403.636346][T13300] RAX: ffffffffffffffda RBX: 00007f58d87b5fa0 RCX: 00007f58d858ebe9 [ 1403.636363][T13300] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 1403.636377][T13300] RBP: 00007f58d8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1403.636392][T13300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.636406][T13300] R13: 00007f58d87b6038 R14: 00007f58d87b5fa0 R15: 00007fff6e1003c8 [ 1403.636429][T13300] [ 1403.929519][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.233652][T13356] netlink: 194 bytes leftover after parsing attributes in process `syz.6.4957'. [ 1405.739262][T13372] ubi0: attaching mtd0 [ 1405.812971][T13372] ubi0: scanning is finished [ 1405.881762][T13372] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1406.422370][T13372] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1406.508767][T13373] ubi0: attaching mtd0 [ 1406.513702][T13373] ubi0: scanning is finished [ 1406.588427][T13373] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1406.915804][T13373] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1410.687783][T13408] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1412.555054][T13564] netlink: 'syz.3.4978': attribute type 1 has an invalid length. [ 1413.204057][T13632] net_ratelimit: 672 callbacks suppressed [ 1413.204077][T13632] openvswitch: netlink: Message has 1 unknown bytes. [ 1415.450151][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4988'. [ 1416.563679][T13747] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input97 [ 1417.087077][T13665] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1419.630454][T13951] FAULT_INJECTION: forcing a failure. [ 1419.630454][T13951] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.725128][T13951] CPU: 1 UID: 0 PID: 13951 Comm: syz.6.5003 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1419.725165][T13951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1419.725181][T13951] Call Trace: [ 1419.725189][T13951] [ 1419.725198][T13951] dump_stack_lvl+0x16c/0x1f0 [ 1419.725233][T13951] should_fail_ex+0x512/0x640 [ 1419.725271][T13951] should_failslab+0xc2/0x120 [ 1419.725305][T13951] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1419.725334][T13951] ? __alloc_skb+0x2b2/0x380 [ 1419.725366][T13951] __alloc_skb+0x2b2/0x380 [ 1419.725393][T13951] ? __pfx___alloc_skb+0x10/0x10 [ 1419.725422][T13951] ? genl_rcv_msg+0x4bb/0x800 [ 1419.725462][T13951] netlink_ack+0x15d/0xb80 [ 1419.725498][T13951] netlink_rcv_skb+0x332/0x420 [ 1419.725530][T13951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1419.725568][T13951] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1419.725607][T13951] ? netlink_deliver_tap+0x1ae/0xd30 [ 1419.725652][T13951] genl_rcv+0x28/0x40 [ 1419.725684][T13951] netlink_unicast+0x5aa/0x870 [ 1419.725718][T13951] ? __pfx_netlink_unicast+0x10/0x10 [ 1419.725750][T13951] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1419.725785][T13951] netlink_sendmsg+0x8d1/0xdd0 [ 1419.725820][T13951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1419.725853][T13951] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1419.725881][T13951] __sys_sendto+0x4a3/0x520 [ 1419.725908][T13951] ? __pfx___sys_sendto+0x10/0x10 [ 1419.725940][T13951] ? lock_release+0x201/0x2f0 [ 1419.725976][T13951] ? __pfx___sys_socket+0x10/0x10 [ 1419.725999][T13951] ? xfd_validate_state+0x61/0x180 [ 1419.726037][T13951] __x64_sys_sendto+0xe0/0x1c0 [ 1419.726063][T13951] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1419.726101][T13951] do_syscall_64+0xcd/0x490 [ 1419.726134][T13951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.726158][T13951] RIP: 0033:0x7f58d8590a7c [ 1419.726176][T13951] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1419.726200][T13951] RSP: 002b:00007f58d67f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1419.726222][T13951] RAX: ffffffffffffffda RBX: 00007f58d67f4fc0 RCX: 00007f58d8590a7c [ 1419.726239][T13951] RDX: 0000000000000024 RSI: 00007f58d67f5010 RDI: 0000000000000009 [ 1419.726254][T13951] RBP: 0000000000000000 R08: 00007f58d67f4f14 R09: 000000000000000c [ 1419.726269][T13951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 1419.726283][T13951] R13: 00007f58d67f4f68 R14: 00007f58d67f5010 R15: 0000000000000000 [ 1419.726306][T13951] [ 1420.346040][T13980] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1420.536745][T13993] kafs: addr_prefs: Invalid Command [ 1420.654467][T14007] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1422.062354][T14063] openvswitch: netlink: Key type 170 is out of range max 32 [ 1423.882136][T14175] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input98 [ 1424.067198][T14186] futex_wake_op: syz.1.5024 tries to shift op by -2048; fix this program [ 1424.109314][T14186] futex_wake_op: syz.1.5024 tries to shift op by -2048; fix this program [ 1425.818128][T14047] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1426.205094][T14256] ubi0: attaching mtd0 [ 1426.209942][T14256] ubi0: scanning is finished [ 1426.301807][T14256] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1426.676998][T14256] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1428.167847][T14321] nbd: socks must be embedded in a SOCK_ITEM attr [ 1428.577382][T14339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1428.616843][T14339] caif0: entered promiscuous mode [ 1428.644194][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1428.686402][T14339] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1428.984312][T14347] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input99 [ 1429.101322][ T5913] usb usb38-port5: attempt power cycle [ 1429.582381][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.590687][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.725455][ T5913] usb usb38-port5: unable to enumerate USB device [ 1430.679127][T14413] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5047'. [ 1431.025933][T14427] zswap: compressor not available [ 1431.747604][T14443] blktrace: Concurrent blktraces are not allowed on ram4 [ 1431.856724][T14449] kvm: kvm [14448]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xffffffffffffffff [ 1431.887379][T14461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5053'. [ 1432.710398][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5060'. [ 1432.911590][T14508] can: request_module (can-proto-0) failed. [ 1433.227797][T14525] sd 0:0:1:0: PR command failed: 1026 [ 1433.269520][T14525] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1433.304655][T14525] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1433.912179][T14521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5062'. [ 1436.987890][T14675] random: crng reseeded on system resumption [ 1438.181671][T14680] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4096.0.0), cmd(5) [ 1438.814192][T14713] input: jJǸ-¶š9ã%vø“û¨lÐQ  J8fi‘ as /devices/virtual/input/input100 [ 1439.147763][T14715] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1439.221479][T14721] ima: policy update failed [ 1439.269899][T14715] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1439.291057][ T31] audit: type=1802 audit(4294986206.983:67): pid=14721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5080" res=0 errno=0 [ 1439.428199][T14715] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1439.613334][T14715] page_type: f5(slab) [ 1439.658765][T14715] raw: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 1439.890362][T14715] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1440.038457][T14715] head: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 1440.215785][T14715] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1440.380859][T14715] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1440.487633][T14715] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1440.597846][T14715] page dumped because: unmovable page [ 1440.603272][T14715] page_owner tracks the page as allocated [ 1440.711105][T14715] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 30473, tgid 30473 (kworker/u10:5), ts 1438598661943, free_ts 1438450121239 [ 1440.951370][T14715] post_alloc_hook+0x1c0/0x230 [ 1440.961438][T14715] get_page_from_freelist+0x132b/0x38e0 [ 1441.025535][T14715] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1441.096050][T14715] alloc_pages_mpol+0x1fb/0x550 [ 1441.100965][T14715] new_slab+0x247/0x330 [ 1441.165107][T14715] ___slab_alloc+0xcf2/0x1740 [ 1441.254041][T14715] __slab_alloc.constprop.0+0x56/0xb0 [ 1441.283450][T14715] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 1441.290050][T14715] kmalloc_reserve+0xef/0x2c0 [ 1441.390237][T14715] __alloc_skb+0x166/0x380 [ 1441.431537][T14715] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 1441.512278][T14715] process_one_work+0x9cc/0x1b70 [ 1441.541047][T14715] worker_thread+0x6c8/0xf10 [ 1441.607632][T14715] kthread+0x3c2/0x780 [ 1441.646835][T14715] ret_from_fork+0x5d4/0x6f0 [ 1441.675229][T14715] ret_from_fork_asm+0x1a/0x30 [ 1441.740732][T14715] page last free pid 30137 tgid 30137 stack trace: [ 1441.784084][T14715] __free_frozen_pages+0x7d5/0x10f0 [ 1441.841450][T14715] __put_partials+0x165/0x1c0 [ 1441.877943][T14715] qlist_free_all+0x4d/0x120 [ 1441.929402][T14715] kasan_quarantine_reduce+0x195/0x1e0 [ 1441.983700][T14715] __kasan_slab_alloc+0x69/0x90 [ 1442.040730][T14715] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 1442.080179][T14715] sock_alloc_inode+0x25/0x1c0 [ 1442.118642][T14715] alloc_inode+0x61/0x240 [ 1442.148870][T14715] sock_alloc+0x40/0x280 [ 1442.175605][T14715] __sock_create+0xc1/0x8d0 [ 1442.213877][T14715] rds_tcp_conn_path_connect+0x2d0/0x7f0 [ 1442.250462][T14715] rds_connect_worker+0x1ac/0x2c0 [ 1442.286036][T14715] process_one_work+0x9cc/0x1b70 [ 1442.322905][T14715] worker_thread+0x6c8/0xf10 [ 1442.358754][T14715] kthread+0x3c2/0x780 [ 1442.381003][T14715] ret_from_fork+0x5d4/0x6f0 [ 1444.851043][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'. [ 1446.826974][ T31] audit: type=1800 audit(4294986214.563:68): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5103" name="features" dev="configfs" ino=153063 res=0 errno=0 [ 1447.416198][T15013] vivid-007: ================= START STATUS ================= [ 1447.521250][T15013] vivid-007: Generate PTS: true [ 1447.593047][T15013] vivid-007: Generate SCR: true [ 1447.597969][T15013] tpg source WxH: 320x240 (Y'CbCr) [ 1447.692847][T15013] tpg field: 1 [ 1447.731535][T15013] tpg crop: (0,0)/320x240 [ 1447.780265][T15013] tpg compose: (0,0)/320x240 [ 1447.830216][T15013] tpg colorspace: 8 [ 1447.866289][T15013] tpg transfer function: 0/0 [ 1447.914925][T15013] tpg Y'CbCr encoding: 0/0 [ 1447.961884][T15013] tpg quantization: 0/0 [ 1448.026944][T15013] tpg RGB range: 0/2 [ 1448.070595][T15013] vivid-007: ================== END STATUS ================== [ 1448.416305][T15041] random: crng reseeded on system resumption [ 1448.534133][T15046] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1448.580042][T15046] : renamed from bond0 [ 1448.686048][T15054] FAULT_INJECTION: forcing a failure. [ 1448.686048][T15054] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.862424][T15054] CPU: 1 UID: 0 PID: 15054 Comm: syz.0.5111 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1448.862461][T15054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1448.862476][T15054] Call Trace: [ 1448.862485][T15054] [ 1448.862494][T15054] dump_stack_lvl+0x16c/0x1f0 [ 1448.862529][T15054] should_fail_ex+0x512/0x640 [ 1448.862567][T15054] should_failslab+0xc2/0x120 [ 1448.862599][T15054] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1448.862629][T15054] ? lockdep_init_map_type+0x5c/0x280 [ 1448.862662][T15054] ? seq_open+0x55/0x170 [ 1448.862698][T15054] seq_open+0x55/0x170 [ 1448.862732][T15054] kernfs_fop_open+0x59f/0xda0 [ 1448.862758][T15054] do_dentry_open+0x97f/0x1530 [ 1448.862788][T15054] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1448.862814][T15054] vfs_open+0x82/0x3f0 [ 1448.862850][T15054] path_openat+0x1de4/0x2cb0 [ 1448.862894][T15054] ? __pfx_path_openat+0x10/0x10 [ 1448.862926][T15054] do_filp_open+0x20b/0x470 [ 1448.862961][T15054] ? __pfx_do_filp_open+0x10/0x10 [ 1448.863007][T15054] ? alloc_fd+0x471/0x7d0 [ 1448.863040][T15054] do_sys_openat2+0x11b/0x1d0 [ 1448.863077][T15054] ? __pfx_do_sys_openat2+0x10/0x10 [ 1448.863120][T15054] __x64_sys_openat+0x174/0x210 [ 1448.863158][T15054] ? __pfx___x64_sys_openat+0x10/0x10 [ 1448.863202][T15054] do_syscall_64+0xcd/0x490 [ 1448.863238][T15054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.863262][T15054] RIP: 0033:0x7f7ee238ebe9 [ 1448.863280][T15054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1448.863304][T15054] RSP: 002b:00007f7ee31c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1448.863326][T15054] RAX: ffffffffffffffda RBX: 00007f7ee25b6090 RCX: 00007f7ee238ebe9 [ 1448.863342][T15054] RDX: 0000000000000400 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1448.863358][T15054] RBP: 00007f7ee2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1448.863373][T15054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1448.863387][T15054] R13: 00007f7ee25b6128 R14: 00007f7ee25b6090 R15: 00007fffaee97108 [ 1448.863410][T15054] [ 1450.015980][T15112] netlink: 346 bytes leftover after parsing attributes in process `syz.1.5113'. [ 1451.794378][T15180] FAULT_INJECTION: forcing a failure. [ 1451.794378][T15180] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.113366][T15180] CPU: 1 UID: 0 PID: 15180 Comm: syz.1.5121 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1452.113403][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1452.113418][T15180] Call Trace: [ 1452.113426][T15180] [ 1452.113435][T15180] dump_stack_lvl+0x16c/0x1f0 [ 1452.113470][T15180] should_fail_ex+0x512/0x640 [ 1452.113507][T15180] should_failslab+0xc2/0x120 [ 1452.113539][T15180] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1452.113569][T15180] ? __kernfs_new_node+0x2fd/0x8e0 [ 1452.113599][T15180] ? __kernfs_new_node+0xd2/0x8e0 [ 1452.113631][T15180] __kernfs_new_node+0xd2/0x8e0 [ 1452.113662][T15180] ? rcu_is_watching+0x12/0xc0 [ 1452.113687][T15180] ? __pfx___kernfs_new_node+0x10/0x10 [ 1452.113717][T15180] ? __pfx___might_resched+0x10/0x10 [ 1452.113750][T15180] ? rcu_is_watching+0x12/0xc0 [ 1452.113774][T15180] ? kernfs_root+0xee/0x2a0 [ 1452.113803][T15180] ? rcu_is_watching+0x12/0xc0 [ 1452.113826][T15180] ? lock_release+0x201/0x2f0 [ 1452.113861][T15180] kernfs_new_node+0x13c/0x1e0 [ 1452.113898][T15180] __kernfs_create_file+0x53/0x350 [ 1452.113924][T15180] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1452.113956][T15180] internal_create_group+0x578/0xf30 [ 1452.113991][T15180] ? __pfx_internal_create_group+0x10/0x10 [ 1452.114026][T15180] ? kernfs_create_link+0x1bd/0x240 [ 1452.114052][T15180] internal_create_groups+0x9d/0x150 [ 1452.114084][T15180] device_add+0x6d1/0x1aa0 [ 1452.114106][T15180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1452.114142][T15180] ? __pfx_device_add+0x10/0x10 [ 1452.114164][T15180] ? lockdep_init_map_type+0x5c/0x280 [ 1452.114197][T15180] ? __init_waitqueue_head+0xca/0x150 [ 1452.114238][T15180] netdev_register_kobject+0x1a9/0x3d0 [ 1452.114279][T15180] register_netdevice+0x13dc/0x2270 [ 1452.114317][T15180] ? __pfx_register_netdevice+0x10/0x10 [ 1452.114355][T15180] ? __pfx_loopback_net_init+0x10/0x10 [ 1452.114383][T15180] register_netdev+0x34/0x50 [ 1452.114417][T15180] loopback_net_init+0x7a/0x170 [ 1452.114443][T15180] ? __pfx_loopback_net_init+0x10/0x10 [ 1452.114469][T15180] ops_init+0x1df/0x5f0 [ 1452.114503][T15180] setup_net+0x10f/0x380 [ 1452.114534][T15180] ? lockdep_init_map_type+0x5c/0x280 [ 1452.114568][T15180] ? __pfx_setup_net+0x10/0x10 [ 1452.114601][T15180] ? debug_mutex_init+0x37/0x70 [ 1452.114625][T15180] copy_net_ns+0x2a6/0x5f0 [ 1452.114665][T15180] create_new_namespaces+0x3ea/0xa90 [ 1452.114696][T15180] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1452.114731][T15180] ksys_unshare+0x45b/0xa40 [ 1452.114765][T15180] ? __pfx_ksys_unshare+0x10/0x10 [ 1452.114798][T15180] ? xfd_validate_state+0x61/0x180 [ 1452.114841][T15180] __x64_sys_unshare+0x31/0x40 [ 1452.114875][T15180] do_syscall_64+0xcd/0x490 [ 1452.114907][T15180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.114932][T15180] RIP: 0033:0x7f6e0cd8ebe9 [ 1452.114950][T15180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.114975][T15180] RSP: 002b:00007f6e0dc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1452.114998][T15180] RAX: ffffffffffffffda RBX: 00007f6e0cfb5fa0 RCX: 00007f6e0cd8ebe9 [ 1452.115014][T15180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1452.115029][T15180] RBP: 00007f6e0ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1452.115044][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.115058][T15180] R13: 00007f6e0cfb6038 R14: 00007f6e0cfb5fa0 R15: 00007ffcc8217398 [ 1452.115082][T15180] [ 1454.906261][T15251] : mtu less than device minimum [ 1455.314037][T15260] Invalid ELF header magic: != ELF [ 1456.494419][T15275] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5128'. [ 1458.155544][T15371] Invalid ELF header magic: != ELF [ 1458.805578][T15324] kexec: Could not allocate control_code_buffer [ 1459.468889][T15422] Invalid ELF header magic: != ELF [ 1460.146637][T15422] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5142'. [ 1460.223668][T15428] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5142'. [ 1461.292458][T15481] kafs: addr_prefs: Too many elements in string [ 1461.892889][T15519] FAULT_INJECTION: forcing a failure. [ 1461.892889][T15519] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.016955][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz.1.5151 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1462.016997][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1462.017012][T15519] Call Trace: [ 1462.017019][T15519] [ 1462.017028][T15519] dump_stack_lvl+0x16c/0x1f0 [ 1462.017062][T15519] should_fail_ex+0x512/0x640 [ 1462.017099][T15519] should_failslab+0xc2/0x120 [ 1462.017141][T15519] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1462.017171][T15519] ? __register_sysctl_table+0x736/0x1900 [ 1462.017209][T15519] ? __alloc_skb+0x2b2/0x380 [ 1462.017240][T15519] __alloc_skb+0x2b2/0x380 [ 1462.017268][T15519] ? __pfx___alloc_skb+0x10/0x10 [ 1462.017298][T15519] ? __pfx___register_sysctl_table+0x10/0x10 [ 1462.017334][T15519] ? is_module_address+0x69/0xf0 [ 1462.017371][T15519] inet6_netconf_notify_devconf+0x87/0x180 [ 1462.017413][T15519] __addrconf_sysctl_register+0x22b/0x360 [ 1462.017453][T15519] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1462.017492][T15519] ? trace_kmalloc+0x2b/0xd0 [ 1462.017527][T15519] ? addrconf_init_net+0x1e9/0x8e0 [ 1462.017566][T15519] ? __asan_memcpy+0x3c/0x60 [ 1462.017591][T15519] addrconf_init_net+0x53a/0x8e0 [ 1462.017630][T15519] ? __pfx_addrconf_init_net+0x10/0x10 [ 1462.017668][T15519] ops_init+0x1df/0x5f0 [ 1462.017701][T15519] setup_net+0x10f/0x380 [ 1462.017732][T15519] ? lockdep_init_map_type+0x5c/0x280 [ 1462.017767][T15519] ? __pfx_setup_net+0x10/0x10 [ 1462.017800][T15519] ? debug_mutex_init+0x37/0x70 [ 1462.017824][T15519] copy_net_ns+0x2a6/0x5f0 [ 1462.017861][T15519] create_new_namespaces+0x3ea/0xa90 [ 1462.017892][T15519] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1462.017921][T15519] ksys_unshare+0x45b/0xa40 [ 1462.017955][T15519] ? __pfx_ksys_unshare+0x10/0x10 [ 1462.017988][T15519] ? xfd_validate_state+0x61/0x180 [ 1462.018028][T15519] __x64_sys_unshare+0x31/0x40 [ 1462.018061][T15519] do_syscall_64+0xcd/0x490 [ 1462.018094][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.018125][T15519] RIP: 0033:0x7f6e0cd8ebe9 [ 1462.018144][T15519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.018168][T15519] RSP: 002b:00007f6e0dc16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1462.018190][T15519] RAX: ffffffffffffffda RBX: 00007f6e0cfb6090 RCX: 00007f6e0cd8ebe9 [ 1462.018206][T15519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1462.018221][T15519] RBP: 00007f6e0ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1462.018236][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.018251][T15519] R13: 00007f6e0cfb6128 R14: 00007f6e0cfb6090 R15: 00007ffcc8217398 [ 1462.018273][T15519] [ 1464.737834][T15610] hugetlbfs: syz.1.5153 (15610): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1466.372187][T15746] ceph: Failed to parse sending metrics switch value 'P^' [ 1466.606698][T15753] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1466.903167][T15761] ima: policy update failed [ 1466.944563][ T31] audit: type=1802 audit(4294986234.780:69): pid=15761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.5168" res=0 errno=0 [ 1468.288483][T15811] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1468.700961][T15819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5173'. [ 1469.822879][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5174'. [ 1469.945307][T15749] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1470.227480][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5179'. [ 1470.237538][T15892] nvme_fcloop: unknown parameter or missing value '7' [ 1472.346935][T16027] random: crng reseeded on system resumption [ 1472.916134][T16104] sysfs_service_op_store: Client not running :-5: [ 1472.937068][T16102] sysfs_service_op_store: Client not running :-5: [ 1473.725616][T16124] random: crng reseeded on system resumption [ 1474.257707][T16137] netlink: 338 bytes leftover after parsing attributes in process `syz.6.5197'. [ 1475.085970][ T31] audit: type=1800 audit(4294986242.973:70): pid=16202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5206" name="version" dev="configfs" ino=156231 res=0 errno=0 [ 1475.568002][T16235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5210'. [ 1476.860228][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5214'. [ 1479.754191][T16436] ALSA: mixer_oss: invalid OSS volume '' [ 1480.620578][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5226'. [ 1482.242110][T16653] netlink: 338 bytes leftover after parsing attributes in process `syz.1.5235'. [ 1482.401159][T16653] macsec0: entered promiscuous mode [ 1482.465415][T16653] macsec0: entered allmulticast mode [ 1482.497985][T16653] veth1_macvtap: entered allmulticast mode [ 1482.549483][T16652] could not allocate digest TFM handle [ 1483.022898][T16693] FAULT_INJECTION: forcing a failure. [ 1483.022898][T16693] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.193019][T16693] CPU: 1 UID: 0 PID: 16693 Comm: syz.6.5236 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1483.193054][T16693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1483.193070][T16693] Call Trace: [ 1483.193078][T16693] [ 1483.193087][T16693] dump_stack_lvl+0x16c/0x1f0 [ 1483.193122][T16693] should_fail_ex+0x512/0x640 [ 1483.193160][T16693] should_failslab+0xc2/0x120 [ 1483.193193][T16693] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1483.193222][T16693] ? lock_release+0x201/0x2f0 [ 1483.193253][T16693] ? __proc_create+0x2ce/0x8e0 [ 1483.193290][T16693] __proc_create+0x2ce/0x8e0 [ 1483.193325][T16693] ? __pfx___proc_create+0x10/0x10 [ 1483.193362][T16693] ? _raw_write_unlock+0x28/0x50 [ 1483.193391][T16693] ? proc_register+0x314/0x5f0 [ 1483.193428][T16693] proc_create_reg+0x7d/0x180 [ 1483.193464][T16693] ? __pfx_ip_vs_stats_show+0x10/0x10 [ 1483.193496][T16693] proc_create_net_single+0x86/0x180 [ 1483.193533][T16693] ? __pfx_proc_create_net_single+0x10/0x10 [ 1483.193576][T16693] ip_vs_control_net_init+0x457/0x1d20 [ 1483.193601][T16693] ? debug_mutex_init+0x37/0x70 [ 1483.193624][T16693] __ip_vs_init+0x217/0x520 [ 1483.193650][T16693] ? __pfx___ip_vs_init+0x10/0x10 [ 1483.193676][T16693] ops_init+0x1df/0x5f0 [ 1483.193710][T16693] setup_net+0x10f/0x380 [ 1483.193740][T16693] ? lockdep_init_map_type+0x5c/0x280 [ 1483.193775][T16693] ? __pfx_setup_net+0x10/0x10 [ 1483.193808][T16693] ? debug_mutex_init+0x37/0x70 [ 1483.193832][T16693] copy_net_ns+0x2a6/0x5f0 [ 1483.193869][T16693] create_new_namespaces+0x3ea/0xa90 [ 1483.193907][T16693] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1483.193937][T16693] ksys_unshare+0x45b/0xa40 [ 1483.193971][T16693] ? __pfx_ksys_unshare+0x10/0x10 [ 1483.194005][T16693] ? xfd_validate_state+0x61/0x180 [ 1483.194045][T16693] __x64_sys_unshare+0x31/0x40 [ 1483.194082][T16693] do_syscall_64+0xcd/0x490 [ 1483.194114][T16693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.194139][T16693] RIP: 0033:0x7f58d858ebe9 [ 1483.194157][T16693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.194181][T16693] RSP: 002b:00007f58d67f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1483.194203][T16693] RAX: ffffffffffffffda RBX: 00007f58d87b5fa0 RCX: 00007f58d858ebe9 [ 1483.194220][T16693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1483.194234][T16693] RBP: 00007f58d8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1483.194249][T16693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.194264][T16693] R13: 00007f58d87b6038 R14: 00007f58d87b5fa0 R15: 00007fff6e1003c8 [ 1483.194287][T16693] [ 1483.461896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1484.896062][T16780] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 1487.972014][T16937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5256'. [ 1490.693618][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.740553][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.225419][T16950] zero sized request [ 1491.928400][T16983] __vm_enough_memory: pid: 16983, comm: syz.0.5263, bytes: 4398046511104 not enough memory for the allocation [ 1492.480864][T17028] FAULT_INJECTION: forcing a failure. [ 1492.480864][T17028] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.595806][T17043] ptrace attach of "./syz-executor exec"[30158] was attempted by ""[17043] [ 1492.653785][T17028] CPU: 1 UID: 0 PID: 17028 Comm: syz.1.5265 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1492.653822][T17028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1492.653838][T17028] Call Trace: [ 1492.653845][T17028] [ 1492.653854][T17028] dump_stack_lvl+0x16c/0x1f0 [ 1492.653889][T17028] should_fail_ex+0x512/0x640 [ 1492.653925][T17028] ? lsm_blob_alloc+0x68/0x90 [ 1492.653963][T17028] should_failslab+0xc2/0x120 [ 1492.653995][T17028] __kmalloc_noprof+0xd2/0x510 [ 1492.654026][T17028] lsm_blob_alloc+0x68/0x90 [ 1492.654079][T17028] security_sk_alloc+0x30/0x270 [ 1492.654106][T17028] sk_prot_alloc+0xfb/0x2a0 [ 1492.654145][T17028] sk_alloc+0x36/0xc20 [ 1492.654173][T17028] unix_create1+0xa6/0x700 [ 1492.654204][T17028] unix_create+0x110/0x270 [ 1492.654233][T17028] __sock_create+0x338/0x8d0 [ 1492.654257][T17028] __sys_socketpair+0x25c/0x5a0 [ 1492.654282][T17028] ? __pfx___sys_socketpair+0x10/0x10 [ 1492.654308][T17028] ? xfd_validate_state+0x61/0x180 [ 1492.654345][T17028] ? __pfx_do_writev+0x10/0x10 [ 1492.654373][T17028] __x64_sys_socketpair+0x96/0x100 [ 1492.654397][T17028] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1492.654436][T17028] do_syscall_64+0xcd/0x490 [ 1492.654469][T17028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.654493][T17028] RIP: 0033:0x7f6e0cd8ebe9 [ 1492.654510][T17028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1492.654534][T17028] RSP: 002b:00007f6e0dbf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1492.654556][T17028] RAX: ffffffffffffffda RBX: 00007f6e0cfb6180 RCX: 00007f6e0cd8ebe9 [ 1492.654573][T17028] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1492.654588][T17028] RBP: 00007f6e0ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1492.654602][T17028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1492.654617][T17028] R13: 00007f6e0cfb6218 R14: 00007f6e0cfb6180 R15: 00007ffcc8217398 [ 1492.654640][T17028] [ 1494.651455][T30135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1494.658732][T30135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1494.670136][T30135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1494.677737][T30135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1494.693332][T30135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1495.165846][T30148] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.411541][T30148] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.510832][T30148] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.652856][T30148] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.710307][T17125] chnl_net:caif_netlink_parms(): no params data found [ 1496.005488][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.020583][T17125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.039800][T17125] bridge_slave_0: entered allmulticast mode [ 1496.055201][T17125] bridge_slave_0: entered promiscuous mode [ 1496.091847][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.116972][T17125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.134664][T17125] bridge_slave_1: entered allmulticast mode [ 1496.150595][T17125] bridge_slave_1: entered promiscuous mode [ 1496.189881][T30148] bridge_slave_1: left allmulticast mode [ 1496.198223][T30148] bridge_slave_1: left promiscuous mode [ 1496.214564][T30148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.234106][T30148] bridge_slave_0: left allmulticast mode [ 1496.248353][T30148] bridge_slave_0: left promiscuous mode [ 1496.263281][T30148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.329988][T17247] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1496.337524][T17247] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1496.363949][T17247] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1496.380292][T17247] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1496.412669][T17247] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1496.441902][T17247] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1496.459474][T17247] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1496.486332][T30148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.495580][T17247] CPU0 is offline. [ 1496.550565][T30148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.610575][T30148] bond0 (unregistering): Released all slaves [ 1496.719960][T17125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.032563][T30148] .#: left promiscuous mode [ 1497.092863][T17125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.208996][T17405] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1497.270033][T30148] .RRoµ\Ó&p: left promiscuous mode [ 1497.327444][T17125] team0: Port device team_slave_0 added [ 1497.361518][T17125] team0: Port device team_slave_1 added [ 1497.490053][T17125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.528483][T17125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.673470][T17125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.693582][T30135] Bluetooth: hci0: command 0x0c1a tx timeout [ 1497.747737][T17125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.791407][T17125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.922141][T17125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.301764][T17125] hsr_slave_0: entered promiscuous mode [ 1498.307950][T17125] hsr_slave_1: entered promiscuous mode [ 1498.332047][T30135] Bluetooth: hci3: command 0x0c1a tx timeout [ 1498.396175][T17125] debugfs: 'hsr0' already exists in 'hsr' [ 1498.409951][T30135] Bluetooth: hci2: command 0x041b tx timeout [ 1498.416008][T30135] Bluetooth: hci4: command 0x0c1a tx timeout [ 1498.422151][ T6123] Bluetooth: hci1: command 0x0c1a tx timeout [ 1498.450669][T17514] zram: Added device: zram1 [ 1498.473125][T17125] Cannot create hsr debugfs directory [ 1498.681326][T17510] zswap: compressor  not available [ 1498.746701][T30148] hsr_slave_0: left promiscuous mode [ 1498.807918][T30148] hsr_slave_1: left promiscuous mode [ 1498.848101][T30148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.855521][T30148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.926610][T30148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.974211][T30148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.051815][T30148] veth1_macvtap: left promiscuous mode [ 1499.082223][T30148] veth0_macvtap: left promiscuous mode [ 1499.111082][T30148] veth1_vlan: left promiscuous mode [ 1499.133110][T30148] veth0_vlan: left promiscuous mode [ 1499.576802][T30148] team0 (unregistering): Port device team_slave_1 removed [ 1499.631152][T30148] team0 (unregistering): Port device team_slave_0 removed [ 1500.392064][T17643] random: crng reseeded on system resumption [ 1500.480586][T30135] Bluetooth: hci2: command 0x041b tx timeout [ 1501.740879][T17125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1501.781608][T17125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1501.853868][T17125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1501.936286][T17125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1502.291434][T17125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.387680][T17125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.444524][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.451787][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.547890][T30135] Bluetooth: hci2: command 0x041b tx timeout [ 1502.568512][T30137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.575679][T30137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.864636][T17125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1502.959086][T17125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1503.696732][T17125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.618540][T30135] Bluetooth: hci2: command 0x041b tx timeout [ 1504.951815][T17125] veth0_vlan: entered promiscuous mode [ 1505.023355][T17125] veth1_vlan: entered promiscuous mode [ 1505.169024][T17125] veth0_macvtap: entered promiscuous mode [ 1505.216649][T17125] veth1_macvtap: entered promiscuous mode [ 1505.293006][T17125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1505.348409][T17125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1505.419543][ T2758] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.462516][ T2758] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.511027][ T2758] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.567375][ T2758] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.675688][ T2747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.713857][ T2747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.783765][T30137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.813384][T30137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.403339][T17952] FAULT_INJECTION: forcing a failure. [ 1506.403339][T17952] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.482128][T17952] CPU: 1 UID: 0 PID: 17952 Comm: syz.0.5305 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1506.482164][T17952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1506.482179][T17952] Call Trace: [ 1506.482187][T17952] [ 1506.482196][T17952] dump_stack_lvl+0x16c/0x1f0 [ 1506.482230][T17952] should_fail_ex+0x512/0x640 [ 1506.482265][T17952] should_failslab+0xc2/0x120 [ 1506.482297][T17952] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1506.482325][T17952] ? security_inode_alloc+0x3b/0x2b0 [ 1506.482355][T17952] security_inode_alloc+0x3b/0x2b0 [ 1506.482381][T17952] inode_init_always_gfp+0xce4/0x1030 [ 1506.482410][T17952] alloc_inode+0x86/0x240 [ 1506.482444][T17952] sock_alloc+0x40/0x280 [ 1506.482478][T17952] __sock_create+0xc1/0x8d0 [ 1506.482501][T17952] __sys_socketpair+0x1d8/0x5a0 [ 1506.482526][T17952] ? __pfx___sys_socketpair+0x10/0x10 [ 1506.482551][T17952] ? xfd_validate_state+0x61/0x180 [ 1506.482589][T17952] __x64_sys_socketpair+0x96/0x100 [ 1506.482613][T17952] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1506.482651][T17952] do_syscall_64+0xcd/0x490 [ 1506.482683][T17952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.482707][T17952] RIP: 0033:0x7f7ee238ebe9 [ 1506.482725][T17952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.482748][T17952] RSP: 002b:00007f7ee31e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1506.482771][T17952] RAX: ffffffffffffffda RBX: 00007f7ee25b5fa0 RCX: 00007f7ee238ebe9 [ 1506.482787][T17952] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1506.482802][T17952] RBP: 00007f7ee2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1506.482842][T17952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.482856][T17952] R13: 00007f7ee25b6038 R14: 00007f7ee25b5fa0 R15: 00007fffaee97108 [ 1506.482885][T17952] [ 1506.482907][T17952] socket: no more sockets [ 1506.745431][T30135] Bluetooth: hci2: command 0x041b tx timeout [ 1508.138341][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 1508.757178][T30135] Bluetooth: hci2: command 0x041b tx timeout [ 1509.127125][T18028] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1513.985119][T18357] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 1514.481441][T18394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1514.558676][T18394] team0 (unregistering): Port device team_slave_0 removed [ 1514.589785][T18399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1514.638802][T18394] team0 (unregistering): Port device team_slave_1 removed [ 1515.726575][T18442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1515.747806][T18442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1515.778486][T18442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1515.813768][T18442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1515.837276][T18442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1515.843256][T18442] CPU0 is offline. [ 1516.079898][T18500] ima: policy update failed [ 1516.107043][ T31] audit: type=1802 audit(4294986284.211:71): pid=18500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.5353" res=0 errno=0 [ 1516.152737][T18448] .^: entered promiscuous mode [ 1517.190214][T30135] Bluetooth: hci0: command 0x0c1a tx timeout [ 1517.217480][T18565] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1517.747266][T30135] Bluetooth: hci3: command 0x0c1a tx timeout [ 1517.828667][T30135] Bluetooth: hci4: command 0x0c1a tx timeout [ 1517.834813][T30168] Bluetooth: hci1: command 0x0c1a tx timeout [ 1517.906166][T30135] Bluetooth: hci2: command 0x041b tx timeout [ 1520.184632][T18742] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1520.229508][T18742] CPU: 1 UID: 0 PID: 18742 Comm: syz.0.5369 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1520.229544][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1520.229560][T18742] Call Trace: [ 1520.229568][T18742] [ 1520.229576][T18742] dump_stack_lvl+0x16c/0x1f0 [ 1520.229618][T18742] sysfs_warn_dup+0x7f/0xa0 [ 1520.229648][T18742] sysfs_do_create_link_sd+0x124/0x140 [ 1520.229679][T18742] sysfs_create_link+0x61/0xc0 [ 1520.229709][T18742] device_add+0x62c/0x1aa0 [ 1520.229732][T18742] ? __pfx_device_add+0x10/0x10 [ 1520.229751][T18742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1520.229789][T18742] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1520.229820][T18742] wiphy_register+0x1df4/0x29f0 [ 1520.229853][T18742] ? netdev_run_todo+0x864/0x1320 [ 1520.229887][T18742] ? __dev_printk+0x190/0x270 [ 1520.229918][T18742] ? __pfx_wiphy_register+0x10/0x10 [ 1520.229956][T18742] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1520.229990][T18742] ieee80211_register_hw+0x24a9/0x4060 [ 1520.230029][T18742] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1520.230066][T18742] ? net_generic+0xea/0x2a0 [ 1520.230099][T18742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1520.230135][T18742] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1520.230167][T18742] ? __hrtimer_setup+0x176/0x280 [ 1520.230205][T18742] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1520.230236][T18742] ? trace_kmalloc+0x2b/0xd0 [ 1520.230270][T18742] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1520.230302][T18742] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1520.230326][T18742] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1520.230349][T18742] ? __asan_memcpy+0x3c/0x60 [ 1520.230375][T18742] hwsim_new_radio_nl+0xb51/0x12c0 [ 1520.230399][T18742] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1520.230427][T18742] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1520.230468][T18742] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1520.230512][T18742] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1520.230555][T18742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1520.230606][T18742] ? bpf_lsm_capable+0x9/0x10 [ 1520.230628][T18742] ? security_capable+0x7e/0x260 [ 1520.230653][T18742] ? ns_capable+0xd7/0x110 [ 1520.230680][T18742] genl_rcv_msg+0x55c/0x800 [ 1520.230719][T18742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1520.230755][T18742] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1520.230784][T18742] netlink_rcv_skb+0x155/0x420 [ 1520.230816][T18742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1520.230853][T18742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1520.230892][T18742] ? netlink_deliver_tap+0x1ae/0xd30 [ 1520.230924][T18742] genl_rcv+0x28/0x40 [ 1520.230956][T18742] netlink_unicast+0x5aa/0x870 [ 1520.230990][T18742] ? __pfx_netlink_unicast+0x10/0x10 [ 1520.231022][T18742] ? __pfx___might_resched+0x10/0x10 [ 1520.231051][T18742] netlink_sendmsg+0x8d1/0xdd0 [ 1520.231085][T18742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.231119][T18742] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1520.231147][T18742] ____sys_sendmsg+0xa95/0xc70 [ 1520.231186][T18742] ? copy_msghdr_from_user+0x10a/0x160 [ 1520.231217][T18742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1520.231255][T18742] ? preempt_schedule_thunk+0x16/0x30 [ 1520.231291][T18742] ? try_to_wake_up+0xa67/0x1870 [ 1520.231315][T18742] ___sys_sendmsg+0x134/0x1d0 [ 1520.231347][T18742] ? __pfx____sys_sendmsg+0x10/0x10 [ 1520.231378][T18742] ? futex_private_hash_put+0x11c/0x300 [ 1520.231411][T18742] ? rcu_is_watching+0x12/0xc0 [ 1520.231446][T18742] __sys_sendmsg+0x16d/0x220 [ 1520.231477][T18742] ? __pfx___sys_sendmsg+0x10/0x10 [ 1520.231508][T18742] ? __x64_sys_futex+0x1e0/0x4c0 [ 1520.231547][T18742] do_syscall_64+0xcd/0x490 [ 1520.231648][T18742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.231675][T18742] RIP: 0033:0x7f7ee238ebe9 [ 1520.231693][T18742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.231718][T18742] RSP: 002b:00007f7ee31e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1520.231741][T18742] RAX: ffffffffffffffda RBX: 00007f7ee25b5fa0 RCX: 00007f7ee238ebe9 [ 1520.231758][T18742] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1520.231773][T18742] RBP: 00007f7ee2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1520.231788][T18742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.231803][T18742] R13: 00007f7ee25b6038 R14: 00007f7ee25b5fa0 R15: 00007fffaee97108 [ 1520.231825][T18742] [ 1521.311864][T18752] bond0: option primary_reselect: invalid value () [ 1522.783175][T18888] input: f¬ as /devices/virtual/input/input101 [ 1523.632181][T18991] ptrace attach of "./syz-executor exec"[30158] was attempted by "./syz-executor exec"[18991] [ 1527.404593][T19063] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5382'. [ 1527.671928][T19072] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5382'. [ 1530.985216][T19218] nvme_fabrics: missing parameter 'transport=%s' [ 1531.118536][T19218] nvme_fabrics: missing parameter 'nqn=%s' [ 1532.489316][T19261] FAULT_INJECTION: forcing a failure. [ 1532.489316][T19261] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.639400][ T31] audit: type=1804 audit(4294986300.839:72): pid=19286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5395" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=10 res=1 errno=0 [ 1532.664465][T19261] CPU: 1 UID: 0 PID: 19261 Comm: syz.1.5398 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1532.664501][T19261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1532.664516][T19261] Call Trace: [ 1532.664524][T19261] [ 1532.664533][T19261] dump_stack_lvl+0x16c/0x1f0 [ 1532.664578][T19261] should_fail_ex+0x512/0x640 [ 1532.664615][T19261] should_failslab+0xc2/0x120 [ 1532.664649][T19261] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1532.664681][T19261] ? ip6_route_net_init+0xe2/0x8b0 [ 1532.664717][T19261] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 1532.664754][T19261] kmemdup_noprof+0x29/0x60 [ 1532.664783][T19261] ip6_route_net_init+0xe2/0x8b0 [ 1532.664817][T19261] ? inet_peer_base_init+0x76/0x120 [ 1532.664848][T19261] ? __pfx_ip6_route_net_init+0x10/0x10 [ 1532.664885][T19261] ops_init+0x1df/0x5f0 [ 1532.664921][T19261] setup_net+0x10f/0x380 [ 1532.664952][T19261] ? lockdep_init_map_type+0x5c/0x280 [ 1532.664988][T19261] ? __pfx_setup_net+0x10/0x10 [ 1532.665021][T19261] ? debug_mutex_init+0x37/0x70 [ 1532.665046][T19261] copy_net_ns+0x2a6/0x5f0 [ 1532.665085][T19261] create_new_namespaces+0x3ea/0xa90 [ 1532.665116][T19261] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1532.665145][T19261] ksys_unshare+0x45b/0xa40 [ 1532.665177][T19261] ? __pfx_ksys_unshare+0x10/0x10 [ 1532.665210][T19261] ? xfd_validate_state+0x61/0x180 [ 1532.665250][T19261] __x64_sys_unshare+0x31/0x40 [ 1532.665282][T19261] do_syscall_64+0xcd/0x490 [ 1532.665326][T19261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.665351][T19261] RIP: 0033:0x7f6e0cd8ebe9 [ 1532.665369][T19261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.665395][T19261] RSP: 002b:00007f6e0dc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1532.665419][T19261] RAX: ffffffffffffffda RBX: 00007f6e0cfb5fa0 RCX: 00007f6e0cd8ebe9 [ 1532.665437][T19261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1532.665451][T19261] RBP: 00007f6e0ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1532.665467][T19261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.665483][T19261] R13: 00007f6e0cfb6038 R14: 00007f6e0cfb5fa0 R15: 00007ffcc8217398 [ 1532.665506][T19261] [ 1532.890863][ C1] vkms_vblank_simulate: vblank timer overrun [ 1534.312433][T19301] Process accounting resumed [ 1539.123877][T19471] random: crng reseeded on system resumption [ 1540.001688][T19471] Restarting kernel threads ... [ 1540.051637][T19471] Done restarting kernel threads. [ 1540.519293][T19519] can0: slcan on ttyS2. [ 1540.708970][T19514] can0 (unregistered): slcan off ttyS2. [ 1542.615790][T19600] zswap: compressor 000 not available [ 1544.143661][T19685] netlink: 322 bytes leftover after parsing attributes in process `syz.1.5432'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  [ 1572.652949][T30135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1572.665693][T30135] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1572.672900][T30135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1572.681055][T30135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1572.688720][T30135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1573.101382][T20700] chnl_net:caif_netlink_parms(): no params data found [ 1573.276726][T20700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.311806][T20700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.319122][T20700] bridge_slave_0: entered allmulticast mode [ 1573.352390][T20700] bridge_slave_0: entered promiscuous mode [ 1573.382197][T20700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.389310][T20700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.422363][T20700] bridge_slave_1: entered allmulticast mode [ 1573.452035][T20700] bridge_slave_1: entered promiscuous mode [ 1573.536386][T20700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.574581][T20700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.673743][T20700] team0: Port device team_slave_0 added [ 1573.695188][T20700] team0: Port device team_slave_1 added [ 1573.776757][T20700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1573.810233][T20700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1573.898553][T20700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1573.931821][T20700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1573.958572][T20700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.048973][T20700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.173985][T20700] hsr_slave_0: entered promiscuous mode [ 1574.198042][T20700] hsr_slave_1: entered promiscuous mode [ 1574.234980][T20700] debugfs: 'hsr0' already exists in 'hsr' [ 1574.271613][T20700] Cannot create hsr debugfs directory [ 1574.724730][T30135] Bluetooth: hci5: command tx timeout [ 1574.985537][T30168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1574.998626][T30168] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1575.007456][T30168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1575.015288][T30168] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1575.024088][T30168] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1575.517008][T20700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1575.574573][T20700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1575.631172][T20700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1575.674055][T20700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1575.782156][T21031] chnl_net:caif_netlink_parms(): no params data found [ 1576.201911][T21031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.227968][T21031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.235201][T21031] bridge_slave_0: entered allmulticast mode [ 1576.306888][T21031] bridge_slave_0: entered promiscuous mode [ 1576.363553][T21031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.417022][T21031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.456287][T21031] bridge_slave_1: entered allmulticast mode [ 1576.477588][T21031] bridge_slave_1: entered promiscuous mode [ 1576.647286][T21031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.697516][T20700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.749451][T21031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.800234][T30135] Bluetooth: hci5: command tx timeout [ 1576.890367][T20700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.025606][T21031] team0: Port device team_slave_0 added [ 1577.035917][T30135] Bluetooth: hci6: command tx timeout [ 1577.144375][T21031] team0: Port device team_slave_1 added [ 1577.182529][T30473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.189647][T30473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.239021][T30473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.246174][T30473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.349417][T20700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1577.421824][T20700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1577.576425][T21031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.618778][T21031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.781624][T21031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.842576][T21031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.894179][T21031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.008612][T21031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.280577][T21031] hsr_slave_0: entered promiscuous mode [ 1578.331304][T21031] hsr_slave_1: entered promiscuous mode [ 1578.372480][T21031] debugfs: 'hsr0' already exists in 'hsr' [ 1578.414757][T21031] Cannot create hsr debugfs directory [ 1578.429950][T20700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.627876][T20700] veth0_vlan: entered promiscuous mode [ 1578.672675][T20700] veth1_vlan: entered promiscuous mode [ 1578.862724][T30135] Bluetooth: hci5: command tx timeout [ 1578.917926][T20700] veth0_macvtap: entered promiscuous mode [ 1578.995288][T20700] veth1_macvtap: entered promiscuous mode [ 1579.080638][T20700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.101712][T30135] Bluetooth: hci6: command tx timeout [ 1579.225245][T20700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.294814][ T2758] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.352574][ T2758] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.563461][ T2758] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.630096][ T2758] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.189929][T30137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.226423][T30137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.316292][T30137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.366361][T30168] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1580.380210][T30168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1580.387867][T30168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1580.404246][T30168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1580.411613][T30168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1580.448651][T30137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.741550][T21031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1580.869736][T21031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1580.931528][T30168] Bluetooth: hci5: command tx timeout [ 1580.992850][T21031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1581.062657][T21031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1581.172626][T30168] Bluetooth: hci6: command tx timeout [ 1581.387451][T21647] Invalid ELF header magic: != ELF [ 1581.441665][T21508] chnl_net:caif_netlink_parms(): no params data found [ 1581.592434][T21031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.764962][T21031] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.828952][T30473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.836159][T30473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.926700][T30473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.933856][T30473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.235259][T21508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.242395][T21508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.288312][T21508] bridge_slave_0: entered allmulticast mode [ 1582.320760][T21508] bridge_slave_0: entered promiscuous mode [ 1582.363203][T21508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.409157][T21508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.445642][T30168] Bluetooth: hci7: command tx timeout [ 1582.458926][T21508] bridge_slave_1: entered allmulticast mode [ 1582.514442][T21508] bridge_slave_1: entered promiscuous mode [ 1582.645453][T21508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.735509][T21508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.964198][T21508] team0: Port device team_slave_0 added [ 1583.022889][T21508] team0: Port device team_slave_1 added [ 1583.249412][T30168] Bluetooth: hci6: command tx timeout [ 1583.271607][T21508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.324091][T21508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.370707][T21818] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5549'. [ 1583.510480][T21508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.585730][T21508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.664141][T21508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.827203][T21508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.257490][T21508] hsr_slave_0: entered promiscuous mode [ 1584.320488][T21508] hsr_slave_1: entered promiscuous mode [ 1584.370099][T21508] debugfs: 'hsr0' already exists in 'hsr' [ 1584.407777][T21508] Cannot create hsr debugfs directory [ 1584.514007][T30168] Bluetooth: hci7: command tx timeout [ 1584.750535][T21031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.092876][T21031] veth0_vlan: entered promiscuous mode [ 1586.219758][T21508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1586.263523][T21031] veth1_vlan: entered promiscuous mode [ 1586.280475][T21508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1586.320743][T21992] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1586.350253][T21508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1586.397110][T21508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1586.451122][T21031] veth0_macvtap: entered promiscuous mode [ 1586.498713][T21031] veth1_macvtap: entered promiscuous mode [ 1586.581374][T30168] Bluetooth: hci7: command tx timeout [ 1586.616497][T21031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1586.676229][T21031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1586.787073][T30136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.834690][T30136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.885205][T30136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.926488][T30136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.253155][T22010] snd_aloop snd_aloop.0: control 16781581:65539:5:é'x?F¢é/èìzFË·fCªáª:7 is already present [ 1587.314144][T21508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.467475][T21508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.496448][T30941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.566026][T30941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.656504][T30941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.663650][T30941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.785435][T30136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.792544][T30136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.800393][T30941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.851293][T30941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.660061][T30168] Bluetooth: hci7: command tx timeout [ 1588.934696][T21508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.817845][ T31] audit: type=1800 audit(4294986358.313:74): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5557" name="features" dev="configfs" ino=168760 res=0 errno=0 [ 1590.307234][T21508] veth0_vlan: entered promiscuous mode [ 1590.419796][T21508] veth1_vlan: entered promiscuous mode [ 1590.603485][T21508] veth0_macvtap: entered promiscuous mode [ 1590.685344][T21508] veth1_macvtap: entered promiscuous mode [ 1590.790983][T21508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.901815][T21508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.985897][ T2747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.046159][ T2747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.187224][ T2747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.261670][ T2747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.768816][T30137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.838242][T30137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.013423][T30941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.021290][T30941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.318816][T22219] FAULT_INJECTION: forcing a failure. [ 1592.318816][T22219] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.562306][T22219] CPU: 1 UID: 0 PID: 22219 Comm: syz.6.5565 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1592.562347][T22219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1592.562362][T22219] Call Trace: [ 1592.562370][T22219] [ 1592.562379][T22219] dump_stack_lvl+0x16c/0x1f0 [ 1592.562414][T22219] should_fail_ex+0x512/0x640 [ 1592.562451][T22219] should_failslab+0xc2/0x120 [ 1592.562484][T22219] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1592.562509][T22219] ? snd_card_file_add+0x52/0x340 [ 1592.562550][T22219] snd_card_file_add+0x52/0x340 [ 1592.562590][T22219] snd_pcm_oss_open+0x1cf/0x1400 [ 1592.562628][T22219] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1592.562669][T22219] ? tomoyo_check_open_permission+0x1d8/0x3c0 [ 1592.562699][T22219] ? rcu_is_watching+0x12/0xc0 [ 1592.562724][T22219] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1592.562763][T22219] ? tomoyo_check_open_permission+0x20e/0x3c0 [ 1592.562796][T22219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.562825][T22219] ? do_raw_spin_lock+0x12c/0x2b0 [ 1592.562862][T22219] ? rcu_is_watching+0x12/0xc0 [ 1592.562886][T22219] ? lock_release+0x201/0x2f0 [ 1592.562917][T22219] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1592.562956][T22219] soundcore_open+0x409/0x580 [ 1592.562989][T22219] ? __pfx_soundcore_open+0x10/0x10 [ 1592.563022][T22219] chrdev_open+0x231/0x6a0 [ 1592.563053][T22219] ? __pfx_apparmor_file_open+0x10/0x10 [ 1592.563080][T22219] ? __pfx_chrdev_open+0x10/0x10 [ 1592.563112][T22219] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1592.563142][T22219] do_dentry_open+0x97f/0x1530 [ 1592.563180][T22219] ? __pfx_chrdev_open+0x10/0x10 [ 1592.563215][T22219] vfs_open+0x82/0x3f0 [ 1592.563252][T22219] path_openat+0x1de4/0x2cb0 [ 1592.563285][T22219] ? __pfx_path_openat+0x10/0x10 [ 1592.563317][T22219] do_filp_open+0x20b/0x470 [ 1592.563345][T22219] ? __pfx_do_filp_open+0x10/0x10 [ 1592.563384][T22219] ? alloc_fd+0x471/0x7d0 [ 1592.563412][T22219] do_sys_openat2+0x11b/0x1d0 [ 1592.563449][T22219] ? __pfx_do_sys_openat2+0x10/0x10 [ 1592.563492][T22219] __x64_sys_openat+0x174/0x210 [ 1592.563530][T22219] ? __pfx___x64_sys_openat+0x10/0x10 [ 1592.563570][T22219] ? syscall_user_dispatch+0x78/0x140 [ 1592.563612][T22219] do_syscall_64+0xcd/0x490 [ 1592.563645][T22219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.563669][T22219] RIP: 0033:0x7f82b1f8ebe9 [ 1592.563687][T22219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.563711][T22219] RSP: 002b:00007f82b2d68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1592.563734][T22219] RAX: ffffffffffffffda RBX: 00007f82b21b6090 RCX: 00007f82b1f8ebe9 [ 1592.563751][T22219] RDX: 0000000000008000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1592.563766][T22219] RBP: 00007f82b2011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1592.563782][T22219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.563797][T22219] R13: 00007f82b21b6128 R14: 00007f82b21b6090 R15: 00007ffec79ecc08 [ 1592.563819][T22219] [ 1592.865457][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.687340][T22255] netlink: zone id is out of range [ 1593.692551][T22255] netlink: zone id is out of range [ 1593.723624][T22255] netlink: zone id is out of range [ 1593.728778][T22255] netlink: zone id is out of range [ 1593.753236][T22255] netlink: zone id is out of range [ 1593.758399][T22255] netlink: zone id is out of range [ 1593.793458][T22255] netlink: zone id is out of range [ 1593.798649][T22255] netlink: zone id is out of range [ 1593.816806][T22255] netlink: zone id is out of range [ 1593.821959][T22255] netlink: zone id is out of range [ 1594.646775][T22215] Process accounting resumed [ 1594.942302][T22296] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1594.984896][T22304] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1595.671828][T22332] Line length is too long: Should be less than 4094 [ 1595.825668][T22340] Line length is too long: Should be less than 4094 [ 1600.065618][T22515] snd_virmidi snd_virmidi.0: control 9:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1600.499309][ T31] audit: type=1800 audit(4294986369.059:75): pid=22522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5589" name="discovery_nqn" dev="configfs" ino=170023 res=0 errno=0 [ 1601.076522][T22535] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input103 [ 1601.213753][T22533] net_ratelimit: 50 callbacks suppressed [ 1601.213771][T22533] netlink: zone id is out of range [ 1601.308588][T22533] netlink: zone id is out of range [ 1601.332742][T22533] netlink: zone id is out of range [ 1601.337897][T22533] netlink: zone id is out of range [ 1601.418765][T22533] netlink: zone id is out of range [ 1601.453477][T22533] netlink: zone id is out of range [ 1601.503355][T22533] netlink: zone id is out of range [ 1601.527629][T22533] netlink: zone id is out of range [ 1601.622132][T22533] netlink: zone id is out of range [ 1601.627296][T22533] netlink: zone id is out of range [ 1601.779911][T22569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5592'. [ 1606.932584][ T31] audit: type=1800 audit(4294986375.514:76): pid=22769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5602" name=03 dev="tmpfs" ino=63 res=0 errno=0 [ 1607.758006][T22814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5606'. [ 1607.818910][T22816] Process accounting resumed [ 1610.992903][T22938] net_ratelimit: 20 callbacks suppressed [ 1610.992924][T22938] netlink: zone id is out of range [ 1611.170246][T22938] netlink: zone id is out of range [ 1611.290149][T22938] netlink: zone id is out of range [ 1611.295391][T22938] netlink: zone id is out of range [ 1611.398427][T22938] netlink: zone id is out of range [ 1611.456445][T22938] netlink: zone id is out of range [ 1611.509884][T22938] netlink: zone id is out of range [ 1611.562350][T22938] netlink: zone id is out of range [ 1611.634867][T22938] netlink: zone id is out of range [ 1611.705309][T22938] netlink: zone id is out of range [ 1612.087892][ T31] audit: type=1800 audit(4294986380.701:77): pid=22932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5615" name=03 dev="tmpfs" ino=110 res=0 errno=0 [ 1612.927832][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.934295][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.642429][T23067] netlink: 186 bytes leftover after parsing attributes in process `syz.6.5624'. [ 1615.113265][T23070] random: crng reseeded on system resumption [ 1616.267690][T30135] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1616.277841][T30135] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1616.287619][T30135] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1616.297015][T30135] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1616.304552][T30135] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1617.357460][T23136] chnl_net:caif_netlink_parms(): no params data found [ 1617.926571][T23136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.980144][T23136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.044135][T23136] bridge_slave_0: entered allmulticast mode [ 1618.074704][T23136] bridge_slave_0: entered promiscuous mode [ 1618.135096][T23136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.142231][T23136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.235527][T23136] bridge_slave_1: entered allmulticast mode [ 1618.269644][T23136] bridge_slave_1: entered promiscuous mode [ 1618.417324][T30135] Bluetooth: hci8: command tx timeout [ 1618.554470][T23136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.624739][T23136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.888361][T23136] team0: Port device team_slave_0 added [ 1618.960004][T23136] team0: Port device team_slave_1 added [ 1619.556347][T23136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.605820][T23136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.753660][T23136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.846125][T23136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.886633][T23136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.037414][T23136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.481286][T30135] Bluetooth: hci8: command tx timeout [ 1620.553608][T23136] hsr_slave_0: entered promiscuous mode [ 1620.598374][T23136] hsr_slave_1: entered promiscuous mode [ 1620.651665][T23136] debugfs: 'hsr0' already exists in 'hsr' [ 1620.674289][T23136] Cannot create hsr debugfs directory [ 1621.236271][T23511] zswap: compressor not available [ 1622.550467][T30135] Bluetooth: hci8: command tx timeout [ 1623.499655][T23136] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1623.666307][T23136] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1623.883243][T23136] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1624.047160][T23657] FAULT_INJECTION: forcing a failure. [ 1624.047160][T23657] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.105092][T23136] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1624.241966][T23657] CPU: 1 UID: 0 PID: 23657 Comm: syz.4.5642 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1624.242003][T23657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1624.242018][T23657] Call Trace: [ 1624.242026][T23657] [ 1624.242035][T23657] dump_stack_lvl+0x16c/0x1f0 [ 1624.242068][T23657] should_fail_ex+0x512/0x640 [ 1624.242106][T23657] should_failslab+0xc2/0x120 [ 1624.242138][T23657] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1624.242164][T23657] ? audit_log_d_path+0xe7/0x200 [ 1624.242198][T23657] audit_log_d_path+0xe7/0x200 [ 1624.242231][T23657] audit_log_d_path_exe+0x46/0x70 [ 1624.242263][T23657] audit_log_task+0x31d/0x3f0 [ 1624.242300][T23657] ? __pfx_audit_log_task+0x10/0x10 [ 1624.242347][T23657] ? arch_do_signal_or_restart+0x211/0x790 [ 1624.242382][T23657] audit_seccomp+0x79/0x1f0 [ 1624.242410][T23657] __secure_computing+0x2bf/0x320 [ 1624.242439][T23657] syscall_trace_enter+0x89/0x240 [ 1624.242478][T23657] do_syscall_64+0x347/0x490 [ 1624.242510][T23657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.242535][T23657] RIP: 0033:0x7fb37dd8ebe9 [ 1624.242552][T23657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.242576][T23657] RSP: 002b:00007fb37ebe19f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1624.242599][T23657] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fb37dd8ebe9 [ 1624.242615][T23657] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 1624.242630][T23657] RBP: 00007fb37ebe2040 R08: 00007fb37ec04000 R09: 000000000000000b [ 1624.242645][T23657] R10: 000000000004cf4e R11: 0000000000000246 R12: 0000000000000000 [ 1624.242659][T23657] R13: 00007fb37dfb6128 R14: 00007fb37dfb6090 R15: 00007fff40878f88 [ 1624.242682][T23657] [ 1624.243407][ T31] audit: type=1326 audit(4294986392.725:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.4.5642" exe="" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb37dd8ebe9 code=0x0 [ 1624.683961][T30135] Bluetooth: hci8: command tx timeout [ 1625.670741][T23136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.758998][T23136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.867933][T30148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.875098][T30148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.953842][T30148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.960983][T30148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.273399][T23136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1627.179682][T23136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.586640][T23739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5648'. [ 1628.696013][T23136] veth0_vlan: entered promiscuous mode [ 1628.775496][T23136] veth1_vlan: entered promiscuous mode [ 1628.953116][T23136] veth0_macvtap: entered promiscuous mode [ 1629.017216][T23136] veth1_macvtap: entered promiscuous mode [ 1629.048761][T30135] Bluetooth: hci7: unexpected event 0x3e length: 726 > 260 [ 1629.048792][T30135] Bluetooth: hci7: unexpected subevent 0x0d length: 725 > 260 [ 1629.067794][T30135] Bluetooth: hci7: Unknown advertising packet type: 0x7f [ 1629.067822][T30135] Bluetooth: hci7: adv larger than maximum supported [ 1629.075095][T30135] Bluetooth: hci7: Malformed LE Event: 0x0d [ 1629.132354][T23136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.170409][T23824] random: crng reseeded on system resumption [ 1629.233920][T23136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.282535][T30148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.341020][T30148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.404196][T23722] random: crng reseeded on system resumption [ 1629.417973][T30148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.467228][T30148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.736854][ T885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.807069][ T885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.925935][T30473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.001511][T30473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.924317][T23886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5658'. [ 1632.458428][T23910] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5662'. [ 1632.515317][T23910] geneve1: entered promiscuous mode [ 1632.575516][T23914] Invalid ELF header magic: != ELF [ 1632.639969][T23910] geneve1: entered allmulticast mode [ 1632.821793][T23914] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5662'. [ 1633.682307][T23921] random: crng reseeded on system resumption [ 1634.179528][T30135] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 1634.864131][T23969] can: request_module (can-proto-3) failed. [ 1635.838553][T24023] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input107 [ 1637.100282][T24041] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108 [ 1637.157977][T24043] FAULT_INJECTION: forcing a failure. [ 1637.157977][T24043] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.298014][T24043] CPU: 1 UID: 0 PID: 24043 Comm: syz.5.5677 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1637.298050][T24043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1637.298064][T24043] Call Trace: [ 1637.298071][T24043] [ 1637.298080][T24043] dump_stack_lvl+0x16c/0x1f0 [ 1637.298114][T24043] should_fail_ex+0x512/0x640 [ 1637.298149][T24043] should_failslab+0xc2/0x120 [ 1637.298190][T24043] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1637.298219][T24043] ? __pfx___vma_enter_locked+0x10/0x10 [ 1637.298242][T24043] ? vm_area_dup+0x27/0x8d0 [ 1637.298267][T24043] vm_area_dup+0x27/0x8d0 [ 1637.298292][T24043] dup_mmap+0x877/0x21d0 [ 1637.298333][T24043] ? __pfx_dup_mmap+0x10/0x10 [ 1637.298369][T24043] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1637.298407][T24043] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1637.298441][T24043] ? __pfx___might_resched+0x10/0x10 [ 1637.298467][T24043] ? mm_init+0xd22/0x13a0 [ 1637.298494][T24043] copy_process+0x4081/0x7690 [ 1637.298523][T24043] ? __pfx___futex_wait+0x10/0x10 [ 1637.298569][T24043] ? __pfx_copy_process+0x10/0x10 [ 1637.298599][T24043] ? lock_release+0x201/0x2f0 [ 1637.298632][T24043] ? futex_private_hash_put+0x11c/0x300 [ 1637.298663][T24043] kernel_clone+0xfc/0x930 [ 1637.298693][T24043] ? __pfx_kernel_clone+0x10/0x10 [ 1637.298731][T24043] __do_sys_clone+0xce/0x120 [ 1637.298762][T24043] ? __pfx___do_sys_clone+0x10/0x10 [ 1637.298799][T24043] ? xfd_validate_state+0x61/0x180 [ 1637.298833][T24043] ? __pfx_do_writev+0x10/0x10 [ 1637.298861][T24043] do_syscall_64+0xcd/0x490 [ 1637.298892][T24043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.298916][T24043] RIP: 0033:0x7f88c938ebe9 [ 1637.298933][T24043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1637.298957][T24043] RSP: 002b:00007f88c6daffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1637.298980][T24043] RAX: ffffffffffffffda RBX: 00007f88c95b6360 RCX: 00007f88c938ebe9 [ 1637.298996][T24043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1637.299011][T24043] RBP: 00007f88c9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1637.299025][T24043] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1637.299040][T24043] R13: 00007f88c95b63f8 R14: 00007f88c95b6360 R15: 00007ffc2aae8228 [ 1637.299062][T24043] [ 1637.534740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.043555][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5685'. [ 1640.735184][T24174] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1641.922775][T24216] random: crng reseeded on system resumption [ 1642.574261][T24238] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 1647.860800][T24461] net_ratelimit: 660 callbacks suppressed [ 1647.860821][T24461] netlink: zone id is out of range [ 1647.915651][T24461] netlink: zone id is out of range [ 1647.920904][T24461] netlink: zone id is out of range [ 1648.086353][T24461] netlink: zone id is out of range [ 1648.086368][T24461] netlink: zone id is out of range [ 1648.086376][T24461] netlink: zone id is out of range [ 1648.086385][T24461] netlink: zone id is out of range [ 1648.086394][T24461] netlink: zone id is out of range [ 1648.086402][T24461] netlink: zone id is out of range [ 1648.086410][T24461] netlink: zone id is out of range [ 1649.244579][T24506] netlink: 206 bytes leftover after parsing attributes in process `syz.5.5715'. [ 1649.301109][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5716'. [ 1649.340688][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5716'. [ 1649.386425][T24518] netlink: 206 bytes leftover after parsing attributes in process `syz.5.5715'. [ 1650.464064][T24571] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5719'. [ 1650.559409][T24580] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5719'. [ 1650.625203][T24580] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5719'. [ 1650.733652][T24580] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5719'. [ 1651.158249][T24603] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input109 [ 1651.696170][T24606] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110 [ 1652.605359][T24720] ptrace attach of "./syz-executor exec"[24721] was attempted by "./syz-executor exec"[24720] [ 1653.926459][T24750] FAULT_INJECTION: forcing a failure. [ 1653.926459][T24750] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.054757][T24750] CPU: 1 UID: 0 PID: 24750 Comm: syz.6.5726 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1654.054795][T24750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1654.054809][T24750] Call Trace: [ 1654.054818][T24750] [ 1654.054827][T24750] dump_stack_lvl+0x16c/0x1f0 [ 1654.054861][T24750] should_fail_ex+0x512/0x640 [ 1654.054899][T24750] should_failslab+0xc2/0x120 [ 1654.054942][T24750] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1654.054967][T24750] ? __sys_getsockopt+0x123/0x1b0 [ 1654.054997][T24750] ? __x64_sys_getsockopt+0xbd/0x160 [ 1654.055027][T24750] ? do_syscall_64+0xcd/0x490 [ 1654.055057][T24750] ? subflow_create_ctx+0x9b/0x2c0 [ 1654.055090][T24750] subflow_create_ctx+0x9b/0x2c0 [ 1654.055122][T24750] subflow_ulp_init+0xc3/0x4d0 [ 1654.055156][T24750] tcp_set_ulp+0x326/0x7f0 [ 1654.055193][T24750] mptcp_subflow_create_socket+0x361/0xed0 [ 1654.055232][T24750] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1654.055270][T24750] ? try_to_wake_up+0xa67/0x1870 [ 1654.055295][T24750] __mptcp_nmpc_sk+0x182/0x7d0 [ 1654.055317][T24750] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1654.055338][T24750] ? mptcp_getsockopt+0x7a5/0xe20 [ 1654.055372][T24750] ? mptcp_getsockopt+0x7a5/0xe20 [ 1654.055406][T24750] ? rcu_is_watching+0x12/0xc0 [ 1654.055430][T24750] ? mptcp_getsockopt+0x7a5/0xe20 [ 1654.055465][T24750] mptcp_getsockopt+0xcf8/0xe20 [ 1654.055500][T24750] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1654.055535][T24750] ? __might_fault+0xe3/0x190 [ 1654.055561][T24750] ? __might_fault+0x13b/0x190 [ 1654.055587][T24750] ? rcu_is_watching+0x12/0xc0 [ 1654.055610][T24750] ? __might_fault+0xe3/0x190 [ 1654.055638][T24750] ? lock_release+0x201/0x2f0 [ 1654.055673][T24750] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1654.055710][T24750] do_sock_getsockopt+0x34a/0x440 [ 1654.055747][T24750] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1654.055784][T24750] ? lock_release+0x201/0x2f0 [ 1654.055821][T24750] __sys_getsockopt+0x123/0x1b0 [ 1654.055852][T24750] __x64_sys_getsockopt+0xbd/0x160 [ 1654.055881][T24750] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1654.055927][T24750] do_syscall_64+0xcd/0x490 [ 1654.055959][T24750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.055984][T24750] RIP: 0033:0x7f82b1f8ebe9 [ 1654.056002][T24750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1654.056026][T24750] RSP: 002b:00007f82b2d89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1654.056048][T24750] RAX: ffffffffffffffda RBX: 00007f82b21b5fa0 RCX: 00007f82b1f8ebe9 [ 1654.056065][T24750] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 1654.056079][T24750] RBP: 00007f82b2011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1654.056094][T24750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1654.056108][T24750] R13: 00007f82b21b6038 R14: 00007f82b21b5fa0 R15: 00007ffec79ecc08 [ 1654.056131][T24750] [ 1655.846577][T24822] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5730'. [ 1655.949859][T24826] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5730'. [ 1656.185165][T30168] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1656.194279][T30168] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1656.203796][T30168] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1656.213409][T30168] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1656.220795][T30168] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1656.943536][T24831] chnl_net:caif_netlink_parms(): no params data found [ 1657.294337][T24831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.361086][T24831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.403658][T24831] bridge_slave_0: entered allmulticast mode [ 1657.457683][T24831] bridge_slave_0: entered promiscuous mode [ 1657.506253][T24831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.564181][T24831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.634449][T24831] bridge_slave_1: entered allmulticast mode [ 1657.686434][T24831] bridge_slave_1: entered promiscuous mode [ 1657.725216][T25015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5733'. [ 1657.772056][T25015] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5733'. [ 1657.834375][T24831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.874151][T25040] Invalid ELF header magic: != ELF [ 1657.899061][T24831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.018323][T25054] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5733'. [ 1658.040007][T25015] geneve1: entered promiscuous mode [ 1658.040031][T25015] geneve1: entered allmulticast mode [ 1658.077841][T24831] team0: Port device team_slave_0 added [ 1658.086822][T24831] team0: Port device team_slave_1 added [ 1658.281793][T30168] Bluetooth: hci9: command tx timeout [ 1658.286646][T24831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.286663][T24831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.286693][T24831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.287727][T24831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.287742][T24831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.287772][T24831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.416918][T24831] hsr_slave_0: entered promiscuous mode [ 1658.417482][T24831] hsr_slave_1: entered promiscuous mode [ 1658.417838][T24831] debugfs: 'hsr0' already exists in 'hsr' [ 1658.417854][T24831] Cannot create hsr debugfs directory [ 1660.268848][T24831] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1660.339992][T24831] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1660.349380][T30168] Bluetooth: hci9: command tx timeout [ 1660.395539][T24831] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1660.451246][T24831] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1660.775538][T24831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.885774][T24831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.006934][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.014107][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.096647][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.103838][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.831167][T24831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.431909][T30168] Bluetooth: hci9: command tx timeout [ 1662.829510][T30135] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1662.856455][T30135] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1662.863769][T30135] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1662.873274][T30135] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1662.881174][T30135] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1662.989885][T24831] veth0_vlan: entered promiscuous mode [ 1663.082758][T24831] veth1_vlan: entered promiscuous mode [ 1663.297686][T24831] veth0_macvtap: entered promiscuous mode [ 1663.372928][T24831] veth1_macvtap: entered promiscuous mode [ 1663.535422][T24831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1663.800609][T24831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.933177][T30473] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.051724][T25408] chnl_net:caif_netlink_parms(): no params data found [ 1664.130897][T30473] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.202394][T30473] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.446515][T30473] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.490579][T30135] Bluetooth: hci9: command tx timeout [ 1664.965236][T30135] Bluetooth: hci10: command tx timeout [ 1665.145421][T30941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.153464][T30941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.375175][T25408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.418218][T25408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.450131][T25408] bridge_slave_0: entered allmulticast mode [ 1665.485394][T25408] bridge_slave_0: entered promiscuous mode [ 1665.526385][T25408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.575468][T25408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.613365][T25408] bridge_slave_1: entered allmulticast mode [ 1665.640550][T25408] bridge_slave_1: entered promiscuous mode [ 1665.801247][ T2747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.809115][ T2747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.819719][T25408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.891543][T25408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.154150][T25408] team0: Port device team_slave_0 added [ 1666.210071][T25408] team0: Port device team_slave_1 added [ 1666.485509][T25408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.543020][T25408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.740456][T25408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.826174][T25408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.901308][T25408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.043895][T30135] Bluetooth: hci10: command tx timeout [ 1667.093404][T25408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1667.694730][T25408] hsr_slave_0: entered promiscuous mode [ 1667.754292][T25408] hsr_slave_1: entered promiscuous mode [ 1667.817076][T25408] debugfs: 'hsr0' already exists in 'hsr' [ 1667.921561][T25408] Cannot create hsr debugfs directory [ 1668.705435][T25876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5748'. [ 1668.784256][T25876] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5748'. [ 1668.891832][T25896] Invalid ELF header magic: != ELF [ 1669.116043][T30135] Bluetooth: hci10: command tx timeout [ 1669.145611][T25876] geneve1: entered promiscuous mode [ 1669.145635][T25876] geneve1: entered allmulticast mode [ 1669.264782][T25876] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5748'. [ 1671.067162][T25408] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1671.149295][T25408] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1671.175387][T30135] Bluetooth: hci10: command tx timeout [ 1671.284103][T25408] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1671.371116][T25408] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1671.800368][T25408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1671.880851][T25408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1671.974697][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.981905][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.102729][ T2752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.109922][ T2752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.311634][T25408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1672.382920][T25408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1673.098789][T25408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.536162][T26107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5755'. [ 1673.610194][T26107] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5755'. [ 1674.041187][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.056325][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.359441][T25408] veth0_vlan: entered promiscuous mode [ 1674.442421][T25408] veth1_vlan: entered promiscuous mode [ 1674.476168][T26142] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 1674.572460][T25408] veth0_macvtap: entered promiscuous mode [ 1674.676865][T25408] veth1_macvtap: entered promiscuous mode [ 1674.781928][T25408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1674.866967][T25408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1674.879407][T26147] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 1674.942159][ T885] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.951272][ T885] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.041610][ T885] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.153468][ T885] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.440563][ T885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1675.448468][ T885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1675.617223][T30148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1675.683374][T30148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.493132][T26332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5765'. [ 1680.959943][T30135] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1682.492774][T26387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 1682.925648][T26399] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 1686.011325][T26473] zram: Cannot change disksize for initialized device [ 1687.101565][T30168] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1687.113229][T30168] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1687.120847][T30168] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1687.128666][T30168] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1687.136200][T30168] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1688.441990][T26526] chnl_net:caif_netlink_parms(): no params data found [ 1689.214028][T26526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.236059][T30168] Bluetooth: hci11: command tx timeout [ 1689.262130][T26526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.325624][T26526] bridge_slave_0: entered allmulticast mode [ 1689.332437][T26526] bridge_slave_0: entered promiscuous mode [ 1689.458938][T26526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.466584][T26752] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 1689.515543][T26526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.522807][T26526] bridge_slave_1: entered allmulticast mode [ 1689.654696][T26526] bridge_slave_1: entered promiscuous mode [ 1689.897523][T26526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.974307][T26763] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 1690.021586][T26526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.405743][T26526] team0: Port device team_slave_0 added [ 1690.462640][T26526] team0: Port device team_slave_1 added [ 1690.785128][T26526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.847413][T26526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.046696][T26526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.069999][T26526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.070021][T26526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.070052][T26526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.312387][T30168] Bluetooth: hci11: command tx timeout [ 1691.395788][T26526] hsr_slave_0: entered promiscuous mode [ 1691.396394][T26526] hsr_slave_1: entered promiscuous mode [ 1691.396772][T26526] debugfs: 'hsr0' already exists in 'hsr' [ 1691.396789][T26526] Cannot create hsr debugfs directory [ 1692.460366][T26526] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.640373][T26526] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.812889][T26526] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.008920][T26526] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.378325][T30168] Bluetooth: hci11: command tx timeout [ 1693.510878][T26526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1693.584136][T26526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1693.673591][T26526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1693.770124][T26526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1694.317742][T26526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.456811][T26526] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.464982][T27043] FAULT_INJECTION: forcing a failure. [ 1694.464982][T27043] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.598131][T27043] CPU: 1 UID: 0 PID: 27043 Comm: syz.6.5789 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1694.598166][T27043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1694.598180][T27043] Call Trace: [ 1694.598188][T27043] [ 1694.598197][T27043] dump_stack_lvl+0x16c/0x1f0 [ 1694.598230][T27043] should_fail_ex+0x512/0x640 [ 1694.598266][T27043] should_failslab+0xc2/0x120 [ 1694.598298][T27043] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1694.598327][T27043] ? __kernfs_new_node+0xd2/0x8e0 [ 1694.598359][T27043] __kernfs_new_node+0xd2/0x8e0 [ 1694.598387][T27043] ? __kernfs_new_node+0x2fd/0x8e0 [ 1694.598416][T27043] ? rcu_is_watching+0x12/0xc0 [ 1694.598441][T27043] ? __pfx___kernfs_new_node+0x10/0x10 [ 1694.598470][T27043] ? __pfx___might_resched+0x10/0x10 [ 1694.598494][T27043] ? __kernfs_new_node+0x5b2/0x8e0 [ 1694.598524][T27043] ? rcu_is_watching+0x12/0xc0 [ 1694.598548][T27043] ? kernfs_root+0xee/0x2a0 [ 1694.598576][T27043] ? rcu_is_watching+0x12/0xc0 [ 1694.598599][T27043] ? lock_release+0x201/0x2f0 [ 1694.598632][T27043] kernfs_new_node+0x13c/0x1e0 [ 1694.598669][T27043] __kernfs_create_file+0x53/0x350 [ 1694.598694][T27043] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1694.598726][T27043] internal_create_group+0x578/0xf30 [ 1694.598760][T27043] ? __pfx_internal_create_group+0x10/0x10 [ 1694.598794][T27043] ? kernfs_create_link+0x1bd/0x240 [ 1694.598820][T27043] internal_create_groups+0x9d/0x150 [ 1694.598852][T27043] device_add+0x731/0x1aa0 [ 1694.598875][T27043] ? __pfx_device_add+0x10/0x10 [ 1694.598894][T27043] ? __pfx___might_resched+0x10/0x10 [ 1694.598922][T27043] __add_disk+0x457/0xf00 [ 1694.598956][T27043] add_disk_fwnode+0x13f/0x5d0 [ 1694.598988][T27043] loop_add+0x903/0xb70 [ 1694.599013][T27043] ? __pfx_loop_add+0x10/0x10 [ 1694.599045][T27043] ? rcu_is_watching+0x12/0xc0 [ 1694.599074][T27043] ? __fget_files+0x204/0x3c0 [ 1694.599101][T27043] loop_control_ioctl+0x13e/0x630 [ 1694.599126][T27043] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1694.599154][T27043] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1694.599180][T27043] __x64_sys_ioctl+0x18e/0x210 [ 1694.599217][T27043] do_syscall_64+0xcd/0x490 [ 1694.599249][T27043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.599274][T27043] RIP: 0033:0x7f82b1f8ebe9 [ 1694.599292][T27043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1694.599316][T27043] RSP: 002b:00007f82b2d89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1694.599339][T27043] RAX: ffffffffffffffda RBX: 00007f82b21b5fa0 RCX: 00007f82b1f8ebe9 [ 1694.599354][T27043] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 1694.599369][T27043] RBP: 00007f82b2011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1694.599384][T27043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1694.599398][T27043] R13: 00007f82b21b6038 R14: 00007f82b21b5fa0 R15: 00007ffec79ecc08 [ 1694.599421][T27043] [ 1694.605808][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.906783][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1695.555322][T27046] Bluetooth: hci11: command tx timeout [ 1695.813623][T27077] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1695.919363][T27076] ima: policy update failed [ 1696.063209][ T31] audit: type=1802 audit(4294967297.140:79): pid=27076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.5793" res=0 errno=0 [ 1696.481193][T27046] Bluetooth: hci5: command 0x0406 tx timeout [ 1696.487248][T27046] Bluetooth: hci6: command 0x0406 tx timeout [ 1696.850929][ T2758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.858290][ T2758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.000136][ T31] audit: type=1800 audit(4294967299.181:80): pid=27122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5798" name="discovery_nqn" dev="configfs" ino=179177 res=0 errno=0 [ 1698.221831][T26526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.443918][T26526] veth0_vlan: entered promiscuous mode [ 1698.508209][T26526] veth1_vlan: entered promiscuous mode [ 1698.733850][T26526] veth0_macvtap: entered promiscuous mode [ 1698.822915][T26526] veth1_macvtap: entered promiscuous mode [ 1698.936551][T26526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1699.027189][T26526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1699.155162][T30473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.155213][T30473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.155249][T30473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.155285][T30473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.666148][T30473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.666171][T30473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.825388][ T2752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.825412][ T2752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.476239][T27171] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1703.978858][T27311] zero sized request [ 1706.639654][T27347] nbd: socks must be embedded in a SOCK_ITEM attr [ 1706.665048][T30135] Bluetooth: hci7: command 0x0406 tx timeout [ 1709.647585][ T31] audit: type=1800 audit(4294967310.891:81): pid=27387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5819" name="members" dev="configfs" ino=179952 res=0 errno=0 [ 1714.146441][ T32] INFO: task syz-executor:9919 blocked for more than 143 seconds. [ 1714.159420][ T32] Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1714.201152][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1714.268085][ T32] task:syz-executor state:D stack:24440 pid:9919 tgid:9919 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1714.339536][ T32] Call Trace: [ 1714.364420][ T32] [ 1714.367405][ T32] __schedule+0x1190/0x5de0 [ 1714.391916][ T32] ? stack_trace_save+0x8e/0xc0 [ 1714.449827][ T32] ? stack_depot_save_flags+0x29/0x9c0 [ 1714.477597][ T32] ? __pfx___schedule+0x10/0x10 [ 1714.513697][ T32] ? kasan_save_stack+0x33/0x60 [ 1714.518627][ T32] ? kasan_record_aux_stack+0xa7/0xc0 [ 1714.582395][ T32] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 1714.613471][ T32] ? deactivate_locked_super+0x94/0x1a0 [ 1714.634411][ T32] ? schedule+0x2d7/0x3a0 [ 1714.638904][ T32] ? rcu_is_watching+0x12/0xc0 [ 1714.692723][ T32] ? lock_release+0x201/0x2f0 [ 1714.717764][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1714.737921][ T32] schedule+0xe7/0x3a0 [ 1714.742161][ T32] schedule_preempt_disabled+0x13/0x30 [ 1714.803531][ T32] __mutex_lock+0x82a/0x10b0 [ 1714.808285][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1714.854885][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1714.859981][ T32] ? net_generic+0xea/0x2a0 [ 1714.905272][ T32] ? rcu_is_watching+0x12/0xc0 [ 1714.910110][ T32] ? lock_release+0x201/0x2f0 [ 1714.961370][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1714.966777][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 1715.001074][ T32] nfsd_umount+0x48/0xe0 [ 1715.027477][ T32] deactivate_locked_super+0xc1/0x1a0 [ 1715.133485][ T32] deactivate_super+0xde/0x100 [ 1715.138405][ T32] cleanup_mnt+0x225/0x450 [ 1715.200781][ T32] task_work_run+0x150/0x240 [ 1715.205447][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1715.267339][ T32] ? __pfx___x64_sys_umount+0x10/0x10 [ 1715.309559][ T32] exit_to_user_mode_loop+0xeb/0x110 [ 1715.314909][ T32] do_syscall_64+0x3f6/0x490 [ 1715.331558][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.337513][ T32] RIP: 0033:0x7f7ee238ff17 [ 1715.381483][ T32] RSP: 002b:00007fffaee96398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1715.411908][ T32] RAX: 0000000000000000 RBX: 00007f7ee2411c05 RCX: 00007f7ee238ff17 [ 1715.443086][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaee96450 [ 1715.488722][ T32] RBP: 00007fffaee96450 R08: 0000000000000000 R09: 0000000000000000 [ 1715.496748][ T32] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffaee974e0 [ 1715.548362][ T32] R13: 00007f7ee2411c05 R14: 000000000017edf6 R15: 00007fffaee97520 [ 1715.556500][ T32] [ 1715.598226][ T32] INFO: task syz.1.5501:20411 blocked for more than 144 seconds. [ 1715.618446][ T32] Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 [ 1715.626119][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.677852][ T32] task:syz.1.5501 state:D stack:27912 pid:20411 tgid:20410 ppid:30158 task_flags:0x400140 flags:0x00004004 [ 1715.727486][ T32] Call Trace: [ 1715.730815][ T32] [ 1715.733764][ T32] __schedule+0x1190/0x5de0 [ 1715.767106][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1715.801025][ T32] ? is_bpf_text_address+0x94/0x1a0 [ 1715.829544][ T32] ? is_bpf_text_address+0x94/0x1a0 [ 1715.834855][ T32] ? __kernel_text_address+0xd/0x40 [ 1715.866792][ T32] ? arch_stack_walk+0xa6/0x100 [ 1715.874253][ T32] ? __pfx___schedule+0x10/0x10 [ 1715.906477][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1715.913854][ T32] ? schedule+0x2d7/0x3a0 [ 1715.946237][ T32] ? rcu_is_watching+0x12/0xc0 [ 1715.951100][ T32] ? lock_release+0x201/0x2f0 [ 1715.955813][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1716.005907][ T32] schedule+0xe7/0x3a0 [ 1716.018750][ T32] schedule_preempt_disabled+0x13/0x30 [ 1716.024266][ T32] __mutex_lock+0x82a/0x10b0 [ 1716.065556][ T32] ? netlink_unicast+0x5aa/0x870 [ 1716.070561][ T32] ? netlink_sendmsg+0x8d1/0xdd0 [ 1716.105395][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1716.135570][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1716.140660][ T32] ? __asan_memset+0x23/0x50 [ 1716.177949][ T32] ? __nla_validate_parse+0x600/0x2880 [ 1716.183481][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1716.214414][ T32] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1716.239015][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1716.262442][ T32] ? __nla_parse+0x40/0x60 [ 1716.267640][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1716.331679][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1716.346732][ T32] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1716.352356][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1716.383925][ T32] ? rcu_is_watching+0x12/0xc0 [ 1716.388752][ T32] ? bpf_lsm_capable+0x9/0x10 [ 1716.393441][ T32] ? security_capable+0x7e/0x260 [ 1716.424395][ T32] genl_rcv_msg+0x55c/0x800 [ 1716.428977][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1716.443613][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1716.449841][ T32] netlink_rcv_skb+0x155/0x420 [ 1716.473743][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1716.478849][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1716.504418][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 1716.509766][ T32] genl_rcv+0x28/0x40 [ 1716.524182][ T32] netlink_unicast+0x5aa/0x870 [ 1716.529020][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 1716.553048][ T32] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1716.559113][ T32] netlink_sendmsg+0x8d1/0xdd0 [ 1716.589456][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1716.601949][ T32] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1716.619502][ T32] ____sys_sendmsg+0xa95/0xc70 [ 1716.627349][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 1716.645252][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1716.650611][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1716.672435][ T32] ? try_to_wake_up+0xa67/0x1870 [ 1716.677911][ T32] ___sys_sendmsg+0x134/0x1d0 [ 1716.702586][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1716.707856][ T32] ? futex_private_hash_put+0x11c/0x300 [ 1716.734749][ T32] ? rcu_is_watching+0x12/0xc0 [ 1716.739586][ T32] __sys_sendmsg+0x16d/0x220 [ 1716.754985][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1716.760159][ T32] ? __x64_sys_futex+0x1e0/0x4c0 [ 1716.778501][ T32] do_syscall_64+0xcd/0x490 [ 1716.790707][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.814317][ T32] RIP: 0033:0x7f6e0cd8ebe9 [ 1716.818772][ T32] RSP: 002b:00007f6e0dc37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1716.841548][ T32] RAX: ffffffffffffffda RBX: 00007f6e0cfb5fa0 RCX: 00007f6e0cd8ebe9 [ 1716.849563][ T32] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000009 [ 1716.881333][ T32] RBP: 00007f6e0ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1716.913954][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1716.922349][ T32] R13: 00007f6e0cfb6038 R14: 00007f6e0cfb5fa0 R15: 00007ffcc8217398 [ 1716.948824][ T32] [ 1716.966515][ T32] INFO: task syz.1.5501:20429 blocked for more than 146 seconds. [ 1717.054409][ T32] Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 [ 1717.083465][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1717.128663][ T32] task:syz.1.5501 state:D stack:28192 pid:20429 tgid:20410 ppid:30158 task_flags:0x400140 flags:0x00004004 [ 1717.174048][ T32] Call Trace: [ 1717.177387][ T32] [ 1717.196551][ T32] __schedule+0x1190/0x5de0 [ 1717.209226][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1717.238881][ T32] ? is_bpf_text_address+0x94/0x1a0 [ 1717.259377][ T32] ? is_bpf_text_address+0x94/0x1a0 [ 1717.264641][ T32] ? __kernel_text_address+0xd/0x40 [ 1717.313336][ T32] ? arch_stack_walk+0xa6/0x100 [ 1717.318253][ T32] ? __pfx___schedule+0x10/0x10 [ 1717.368841][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1717.376216][ T32] ? schedule+0x2d7/0x3a0 [ 1717.418559][ T32] ? rcu_is_watching+0x12/0xc0 [ 1717.423387][ T32] ? lock_release+0x201/0x2f0 [ 1717.428088][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1717.458479][ T32] schedule+0xe7/0x3a0 [ 1717.462635][ T32] schedule_preempt_disabled+0x13/0x30 [ 1717.468121][ T32] __mutex_lock+0x82a/0x10b0 [ 1717.492191][ T32] ? netlink_unicast+0x5aa/0x870 [ 1717.497203][ T32] ? netlink_sendmsg+0x8d1/0xdd0 [ 1717.518173][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1717.524063][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1717.551427][ T32] ? __asan_memset+0x23/0x50 [ 1717.556079][ T32] ? __nla_validate_parse+0x600/0x2880 [ 1717.577857][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1717.583752][ T32] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1717.605311][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1717.617622][ T32] ? __nla_parse+0x40/0x60 [ 1717.622073][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1717.659940][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1717.667895][ T32] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1717.673479][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1717.697051][ T32] ? rcu_is_watching+0x12/0xc0 [ 1717.701871][ T32] ? bpf_lsm_capable+0x9/0x10 [ 1717.721127][ T32] ? security_capable+0x7e/0x260 [ 1717.726113][ T32] genl_rcv_msg+0x55c/0x800 [ 1717.751613][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1717.767262][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1717.773490][ T32] netlink_rcv_skb+0x155/0x420 [ 1717.796672][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1717.801784][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1717.826579][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 1717.831984][ T32] genl_rcv+0x28/0x40 [ 1717.836031][ T32] netlink_unicast+0x5aa/0x870 [ 1717.863239][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 1717.878796][ T32] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1717.884857][ T32] netlink_sendmsg+0x8d1/0xdd0 [ 1717.906035][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.926087][ T32] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1717.932255][ T32] ____sys_sendmsg+0xa95/0xc70 [ 1717.945899][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 1717.951428][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1717.975643][ T32] ? __page_table_check_ptes_set+0x1ae/0x420 [ 1717.981687][ T32] ? do_pte_missing+0x8a9/0x3ba0 [ 1718.008095][ T32] ? rcu_is_watching+0x12/0xc0 [ 1718.025542][ T32] ? lock_release+0x201/0x2f0 [ 1718.030375][ T32] ___sys_sendmsg+0x134/0x1d0 [ 1718.045636][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1718.050994][ T32] ? rcu_is_watching+0x12/0xc0 [ 1718.065204][ T32] __sys_sendmsg+0x16d/0x220 [ 1718.069989][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1718.092670][ T32] ? do_user_addr_fault+0x843/0x1370 [ 1718.107731][ T32] do_syscall_64+0xcd/0x490 [ 1718.128522][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.134520][ T32] RIP: 0033:0x7f6e0cd8ebe9 [ 1718.154718][ T32] RSP: 002b:00007f6e0dc16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1718.163191][ T32] RAX: ffffffffffffffda RBX: 00007f6e0cfb6090 RCX: 00007f6e0cd8ebe9 [ 1718.194764][ T32] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000008 [ 1718.202780][ T32] RBP: 00007f6e0ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1718.236707][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.256990][ T32] R13: 00007f6e0cfb6128 R14: 00007f6e0cfb6090 R15: 00007ffcc8217398 [ 1718.274231][ T32] [ 1718.339514][ T32] INFO: lockdep is turned off. [ 1718.351449][ T32] NMI backtrace for cpu 1 [ 1718.351470][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1718.351500][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1718.351515][ T32] Call Trace: [ 1718.351522][ T32] [ 1718.351532][ T32] dump_stack_lvl+0x116/0x1f0 [ 1718.351565][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 1718.351586][ T32] ? watchdog+0xd17/0x1260 [ 1718.351620][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1718.351656][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1718.351681][ T32] watchdog+0xf0e/0x1260 [ 1718.351717][ T32] ? __pfx_watchdog+0x10/0x10 [ 1718.351750][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1718.351780][ T32] ? __kthread_parkme+0x19e/0x250 [ 1718.351810][ T32] ? __pfx_watchdog+0x10/0x10 [ 1718.351843][ T32] kthread+0x3c2/0x780 [ 1718.351877][ T32] ? __pfx_kthread+0x10/0x10 [ 1718.351912][ T32] ? rcu_is_watching+0x12/0xc0 [ 1718.351943][ T32] ? __pfx_kthread+0x10/0x10 [ 1718.351977][ T32] ret_from_fork+0x5d4/0x6f0 [ 1718.352014][ T32] ? __pfx_kthread+0x10/0x10 [ 1718.352047][ T32] ret_from_fork_asm+0x1a/0x30 [ 1718.352083][ T32] [ 1718.352099][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1718.475874][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 1718.487682][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1718.497765][ T32] Call Trace: [ 1718.501048][ T32] [ 1718.504075][ T32] dump_stack_lvl+0x3d/0x1f0 [ 1718.508692][ T32] vpanic+0x6e8/0x7a0 [ 1718.512716][ T32] ? __pfx_vpanic+0x10/0x10 [ 1718.517255][ T32] panic+0xca/0xd0 [ 1718.520998][ T32] ? __pfx_panic+0x10/0x10 [ 1718.525434][ T32] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1718.531164][ T32] ? irq_work_queue+0xce/0x100 [ 1718.535946][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1718.541950][ T32] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1718.547341][ T32] ? watchdog+0xd78/0x1260 [ 1718.551774][ T32] ? watchdog+0xd6b/0x1260 [ 1718.556210][ T32] watchdog+0xd89/0x1260 [ 1718.560472][ T32] ? __pfx_watchdog+0x10/0x10 [ 1718.565535][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1718.570767][ T32] ? __kthread_parkme+0x19e/0x250 [ 1718.575820][ T32] ? __pfx_watchdog+0x10/0x10 [ 1718.580568][ T32] kthread+0x3c2/0x780 [ 1718.584666][ T32] ? __pfx_kthread+0x10/0x10 [ 1718.589304][ T32] ? rcu_is_watching+0x12/0xc0 [ 1718.594101][ T32] ? __pfx_kthread+0x10/0x10 [ 1718.598712][ T32] ret_from_fork+0x5d4/0x6f0 [ 1718.603343][ T32] ? __pfx_kthread+0x10/0x10 [ 1718.607971][ T32] ret_from_fork_asm+0x1a/0x30 [ 1718.612840][ T32] [ 1718.615954][ T32] Kernel Offset: disabled [ 1718.620279][ T32] Rebooting in 86400 seconds..