last executing test programs: 9m35.137965085s ago: executing program 0 (id=3165): close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x2008, 0x0) close_range$auto(0x2, 0x8, 0x0) 9m33.338245151s ago: executing program 0 (id=3172): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x18, r2, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtd0ro\x00', 0x40, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x10002, 0x0) ioctl$auto_MEMERASE64(r3, 0x40104d14, &(0x7f0000000000)={0x6}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf3, 0xb0, @raw=0x10000}}) close_range$auto(0x0, 0x5, 0x0) 9m32.959152665s ago: executing program 0 (id=3174): r0 = socket(0x2, 0x5, 0x0) keyctl$auto(0x17, 0x4, 0x0, 0x400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r3, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cgroup\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000ac0)=""/4096, 0x1000) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) r6 = socket(0x15, 0x5, 0x0) mmap$auto(0xfe, 0x20009, 0xdf, 0x10, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x600, 0x7fffffff, 0x0) recvmmsg$auto(r6, &(0x7f0000001180)={{0x0, 0x3, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x3, 0xb9, &(0x7f00000011c0)={0x0, 0x7}) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000100", @ANYRES16=r5, @ANYBLOB="0b1726bd7000fddbdf25150000001800018014000200767863616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000840) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f000002ad40), 0xa8002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(r1, &(0x7f0000000080)={0x0, 0x1}, 0x801) 9m31.928094423s ago: executing program 0 (id=3177): r0 = socket(0x2, 0x2, 0x1) bind$auto(0x3, &(0x7f0000000040)=@sco, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4, @broadcast}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0xffffffffffffffff, 0x8, r1) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r2, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x5) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x4008000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card1/pcm0c/xrun_debug\x00', 0x400003, 0x0) open$dir(0x0, 0x11d000, 0x56) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x48884) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="72010000", @ANYRESDEC=r3], 0x1ac}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vhci_hcd.14/usb37/37-0:1.0/usb37-port8/quirks\x00', 0x40282, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x80302, 0x0) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r1) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="100027bd7000fcdbdf251300000004000380440001800c00e000ffffff7f00000000d9a96c15e1bfd22ec523765179646ed433052183236a318916cca02d140057000000000000000000000000000000000104002200"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendfile$auto(r5, r5, 0x0, 0x2001) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfc0}, 0x8, 0x0, 0x8, 0x3}, 0x3}, 0xc, 0x4008) 9m30.590120787s ago: executing program 0 (id=3184): write$auto(0xffffffffffffffff, &(0x7f0000000300)='/sys/class/zram-control/hot_remove\x00', 0x6) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x7ffd) close_range$auto(0x2, 0xa, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x105740, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/block/sr0/queue/write_same_max_bytes\x00', 0x2a05c0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) mount$auto(&(0x7f0000000000)='ipvlan1\x00', &(0x7f0000000240)='}[,&*}\x00', &(0x7f0000000280)='bridge0\x00', 0x0, &(0x7f0000000380)="9ac00a0c213816f5d0a0c4de0e1bfb73b32376bca9f5115874ffd14cc1013a77133893644e000d2fcb25dd738b94b41a70e4285c340d883618e6576e80141dbe61fba8a1605f3e118347e6e24980c4d614304e9fef318e78252002c4c38a21a68fc2ca55a1d004043f2ae7595a3db3d563df393e6aab4aca1ca9d90e95aca5ade10229887d79fff434d38afd502cf57bfa5039cbd9a964624996a235e77c1aa4c2418fdbfcd693904cedc18e35b067d99cc0d21a2f5d9a226db20f266af17f08aef88e751f4ee088aff85720f85ea090df3f0ff1eb683129ea35f2e3d1594334b784018cf5249f9c86b1cb23c38771") r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4611, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mmap$auto(0x20000000000000, 0x7fffffffffffffff, 0xdf, 0xdef3, r1, 0x7ffe) sysfs$auto(0x2, 0x2000000000040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r2, 0x0, 0x1, 0x40100003) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r2) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x83, &(0x7f0000000000)='\xc8\xfdV%A$\\\xf7\\\x00', &(0x7f0000000040)=0x1008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x80611d, 0x9) utime$auto(0x0, &(0x7f0000000140)={0x7, 0x7}) writev$auto(r3, &(0x7f0000000500)={&(0x7f0000000480)="b63eaf4ae85282e6a30d29204daeee628b3ed2753d1b87bb3d10e675567b81f35e45e4013f6693ae5ec2ee8974ab978f5a3111d92f1cdfe12e61d8d0e259350d667a852e205d61", 0x8000000}, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="030329bd7000fbdbdf2503000000048a64bd"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4010) getsockopt$auto_SO_DOMAIN(r2, 0x8000, 0x27, &(0x7f0000000540)='ipvlan1\x00', &(0x7f0000000600)=0x8) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r4) fsopen$auto(0x0, 0x1) 9m30.158672641s ago: executing program 0 (id=3186): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x6d2000, 0x0) read$auto_ftrace_event_format_fops_trace_events(r0, &(0x7f0000000380)=""/104, 0x68) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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"/760, 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio26\x00', 0x501000, 0x0) ioctl$auto(r2, 0x8008563f, r2) prctl$auto(0x3e, 0xfff, 0x0, 0x4, 0x2) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x200020007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0x200a, 0x0, &(0x7f0000000100)={[0x10001, 0x203, 0x0, 0x100000000, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0x40000000a, 0xe, 0xaab, 0x5, 0x2]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd15\x00', 0x149e02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') madvise$auto(0xffffffff, 0x6d, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000005c0)={0x200, 0x0, 0x2f0, 0x3}) bind$auto(0x3, &(0x7f0000000040)=@llc={0x1a, 0x321, 0x0, 0x0, 0x4, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 9m14.970249392s ago: executing program 32 (id=3186): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x6d2000, 0x0) read$auto_ftrace_event_format_fops_trace_events(r0, &(0x7f0000000380)=""/104, 0x68) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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"/760, 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio26\x00', 0x501000, 0x0) ioctl$auto(r2, 0x8008563f, r2) prctl$auto(0x3e, 0xfff, 0x0, 0x4, 0x2) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x200020007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0x200a, 0x0, &(0x7f0000000100)={[0x10001, 0x203, 0x0, 0x100000000, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0x40000000a, 0xe, 0xaab, 0x5, 0x2]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd15\x00', 0x149e02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') madvise$auto(0xffffffff, 0x6d, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000005c0)={0x200, 0x0, 0x2f0, 0x3}) bind$auto(0x3, &(0x7f0000000040)=@llc={0x1a, 0x321, 0x0, 0x0, 0x4, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 2m39.98716111s ago: executing program 3 (id=4741): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba259b12a0db9acf178c9182899f8360960a04ab85d23de405dad1c35058e30a98cc936ec82e442659cbfa3d11ff0a4e108dcfd7cec18e4f0c89ece6879d06808e003d602efa44c84360582e36aac42dab90d72") read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x24000050) ioctl$auto(0xc8, 0x800454e1, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="20f50800", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf2502000000040001800800018004002f80"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sg0\x00', 0x1c403, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) inotify_add_watch$auto(r3, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0) read$auto(0x3, 0x0, 0x8080) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ttyy5\x00', 0x400, 0x0) write$auto(0x3, 0x0, 0x100082) 2m35.577202435s ago: executing program 3 (id=4754): mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x84) mmap$auto(0x0, 0x400008, 0x9, 0x1009b72, 0x2, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x15, 0xfffffffffffffffa, 0x8002) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0x5, 0x0) socket(0x10, 0x2, 0x9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 2m34.349304802s ago: executing program 3 (id=4756): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x163881, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xaea2, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) ioctl$auto(r2, 0xc0305302, 0x38) mmap$auto(0xffffffffffffffff, 0x20209, 0x4000000000e0, 0x19, 0x401, 0x8001) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) 2m33.359945032s ago: executing program 3 (id=4761): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) socket(0x11, 0x80003, 0x10000) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x10, 0x3, 0x6) socket(0x2, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r2, @ANYBLOB="0800fb00", @ANYRES32=r3], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0xe, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m32.592206644s ago: executing program 3 (id=4764): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x163881, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xaea2, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) ioctl$auto(r2, 0xc0305302, 0x38) mmap$auto(0xffffffffffffffff, 0x20209, 0x4000000000e0, 0x19, 0x401, 0x8001) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) 2m31.410059466s ago: executing program 3 (id=4770): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup$auto(0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, &(0x7f0000000080)=0x71, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x7ff, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9b0e0000", @ANYRES16=r3, @ANYBLOB="920629bd7000fedbdf252400000005000800030000000c001700070000000000000018122f806800478008000600", @ANYRES32=r4, @ANYBLOB="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"], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 2m28.340295507s ago: executing program 4 (id=4777): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x22, 0x52, 0x5, 0x10, 0x40, 0x76c9, 0x8, 0x8000000000000001}}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2f399d0, 0xffff, 0x6}, 0x18, 0x0) r0 = open(0x0, 0x595002, 0x408) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x10100, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x2, 0xd, 0x0, 0x0, 0x5) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/clear_refs\x00', 0x800, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, r1, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2b, 0x1, 0x1) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m27.952566834s ago: executing program 4 (id=4779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000005c0)={0x2, 0x0, [{0x490, 0x400, 0x9}]}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r0, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000540)={0x18f4, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xef, 0x6, "a3d85f8c2020d84e2330a1e9bde4abfabe846f4869f0758c633528322a3f45490b8764e9e5a98b09dc410e4248006db94a78cbd1a50678ff2976d5c1fc09b08c049401b6c7926de66fdd343f3561ef49eafe6467b3e49ffa93d65c1be7ef415e9e3a10e7e692c74c2de74bc3ff4cbf7e7f9c45106af04128645e79f1876018c08d2c99c5c1f6473c9dc6b122b0019b15e5218bcf07138633265208be36b550f06db1c5275259e08caf813e48649ccfd3ab5447ad6f0227843d1a7a6cd082e887fc0b4143c13ab6b83d5bc264d7773f49b5a8a0b647668d5de7af7a1d789119900a2d8818ca3ab2c816291b"}, @NL80211_ATTR_MAC_HINT={0x7d, 0xc8, "a4dd4bacc32a12e07273ea17728b0b70ceec24caa732cc98923e5995d88fd3ce98ff41d6c2e571a658f7354b736cd3c0d58fe7546547d130f4e9e209f366781af7a65015c57028ce5935fbe441b9abc9e240516a3c0280789dff207b387594696eb91c035c9908dbe3078bcc7560f2def64fcf095708b45b00"}, @NL80211_ATTR_BEACON_TAIL={0x72d, 0xf, "d5f2689fa093ec78e181b07ebb50c4d12a62b90cb1c218bfd78b531eae5754f00496dad890508e522ed0ded0a8c300ddf0aa8f0a824c4722d5e63776c69252fce8783887edca4922ad3a85229cf85f5ec8f4b268c414b059bbb07137fc9f2210997e179b4aadb8c7cc852ddfcc206db9122478e2ea514e66dd38d69993c45c0b651eab00b39e91c69571b2ebc820a8b087784e8ac3e0cacd0e0bd3ff7b0c44cc0d5303fa6385a64f5f4f0a3954c5ca4f98f19bcd771592caaa9d891609a3047d07fefdd01163f286243e171fb3e62e27e6f7ca8090a0749e10585514ab5bfe8d5d0a4078dd2e7e0760d52e2e1f23196dc8fbd93ddbabbc397dccc57078701f774e3eb8bf7ee46cea83329bd23fd896413cbfd8122aaa6f2e8723c9b1ec759a3d9dfc08bf85b0ec8f9499885dcf3b5ce8f1bb5e6c4676bf6b866e0540bff1adfe41575e74a97cdf1d7ff0cd26b725318c0dd05eca4e3af7316e713ad2e11a78fba4d85ea3a9ec780fd2ac37d250bd2d4ea95e3f0ee3864a7e79ef352f7ae1068e44e12b8b691d78a06e9c6e8cea83310ed18c7105e1404e1205ded64ebb9bccfcf835e850b2471ee4487bdb56e703084f0d51153db01bc30112c42682789d7b72f04f38015bd5fc4244c7161b2f99ad320620c83882d9791ba2c4e63c9b6460d30432a48daaa281e712fb70c79fb7cbcc7a82d5e8aaa9c71146ba6b07bef3f2b16c0ad29c224d511430b21838dc4b31f40635931d07501560d3663c8e39b8f38ee78dd59e835278c86382070a6a983f7d7eee6745c20629898eb414c0d363a4caa10ebebb064f52a373123a7ba0b1cfa44e1161b57c5dd7e08d11ea5db271fd067f766fff5d3bb3d8b21eeff522a5eca25e5ee51066c2ab509a25cae62aa4ad32e58437d05e71d9794e57bfddf27bbff639d4ecaed7b0404e87a613351f3c801a8609135ecf2a62fb4d8b0072461afa94f0ab9dac6462a0d995bab3d8f60913a2cd25ed5feb68e38f873fa3f2a3e5568d9668322353a93bda7a1b61a9df8ca41251b2217cd713a00f8d54b0ae5c4314e74c53bc676e75708ff2e6faebd3e383d9207d7c396e51f9266150f3bfcc89438ba207d849b1b517fbb2bac821dce1c938f20405a481f9d6399fea85f07567e0d986b10d653ff8f18821b896b26568269d87bf664473400d8a5fbde334e4ecd06dc67b4b9966c288cf6f3982b3ecc0291ee307d1e09ae9485b1328e42a3549b23ac6588999aacd693afb7bcfdc6abde3899f671d6ac0525140e922839921868c9fed44f07d471edd5fe853977ecfa07a014e9748952bb7cebf3f55cdca5a50c88eebe5d46299c75bd06c885de18dbf169e6d4f4e4799dd717386cc8c03952458bd010d33d0e636e75c7ebc6f1ed4a9749b6fc2f49b41cc4aaa77e8a84b2d119a769fc2b702bc2526a6ed64a26c4a293f0c1d34a36eaf8c5ab80bce3de2efdb33912b36ba2d5431520ceb87d36c5d48fb34dadb09341eadf75cc3c8d5f8bb8914d059bb3d877dfa1578fe85272054d63be40b2a3fb808c0df0384917f36693135a01f5da711ee3a525344cbc4a228d69e3d7898176ee7b8d7b98188715ffe1db42f537625d930af491bc14fb71de329d89ac79bf60cec2296cdbd03863975a93a617706ace071eadce0f4fee356fdc6502eaeabfff7cc99c1507122cf38309f44c812af4dc5f303975cd12ab2803b575748045ae5329e4c9f0def5c7d8087796275fd535fb509452d0b9851b3b6a843573d4138dd9241bfb035b43d9a619a949fae6f5b70cc4c821ad2508a1dc787ad2c2080b320862d1f207431edd6e98645be30b8bbe107d04f66ef72bea633ec027e00b61895a69637c1da4c8f7a7652b4d6919d0cff5ddd598871772472b584609c65827a37149a1e0aa3ccaf34846468be8737c892ad2d7950d1e97e7d531aed0b561d9c961662e861b3a4388b912b6c62414550e1c923feb4897349a94d41c856a734581aa6d207e9e906473f2d84c3035e4bd4013504deabb78653b5eca29b46c221de4b20217e743b9dd833c743ce3417aaf94566b955683189f4d6bbf859bd27cfe490e8ae3b5eab85b554e8caee921da08df48fff08879b89bf38e83d6a0301dc1bbe20075b86172e1cebd43c34e2448232b624b01f1f98894bbc6a021495ee46b8f19b831b425a271e547818503c18055415ba4e88f08dfc8ece64a89de42b7f06027be542c2ecbcffc23b5844c07f0eeae87cdd7d944097bbae4f1fc64f455391a840292803ff5a206f9fc71ed63b273a7cf439c1c4f7086f1b7fada475dbbbdb36423987315c9f26616c2e4d7e368cd8c9eb47b5f44d3b77a5e8da26a03c1d4f85ff761b5b7752494165d75599af6271e098a1e880e76e2e689403bfa70e888b8d0af6e3e22f4806891f1dd73b661fc8f0395b73d1b906627b5b9ee20cacafc2682c1e910ee9bafb53d4d8ad89109ef5bdc198f75720fa3cd23811a28859b99699e1b195d5449e0ff9ae9278cc7b0889fb2f0ae33c7a151172e89b8d6390f0812983bd727091bb5884ed0947dca89e947de59f1b771484d99e90d06f994072ea87b406ed96e0e9"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "7fdfbc0c"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_MESH_ID={0x1b, 0x18, "c45ef5c344fa548978e7f74df43f56ee48c1a9135a35f6"}, @NL80211_ATTR_S1G_CAPABILITY={0x1004, 0x128, "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"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x18f4}, 0x1, 0x0, 0x0, 0x80}, 0x4004001) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = pipe$auto(&(0x7f0000000280)=0xffffffffffffffff) splice$auto(r4, 0x0, r3, 0x0, 0x2, 0x8) 2m26.965255358s ago: executing program 4 (id=4782): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r1, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1ff}, 0x7) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 2m26.09334564s ago: executing program 4 (id=4784): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d67d09340d0a4bd7805e18ac78f35cb77d1029c69e7270148078c13a91f6dff64055ad11608f0fb", @ANYBLOB="906a185dc6ea09b7b9ae1d4f8d0937ac30b808"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x10000805) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x801, 0x106) r3 = socket(0x10, 0x2, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) setsockopt$auto_SO_SELECT_ERR_QUEUE(r3, 0x6, 0x2d, &(0x7f0000000180)='#[\x00', 0x1ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x0, 0x0, 0xa, 0x6) r4 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a001, 0x0) ioctl$auto_rfkill_fops_core(r4, 0x1, &(0x7f0000000340)) execve$auto(0x0, &(0x7f0000000440)=&(0x7f00000003c0)='/dev/dri/card1\x00', &(0x7f00000004c0)=&(0x7f0000000480)='wlan1\x00') setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) setsockopt$auto(r2, 0x0, 0x13, 0x0, 0x8009) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000ebd7000fcdbdf250400000005010b2323000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) ioctl$auto(r1, 0x4b4c, 0x1) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r2) 2m23.92476592s ago: executing program 4 (id=4787): r0 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) write$auto(r0, &(0x7f0000000300)='/sys/class/zram-control/hot_remove\x00', 0x6) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x7ffd) close_range$auto(0x2, 0xa, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x105740, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/block/sr0/queue/write_same_max_bytes\x00', 0x2a05c0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) mount$auto(&(0x7f0000000000)='ipvlan1\x00', &(0x7f0000000240)='}[,&*}\x00', &(0x7f0000000280)='bridge0\x00', 0x0, &(0x7f0000000380)="9ac00a0c213816f5d0a0c4de0e1bfb73b32376bca9f5115874ffd14cc1013a77133893644e000d2fcb25dd738b94b41a70e4285c340d883618e6576e80141dbe61fba8a1605f3e118347e6e24980c4d614304e9fef318e78252002c4c38a21a68fc2ca55a1d004043f2ae7595a3db3d563df393e6aab4aca1ca9d90e95aca5ade10229887d79fff434d38afd502cf57bfa5039cbd9a964624996a235e77c1aa4c2418fdbfcd693904cedc18e35b067d99cc0d21a2f5d9a226db20f266af17f08aef88e751f4ee088aff85720f85ea090df3f0ff1eb683129ea35f2e3d1594334b784018cf5249f9c86b1cb23c38771") r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mmap$auto(0x20000000000000, 0x7fffffffffffffff, 0xdf, 0xdef3, r2, 0x7ffe) sysfs$auto(0x2, 0x2000000000040, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r3, 0x0, 0x1, 0x40100003) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r3) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x83, &(0x7f0000000000)='\xc8\xfdV%A$\\\xf7\\\x00', &(0x7f0000000040)=0x1008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mprotect$auto(0x200000000000, 0x80611d, 0x9) utime$auto(0x0, &(0x7f0000000140)={0x7, 0x7}) writev$auto(r4, &(0x7f0000000500)={&(0x7f0000000480)="b63eaf4ae85282e6a30d29204daeee628b3ed2753d1b87bb3d10e675567b81f35e45e4013f6693ae5ec2ee8974ab978f5a3111d92f1cdfe12e61d8d0e259350d667a852e205d61", 0x8000000}, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRES16=r4, @ANYBLOB="030329bd7000fbdbdf2503000000048a64bd"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4010) getsockopt$auto_SO_DOMAIN(r3, 0x8000, 0x27, &(0x7f0000000540)='ipvlan1\x00', 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r5) fsopen$auto(0x0, 0x1) 2m23.505326526s ago: executing program 4 (id=4788): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup$auto(0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, &(0x7f0000000080)=0x71, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x7ff, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9b0e0000", @ANYRES16=r3, @ANYBLOB="920629bd7000fedbdf252400000005000800030000000c001700070000000000000018122f806800478008000600", @ANYRES32=r4, @ANYBLOB="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"], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 2m16.326095275s ago: executing program 33 (id=4770): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup$auto(0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, &(0x7f0000000080)=0x71, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x7ff, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9b0e0000", @ANYRES16=r3, @ANYBLOB="920629bd7000fedbdf252400000005000800030000000c001700070000000000000018122f806800478008000600", @ANYRES32=r4, @ANYBLOB="04004980fd7da365a721b5d9c67aeed495cec22b4b50f3319cec2ff76f42261a12b85e3d1e7f53334b48d0260019b89ba7bfa949783d9ef89892b7b875ec2d8967d7baf5343121be8903c0d591f8bd0d95ba38865eb95781771c683d0800d48004003a801d05ee547f58147fae8e9625697ceeae848408d54819b588db8b0808512e2291cccd8b7cb121522f4c58f9e803a0cb2676b9e9d0799f72eef25c18d9933a47c15706fa350f5b654fbe3458e26b7c2189387414b6154599b6c12196e0618bd059c062b8890371c0228a5508fbea75bf3c152e082f70af0fc0c239cb7b82b354dcf1aed9519771bf42ab016b8aa9b3ccebf765869c9391f4b2fee058985ae0bce47b1b812c6d8715c07ffb7a0ec0e03e9c0b2dcb161ed8d2aab0276e1dfb2ea479143eaa45cc1616402439b0ccd44948a7eab44cc703caaa0f7a989e324812da74a495924bc5d716f9294f4cef58ce2d81db148d82ae4a76cee263a2f3fb8460907a4988004beec77edb21933b6354f736a385d76e071ae6a90a56439a2af81b8ce32b74a90e59b24e1dd68b07218c0f2e49fcf70ad65a54cced6fe7353260e6e7aa4f55e98c2e89caaeeb09e5935bccf03278d316e58d7c716e2576aaa46f868596a7cf9c6275c947f8b0b94a3f7dba3e791b15e6e0445a92cc464f21a932e7cdd35013013a903cdca1b1fea5ebf5044141497d3f23464f36990fe071770308694ec1aac98bbd76b1ca6cd57da8781791b79aa48a05bd5d825fb9b4a1225a8307b355826d802e071dc211954a5c3ec8895d77d9c57fca4f83a7344c93af1ec15434c72a53a90233030df83c03da69c8b43b1f8467e0939a414479427e8c44fd24f01e3aa79466a8b3ed61b7d63e44558690930223a80a9811f718bf8cd4f60bb0ab90b261d6ded4dbde3c7801242db8f11ddce8813ec89138acd72d0d7f3df54cedeeb9130753831f7bdafc9526c25adffa115fce84f98b83218b23d13dcf2aeaf521cc536ef90d2b00044bdf27921e0a099e7d17b518fda5d200b90b78620e870b0597c6083274a6ebc52f52c175585e87bc208da1ad7e2f39ba8a92df32b65b483b7f8d9b89950e6bf2f24bee998c41dd6277bf0f257437d2604d370878d2d7f46f23a8fcc5e0e8d768b59f17e1969936bb85f21c8fefc9578d8c18fdb01aba3836c871373f0dfa8412bff5477b0ab8baba63bde59eb531e3659096e3974d44cfbc4bf2eef553193dbf88035ecbe10852bb34597f671059db5b7eb205e3bd6ac43bd9ce3abe4abc4ba7e594d51c9df664f757b62b81ed4f747c6ec014ffa25d86b028ad5954c2ba87f8c786dbadbed1617a71675d7d2165831dcdf71a8652d5288211aabd4b7867a4b5c787253405cd70cd90d46e55a31882439f76d7431f02357d488b7167661a7c5e08db988891578403106e215dfe6216d3fb61b3a75c03addca5adbb2a772d1b429f1dedac23e8d41b52651a18fb0334e19d96bb741e22e9acffda34d86c6ce88bab8db5c3b74cf30a5603ed5758ac2f26895ed1ffaf69e949bdc083596c907a5533780d02f25b04b676ebb78775a70a648436f94fe458796484ef7b5b4f7f9eb9e3380ffb2904de744750af4c78b3d3f160aa5de1d2945ed529b5878684d36a71a6dbf0ce6d1be19e0158998941f2f1973b94b29771d1bd8f4b01b95e85fb47b17f4929dcb3dd7c0b180940f3960734ca7753cbd8d2afef9c2205ce06310fc73af30c3c700de3692aa6b9b4555d6f7f64419b7e31e5b15d232f67b242308154fb44c3a390343dde1dff8654039f12f2a96b87188dd57e453d1617c1a47d7a3c126921230d8656140dab29a646ae98b83e13dcec1896190aa16fc15f2743fb0880c1c429da7f28c166c4b4f2317e3f6da29623efc34bc2518ad15e3661fd44715e784bd42a5d372509d65e6d0289a54a05e812abc35e3a97834311754d95e099fcb073d08591c1bbf1239314f09321e0ecf0ecb1e2d31d74011c43168f344f1b8891788cf47b0850e4c845447650db61f789a48c0b88a552a90f3897a683c605b08d8210bd4f2b8c214d309f6e906860d84763e077208399c7fd06ff940dd3c6bccdd51eace0246b24f5a26ddf5f0d6b45edf9effadad21e42f9e078ff12a91665f817b71c274aa9b5d95be8a092a5fdc3bb58c246edbbed07cb59db17be270bb9304634d75f36f9b6a57495e30a00970a0a84a876e2afd926b868751ead524e80c63811f2e507e79a75dd160240c53fa7f6980848dcb5a509f2361c584cfa9d757d2eac801bcfc561f9f2bb35c313176dc02bf2302d0a13cbb79189e42fa4e7ea23d6bfceac3356e9e85e297051cac236936ce8eea87a6ebbcb586c805c7cad8b79a6af682ec628ca05099b6e3b6476a5e762773c5d64510da44c9fb107cb31956f96a67e678c5bc895c7bf0d4d8e2b89e786d2f416c98f1010c98ceeee2e214311575e097bfef7e018ac537747e1c527672bb7f1403ffa94d97d28f1b3ca7e1121dec75d15bb70209b9269baf1034052faabae29ede4d9f4b692b96e9bd9567d0ce535762369c605100b4d711ff2f1820dfb1e06874fd21bbc737bc7f2d13b8b1646f4b5594bda7fe06dbed38d2db78f1b4569f7a4432a16012720478394c0836b99283d85bbd3a58f4639bb6a3fa408fd96bc81ff610ddc79ba9738af0026818ee43979874218bff55dd8377de8e3fac610ee56e8b6d4c6aa47866c6b594a83fbbc46671669e1336fbd8aebc0c91e44af6869fa2b8051f9283c6b98b3adc2eef0bb8dd573836d286c114e285652d019a71a5a05b9fe109ed90a1455ede78adcfdb70c63b6d2bbb3a424b9200fcf1a122fc2393127f00014242e3b88c6636a569ff41f32f99123c2da1ef479cd14c108b6ade94f02676480583239ed80f6b3cdd40a68fe557a05262455014ad6fbb29de0ec5c55f9bd31c30c0fa05a45e5afbf572ca7ff2bf273c8bd2953dbd45e1728840640ce87788dd35f596cd17ca492afa7d36190414df90471eac7b2ec81577cdc2ee016f873c29efe6a5ef7e375f8d44f326e1bb8f817b2510f9ea139470a3005375a1b286069d0286a7c858acb68a933d802d35dcf5149a3c14ac632aa01401c0305231cbc72d3698b16d7e65d3f9b735ce984caf1e14aebe4712eacca1a831ae3ecbae0864f24baf5f67ecc3d3cf3ef67e8063810e7f9fc037b651fb01d1e48e5a5b4de258d860b10a5169cbc5b94b9df2a68f74fba061ebf9d77ec3d0952b917307c964b9ec70e79cffb44ffa9309e5d2c50dc5d30fa48183f867bac809a54a7fe7fc8e48a16f0b143f079f83fc3f53ff5d854f19e49705f86e73c0a0d17ea0f1de83f26864c45e61b06a5536f38064c635689f8982865c8135ed4bcf78c5a55fc4f751a42af972b58628c42ff636212a5037fbf79d2aa4bdc7de9d5f806cf6e39f56b8a14d426cdd6917374d32176f9ecb46702df493de63e0ab3415b83ee9ccfa71787e65271c408ce5af32e6dda45418bdef062021aa24780168a663c322fdde9e5d7cd5b05821d212fd34ca967535c73fdf8464482922d7366af380204ddbdd0bd0cd692408270e7bf6a3319da8f4dbc1dc058fd4495fb66dfbb010bfd22da55e84848e3428a585025ae2bf90d46eca30004740bd95da1254d1418514af962e64eedfc0a055d6d2d6e06887d52600ab55183982e3ba9d153c0940b6f852f701cc85406c277ace74d4ba761ac0b0a41177963e8606a3960e91a665b25e6f09b66beee79f15b9eb69455888acb97c35451c97b41670499762f5e3ee0e050bf689ec1b08285e14aa6216399944f32776e65e7de52d2fe79a8abef8b9d5827b7c8742df5d53fa3a9b7baaf45f002574f2d10f4108c583d3976f450b2700b9cba5b39fea18e606d799a2af60f5fb66ea04b95e1fd891f6aa4245669390352e0c26f85d466c86eaffe18b73fcf596bdb07b11aa00e567a548b49a292c1aa501de0b26a799094c2885a6ce1c31f577467e6a7a447ca9334c7b4b9051b403246dcfa01cd2a4f292e00cfdb6e63890808b833ff9bf636e6f90d80c28ddd8b24d163f814e9dadf0aa43fe0bf6e101b28c44eb098686c835b25821423d38a54f91bc43b86d863182bf7da3934a4e8c496fa83124078c3eee8c1099b253140d523de7396431c36539231184889ef289d01d51f4697bc905ff9f3e56832e32c70b07f5f505fad8b6e2a98b9197f4dff5fc4a4a48b0d516dc61e3b08b6088c77a6d24b58549fa32b36c02384959c02364f16d21d41bedaf9787338ab4af68300ef152f24a895b620f6d2afec413598ca3c5a7a4bcd77d788b4b00554ed08cbf89a524808aaaec9a28660c83e5c59a396c12e85955e6b915adb93af64d0db836c2a5b89a445cf8d7c152599b7e5d6e8d867ea999a396efec57093abc12d43421e9b8c0ce67604bca8ccc9267c7d6782f711a4ff60b0b532a933dc4f393b479f29112725e7290680b1b4669dafda644982b64e0762b1df87dcd72304557b5f82b90116e1f3e5f88f65c0f8ed1e77c89338c953753e7e4b95a0cf82cddbe99b4a83330c8605906360119621719fcdb57d8a8e1cbc89a068d81073ce95d119029ab45a85aa9440f1cb40e7b779dabe4b5d150172690faca6681f6d9dc4bcfac5fa40162f669185df7f8b7bfd5582526b591d953f48a6930d7c9573c8d02995ec2523689482311442a4cc5ef353af0ca7b711e99daa9836bba2da2edf9d01b451a95506ccca40f0986a32e83c0128fefbd292cce1ca29efdbb18b0534903ddb3b3f21dcb9cb5c0abe42658ede43aadae58211770767149890a4cbfe471db2c520fa43a261c1df131a2ec33ef565aaa61d0abe80858e0c8fce4d4b44e82e5268e07f89b4fc2b01637e09d6060624d430eac20bc109ce14f380eec64bba066ee104a61f5c9ab76e53672674aa73c1ae9a57ac66acf85b369df8cfe36cbca486c2a040d283a9e1f71079cbf03b6ba8cf06bdeb5f4a5508bcd5b8b5b929a9c115fff08c3339dfe5ff53c9dcbbb19fb50d46e9ed9741ec4fac294270de856fe3bdb43598cace159e99064098ebc00b82eaa9e3eb84e70c380d3f65af6aea99fc0ab8991e5ee335f5fe37d9e7d99a5263339db787f86bd8ea0cfecb91e2a621e84b1f82fbc1a8fc0572bea6fba75db521d17274067b7c560598d3e146f715933330b3a5dd1d64c00f12c261332b2bc7857a0b69b6bb7227f7204ba4740a56ed5a3686298a351a0a29d4dc1c4a6271dda0132850b8e7734e9764706244796ab1c8521773085e98cef04418b028bb90723683d564fbb8c45cfb672385115951f9adfdf53a81bd8dd1df853d1eaa844a0a6b7eeb0b23f6208b0b92d79855a31340c0242f8876ec752c49eeb5651e76b217c738de93285587af1e634be869ac3e7e7a9fa8906d20a4c8f1df1089530700f60eb07332bf27e78a9e3f01de510cb955dc9bed4397460992a078ff0aa696226474ba5515ae1fd04d45a2a49ff854775e0e5ef898f79e28d26a70eb7e560de0fba33ab779a09101f1a2987f3b3b6f702edfb6be97986e10fe8819da78ada5eb69433fd76bb7c7ba0e5846ce653b620ac9c93acbb4bebd883d67e7b8b6d75d465815593158bc5616e43319af8da85097021a7b4f687294a03eaaa123b3c8d258ad5ca2379a858065ffe288d5bc7b2702ae24fba4d0a79d1a863c0e8251494f4fb6a3531a00f802421cde6e538a69ef6d795cd35f6b95d8f34b8d6f11e06e5baa3814f10ff19438f644403c6fa42b6a30b985a93d84b284f03e1d71ca715d141fff2c15f754f6191800ff8fd8df6dc0c3a47dd051b40443d0c882afb8cdcf8d776225e359d8a3e29c124e7631b5c4cf3fe37a74aae249e7ffb54c986b815ba9f32d6c5447e630398b777f93b35c5ddb7cc3b958704f436ea69f8aa8d91827fb7aa301f5807f8ae2983ee774fbd8f6c99afcaf0c8f1fb53fd6b46efd67f153ad2a96734966b349997d7e2fa335dc2d1a64521c57f2c0ab350606b8d48df055e4eeeba6d77e826aaade668bdd104814b8e9417512a5ea08e8a7ef882830655a8b1ac511a687b3f65ca03da9ec2a7da435120c6cf0ba8b9eecdbcc0d8c8524185209268ab0fdd2555ad90d728a2c6418502c07e68858ed9760bbdd663d5b0d393d77e0eca640f7dccaae0eccfc214f781283ebf8853cad8264b8ca2e2368dc74aa25cedc5b59470d71e3cd3887c4180ee50004db502b77e7071c5807d238d0961d189781d52d99276ecc15e4b506d4017d578f1d06635dd28a732d8b2f772af844de8c872b24e151578e06cc30f126111bc20cd2252105fdb3a2ca1187169ae84252b12f1809b635c2ccf6ffe9f1d6fc00e435e409567a7822695aae7cbe1b55f5b5d72efb1aa634e66e922588c4f4ed73bfb2f6300f9547a9cbb57bffdc72f899bbe00a266af271b8c2f3e5231713572cf95e3e8a54a3f852021e8239fa4cf74085a04833ef83dde789dced96adf348d12cd3b09a27b2876a15c1c7e905003b00000000000005000f0002000000140004007665746830000000000000000000000008000e000e0000000c001700ff0f00000000000006000200280000000500290001000000"], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 2m8.10517008s ago: executing program 34 (id=4788): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup$auto(0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, &(0x7f0000000080)=0x71, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x7ff, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9b0e0000", @ANYRES16=r3, @ANYBLOB="920629bd7000fedbdf252400000005000800030000000c001700070000000000000018122f806800478008000600", @ANYRES32=r4, @ANYBLOB="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"], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 1m55.766285221s ago: executing program 6 (id=4809): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/nfs\x00', 0x50201, 0x0) pread64$auto(r1, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x1, 0x2020009, 0x4000000000000003, 0x14, r1, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) socket(0x2d, 0x2, 0x0) setreuid$auto(0x4, 0x8) r2 = socket(0x2b, 0x1, 0x0) getsockopt$auto_SO_PEEK_OFF(r2, 0x6, 0x2a, 0x0, &(0x7f0000000240)=0x71cd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec1\x00', 0x280003, 0x0) unshare$auto(0x33d00) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={"dc5f0f51", 0x9b4, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac09277d800"]}) mmap$auto(0x0, 0x20005, 0x2, 0x18, r0, 0x80000000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r4, 0x1, 0x21, 0x0, 0x9) r5 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x1) recvmmsg$auto(r5, 0x0, 0x7, 0xfffffffe, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000000)={0x5, 0x6, 0x5, 0x1, 0x2, 0x7fffffff, "660008000100", 0xb, 0x9, 0x9, 0x5, 0x2, 0x4, 0x2}) 1m55.193748237s ago: executing program 6 (id=4836): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x22, 0x52, 0x5, 0x10, 0x40, 0x76c9, 0x8, 0x8000000000000001}}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2f399d0, 0xffff, 0x6}, 0x18, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x10100, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x2, 0xd, 0x0, 0x0, 0x5) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/clear_refs\x00', 0x800, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, r1, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2b, 0x1, 0x1) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m53.622995181s ago: executing program 6 (id=4841): write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000540), 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x5) open(0x0, 0x363bc2, 0x150) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r0, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x48090) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) write$auto(r0, &(0x7f0000000380)='S\x00\x00\x00\xfe\xff\xff\xff\xeca\xe2!\xf0/k\x8eK\xe7K\xee\xedw\xddr\xbf\xf0\xd4\xcfz|\x9f\xda\xbbX\xb9\xda\xc6\xa0jJ\xa9\xdd3\x04K\xe1\xa8Br\x9d\x93\x99(\x11|2\x97\xec\x9a\x9c\xbe\xba}p\x92\xf4f\x92b!\xce\xa64TD\x99\xbf\x9a~\xdb\x15\xed\x86-\xadQ\xda/n\xf8\xc0q\xdf3\x135\xbe\f\xbd\xa1\xc1+UQo#\xf5\xa2H\xa2\x12\xd1\xcd\xd8f\xf4\xaf\x16\x8e\x94\x0e', 0x8587) 1m52.536837284s ago: executing program 6 (id=4842): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r1, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1ff}, 0x7) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) r3 = socket(0x11, 0x3, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, r3, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 1m36.782533198s ago: executing program 35 (id=4842): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r1, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1ff}, 0x7) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) r3 = socket(0x11, 0x3, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, r3, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 1m32.494513882s ago: executing program 5 (id=4890): prctl$auto(0x3e, 0x1, 0x0, 0xe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x0, 0x5, 0x80000001) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2a, 0x2, 0x1) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/cifsFYI\x00', 0x63e683, 0x0) pread64$auto(r2, 0x0, 0xad2, 0x4000fd) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendfile$auto(0x1, r1, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x800000000009, 0xdf, 0x15, 0xffffffffffffffff, 0x400) madvise$auto(0x0, 0xffffffffffff0001, 0x15) epoll_create$auto(0xffe) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000040)={0x221020700, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x1, 0x20007, 0x1, 0xeb1, 0x401, 0x5445) 1m31.286222187s ago: executing program 5 (id=4891): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d67d09340d0a4bd7805e18ac78f35cb77d1029c69e7270148078c13a91f6dff64055ad11608f0fb", @ANYBLOB="906a185dc6ea09b7b9ae1d4f8d0937ac30b808"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x10000805) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) r2 = socket(0x10, 0x2, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) setsockopt$auto_SO_SELECT_ERR_QUEUE(r2, 0x6, 0x2d, &(0x7f0000000180)='#[\x00', 0x1ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x0, 0x0, 0xa, 0x6) r3 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a001, 0x0) ioctl$auto_rfkill_fops_core(r3, 0x1, &(0x7f0000000340)) execve$auto(0x0, &(0x7f0000000440)=&(0x7f00000003c0)='/dev/dri/card1\x00', &(0x7f00000004c0)=&(0x7f0000000480)='wlan1\x00') keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) ioctl$auto(r1, 0x4b4c, 0x1) 1m30.595739565s ago: executing program 5 (id=4894): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_settime$auto(0x0, 0x809, &(0x7f0000000000)={{0xa6, 0xffff}, {0x10000000000, 0x3}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e98301800a00000000002000"}, 0x1c) 1m30.409488922s ago: executing program 5 (id=4895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) lseek$auto(r0, 0x2, 0x800002) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000046c0)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/rnbd-client/ctl/map_device\x00', 0x40442, 0x0) write$auto(r2, &(0x7f0000000200)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x9c\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe9\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2\x96\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf0L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xe4\xe2\xf4(\x05\xf6g5\x1f\xa0\x8e\xeb\xc0\x84\x80^\xff\x99m\x99\x1b\xd0\xf3\x00Z\xf3}\xc4\xb0_\xde\f\xfeR=\x88\xbe\xeda\xfc\x17\x85\x107u\x00\x00\x00\x00\x00\x00\x00', 0x8001) 1m30.213059509s ago: executing program 5 (id=4896): openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/error_log\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r4 = socket(0x29, 0x5, 0x0) write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x0, 0x1) 1m27.25879568s ago: executing program 5 (id=4903): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x163881, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xaea2, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) ioctl$auto(r2, 0xc0305302, 0x38) mmap$auto(0xffffffffffffffff, 0x20209, 0x4000000000e0, 0x19, 0x401, 0x8001) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) 1m12.075890516s ago: executing program 36 (id=4903): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x163881, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xaea2, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) ioctl$auto(r2, 0xc0305302, 0x38) mmap$auto(0xffffffffffffffff, 0x20209, 0x4000000000e0, 0x19, 0x401, 0x8001) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) 52.608452645s ago: executing program 8 (id=4983): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x22, 0x52, 0x5, 0x10, 0x40, 0x76c9, 0x8, 0x8000000000000001}}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2f399d0, 0xffff, 0x6}, 0x18, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x10100, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x2, 0xd, 0x0, 0x0, 0x5) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/clear_refs\x00', 0x800, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, r1, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2b, 0x1, 0x1) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) 51.82061265s ago: executing program 8 (id=4985): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r1, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1ff}, 0x7) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x11, 0x3, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, r3, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 50.816638402s ago: executing program 8 (id=4986): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x6) r1 = epoll_create$auto(0x3e) r2 = socket(0x1e, 0x4, 0x0) epoll_ctl$auto(r1, 0x1, r2, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000240)="7122a0", 0x40000000001243}, 0x1, 0x0) ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, &(0x7f0000000040)={0x101, 0x1, 0x8, 0x1000, 0x800, r3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x7fff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r6, r6, 0x0, 0x10000800000003) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1b4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_LIST={0x15f, 0x2, 0x0, 0x1, [@nested={0xf, 0x36, 0x0, 0x1, [@generic="5ab10548b35039a7636b32"]}, @generic="a6674119ab6b68a75e6a26c89c8a1eaebedd0d911ae3580777dd8287f86f2f06d3a603aa4e8f57a8c0ba6ee0aa0f5e4d8a8ca8c1f1e484f1338a15a66df2db3541849b17d8a30c3190799ea04301ca664d26afdfb2fd16cfe281a60fe7f6c7eb850e6a9d3bf3450c200c32e8db90f86943b59970acf5a84bc5f33f87f6d99420d71f9d2b4aedf11583a9eda4409f6a992a", @typed={0x5, 0x3f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x12e, 0x0, 0x0, @u32=0x1}, @nested={0x9d, 0x150, 0x0, 0x1, [@generic="4658ba24ffb4dadee44ffc0ef77cc76269e9dcf95fbbdba505d1f91e7813864964a61c63e4896763bb358f4ec19af6c71190d5a4cc4c84a230ae9febba3700964e9e35a73674", @nested={0x4, 0x155}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0xe2fe}, @nested={0x4, 0x77}, @generic="5f754b15cdf6eb0ff47f670efaf7ecfe11721af6896811d7c6561f9e8d105cc758191852b082a90be10b7c5c3dcc488f19af49f6d58f990b7e2c7ed9fb5f2f"]}, @generic="c1a1", @typed={0x8, 0xa9, 0x0, 0x0, @uid}]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0xffff0001}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x2}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x3}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x7}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x3c}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r7}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0xbd}, @NCSI_ATTR_PACKAGE_MASK={0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4040810}, 0x1) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) capset$auto(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mincore$auto(0x1000, 0x4000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) open(0x0, 0x26500, 0x157) 45.971028526s ago: executing program 8 (id=4999): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x48102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) pread64$auto(r1, 0x0, 0x5cfa, 0x80000000000000a) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) io_setup$auto(0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x29, 0x5, 0x0) write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) 41.183642071s ago: executing program 8 (id=5009): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000300)='}[,&*}\x00', &(0x7f0000000580)='nfsd\x00\xa8\x91\xf0\xd3\x12ji\xe9{9~C\xd8C\x95\xa89\x18\x0f\xb1\b0[\xb67\xd0\x8e`\x85\xd9Y\"\x811\xf9\x15X\rF\x82`b\xa2\xa9\xa2\x9c\xd2\xa0\xfa\xcd \a\xcd\xb969[T\xfbG\x11\x1e[\xfe>\xeb\xeb?N\xd0\xea\x11\n\xcbR<\x17;\xda\xb0K\xd8&\xb8\xcd\x81{\x9c\xc4\x1d}1]\xf4\xf8M\xb8\xfe\xa2x+\xeb\x86e\x91\xb8U\xa4va0\x1c\x8d\xdc\x00\x00\x005\x86rTq\x8c\x1e\xed\b\x85\xfa\x8f\xb3\xeaF\xc3F\x15/\xfe\xd6O\xd9\xe1\xb7P[F\x86\xa5\x86\x8an}\x90\x9dz\x81:\xb5\x12\x15\xdb\xca]tsg\xf7B\xe2\xb4\xb8w\xf4\x88.\t\x01\x84\x02\xdfcJ\x8d\xaf`\x8a\x04\xbc\'\xee\x93\a\xe9\x98\xebg\xb8\xd5\xc1k\x8e0K\x98~\xf98&\a\x1ef^4\xaf\xfb9Si\x83\xb5\v\xd9f\xfd\x88E@\xf0\x89\'\xdcQW\xa4E\xd9/\x1c\xcb\x86\xce-]D\x7fh\xb9!\x19\xdb\xf5\"7\xb4B0>qn^\xbb\n\xbf\xb5wy7\xcft\t\x16\x1f\r\xf8\xe8\x0f\xe0\xaa\xe9\x1b\x96\xed/\x11vH>\x89\x83q\x14jb3\xbb\xdd/', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyee/power/runtime_status\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000440)=""/227, 0xe3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x2) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x101002, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000006c0)=""/194, 0xc2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/uid_map\x00', 0x404000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x8, 0x0) r4 = socket(0xa, 0x1, 0x84) close_range$auto(r4, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x9, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\xe0\x00c\x14M>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\x14^\x0fo\x84\xfc\x89\v\xea\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0x4e, 0x8bd) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 39.47786672s ago: executing program 8 (id=5014): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x141600, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x24100, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40048045}, 0x4004884) 25.410521688s ago: executing program 1 (id=5052): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0x7, 0xffffffffffffffff, 0x6, 0x81, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x80000001, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x20000000000, 0x4, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x6, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x404, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x5]}, 0x1fe, 0x1) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)=0x81) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x10, 0x2, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0xa, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fddbdf250d000000050007"], 0x1c}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) sendfile$auto(r0, 0x3, 0x0, 0xc01) 25.064336985s ago: executing program 1 (id=5055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000da372b4911acde6ff65d6d4a7584e293e0acb9fa85f237241e66ba92d775311b44659555e16f1951eb040000004a09d5614582dc1687626f774f41bc00"/79, @ANYRES16=r1, @ANYBLOB="131729bd7000ffdbdf25030000f00e0001002f6465762f63656334000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000008) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x6c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, "4a7d67c1a686fad7babd95216cb6c42bb209d0c6aa17dff2be102397c8ad8c79139f52339ce8295c019454d537bec4d31303a4ab5fdd1df8a07cd8ce6be0adbe9e6f6e6bf66fb771db53274577e34d67d70e7ec422"}, 0x6c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000811) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) read$auto_xfs_dir_file_operations_xfs_file(r3, &(0x7f0000000000)=""/129, 0x81) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) 24.774910027s ago: executing program 1 (id=5056): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff"], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) close_range$auto(0x2, 0xa, 0x0) socket(0x1e, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xf}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, 0x0) 24.577854255s ago: executing program 1 (id=5057): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x22, 0x52, 0x5, 0x10, 0x40, 0x76c9, 0x8, 0x8000000000000001}}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2f399d0, 0xffff, 0x6}, 0x18, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0045520, r0) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x10100, 0x0) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x2, 0xd, 0x0, 0x0, 0x5) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/clear_refs\x00', 0x800, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, r4, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2b, 0x1, 0x1) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) 24.36157616s ago: executing program 37 (id=5014): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x141600, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x24100, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40048045}, 0x4004884) 22.353427581s ago: executing program 1 (id=5061): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x9) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000180)=@test={r1, 0x80000000, 0x5, 0x6, 0x7fffffffffffffff, 0x2, 0x7, 0x7, 0x9, 0x2, 0x2, 0xc2c, 0x2, 0x13, 0x9}, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r2, 0x40085203, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x0) r4 = openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy16/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x20080, 0x0) getsockopt$auto_SO_PASSSEC(r4, 0xc217, 0x22, &(0x7f00000002c0)='nfsd\x00', &(0x7f0000000300)=0x400) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D \x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fbdbdf250c00000008000b0003070000050013000c00000005001a000200000005002400fc00000005001200030000000800160000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40085}, 0x20004000) fcntl$auto_F_RDLCK(r0, 0x7e, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000400)={0xa2c, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xa10, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x5f1, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x416, 0x2, "3c2e56b95f364d71281581547ff19212cae8d8d5f97ebf0e6a23da8d83ca6762b4a424915ffd2ca4498f861b268c438b6de80c6c0df16d80e557e94b8a8bac281d4133504bf0f892344ed324495a67152c66ffcb2f53f77436b23c8591304687abd9d09be995c127f24aeb47f8fc90bbf386f83f7dbf452a1e4fba15ddca77aaad4eebbccd79e50506d455f30dd4e871725403430bcbb988c3472771da902134730ea0a667e1ec539843442ced2f5e00f9cca9245f503d71be4f3195c0b2564065f5b60f213f1919b77593ab3ccecc314cd4b28712ceeb0457f9a0bd1e279b17effec837b23532357e853f86ee65339c4cbd86e7f8f1b0fe494556202394aa92e11ad5dfb807fc705ab203f44576264d335ebd46142afce16469515e62c93f825982ef28572eb27919f8a2a1c23d7933935f63cb3c17c8be28d79d0cb9c10be80e9fdb44cd30c2928493348b49a9af54645c41105c1229e6541a5ec54fbf782da8588d529236f0820033578e7e8351a8922ce8efa2d387de37917a985a52811f55cb09bc8a7b0a7709d5553fde504aa1bd63ff0b6e74d3bd535e67350b691e00b8bf8733f6b2d530fa28f3c1621a765237d480ca84bb342c4aa79905c628948177fee87589a7a2780b81edfc03646ba55f5a1e2fcf3f473bfad4ccb44081de0ec739d1c61543e44438be0573193a3ecfa77fe970f021b9e6037810e013b71f72c24273df267d33ab393d5a47330ab0a2cc2904d084247205eda7fa24f9865b1de6cdd30700f85846177ce5630066183b5f295a711961e4a888bd9b3149b891b402eb9320fedab035ad5a7bc143267ba77ad51a36aa2c700d36c1a0d1b39132eb83ba16a047aa8452fbd56edeb6e2d24316802d86d152455aa5dac0db58e6e6064cb7bd48ecce78d16ebeada1259ddeef08613816aef7fbf0cef221e0ca8a7967e2f1b44afc6707070c2682b190727e4a66b88bb787ed270be236ad85f1a9a2212c08706a5f46e3277736ee910157e388086f3d6634ced2c1c8c696cac67a0f18f34b17eba9b5444e0f4fc7da8928f35163ca7cdc91cecca78b602fe0043a6fb2de48255152dd74522947a5fd1071b8193e6b67d33064eef2fb6ad31bf98a4a16978238250f9e3e2a7b815337f3c5b8a7f19854e6d6ebfdb03fb839048b9b7d073a27610ca64c96632dc7438a977c54de7288d28c11afd8f97b047b9f56edb95cc150b5d23da79dcabf39b5e648d9de664a40002bca438be9bc4d33d1a7f6642bc505a985b584cb5f53487c8219d2197965b082f95fb48da1a90bcb66633186ec8ee3a60647708a7f83027d6a8979dfdec42302105d264e5b216aebd27109a026a2f40a1eee776f273e3ac52c084351354e14f7123ee6241ab8f2cf48e382773853112bc7e23f46db971d06741b101bcc7cf257865f7c7397ac7685d243a829ab11eafe728f67ffc6d07f2191fb7a8da6875f"}]}]}, 0xa2c}}, 0x4000000) listen$auto(r1, 0x100083) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 20.731209659s ago: executing program 1 (id=5064): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/sctp/assocs\x00', 0x400, 0x0) pread64$auto(r3, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) madvise$auto(0x1000, 0xffff, 0x9) 15.139451097s ago: executing program 2 (id=5071): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x22, 0x52, 0x5, 0x10, 0x40, 0x76c9, 0x8, 0x8000000000000001}}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2f399d0, 0xffff, 0x6}, 0x18, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x10100, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x2, 0xd, 0x0, 0x0, 0x5) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/clear_refs\x00', 0x800, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, r1, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2b, 0x1, 0x1) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) close_range$auto(0x2, 0x8, 0xfe) 12.51134081s ago: executing program 2 (id=5074): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x60b03, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3f}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x5, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x5, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket(0x10, 0x2, 0x4) 8.876043961s ago: executing program 2 (id=5083): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto(0x3, 0x0, 0x7) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)={0x6}) close_range$auto(r0, 0x8, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001180)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20000001) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x4, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2242, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), 0xffffffffffffffff) r6 = getpgid(0x0) process_vm_writev$auto(r6, &(0x7f0000000180)={&(0x7f0000000000), 0x20000007}, 0x200000000017, &(0x7f0000000040)={&(0x7f0000000080), 0x1}, 0x7, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r4, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x36c, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_PHY_CAPS={0x33d, 0x18, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @ipv4=@loopback}, @generic="a0028235a4913bc584b7a1b443cfb761bd25f644dfe9da6fca5d59a214b875269cdd97e92c11e3951ed0ece09c39030a81792b1ad14733770b9669ebb9fc3d7fab56a368dc858d06848492138602e04eec43372a16be13807d2c223b9a89f733ec9b1970823ce9919dac1f43920beaae644aff2f9fc94e793bbb917c33d67465dea624945c3248b17f8e0880a6b7a2a12fdd65b41e22e6b3b6ba3271c2d825a1b46f5944051f509cb8da627bd2869fe46e7675", @nested={0x68, 0x13c, 0x0, 0x1, [@typed={0xc, 0x8a, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xdf}, @nested={0xd, 0x8e}, @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0xef}, @nested={0x4, 0xdb}, @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x1ff}]}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x1c1, 0x18, 0x0, 0x1, [@generic="aa9b1d6d2a1432b9d0b123ec96185d044cd6bd66cb2e44b514f6320044c53778b8fe5820b359cbeaeb9bd7c28df28562855172f54c00573c933e2d1b37da6b511d69b9073308e57d218e61ae921c8fb4cbff8381b645bb1f7f89d3f868e89a8c4425944b66add1bfbe517f6316997c8e2eff7a76d981056a33812435d460beebcc6509ad69fa6997401a330d94ee7c2600d4fbd88e31332d08dbc6d3e0f192a37d66ad1b372b8316f026b564af1b32c77b80b8f53436cec44368fdde", @nested={0x4, 0x131}, @typed={0x8, 0x55, 0x0, 0x0, @fd=r4}, @generic="1700b0b29b8a8590aa5366c02b4ee38422c6ffac7a68bf3fe9bd4ff01861573f56062e0bff35bfac0e208f96a5a6a7b79ff81c6771bf2dd0c2fe66d9b670716567bc4d7a1b29421b9c4fa59d0f126d9946b9baecd3", @nested={0x4, 0xfc}, @typed={0x7c, 0x79, 0x0, 0x0, @binary="62d2fc2ae718745917a7c0d2968dc10f6901b3a1e8b1736b7cf703299a40cac6384ca2c46e82601c86285d961788503e6e6bde94126f0147e1d82d2e1a3f27fb4025c5fe580c49c59c91f0f966dfb2abe926499bd9c43790ab0365891afb75e5eae83a4d88ab05924613d7abb23b88c83cf152a288ea4fff"}, @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x76, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x101}]}, @generic="17c6ba0dbe5ade593d6f5ba4574fbdd49dd5d557c15aebf9d8c6c6e943b7d8089e5daf1b89f8d3858e1206f4ec550476d568b0101414a6f4386a353f3fe1408d252d544d68ca9322c5c6"]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xc0}]}, 0x36c}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000003c0)='4', 0x1) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty14\x00', 0x101000, 0x0) ioctl$auto_TCSBRKP2(r8, 0x5425, 0x0) 8.140806616s ago: executing program 7 (id=5084): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10001}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/urbs\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2a, 0x2, 0x1) r2 = memfd_create$auto(0x0, 0x4) socket(0xa, 0x3, 0x3c) statx$auto(r2, 0x0, 0x1000, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r4, 0xc040563e, r3) r5 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000ed03"], 0x5f}, 0x1, 0x0, 0x0, 0x20008804}, 0x40) write$auto(r0, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket(0xa, 0x1, 0x84) getsockopt$auto(r6, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x8) write$auto_bm_status_operations_binfmt_misc(r2, &(0x7f00000002c0)="26207d5ef1e92c9b7476ab8a73dae8a75c581a77e81714e357b826ba3c0c30da49a6866b3490200ea3c31c91e908bfce01651ac2085ca47553ff2f1b2b6197a4a34be7251c7b45e61cf94c9017cdd448a2b29336aaae502eea2c922440351ab04e8f5bfa0ea62bbc0d034acb02998bab4ad79e37dd5c4d078f252b0192939451a2952dcc0fbab3d2b997b3987a15cf9d29b5b263e3afe150ad2c3ff318a79fc710fa3d767b9839933186d0575ee09eb415d5b6c04ef2f3bf3e297b6388581e686f61da3269", 0xc5) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d9def497", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf251200000008000900020000000800060009000000080007005cfdffff08000700ffffffff0800070071d70000080006000300000008000600ff010000080009000000010008000600090000000800090003000000"], 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044016) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x1002, 0x0) 7.692735341s ago: executing program 7 (id=5085): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x2, 0x7fff, 0x8, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x416, 0x2, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x4}, {0xfff7ffff, 0x20022, 0x52, 0x5, 0x10, 0x3e, 0x76c9, 0x8, 0x8000000000000001}}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2f399d0, 0xffff, 0x6}, 0x18, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x10100, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x2, 0xd, 0x0, 0x0, 0x5) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x4, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/clear_refs\x00', 0x800, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, r1, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2b, 0x1, 0x1) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2184, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) 7.665199555s ago: executing program 9 (id=5086): r0 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4830) write$auto(r0, &(0x7f0000000000)='-\x00', 0x1d30) (fail_nth: 8) 7.017848291s ago: executing program 9 (id=5087): r0 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESOCT=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x8800) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r1, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x91) socketpair$auto(0x10000, 0xfff, 0x3, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x40000000002f, 0x3) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xb9, 0x80000001) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x400000000000008, 0x200000000005, 0x4, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fd, 0xb7f, 0xe34c, 0x5, 0x0, 0xfffffffffffff954, 0xbffffffffffffff8, 0xfdf]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x22240, 0x154) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r2, 0x10, 0x8, 0x4) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000500)=""/196, 0xc4) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x882, 0x0) write$auto(r4, &(0x7f0000001440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xb8\xc0\x1f\xe6\x9f\x9cy\xa9\xad\x96\x19Fy\x11}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdf\x17\xe4\xcbA\xa5[\x1aG\xa6\x94\xe0\xdf\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(W| \xce\xcc\xdd%\xcf\xab\xa8\xafhM\x0f%\xc4C9~\xfe\x02]\xedVfQ', 0xf) ioctl$auto_TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) 6.853126315s ago: executing program 9 (id=5088): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) eventfd$auto(0x5) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe6e, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0x48011) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r1, 0x8000) fdatasync$auto(r1) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0xc2f02, 0x0) mmap$auto(0xffffffffffffffff, 0x810000, 0xff8, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x4, 0x0, 0x6, 0x0) socket(0xa, 0x2, 0x3a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 5.975837799s ago: executing program 7 (id=5089): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto(0x3, 0x0, 0x7) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)={0x6}) close_range$auto(r0, 0x8, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001180)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20000001) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x4, 0x0) socket(0x3, 0x2, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2242, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), 0xffffffffffffffff) r6 = getpgid(0x0) process_vm_writev$auto(r6, &(0x7f0000000180)={&(0x7f0000000000), 0x20000007}, 0x200000000017, &(0x7f0000000040)={&(0x7f0000000080), 0x1}, 0x7, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r4, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x36c, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_PHY_CAPS={0x33d, 0x18, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @ipv4=@loopback}, @generic="a0028235a4913bc584b7a1b443cfb761bd25f644dfe9da6fca5d59a214b875269cdd97e92c11e3951ed0ece09c39030a81792b1ad14733770b9669ebb9fc3d7fab56a368dc858d06848492138602e04eec43372a16be13807d2c223b9a89f733ec9b1970823ce9919dac1f43920beaae644aff2f9fc94e793bbb917c33d67465dea624945c3248b17f8e0880a6b7a2a12fdd65b41e22e6b3b6ba3271c2d825a1b46f5944051f509cb8da627bd2869fe46e7675", @nested={0x68, 0x13c, 0x0, 0x1, [@typed={0xc, 0x8a, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xdf}, @nested={0xd, 0x8e}, @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0xef}, @nested={0x4, 0xdb}, @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x1ff}]}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x1c1, 0x18, 0x0, 0x1, [@generic="aa9b1d6d2a1432b9d0b123ec96185d044cd6bd66cb2e44b514f6320044c53778b8fe5820b359cbeaeb9bd7c28df28562855172f54c00573c933e2d1b37da6b511d69b9073308e57d218e61ae921c8fb4cbff8381b645bb1f7f89d3f868e89a8c4425944b66add1bfbe517f6316997c8e2eff7a76d981056a33812435d460beebcc6509ad69fa6997401a330d94ee7c2600d4fbd88e31332d08dbc6d3e0f192a37d66ad1b372b8316f026b564af1b32c77b80b8f53436cec44368fdde", @nested={0x4, 0x131}, @typed={0x8, 0x55, 0x0, 0x0, @fd=r4}, @generic="1700b0b29b8a8590aa5366c02b4ee38422c6ffac7a68bf3fe9bd4ff01861573f56062e0bff35bfac0e208f96a5a6a7b79ff81c6771bf2dd0c2fe66d9b670716567bc4d7a1b29421b9c4fa59d0f126d9946b9baecd3", @nested={0x4, 0xfc}, @typed={0x7c, 0x79, 0x0, 0x0, @binary="62d2fc2ae718745917a7c0d2968dc10f6901b3a1e8b1736b7cf703299a40cac6384ca2c46e82601c86285d961788503e6e6bde94126f0147e1d82d2e1a3f27fb4025c5fe580c49c59c91f0f966dfb2abe926499bd9c43790ab0365891afb75e5eae83a4d88ab05924613d7abb23b88c83cf152a288ea4fff"}, @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x76, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x101}]}, @generic="17c6ba0dbe5ade593d6f5ba4574fbdd49dd5d557c15aebf9d8c6c6e943b7d8089e5daf1b89f8d3858e1206f4ec550476d568b0101414a6f4386a353f3fe1408d252d544d68ca9322c5c6"]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xc0}]}, 0x36c}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000003c0)='4', 0x1) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty14\x00', 0x101000, 0x0) ioctl$auto_TCSBRKP2(r8, 0x5425, 0x0) 5.271948394s ago: executing program 38 (id=5064): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/sctp/assocs\x00', 0x400, 0x0) pread64$auto(r3, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) madvise$auto(0x1000, 0xffff, 0x9) 4.192143807s ago: executing program 2 (id=5091): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2a742, 0x0) fallocate$auto(r0, 0x80, 0x100, 0x8) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0x4a901, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x42080, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x46, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) r4 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) write$auto_nvmf_dev_fops_fabrics(r4, 0x0, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/66, 0x42) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5512, 0x0}) 3.610808176s ago: executing program 2 (id=5092): unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x4, 0x400007, 0xdf, 0x16, 0xffffffffffffffff, 0x9) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/112, 0x70) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x408000, 0x110, 0x8}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x3ff, 0x1, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) r3 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0x800, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x181) 3.447860433s ago: executing program 9 (id=5093): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x103, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0xc0000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0xa, 0x1, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/sleep_millisecs\x00', 0x181482, 0x0) write$auto(r1, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x3) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="f320f820c75c20d9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x1e) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyue\x00', 0x103f81, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) 3.109511061s ago: executing program 9 (id=5094): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x48c83, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250400ecff030010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r3, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) 3.051323124s ago: executing program 7 (id=5095): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0x7, 0xffffffffffffffff, 0x6, 0x81, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x80000001, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x20000000000, 0x4, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x6, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x404, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x5]}, 0x1fe, 0x1) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)=0x81) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x10, 0x2, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0xa, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fddbdf250d000000050007"], 0x1c}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, 0x0, 0x80) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) sendfile$auto(r0, 0x3, 0x0, 0xc01) 2.274310714s ago: executing program 7 (id=5096): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x22, 0x52, 0x5, 0x10, 0x40, 0x76c9, 0x8, 0x8000000000000001}}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2f399d0, 0xffff, 0x6}, 0x18, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x10100, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x2, 0xd, 0x0, 0x0, 0x5) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/clear_refs\x00', 0x800, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, r1, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2b, 0x1, 0x1) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) close_range$auto(0x2, 0x8, 0xffff0000) 1.053403524s ago: executing program 9 (id=5097): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x60b03, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3f}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x5, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x5, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket(0x10, 0x2, 0x4) 309.790557ms ago: executing program 2 (id=5098): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x51, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop12\x00', 0x400002, 0x0) 0s ago: executing program 7 (id=5099): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = io_uring_setup$auto(0x59, &(0x7f00000001c0)={0x6, 0xd, 0x2, 0x6, 0x20007fff, 0x8, 0xffffffffffffffff, [0xfff7fffd, 0x80000001, 0x2], {0x20000006, 0x406, 0xb, 0x2de, 0x4504, 0x1, 0x101, 0xe, 0x6}, {0xfff7ffff, 0x22, 0x52, 0x5, 0x10, 0x42, 0x76c9, 0x8, 0x8000000000000001}}) mmap$auto(0x0, 0x12, 0x3, 0xf016, r0, 0x8002) r1 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x2f399d0, 0xffff, 0x6}, 0x18, 0x0) statx$auto(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x1000, 0x10000, &(0x7f0000000540)={0x7, 0x8, 0x3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1000, 0xd, 0x1, 0x9, 0xfa8e, 0xfd1, {0x7, 0x9}, {0x4, 0xc001}, {0x8, 0x9}, {0xffffffffffffffff, 0x3}, 0x2, 0x10, 0x7fff, 0x9, 0x402, 0x7, 0x6, 0xfff, 0x2, 0x5, 0x6, 0x3, [0x533, 0x0, 0x9, 0xfffffffffffffff0, 0x800004, 0x8, 0xb1, 0x848, 0x800]}) r5 = open(&(0x7f00000000c0)='&&\x00', 0x4c4503, 0x400) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x10100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x4) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0x8000ae41, r6) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0x1, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r1, @ANYRESHEX, @ANYRESDEC=r4, @ANYRES32, @ANYRESOCT, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48814}, 0x20008c10) ioctl$auto_KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x40000071, 0x7, 0x1000}]}) write$auto(r2, 0x0, 0xffffffffffffffd6) linkat$auto(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x6, 0xd, 0x0, 0x0, 0xffffffffffffffff) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/clear_refs\x00', 0x800, 0x0) io_uring_setup$auto(0x6, 0x0) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev7\x00', 0x480401, 0x0) ioctl$auto(r9, 0x80885659, r9) kernel console output (not intermixed with test programs): 988kB, failcnt 0 [ 1170.706853][T19525] Memory cgroup stats for /syz4: [ 1170.707046][T19525] cache 310415360 [ 1170.745945][T19525] rss 69632 [ 1170.760340][T19525] rss_huge 0 [ 1170.780850][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1170.804083][T19525] shmem 310415360 [ 1170.815053][T19525] mapped_file 26161152 [ 1170.830722][T19525] dirty 0 [ 1170.844460][T19525] writeback 0 [ 1170.858987][T19525] workingset_refault_anon 2108 [ 1170.872968][T25455] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1170.896212][T19525] workingset_refault_file 16 [ 1170.925455][T19525] swap 127561728 [ 1170.949502][T19525] swapcached 188768256 [ 1170.971550][T19525] pgpgin 565354 [ 1170.991950][T19525] pgpgout 489966 [ 1171.003176][T19525] pgfault 250944 [ 1171.020570][T19525] pgmajfault 400 [ 1171.054707][T19525] inactive_anon 168505344 [ 1171.089775][T19525] active_anon 142376960 [ 1171.107928][T19525] inactive_file 0 [ 1171.123522][T19525] active_file 0 [ 1171.154416][T19525] unevictable 0 [ 1171.172974][T19525] hierarchical_memory_limit 314572800 [ 1171.198950][T19525] hierarchical_memsw_limit 9223372036854771712 [ 1171.227642][T19525] total_cache 310415360 [ 1171.246420][T19525] total_rss 69632 [ 1171.263723][T19525] total_rss_huge 0 [ 1171.280606][T19525] total_shmem 310415360 [ 1171.302633][T19525] total_mapped_file 26161152 [ 1171.334697][T19525] total_dirty 0 [ 1171.345223][T19525] total_writeback 0 [ 1171.360869][T19525] total_workingset_refault_anon 2108 [ 1171.385860][T19525] total_workingset_refault_file 16 [ 1171.406516][T19525] total_swap 127561728 [ 1171.426145][T19525] total_swapcached 188768256 [ 1171.448810][T19525] total_pgpgin 565354 [ 1171.465136][T19525] total_pgpgout 489966 [ 1171.486385][T19525] total_pgfault 250944 [ 1171.504561][T19525] total_pgmajfault 400 [ 1171.520546][T19525] total_inactive_anon 168505344 [ 1171.542077][T19525] total_active_anon 142376960 [ 1171.564738][T19525] total_inactive_file 0 [ 1171.578876][T19525] total_active_file 0 [ 1171.595279][T19525] total_unevictable 0 [ 1171.613700][T19525] anon_cost 15997 [ 1171.630963][T19525] file_cost 0 [ 1171.647344][T19525] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4460,pid=24893,uid=0 [ 1171.720477][T19525] Memory cgroup out of memory: Killed process 24893 (syz.4.4460) total-vm:131820kB, anon-rss:1236kB, file-rss:46380kB, shmem-rss:25548kB, UID:0 pgtables:264kB oom_score_adj:0 [ 1171.943984][T24909] syz.4.4460 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1171.993117][T24909] CPU: 0 UID: 0 PID: 24909 Comm: syz.4.4460 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1171.993146][T24909] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1171.993152][T24909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1171.993161][T24909] Call Trace: [ 1171.993167][T24909] [ 1171.993174][T24909] dump_stack_lvl+0x100/0x190 [ 1171.993203][T24909] dump_header+0xfb/0x606 [ 1171.993220][T24909] oom_kill_process.cold+0xd/0x330 [ 1171.993237][T24909] out_of_memory+0x340/0x14f0 [ 1171.993263][T24909] ? __pfx_out_of_memory+0x10/0x10 [ 1171.993289][T24909] mem_cgroup_out_of_memory+0xc6/0x130 [ 1171.993311][T24909] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1171.993331][T24909] ? find_held_lock+0x2b/0x80 [ 1171.993352][T24909] ? do_raw_spin_unlock+0x145/0x1e0 [ 1171.993368][T24909] ? _raw_spin_unlock+0x28/0x50 [ 1171.993387][T24909] try_charge_memcg+0x6e5/0xdf0 [ 1171.993408][T24909] ? __pfx_try_charge_memcg+0x10/0x10 [ 1171.993425][T24909] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1171.993446][T24909] ? memory_min_write+0xb1/0xe0 [ 1171.993464][T24909] ? rcu_is_watching+0x12/0xc0 [ 1171.993485][T24909] charge_memcg+0x19f/0x210 [ 1171.993502][T24909] __mem_cgroup_charge+0x2b/0x1c0 [ 1171.993523][T24909] shmem_alloc_and_add_folio+0x451/0xd40 [ 1171.993550][T24909] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1171.993573][T24909] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1171.993592][T24909] shmem_get_folio_gfp+0x6ab/0x1900 [ 1171.993611][T24909] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1171.993630][T24909] shmem_write_begin+0x1a4/0x420 [ 1171.993647][T24909] ? __pfx_shmem_write_begin+0x10/0x10 [ 1171.993662][T24909] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1171.993680][T24909] ? lockdep_hardirqs_on+0x78/0x100 [ 1171.993701][T24909] generic_perform_write+0x292/0xa40 [ 1171.993728][T24909] ? __pfx_generic_perform_write+0x10/0x10 [ 1171.993751][T24909] ? file_update_time_flags+0x373/0x500 [ 1171.993774][T24909] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1171.993790][T24909] shmem_file_write_iter+0x10e/0x140 [ 1171.993808][T24909] __kernel_write_iter+0x2ac/0x920 [ 1171.993826][T24909] ? __pfx___kernel_write_iter+0x10/0x10 [ 1171.993842][T24909] ? __up_read+0x2c1/0x6e0 [ 1171.993859][T24909] ? dump_user_range+0x65e/0xad0 [ 1171.993882][T24909] dump_user_range+0x3f9/0xad0 [ 1171.993906][T24909] ? __pfx_dump_user_range+0x10/0x10 [ 1171.993931][T24909] ? __pfx_writenote+0x10/0x10 [ 1171.993956][T24909] elf_core_dump+0x2d5f/0x3d10 [ 1171.993993][T24909] ? __pfx_elf_core_dump+0x10/0x10 [ 1171.994014][T24909] ? kasan_save_stack+0x3f/0x50 [ 1171.994027][T24909] ? kasan_save_stack+0x30/0x50 [ 1171.994040][T24909] ? __kasan_kmalloc+0xaa/0xb0 [ 1171.994053][T24909] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1171.994067][T24909] ? vfs_coredump+0x22db/0x5770 [ 1171.994086][T24909] ? asm_exc_page_fault+0x26/0x30 [ 1171.994102][T24909] ? 0xffffffffff600000 [ 1171.994144][T24909] ? vfs_coredump+0x2980/0x5770 [ 1171.994161][T24909] vfs_coredump+0x2980/0x5770 [ 1171.994188][T24909] ? __pfx_vfs_coredump+0x10/0x10 [ 1171.994208][T24909] ? __lock_acquire+0x4a5/0x2630 [ 1171.994236][T24909] ? lock_acquire+0x1b1/0x370 [ 1171.994264][T24909] ? is_bpf_text_address+0x8a/0x1a0 [ 1171.994283][T24909] ? bpf_ksym_find+0x124/0x1c0 [ 1171.994302][T24909] ? __kernel_text_address+0xd/0x30 [ 1171.994316][T24909] ? unwind_get_return_address+0x59/0xa0 [ 1171.994335][T24909] ? arch_stack_walk+0xa6/0xf0 [ 1171.994358][T24909] ? __sigqueue_free+0xbe/0x2a0 [ 1171.994378][T24909] ? stack_trace_save+0x8e/0xc0 [ 1171.994396][T24909] ? __pfx_stack_trace_save+0x10/0x10 [ 1171.994415][T24909] ? stack_depot_save_flags+0x27/0x9d0 [ 1171.994438][T24909] ? __lock_acquire+0x4a5/0x2630 [ 1171.994489][T24909] ? proc_coredump_connector+0x2d3/0x4f0 [ 1171.994508][T24909] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1171.994533][T24909] ? rcu_is_watching+0x12/0xc0 [ 1171.994552][T24909] get_signal+0x2162/0x2210 [ 1171.994577][T24909] ? __pfx_get_signal+0x10/0x10 [ 1171.994593][T24909] ? find_held_lock+0x2b/0x80 [ 1171.994609][T24909] ? bad_area_access_error+0xab/0x1d0 [ 1171.994625][T24909] ? fixup_vdso_exception+0x2d1/0x370 [ 1171.994647][T24909] arch_do_signal_or_restart+0x91/0x7a0 [ 1171.994668][T24909] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1171.994695][T24909] ? rcu_is_watching+0x12/0xc0 [ 1171.994713][T24909] irqentry_exit+0x39e/0x970 [ 1171.994735][T24909] asm_exc_page_fault+0x26/0x30 [ 1171.994749][T24909] RIP: 0033:0x0 [ 1171.994759][T24909] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1171.994766][T24909] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 1171.994778][T24909] RAX: 0000000000000000 RBX: 00007ff750a16270 RCX: 00007ff75079ce59 [ 1171.994788][T24909] RDX: 0000200000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1171.994796][T24909] RBP: 00007ff750832d6f R08: 0000000080000000 R09: 0000000000000000 [ 1171.994805][T24909] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1171.994813][T24909] R13: 00007ff750a16308 R14: 00007ff750a16270 R15: 00007ffcc6cb0588 [ 1171.994833][T24909] [ 1172.754360][T24909] memory: usage 307200kB, limit 307200kB, failcnt 25199 [ 1172.761794][T24909] memory+swap: usage 431772kB, limit 9007199254740988kB, failcnt 0 [ 1172.771403][T24909] kmem: usage 3596kB, limit 9007199254740988kB, failcnt 0 [ 1172.778831][T24909] Memory cgroup stats for /syz4: [ 1172.779024][T24909] cache 310423552 [ 1172.787596][T24909] rss 69632 [ 1172.790691][T24909] rss_huge 0 [ 1172.793918][T24909] shmem 310423552 [ 1172.797535][T24909] mapped_file 26161152 [ 1172.801583][T24909] dirty 0 [ 1172.804532][T24909] writeback 0 [ 1172.807805][T24909] workingset_refault_anon 2108 [ 1172.812583][T24909] workingset_refault_file 16 [ 1172.817214][T24909] swap 127561728 [ 1172.820737][T24909] swapcached 188768256 [ 1172.824829][T24909] pgpgin 565356 [ 1172.828267][T24909] pgpgout 489966 [ 1172.831791][T24909] pgfault 250944 [ 1172.835349][T24909] pgmajfault 400 [ 1172.838889][T24909] inactive_anon 168513536 [ 1172.843919][T24909] active_anon 142376960 [ 1172.848070][T24909] inactive_file 0 [ 1172.851685][T24909] active_file 0 [ 1172.855361][T24909] unevictable 0 [ 1172.858843][T24909] hierarchical_memory_limit 314572800 [ 1172.864665][T24909] hierarchical_memsw_limit 9223372036854771712 [ 1172.870805][T24909] total_cache 310423552 [ 1172.875014][T24909] total_rss 69632 [ 1172.878627][T24909] total_rss_huge 0 [ 1172.882324][T24909] total_shmem 310423552 [ 1172.886514][T24909] total_mapped_file 26161152 [ 1172.891104][T24909] total_dirty 0 [ 1172.894565][T24909] total_writeback 0 [ 1172.898352][T24909] total_workingset_refault_anon 2108 [ 1172.903640][T24909] total_workingset_refault_file 16 [ 1172.908744][T24909] total_swap 127561728 [ 1172.912786][T24909] total_swapcached 188768256 [ 1172.917399][T24909] total_pgpgin 565356 [ 1172.921354][T24909] total_pgpgout 489966 [ 1172.925441][T24909] total_pgfault 250944 [ 1172.929489][T24909] total_pgmajfault 400 [ 1172.933766][T24909] total_inactive_anon 168513536 [ 1172.938595][T24909] total_active_anon 142376960 [ 1172.943852][T24909] total_inactive_file 0 [ 1172.947996][T24909] total_active_file 0 [ 1172.951975][T24909] total_unevictable 0 [ 1172.955982][T24909] anon_cost 15997 [ 1172.959612][T24909] file_cost 0 [ 1172.962909][T24909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4460,pid=24909,uid=0 [ 1173.004721][T24909] Memory cgroup out of memory: Killed process 24909 (syz.4.4460) total-vm:131820kB, anon-rss:1256kB, file-rss:49452kB, shmem-rss:25512kB, UID:0 pgtables:272kB oom_score_adj:0 [ 1174.471415][T25494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1174.566210][T25494] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1175.962215][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1175.971395][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.085885][T25505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1177.762532][T24893] syz.4.4460 (24893) used greatest stack depth: 19696 bytes left [ 1179.593166][T25533] base or size exceeds the MTRR width [ 1179.702350][T25512] Process accounting paused [ 1179.966248][T25535] Process accounting resumed [ 1181.893090][T24051] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1184.427420][T24891] syz.4.4460 (24891) used greatest stack depth: 18456 bytes left [ 1185.292189][T25633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4597'. [ 1185.364013][T25643] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4597'. [ 1186.185061][T25669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4603'. [ 1186.576085][T25669] unsupported nlmsg_type 40 [ 1189.842608][T25732] busy [ 1189.912549][T25732] ima: policy update failed [ 1189.938168][ T29] audit: type=1802 audit(2147488203.645:26): pid=25732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4614" res=0 errno=0 [ 1190.627517][T25737] random: crng reseeded on system resumption [ 1192.006281][T25791] futex_wake_op: syz.2.4626 tries to shift op by -1; fix this program [ 1193.507410][T25818] zswap: compressor not available [ 1194.227877][T25847] ima: policy update failed [ 1194.233360][ T29] audit: type=1802 audit(2147488207.956:27): pid=25847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4639" res=0 errno=0 [ 1196.320122][T25882] nbd: couldn't find a device at index 2542 [ 1196.745483][T25893] busy [ 1196.885115][T25895] ima: policy update failed [ 1196.950573][ T29] audit: type=1802 audit(2147488210.678:28): pid=25895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4650" res=0 errno=0 [ 1198.051859][T25905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4653'. [ 1198.205410][T25913] random: crng reseeded on system resumption [ 1199.590382][T25947] busy [ 1199.719858][T25948] ima: policy update failed [ 1199.788424][ T29] audit: type=1802 audit(2147488213.542:29): pid=25948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4662" res=0 errno=0 [ 1199.909612][T25950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4663'. [ 1199.980235][T25957] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4663'. [ 1201.933137][T24051] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1202.245099][T25972] [U] 0="­/ [ 1202.307212][T25972] [U] [ 1202.363659][T25972] [U] EÇeÅQ‰Í@’ [ 1202.452095][T25998] netlink: zone id is out of range [ 1202.476476][T25998] netlink: zone id is out of range [ 1202.499397][T25998] netlink: zone id is out of range [ 1202.523357][T25998] netlink: zone id is out of range [ 1202.548946][T25998] netlink: zone id is out of range [ 1202.572776][T25998] netlink: zone id is out of range [ 1202.594312][T25998] netlink: zone id is out of range [ 1202.626415][T25998] netlink: zone id is out of range [ 1202.648606][T25998] netlink: zone id is out of range [ 1202.673730][T25998] netlink: zone id is out of range [ 1203.667502][T25964] [U]  [ 1205.130898][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1205.202598][T26039] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1208.548852][T26089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1208.618436][T26092] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1209.465518][T26096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1209.549008][T26099] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1210.063369][T26105] NFSD: Failed to start, no listeners configured. [ 1210.301959][T26035] Process accounting paused [ 1211.138411][T26097] Process accounting resumed [ 1212.792486][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1212.903295][T26155] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1214.357941][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4706'. [ 1214.421899][T26185] net_ratelimit: 19 callbacks suppressed [ 1214.421925][T26185] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1216.325337][T26226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1216.417176][T26230] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1216.694004][T26236] nbd: couldn't find a device at index 2542 [ 1216.794244][T26240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4716'. [ 1217.460063][T26237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1217.539194][T26237] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1217.656374][T26237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1217.752903][T26237] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1217.865470][T26237] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1218.877096][T24051] Bluetooth: hci2: command 0x0c1a tx timeout [ 1219.673180][T24051] Bluetooth: hci1: command 0x0c1a tx timeout [ 1219.912238][T24051] Bluetooth: hci0: command 0x0c1a tx timeout [ 1220.948419][T24051] Bluetooth: hci2: command 0x0c1a tx timeout [ 1221.744997][T24051] Bluetooth: hci1: command 0x0c1a tx timeout [ 1222.342121][T26318] NFSD: Failed to start, no listeners configured. [ 1223.108287][T26328] kvm: user requested TSC rate below hardware speed [ 1224.466179][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4733'. [ 1224.537280][T26339] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4733'. [ 1224.928148][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4735'. [ 1225.041826][T26347] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4735'. [ 1227.764662][T26378] FAULT_INJECTION: forcing a failure. [ 1227.764662][T26378] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.170601][T26378] CPU: 0 UID: 0 PID: 26378 Comm: syz.3.4741 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1228.170629][T26378] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1228.170637][T26378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1228.170647][T26378] Call Trace: [ 1228.170653][T26378] [ 1228.170659][T26378] dump_stack_lvl+0x100/0x190 [ 1228.170694][T26378] should_fail_ex.cold+0x5/0xa [ 1228.170716][T26378] should_failslab+0xc2/0x120 [ 1228.170735][T26378] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1228.170756][T26378] ? copy_net_ns+0x135/0x7c0 [ 1228.170779][T26378] copy_net_ns+0x135/0x7c0 [ 1228.170796][T26378] ? copy_cgroup_ns+0x71/0x970 [ 1228.170820][T26378] create_new_namespaces+0x3ea/0xac0 [ 1228.170844][T26378] unshare_nsproxy_namespaces+0xf2/0x220 [ 1228.170864][T26378] ksys_unshare+0x438/0xab0 [ 1228.170886][T26378] ? __pfx_ksys_unshare+0x10/0x10 [ 1228.170905][T26378] ? xfd_validate_state+0x129/0x190 [ 1228.170927][T26378] __x64_sys_unshare+0x31/0x40 [ 1228.170947][T26378] do_syscall_64+0x115/0x840 [ 1228.170969][T26378] ? clear_bhb_loop+0x40/0x90 [ 1228.170987][T26378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.171002][T26378] RIP: 0033:0x7f1bee39ce59 [ 1228.171016][T26378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.171030][T26378] RSP: 002b:00007f1bef207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1228.171046][T26378] RAX: ffffffffffffffda RBX: 00007f1bee616090 RCX: 00007f1bee39ce59 [ 1228.171056][T26378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1228.171065][T26378] RBP: 00007f1bee432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1228.171087][T26378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.171096][T26378] R13: 00007f1bee616128 R14: 00007f1bee616090 R15: 00007fff37b6e1e8 [ 1228.171116][T26378] [ 1228.887561][T26395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'. [ 1228.946922][T26397] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4746'. [ 1229.351850][T26400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1230.002926][T26407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4749'. [ 1230.161798][T26407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.316413][T26407] bridge_slave_0 (unregistering): left allmulticast mode [ 1230.405459][T26407] bridge_slave_0 (unregistering): left promiscuous mode [ 1230.477280][T26407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.460830][T26435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1232.518302][T26437] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1233.027635][T26439] kvm: user requested TSC rate below hardware speed [ 1233.253285][T26449] NFSD: Failed to start, no listeners configured. [ 1233.817212][T26457] ima: policy update failed [ 1233.905221][T26461] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4761'. [ 1233.963804][ T29] audit: type=1802 audit(2147488247.872:30): pid=26457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4761" res=0 errno=0 [ 1234.849973][T26473] kvm: user requested TSC rate below hardware speed [ 1235.466550][T24051] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 1237.113508][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.127613][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.534249][T26436] Process accounting resumed [ 1240.576835][T26550] kvm: user requested TSC rate below hardware speed [ 1240.910268][T26556] netlink: 146 bytes leftover after parsing attributes in process `syz.4.4784'. [ 1241.406729][T16803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1241.426186][T16803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1241.434943][T16803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1241.443260][T16803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1241.450738][T16803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1242.015664][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4784'. [ 1242.444239][T12838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.959638][T12838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.218517][T12838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.417693][T12838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.482255][T24051] Bluetooth: hci3: command tx timeout [ 1244.409298][T12838] bridge_slave_1: left allmulticast mode [ 1244.423295][T12838] bridge_slave_1: left promiscuous mode [ 1244.437127][T12838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.453980][T12838] bridge_slave_0: left allmulticast mode [ 1244.468011][T12838] bridge_slave_0: left promiscuous mode [ 1244.480653][T12838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.854290][T12838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.876303][T12838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.892863][T12838] bond0 (unregistering): Released all slaves [ 1244.960664][T26562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.978033][T26562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.997136][T26562] bridge_slave_0: entered allmulticast mode [ 1245.007743][T26562] bridge_slave_0: entered promiscuous mode [ 1245.016879][T12838] &#$@\]\-: left promiscuous mode [ 1245.033746][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1245.041529][T26562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.067297][T26562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.075160][T26562] bridge_slave_1: entered allmulticast mode [ 1245.095723][T26562] bridge_slave_1: entered promiscuous mode [ 1245.201876][T26562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.248554][T26562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.365349][T26562] team0: Port device team_slave_0 added [ 1245.387362][T26562] team0: Port device team_slave_1 added [ 1245.490560][T26562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.510238][T26562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.554016][T16803] Bluetooth: hci3: command tx timeout [ 1245.567646][T26562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.595636][T12838] hsr_slave_0: left promiscuous mode [ 1245.612398][T12838] hsr_slave_1: left promiscuous mode [ 1245.623328][T12838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.643056][T12838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.669463][T12838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.690675][T12838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.719053][T12838] veth1_macvtap: left promiscuous mode [ 1245.745352][T12838] veth0_macvtap: left promiscuous mode [ 1245.763679][T12838] veth1_vlan: left promiscuous mode [ 1245.770223][T12838] veth0_vlan: left promiscuous mode [ 1246.075092][T12838] team0 (unregistering): Port device team_slave_1 removed [ 1246.090608][T12838] team0 (unregistering): Port device team_slave_0 removed [ 1246.216952][T26562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.229090][T26562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.273202][T26562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.290991][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1246.365822][T26562] hsr_slave_0: entered promiscuous mode [ 1246.386436][T26562] hsr_slave_1: entered promiscuous mode [ 1247.585919][T26562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1247.615742][T26562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.622942][T16803] Bluetooth: hci3: command tx timeout [ 1247.646174][T26562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1247.677384][T26562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1247.706235][T26562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1247.757399][T26562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1247.785454][T26562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1247.877929][T26562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1248.242503][T26562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.301714][T26562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.336315][T12837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.343470][T12837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.414357][T12837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.421549][T12837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.172324][T26681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1249.238070][T26687] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1249.571755][T26562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.693029][T16803] Bluetooth: hci3: command tx timeout [ 1249.703991][T26562] veth0_vlan: entered promiscuous mode [ 1249.747773][T26562] veth1_vlan: entered promiscuous mode [ 1249.836159][T26562] veth0_macvtap: entered promiscuous mode [ 1249.875687][T26562] veth1_macvtap: entered promiscuous mode [ 1249.927225][T26562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.972219][T26562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.015395][T12837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.035354][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4793'. [ 1250.048854][T12837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.081412][T12837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.093490][T26707] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4793'. [ 1250.110618][T12837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.444160][T12837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.485848][T12837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.526388][T16469] Process accounting paused [ 1250.586128][T12837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.627325][T12837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.881589][T24051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1250.904473][T24051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1250.914297][T24051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1250.923134][T24051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1250.930749][T24051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1251.717541][T26733] ima: policy update failed [ 1251.750522][ T29] audit: type=1802 audit(2147488265.736:31): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4797" res=0 errno=0 [ 1253.036703][T16803] Bluetooth: hci1: command tx timeout [ 1253.190935][T26720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.191044][T26720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.191180][T26720] bridge_slave_0: entered allmulticast mode [ 1253.205638][T26720] bridge_slave_0: entered promiscuous mode [ 1253.211751][T26720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.211818][T26720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.211941][T26720] bridge_slave_1: entered allmulticast mode [ 1253.216469][T26720] bridge_slave_1: entered promiscuous mode [ 1253.302155][T26720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.317487][T26720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.411760][T26720] team0: Port device team_slave_0 added [ 1253.425812][T26720] team0: Port device team_slave_1 added [ 1253.507055][T26720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.507071][T26720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.507089][T26720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.509909][T26720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.509923][T26720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.509941][T26720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.644697][T26720] hsr_slave_0: entered promiscuous mode [ 1253.647770][T26720] hsr_slave_1: entered promiscuous mode [ 1253.651239][T26720] debugfs: 'hsr0' already exists in 'hsr' [ 1253.651258][T26720] Cannot create hsr debugfs directory [ 1254.911206][T26720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1254.918379][T26720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1254.919019][T26720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1254.930961][T26720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1254.958004][T26720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1254.963808][T26720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1254.964610][T26720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1255.037961][T26720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1255.110316][T24051] Bluetooth: hci1: command tx timeout [ 1255.458850][T26720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.493988][T26720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.509855][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.509965][ T7540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.552726][T12848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.552795][T12848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.725005][T26779] ima: policy update failed [ 1256.726700][ T29] audit: type=1802 audit(2147488270.739:32): pid=26779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4805" res=0 errno=0 [ 1256.919552][T26793] busy [ 1257.011298][T26720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.026280][T26793] ima: policy update failed [ 1257.038561][ T29] audit: type=1802 audit(2147488271.041:33): pid=26793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4806" res=0 errno=0 [ 1257.177086][T24051] Bluetooth: hci1: command tx timeout [ 1257.805759][T26720] veth0_vlan: entered promiscuous mode [ 1257.827139][T26720] veth1_vlan: entered promiscuous mode [ 1257.906368][T26720] veth0_macvtap: entered promiscuous mode [ 1258.041788][T26720] veth1_macvtap: entered promiscuous mode [ 1258.113516][T26720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.140203][T26720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.208108][T12848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.215793][ T7545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.216704][T12822] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.216879][T12822] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.494722][T12837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.494743][T12837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.547657][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1258.549766][T26806] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1258.580564][T12837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.580584][T12837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1259.247215][T16803] Bluetooth: hci1: command tx timeout [ 1259.262158][T16803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1259.274252][T16803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1259.280019][T16803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1259.282174][T16803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1259.284799][T16803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1259.740909][T26816] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1261.320114][T16803] Bluetooth: hci4: command tx timeout [ 1261.558484][T26818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.558551][T26818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.558841][T26818] bridge_slave_0: entered allmulticast mode [ 1261.564485][T26818] bridge_slave_0: entered promiscuous mode [ 1261.572712][T26818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.572781][T26818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.573051][T26818] bridge_slave_1: entered allmulticast mode [ 1261.589397][T26818] bridge_slave_1: entered promiscuous mode [ 1261.698687][T26818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.725921][T26818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.835838][T26818] team0: Port device team_slave_0 added [ 1261.849561][T26818] team0: Port device team_slave_1 added [ 1261.948603][T26818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.948619][T26818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.948638][T26818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.049719][T26818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.049734][T26818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.049753][T26818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.232166][T26818] hsr_slave_0: entered promiscuous mode [ 1262.232831][T26818] hsr_slave_1: entered promiscuous mode [ 1262.240039][T26818] debugfs: 'hsr0' already exists in 'hsr' [ 1262.240058][T26818] Cannot create hsr debugfs directory [ 1262.269022][T26850] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1263.389207][T16803] Bluetooth: hci4: command tx timeout [ 1264.409915][T26818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1264.487434][T26818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1264.544612][T26818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1264.614949][T26818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1264.659584][T26818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1264.745272][T26818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1264.943371][T26818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1265.071872][T26818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.457979][T16803] Bluetooth: hci4: command tx timeout [ 1266.316241][T26912] busy [ 1266.427052][T26912] ima: policy update failed [ 1266.463231][ T29] audit: type=1802 audit(2147488280.525:34): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4826" res=0 errno=0 [ 1267.155959][T26818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.238463][T26818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.331233][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.338371][ T7540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.403929][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.411107][ T7540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.530400][T16803] Bluetooth: hci4: command tx timeout [ 1268.508213][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4828'. [ 1268.620850][T26934] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4828'. [ 1268.827634][T26818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.564984][T26932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1269.596273][T26932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1269.631761][T26818] veth0_vlan: entered promiscuous mode [ 1269.637649][T26932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1269.661304][T26932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1269.685328][T26818] veth1_vlan: entered promiscuous mode [ 1269.732210][T26932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1269.769444][T26818] veth0_macvtap: entered promiscuous mode [ 1269.805091][T26932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1269.821640][T26818] veth1_macvtap: entered promiscuous mode [ 1269.836556][T26932] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1269.905078][T26818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.943341][T26932] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1269.954743][T26818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.014414][T26932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1270.030620][ T7540] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.044457][T26932] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1270.075267][ T7540] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.112268][T26932] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1270.119621][ T7540] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.185308][ T7540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.315751][T16803] Bluetooth: hci2: command 0x0c1a tx timeout [ 1270.578664][T12848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.622126][T12848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.734214][T12822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.774518][T12822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.877598][T26960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4832'. [ 1271.154281][T26959] Process accounting paused [ 1271.292124][T26968] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1271.589254][T16803] Bluetooth: hci0: command 0x0c1a tx timeout [ 1271.669287][T16803] Bluetooth: hci3: command 0x0c1a tx timeout [ 1271.828179][T16803] Bluetooth: hci1: command 0x0c1a tx timeout [ 1271.870284][T26968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1272.067637][T16803] Bluetooth: hci4: command 0x0c1a tx timeout [ 1272.610248][T26991] busy [ 1272.692610][T26991] ima: policy update failed [ 1272.718834][ T29] audit: type=1802 audit(2147488286.814:35): pid=26991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4839" res=0 errno=0 [ 1272.740907][T26987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1272.816264][T26988] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1272.856425][T26974] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1273.465484][T26999] bridge0: port 3(batadv0) entered blocking state [ 1273.538174][T26999] bridge0: port 3(batadv0) entered disabled state [ 1273.606095][T26999] batadv0: entered allmulticast mode [ 1273.693302][T26999] batadv0: entered promiscuous mode [ 1273.739930][T16803] Bluetooth: hci3: command 0x0c1a tx timeout [ 1273.780053][T26999] bridge0: port 3(batadv0) entered blocking state [ 1273.786606][T26999] bridge0: port 3(batadv0) entered forwarding state [ 1273.898306][T16803] Bluetooth: hci1: command 0x0c1a tx timeout [ 1274.038915][ T7540] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1274.049260][ T7540] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1274.138004][T16803] Bluetooth: hci4: command 0x0c1a tx timeout [ 1275.693983][T27014] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1275.803981][T27016] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4847'. [ 1275.814805][T16803] Bluetooth: hci3: command 0x0c1a tx timeout [ 1275.970157][T16803] Bluetooth: hci1: command 0x0c1a tx timeout [ 1276.208025][T16803] Bluetooth: hci4: command 0x0c1a tx timeout [ 1276.413493][T27025] tipc: Started in network mode [ 1276.441521][T27025] tipc: Node identity ee00, cluster identity 4711 [ 1276.484999][T27025] tipc: Node number set to 60928 [ 1276.741600][T27016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 1276.932310][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4849'. [ 1277.055528][T27029] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4849'. [ 1280.936969][T27063] kvm: user requested TSC rate below hardware speed [ 1284.826555][T27102] netlink: 146 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1288.990661][T27141] kvm: user requested TSC rate below hardware speed [ 1289.191694][T27143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1289.227469][T27147] netlink: NAT attribute has 4 unknown bytes [ 1289.248566][T27148] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1289.265028][T27147] FAULT_INJECTION: forcing a failure. [ 1289.265028][T27147] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.303894][T27147] CPU: 0 UID: 0 PID: 27147 Comm: syz.5.4878 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1289.303924][T27147] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1289.303931][T27147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1289.303946][T27147] Call Trace: [ 1289.303954][T27147] [ 1289.303961][T27147] dump_stack_lvl+0x100/0x190 [ 1289.303993][T27147] should_fail_ex.cold+0x5/0xa [ 1289.304012][T27147] should_failslab+0xc2/0x120 [ 1289.304031][T27147] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1289.304054][T27147] ? security_inode_alloc+0x3b/0x2c0 [ 1289.304074][T27147] ? lockdep_init_map_type+0x5c/0x250 [ 1289.304106][T27147] security_inode_alloc+0x3b/0x2c0 [ 1289.304124][T27147] inode_init_always_gfp+0xc77/0xfb0 [ 1289.304148][T27147] alloc_inode+0x8e/0x250 [ 1289.304179][T27147] path_from_stashed+0x25b/0x750 [ 1289.304205][T27147] ns_get_path+0x60/0x80 [ 1289.304224][T27147] proc_ns_get_link+0x121/0x230 [ 1289.304241][T27147] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1289.304259][T27147] ? atime_needs_update+0x8b/0x6b0 [ 1289.304276][T27147] pick_link+0xd17/0x13c0 [ 1289.304291][T27147] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1289.304310][T27147] step_into_slowpath+0x9ba/0xf90 [ 1289.304330][T27147] ? __pfx_step_into_slowpath+0x10/0x10 [ 1289.304345][T27147] ? find_held_lock+0x2b/0x80 [ 1289.304369][T27147] path_openat+0xf95/0x31a0 [ 1289.304394][T27147] ? __pfx_path_openat+0x10/0x10 [ 1289.304418][T27147] do_file_open+0x20e/0x430 [ 1289.304438][T27147] ? __pfx_do_file_open+0x10/0x10 [ 1289.304470][T27147] ? alloc_fd+0x476/0x790 [ 1289.304490][T27147] ? do_getname+0x191/0x390 [ 1289.304512][T27147] do_sys_openat2+0x10d/0x1e0 [ 1289.304535][T27147] ? __pfx_do_sys_openat2+0x10/0x10 [ 1289.304558][T27147] ? __fget_files+0x21f/0x3d0 [ 1289.304579][T27147] __x64_sys_openat+0x12d/0x210 [ 1289.304601][T27147] ? __pfx___x64_sys_openat+0x10/0x10 [ 1289.304626][T27147] ? rcu_is_watching+0x12/0xc0 [ 1289.304646][T27147] do_syscall_64+0x115/0x840 [ 1289.304674][T27147] ? clear_bhb_loop+0x40/0x90 [ 1289.304693][T27147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.304710][T27147] RIP: 0033:0x7f8b9015d68e [ 1289.304724][T27147] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1289.304739][T27147] RSP: 002b:00007f8b910b4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1289.304754][T27147] RAX: ffffffffffffffda RBX: 00007f8b910b56c0 RCX: 00007f8b9015d68e [ 1289.304765][T27147] RDX: 0000000000000002 RSI: 00007f8b910b4f90 RDI: ffffffffffffff9c [ 1289.304775][T27147] RBP: 00007f8b90232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1289.304785][T27147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.304794][T27147] R13: 00007f8b90416038 R14: 00007f8b90415fa0 R15: 00007ffd3c6b7f28 [ 1289.304815][T27147] [ 1290.385169][T24051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1290.408175][T24051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1290.422698][T24051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1290.433503][T24051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1290.444189][T24051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1292.531429][T24051] Bluetooth: hci6: command tx timeout [ 1292.802404][T27157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.858199][T27157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.910019][T27157] bridge_slave_0: entered allmulticast mode [ 1292.959307][T27157] bridge_slave_0: entered promiscuous mode [ 1293.016923][T27157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.060863][T27157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.106931][T27157] bridge_slave_1: entered allmulticast mode [ 1293.143392][T27157] bridge_slave_1: entered promiscuous mode [ 1293.278910][T27157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.339716][T27157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.382728][T27204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1293.483306][T27157] team0: Port device team_slave_0 added [ 1293.518633][T27157] team0: Port device team_slave_1 added [ 1293.715217][T27198] netlink: 29 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1293.729951][T27157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.756191][T27157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.898093][T27157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.939876][T27157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.983614][T27209] kvm: user requested TSC rate below hardware speed [ 1293.990390][T27157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.087869][T27157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.476251][T27157] hsr_slave_0: entered promiscuous mode [ 1294.510649][T27157] hsr_slave_1: entered promiscuous mode [ 1294.548028][T27157] debugfs: 'hsr0' already exists in 'hsr' [ 1294.571969][T27157] Cannot create hsr debugfs directory [ 1294.600938][T24051] Bluetooth: hci6: command tx timeout [ 1295.667297][T27226] netlink: 146 bytes leftover after parsing attributes in process `syz.5.4891'. [ 1295.902391][T27228] busy [ 1295.997450][T27228] ima: policy update failed [ 1296.032015][ T29] audit: type=1802 audit(2147488310.234:36): pid=27228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4893" res=0 errno=0 [ 1296.133028][T27157] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1296.176935][T27157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1296.215012][T27157] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1296.278331][T27157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1296.317953][T27157] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1296.387715][T27157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1296.499765][T27157] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1296.535434][T27239] rnbd_client L202: map_device: Unknown parameter or missing value '0="­/' [ 1296.554591][T27157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1296.672400][T24051] Bluetooth: hci6: command tx timeout [ 1297.346599][T27157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.755173][T27157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.839446][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.846629][ T7545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.910495][T12848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.917646][T12848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.277258][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1298.290103][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1298.741572][T24051] Bluetooth: hci6: command tx timeout [ 1299.356748][T27157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.031924][T27157] veth0_vlan: entered promiscuous mode [ 1300.100701][T27157] veth1_vlan: entered promiscuous mode [ 1300.222501][T27303] kvm: user requested TSC rate below hardware speed [ 1300.242624][T27157] veth0_macvtap: entered promiscuous mode [ 1300.270870][T27157] veth1_macvtap: entered promiscuous mode [ 1300.357545][T27157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.406761][T27157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.461428][T12838] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.491826][T12838] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.513897][T12838] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.536340][T27310] device-mapper: ioctl: Invalid ioctl structure: uuid ž, name , dev 4000000200000 [ 1300.549569][T12838] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.820139][T27310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4908'. [ 1300.851160][ T7545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.884810][ T7545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.945034][ T7540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.964944][ T7540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.326683][T27305] Process accounting resumed [ 1301.354388][T27319] ima: policy update failed [ 1301.401635][ T29] audit: type=1802 audit(2147488315.629:37): pid=27319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.4909" res=0 errno=0 [ 1301.933647][T16803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1301.950508][T16803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1301.961534][T16803] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1301.973071][T16803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1301.985988][T16803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1303.800353][T27327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.839592][T27327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.861473][T27327] bridge_slave_0: entered allmulticast mode [ 1303.872853][T27363] netlink: 334 bytes leftover after parsing attributes in process `syz.7.4916'. [ 1303.888086][T27327] bridge_slave_0: entered promiscuous mode [ 1303.912606][T27327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.937341][T27327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.958739][T27327] bridge_slave_1: entered allmulticast mode [ 1303.982111][T27327] bridge_slave_1: entered promiscuous mode [ 1303.997619][T16803] Bluetooth: hci7: command tx timeout [ 1304.216389][T27327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.267588][T27327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.409168][T27327] team0: Port device team_slave_0 added [ 1304.432419][T27327] team0: Port device team_slave_1 added [ 1304.581501][T27327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.614290][T27327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.740130][T27327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.790241][T27327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.821106][T27327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.930974][T27327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.135099][T27327] hsr_slave_0: entered promiscuous mode [ 1305.172662][T27327] hsr_slave_1: entered promiscuous mode [ 1305.194662][T27327] debugfs: 'hsr0' already exists in 'hsr' [ 1305.218447][T27327] Cannot create hsr debugfs directory [ 1305.377200][T27380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4919'. [ 1305.444817][T27380] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4919'. [ 1305.763618][T27373] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1306.021435][T27327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.067756][T16803] Bluetooth: hci7: command tx timeout [ 1306.488422][T27327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.689393][T16803] Bluetooth: hci6: unexpected event 0x1c length: 725 > 5 [ 1306.704585][T27327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.004972][T27327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.078668][T27394] netlink: 146 bytes leftover after parsing attributes in process `syz.7.4923'. [ 1307.623626][T27327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1307.669115][T27327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1307.694562][T27327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1307.728416][T27327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1307.756210][T27327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1307.810137][T27327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1307.851509][T27327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1307.872116][T27327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1308.109602][T27327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.138011][T16803] Bluetooth: hci7: command tx timeout [ 1308.185063][T27327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.233122][T12844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.240342][T12844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.285497][T12844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.292650][T12844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.390822][T27327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.558744][T27327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.015453][T27327] veth0_vlan: entered promiscuous mode [ 1310.054397][T27327] veth1_vlan: entered promiscuous mode [ 1310.148199][T27327] veth0_macvtap: entered promiscuous mode [ 1310.178958][T27327] veth1_macvtap: entered promiscuous mode [ 1310.208151][T16803] Bluetooth: hci7: command tx timeout [ 1310.394569][T27327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.479396][T27327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.542244][T12838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.572458][T12838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.621104][T12838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.741576][T12838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.960216][T27448] busy [ 1311.127521][T27449] ima: policy update failed [ 1311.203983][ T29] audit: type=1802 audit(2147488325.475:38): pid=27449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4931" res=0 errno=0 [ 1311.285166][ T7540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.335533][ T7540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.438985][ T7540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.467160][ T7540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.019941][T27464] FAULT_INJECTION: forcing a failure. [ 1312.019941][T27464] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.068163][T27464] CPU: 0 UID: 0 PID: 27464 Comm: syz.2.4933 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1312.068191][T27464] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1312.068198][T27464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1312.068208][T27464] Call Trace: [ 1312.068215][T27464] [ 1312.068221][T27464] dump_stack_lvl+0x100/0x190 [ 1312.068253][T27464] should_fail_ex.cold+0x5/0xa [ 1312.068273][T27464] should_failslab+0xc2/0x120 [ 1312.068295][T27464] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1312.068318][T27464] ? do_getname+0x35/0x390 [ 1312.068345][T27464] do_getname+0x35/0x390 [ 1312.068368][T27464] do_sys_openat2+0xc5/0x1e0 [ 1312.068391][T27464] ? __pfx_do_sys_openat2+0x10/0x10 [ 1312.068414][T27464] ? _raw_spin_unlock_irq+0x23/0x50 [ 1312.068439][T27464] __x64_sys_openat+0x12d/0x210 [ 1312.068461][T27464] ? __pfx___x64_sys_openat+0x10/0x10 [ 1312.068482][T27464] ? exit_to_user_mode_loop+0xf3/0x670 [ 1312.068509][T27464] ? rcu_is_watching+0x12/0xc0 [ 1312.068529][T27464] do_syscall_64+0x115/0x840 [ 1312.068549][T27464] ? clear_bhb_loop+0x40/0x90 [ 1312.068566][T27464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.068582][T27464] RIP: 0033:0x7f8817f9ce59 [ 1312.068596][T27464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.068610][T27464] RSP: 002b:00007f8818ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1312.068625][T27464] RAX: ffffffffffffffda RBX: 00007f8818215fa0 RCX: 00007f8817f9ce59 [ 1312.068635][T27464] RDX: 0000000000000b01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1312.068645][T27464] RBP: 00007f8818032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1312.068655][T27464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.068664][T27464] R13: 00007f8818216038 R14: 00007f8818215fa0 R15: 00007fff2de9aa08 [ 1312.068684][T27464] [ 1313.361244][T27475] busy [ 1313.478127][T27479] ima: policy update failed [ 1313.559917][ T29] audit: type=1802 audit(2147488327.836:39): pid=27479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4937" res=0 errno=0 [ 1313.759177][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4939'. [ 1313.831678][T27484] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4939'. [ 1315.135318][T24051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1315.158667][T24051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1315.167158][T24051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1315.179373][T24051] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1315.186926][T24051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1317.068992][T27498] FAULT_INJECTION: forcing a failure. [ 1317.068992][T27498] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.161914][T27506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.193403][T27506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.215852][T24051] Bluetooth: hci2: command tx timeout [ 1317.246068][T27506] bridge_slave_0: entered allmulticast mode [ 1317.278030][T27506] bridge_slave_0: entered promiscuous mode [ 1317.312203][T27506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.332048][T27498] CPU: 0 UID: 0 PID: 27498 Comm: syz.2.4942 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1317.332079][T27498] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1317.332086][T27498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1317.332096][T27498] Call Trace: [ 1317.332102][T27498] [ 1317.332108][T27498] dump_stack_lvl+0x100/0x190 [ 1317.332139][T27498] should_fail_ex.cold+0x5/0xa [ 1317.332160][T27498] should_failslab+0xc2/0x120 [ 1317.332178][T27498] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1317.332201][T27498] ? __kernfs_new_node+0xd2/0x9f0 [ 1317.332222][T27498] __kernfs_new_node+0xd2/0x9f0 [ 1317.332238][T27498] ? kernfs_add_one+0x583/0x850 [ 1317.332258][T27498] ? __pfx___kernfs_new_node+0x10/0x10 [ 1317.332279][T27498] ? find_held_lock+0x2b/0x80 [ 1317.332298][T27498] ? kernfs_root+0xee/0x2a0 [ 1317.332313][T27498] ? kernfs_root+0xee/0x2a0 [ 1317.332333][T27498] kernfs_new_node+0x11b/0x1a0 [ 1317.332355][T27498] __kernfs_create_file+0x53/0x350 [ 1317.332386][T27498] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1317.332408][T27498] sysfs_create_file_ns+0x145/0x1e0 [ 1317.332424][T27498] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1317.332440][T27498] ? __pfx___up_read+0x10/0x10 [ 1317.332457][T27498] ? acpi_device_notify+0x464/0x500 [ 1317.332563][T27498] ? kobject_put+0xb9/0x640 [ 1317.332590][T27498] device_create_file+0xf2/0x1d0 [ 1317.332613][T27498] device_add+0x2cb/0x1950 [ 1317.332630][T27498] ? __pfx_dev_set_name+0x10/0x10 [ 1317.332649][T27498] ? __pfx_device_add+0x10/0x10 [ 1317.332665][T27498] ? lockdep_init_map_type+0x5c/0x250 [ 1317.332688][T27498] ? __init_waitqueue_head+0xca/0x150 [ 1317.332710][T27498] rfkill_register+0x1ad/0xb30 [ 1317.332730][T27498] nfc_register_device+0x11f/0x3e0 [ 1317.332753][T27498] nci_register_device+0x7f1/0xb80 [ 1317.332805][T27498] ? __pfx_nci_register_device+0x10/0x10 [ 1317.332825][T27498] ? lockdep_init_map_type+0x5c/0x250 [ 1317.332853][T27498] virtual_ncidev_open+0x141/0x220 [ 1317.332906][T27498] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1317.332922][T27498] misc_open+0x26d/0x450 [ 1317.332939][T27498] ? __pfx_misc_open+0x10/0x10 [ 1317.332955][T27498] chrdev_open+0x234/0x6a0 [ 1317.332974][T27498] ? __pfx_apparmor_file_open+0x10/0x10 [ 1317.332991][T27498] ? __pfx_chrdev_open+0x10/0x10 [ 1317.333011][T27498] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1317.333035][T27498] do_dentry_open+0x6ab/0x14d0 [ 1317.333053][T27498] ? __pfx_chrdev_open+0x10/0x10 [ 1317.333076][T27498] vfs_open+0x82/0x3f0 [ 1317.333100][T27498] path_openat+0x208c/0x31a0 [ 1317.333125][T27498] ? __pfx_path_openat+0x10/0x10 [ 1317.333151][T27498] do_file_open+0x20e/0x430 [ 1317.333170][T27498] ? __pfx_do_file_open+0x10/0x10 [ 1317.333203][T27498] ? alloc_fd+0x476/0x790 [ 1317.333223][T27498] ? do_getname+0x191/0x390 [ 1317.333245][T27498] do_sys_openat2+0x10d/0x1e0 [ 1317.333267][T27498] ? __pfx_do_sys_openat2+0x10/0x10 [ 1317.333290][T27498] ? __fget_files+0x21f/0x3d0 [ 1317.333311][T27498] __x64_sys_openat+0x12d/0x210 [ 1317.333334][T27498] ? __pfx___x64_sys_openat+0x10/0x10 [ 1317.333359][T27498] ? rcu_is_watching+0x12/0xc0 [ 1317.333387][T27498] do_syscall_64+0x115/0x840 [ 1317.333409][T27498] ? clear_bhb_loop+0x40/0x90 [ 1317.333427][T27498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.333442][T27498] RIP: 0033:0x7f8817f9ce59 [ 1317.333457][T27498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.333472][T27498] RSP: 002b:00007f8818ea1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1317.333488][T27498] RAX: ffffffffffffffda RBX: 00007f8818216090 RCX: 00007f8817f9ce59 [ 1317.333499][T27498] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1317.333509][T27498] RBP: 00007f8818032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1317.333519][T27498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.333529][T27498] R13: 00007f8818216128 R14: 00007f8818216090 R15: 00007fff2de9aa08 [ 1317.333550][T27498] [ 1318.140400][T27506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.160411][T27506] bridge_slave_1: entered allmulticast mode [ 1318.180462][T27506] bridge_slave_1: entered promiscuous mode [ 1318.261770][T27506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.294107][T27506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.376232][T27506] team0: Port device team_slave_0 added [ 1318.401805][T27506] team0: Port device team_slave_1 added [ 1318.866985][T27536] binder: 27534:27536 unknown command 1936093288 [ 1318.920556][T27536] binder: 27534:27536 ioctl c0306201 0 returned -22 [ 1319.287041][T24051] Bluetooth: hci2: command tx timeout [ 1320.857288][T27506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.895523][T27506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.050892][T27506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.134547][T27506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.175794][T27506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.302885][T27506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.356064][T24051] Bluetooth: hci2: command tx timeout [ 1321.531066][T27506] hsr_slave_0: entered promiscuous mode [ 1321.562023][T27506] hsr_slave_1: entered promiscuous mode [ 1321.590660][T27506] debugfs: 'hsr0' already exists in 'hsr' [ 1321.621030][T27506] Cannot create hsr debugfs directory [ 1323.425573][T24051] Bluetooth: hci2: command tx timeout [ 1324.096018][T27506] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1324.138382][T27506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1324.171090][T27506] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1324.212483][T27506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1324.308400][T27506] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1324.360932][T27506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1324.401904][T27506] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1324.456927][T27506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1324.915142][T27506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.989557][T27506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.039890][T12837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.047074][T12837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.159922][T12837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.167068][T12837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.044055][T27623] netlink: 146 bytes leftover after parsing attributes in process `syz.7.4963'. [ 1326.804301][T27506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.066225][T27639] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1327.299480][T27644] FAULT_INJECTION: forcing a failure. [ 1327.299480][T27644] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.525499][T27644] CPU: 0 UID: 0 PID: 27644 Comm: syz.7.4964 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1327.525527][T27644] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1327.525535][T27644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1327.525545][T27644] Call Trace: [ 1327.525551][T27644] [ 1327.525557][T27644] dump_stack_lvl+0x100/0x190 [ 1327.525592][T27644] should_fail_ex.cold+0x5/0xa [ 1327.525612][T27644] should_failslab+0xc2/0x120 [ 1327.525630][T27644] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1327.525654][T27644] ? __kernfs_new_node+0xd2/0x9f0 [ 1327.525675][T27644] __kernfs_new_node+0xd2/0x9f0 [ 1327.525695][T27644] ? __pfx___kernfs_new_node+0x10/0x10 [ 1327.525716][T27644] ? find_held_lock+0x2b/0x80 [ 1327.525734][T27644] ? kernfs_root+0xee/0x2a0 [ 1327.525749][T27644] ? kernfs_root+0xee/0x2a0 [ 1327.525769][T27644] kernfs_new_node+0x11b/0x1a0 [ 1327.525791][T27644] __kernfs_create_file+0x53/0x350 [ 1327.525814][T27644] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1327.525835][T27644] sysfs_merge_group+0x194/0x340 [ 1327.525853][T27644] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1327.525870][T27644] ? bus_add_device+0x368/0x6b0 [ 1327.525891][T27644] ? __pfx_bus_add_device+0x10/0x10 [ 1327.525910][T27644] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1327.526013][T27644] dpm_sysfs_add+0x237/0x280 [ 1327.526054][T27644] device_add+0x9ef/0x1950 [ 1327.526073][T27644] ? __pfx_device_add+0x10/0x10 [ 1327.526089][T27644] ? lockdep_init_map_type+0x5c/0x250 [ 1327.526113][T27644] ? __init_waitqueue_head+0xca/0x150 [ 1327.526136][T27644] rfkill_register+0x1ad/0xb30 [ 1327.526157][T27644] nfc_register_device+0x11f/0x3e0 [ 1327.526179][T27644] nci_register_device+0x7f1/0xb80 [ 1327.526197][T27644] ? __pfx_nci_register_device+0x10/0x10 [ 1327.526217][T27644] ? lockdep_init_map_type+0x5c/0x250 [ 1327.526244][T27644] virtual_ncidev_open+0x141/0x220 [ 1327.526261][T27644] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1327.526277][T27644] misc_open+0x26d/0x450 [ 1327.526298][T27644] ? __pfx_misc_open+0x10/0x10 [ 1327.526314][T27644] chrdev_open+0x234/0x6a0 [ 1327.526342][T27644] ? __pfx_apparmor_file_open+0x10/0x10 [ 1327.526360][T27644] ? __pfx_chrdev_open+0x10/0x10 [ 1327.526380][T27644] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1327.526405][T27644] do_dentry_open+0x6ab/0x14d0 [ 1327.526424][T27644] ? __pfx_chrdev_open+0x10/0x10 [ 1327.526446][T27644] vfs_open+0x82/0x3f0 [ 1327.526470][T27644] path_openat+0x208c/0x31a0 [ 1327.526495][T27644] ? __pfx_path_openat+0x10/0x10 [ 1327.526521][T27644] do_file_open+0x20e/0x430 [ 1327.526541][T27644] ? __pfx_do_file_open+0x10/0x10 [ 1327.526574][T27644] ? alloc_fd+0x476/0x790 [ 1327.526594][T27644] ? do_getname+0x191/0x390 [ 1327.526616][T27644] do_sys_openat2+0x10d/0x1e0 [ 1327.526638][T27644] ? __pfx_do_sys_openat2+0x10/0x10 [ 1327.526661][T27644] ? __fget_files+0x21f/0x3d0 [ 1327.526682][T27644] __x64_sys_openat+0x12d/0x210 [ 1327.526705][T27644] ? __pfx___x64_sys_openat+0x10/0x10 [ 1327.526730][T27644] ? rcu_is_watching+0x12/0xc0 [ 1327.526750][T27644] do_syscall_64+0x115/0x840 [ 1327.526770][T27644] ? clear_bhb_loop+0x40/0x90 [ 1327.526788][T27644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.526804][T27644] RIP: 0033:0x7f092859ce59 [ 1327.526818][T27644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.526833][T27644] RSP: 002b:00007f092943d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1327.526849][T27644] RAX: ffffffffffffffda RBX: 00007f0928816270 RCX: 00007f092859ce59 [ 1327.526860][T27644] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1327.526870][T27644] RBP: 00007f0928632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1327.526879][T27644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.526889][T27644] R13: 00007f0928816308 R14: 00007f0928816270 R15: 00007fff2f50e168 [ 1327.526909][T27644] [ 1328.773042][T27659] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1329.439684][T27506] veth0_vlan: entered promiscuous mode [ 1329.531091][T27506] veth1_vlan: entered promiscuous mode [ 1329.755009][T27506] veth0_macvtap: entered promiscuous mode [ 1329.879329][T27506] veth1_macvtap: entered promiscuous mode [ 1330.110035][T27506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.160045][T27506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.282452][T12848] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.310821][T12848] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.370402][T12848] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.417305][T12848] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.446574][T27678] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1331.069304][T12837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.107442][T12837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.226087][T12848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.256716][T12848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.058635][T27701] FAULT_INJECTION: forcing a failure. [ 1332.058635][T27701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1332.124063][T27701] CPU: 0 UID: 0 PID: 27701 Comm: syz.8.4974 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1332.124093][T27701] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1332.124100][T27701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1332.124110][T27701] Call Trace: [ 1332.124116][T27701] [ 1332.124123][T27701] dump_stack_lvl+0x100/0x190 [ 1332.124155][T27701] should_fail_ex.cold+0x5/0xa [ 1332.124171][T27701] ? prepare_alloc_pages+0x16d/0x5f0 [ 1332.124192][T27701] should_fail_alloc_page+0xeb/0x140 [ 1332.124212][T27701] prepare_alloc_pages+0x1f0/0x5f0 [ 1332.124235][T27701] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1332.124265][T27701] ? __lock_acquire+0x4a5/0x2630 [ 1332.124290][T27701] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1332.124314][T27701] ? __lock_acquire+0x4a5/0x2630 [ 1332.124346][T27701] ? find_held_lock+0x2b/0x80 [ 1332.124363][T27701] ? is_bpf_text_address+0x8a/0x1a0 [ 1332.124383][T27701] ? is_bpf_text_address+0x8a/0x1a0 [ 1332.124401][T27701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1332.124423][T27701] ? policy_nodemask+0xed/0x4f0 [ 1332.124442][T27701] alloc_pages_mpol+0x1fb/0x540 [ 1332.124463][T27701] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1332.124479][T27701] ? arch_stack_walk+0xa6/0xf0 [ 1332.124502][T27701] folio_alloc_mpol_noprof+0x36/0x260 [ 1332.124523][T27701] shmem_alloc_folio+0x135/0x160 [ 1332.124546][T27701] shmem_alloc_and_add_folio+0x371/0xd40 [ 1332.124574][T27701] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1332.124599][T27701] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1332.124618][T27701] shmem_get_folio_gfp+0x6ab/0x1900 [ 1332.124638][T27701] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1332.124653][T27701] ? filemap_map_pages+0x9c1/0x2140 [ 1332.124679][T27701] shmem_fault+0x1f9/0xa20 [ 1332.124695][T27701] ? __pfx_shmem_fault+0x10/0x10 [ 1332.124710][T27701] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1332.124735][T27701] ? __pfx_filemap_map_pages+0x10/0x10 [ 1332.124761][T27701] ? find_held_lock+0x2b/0x80 [ 1332.124780][T27701] __do_fault+0x10b/0x440 [ 1332.124798][T27701] do_fault+0xa99/0x1750 [ 1332.124816][T27701] ? __pmd_alloc+0x3fb/0x950 [ 1332.124836][T27701] __handle_mm_fault+0x187d/0x2a00 [ 1332.124860][T27701] ? mt_find+0x45e/0x8e0 [ 1332.124883][T27701] ? __pfx___handle_mm_fault+0x10/0x10 [ 1332.124904][T27701] ? __pfx_mt_find+0x10/0x10 [ 1332.124935][T27701] ? find_vma+0xbf/0x140 [ 1332.124951][T27701] ? __pfx_find_vma+0x10/0x10 [ 1332.124978][T27701] handle_mm_fault+0x37b/0xa30 [ 1332.125004][T27701] do_user_addr_fault+0x74c/0x12f0 [ 1332.125025][T27701] ? trace_page_fault_kernel+0x7a/0x200 [ 1332.125045][T27701] exc_page_fault+0x6f/0xd0 [ 1332.125066][T27701] asm_exc_page_fault+0x26/0x30 [ 1332.125081][T27701] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 1332.125105][T27701] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 22 d8 db fc 48 83 fd 07 0f 86 bb 00 00 00 e8 33 dd db fc <4d> 8b 24 1e e8 2a dd db fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 1332.125121][T27701] RSP: 0018:ffffc90003f5fd00 EFLAGS: 00050287 [ 1332.125134][T27701] RAX: 00000000000002c9 RBX: 0000000000000000 RCX: ffffc90007276000 [ 1332.125144][T27701] RDX: 0000000000080000 RSI: ffffffff852c1e6d RDI: ffff88803817be00 [ 1332.125153][T27701] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 1332.125162][T27701] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 1332.125171][T27701] R13: ffff88823be80018 R14: 0000000000000000 R15: 00000000000000a8 [ 1332.125186][T27701] ? strncpy_from_user+0xfd/0x2d0 [ 1332.125212][T27701] do_getname+0x78/0x390 [ 1332.125235][T27701] do_sys_openat2+0xc5/0x1e0 [ 1332.125257][T27701] ? __pfx_do_sys_openat2+0x10/0x10 [ 1332.125280][T27701] ? do_raw_spin_lock+0x128/0x260 [ 1332.125301][T27701] __x64_sys_openat+0x12d/0x210 [ 1332.125323][T27701] ? __pfx___x64_sys_openat+0x10/0x10 [ 1332.125349][T27701] ? rcu_is_watching+0x12/0xc0 [ 1332.125369][T27701] do_syscall_64+0x115/0x840 [ 1332.125388][T27701] ? clear_bhb_loop+0x40/0x90 [ 1332.125406][T27701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.125421][T27701] RIP: 0033:0x7fa9e059ce59 [ 1332.125434][T27701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.125448][T27701] RSP: 002b:00007fa9e13dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1332.125462][T27701] RAX: ffffffffffffffda RBX: 00007fa9e0816090 RCX: 00007fa9e059ce59 [ 1332.125471][T27701] RDX: 0000000000001002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1332.125481][T27701] RBP: 00007fa9e0632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1332.125490][T27701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1332.125499][T27701] R13: 00007fa9e0816128 R14: 00007fa9e0816090 R15: 00007ffd2958ac18 [ 1332.125519][T27701] [ 1334.829154][T27732] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1335.238778][T27748] ima: policy update failed [ 1335.272658][ T29] audit: type=1802 audit(2147488349.658:40): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.4985" res=0 errno=0 [ 1336.360889][T27755] netlink: 2468 bytes leftover after parsing attributes in process `syz.7.4987'. [ 1336.609590][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4988'. [ 1337.083937][T27763] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1338.150187][T27782] FAULT_INJECTION: forcing a failure. [ 1338.150187][T27782] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1338.362020][T27782] CPU: 0 UID: 0 PID: 27782 Comm: syz.1.4992 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1338.362052][T27782] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1338.362059][T27782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1338.362069][T27782] Call Trace: [ 1338.362075][T27782] [ 1338.362082][T27782] dump_stack_lvl+0x100/0x190 [ 1338.362118][T27782] should_fail_ex.cold+0x5/0xa [ 1338.362140][T27782] get_futex_key+0x1d2/0x1510 [ 1338.362168][T27782] ? __pfx_get_futex_key+0x10/0x10 [ 1338.362193][T27782] ? trace_pid_list_is_set+0x11a/0x390 [ 1338.362213][T27782] ? trace_pid_list_is_set+0x22c/0x390 [ 1338.362236][T27782] futex_wait_setup+0x83/0x510 [ 1338.362261][T27782] __futex_wait+0x19f/0x300 [ 1338.362281][T27782] ? __pfx___futex_wait+0x10/0x10 [ 1338.362300][T27782] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1338.362324][T27782] ? __pfx_futex_wake_mark+0x10/0x10 [ 1338.362347][T27782] ? find_held_lock+0x2b/0x80 [ 1338.362376][T27782] ? futex_wake+0x456/0x530 [ 1338.362401][T27782] futex_wait+0xe6/0x370 [ 1338.362423][T27782] ? __pfx_futex_wait+0x10/0x10 [ 1338.362447][T27782] ? putname+0xb1/0x110 [ 1338.362468][T27782] ? kmem_cache_free+0x127/0x6c0 [ 1338.362491][T27782] ? do_sys_openat2+0x1b4/0x1e0 [ 1338.362517][T27782] do_futex+0x1ef/0x350 [ 1338.362535][T27782] ? __pfx_do_futex+0x10/0x10 [ 1338.362550][T27782] ? __pfx_do_sys_openat2+0x10/0x10 [ 1338.362574][T27782] ? do_raw_spin_lock+0x128/0x260 [ 1338.362593][T27782] __x64_sys_futex+0x34f/0x4d0 [ 1338.362611][T27782] ? __x64_sys_openat+0x12d/0x210 [ 1338.362634][T27782] ? __pfx___x64_sys_futex+0x10/0x10 [ 1338.362654][T27782] ? rcu_is_watching+0x12/0xc0 [ 1338.362674][T27782] do_syscall_64+0x115/0x840 [ 1338.362695][T27782] ? clear_bhb_loop+0x40/0x90 [ 1338.362715][T27782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.362731][T27782] RIP: 0033:0x7f25de59ce59 [ 1338.362747][T27782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.362762][T27782] RSP: 002b:00007f25df49b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1338.362779][T27782] RAX: ffffffffffffffda RBX: 00007f25de816098 RCX: 00007f25de59ce59 [ 1338.362790][T27782] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f25de816098 [ 1338.362799][T27782] RBP: 00007f25de816090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.362809][T27782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.362818][T27782] R13: 00007f25de816128 R14: 00007fffb41d43a0 R15: 00007fffb41d4488 [ 1338.362838][T27782] [ 1342.160009][T27817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5000'. [ 1342.249351][T27817] netlink: 25 bytes leftover after parsing attributes in process `syz.7.5000'. [ 1342.847393][T27831] busy [ 1343.231813][T27827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5003'. [ 1343.302432][T27828] netlink: 25 bytes leftover after parsing attributes in process `syz.7.5003'. [ 1343.672460][T27831] ima: policy update failed [ 1343.756599][ T29] audit: type=1802 audit(2147488358.178:41): pid=27831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5004" res=0 errno=0 [ 1344.148662][T27841] FAULT_INJECTION: forcing a failure. [ 1344.148662][T27841] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.326968][T27841] CPU: 0 UID: 0 PID: 27841 Comm: syz.1.5006 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1344.326999][T27841] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1344.327005][T27841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1344.327016][T27841] Call Trace: [ 1344.327022][T27841] [ 1344.327028][T27841] dump_stack_lvl+0x100/0x190 [ 1344.327059][T27841] should_fail_ex.cold+0x5/0xa [ 1344.327079][T27841] should_failslab+0xc2/0x120 [ 1344.327099][T27841] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1344.327123][T27841] ? __d_alloc+0x34/0xa40 [ 1344.327145][T27841] ? security_inode_alloc+0xcf/0x2c0 [ 1344.327166][T27841] __d_alloc+0x34/0xa40 [ 1344.327184][T27841] ? __ns_ref_active_get+0x9f/0x1b0 [ 1344.327207][T27841] path_from_stashed+0x427/0x750 [ 1344.327227][T27841] ? do_raw_spin_unlock+0x145/0x1e0 [ 1344.327247][T27841] ns_get_path+0x60/0x80 [ 1344.327266][T27841] proc_ns_get_link+0x121/0x230 [ 1344.327283][T27841] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1344.327301][T27841] ? atime_needs_update+0x8b/0x6b0 [ 1344.327318][T27841] pick_link+0xd17/0x13c0 [ 1344.327333][T27841] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1344.327352][T27841] step_into_slowpath+0x9ba/0xf90 [ 1344.327372][T27841] ? __pfx_step_into_slowpath+0x10/0x10 [ 1344.327387][T27841] ? find_held_lock+0x2b/0x80 [ 1344.327411][T27841] path_openat+0xf95/0x31a0 [ 1344.327436][T27841] ? __pfx_path_openat+0x10/0x10 [ 1344.327461][T27841] do_file_open+0x20e/0x430 [ 1344.327480][T27841] ? __pfx_do_file_open+0x10/0x10 [ 1344.327512][T27841] ? alloc_fd+0x476/0x790 [ 1344.327531][T27841] ? do_getname+0x191/0x390 [ 1344.327553][T27841] do_sys_openat2+0x10d/0x1e0 [ 1344.327591][T27841] ? __pfx_do_sys_openat2+0x10/0x10 [ 1344.327615][T27841] ? __fget_files+0x21f/0x3d0 [ 1344.327637][T27841] __x64_sys_openat+0x12d/0x210 [ 1344.327661][T27841] ? __pfx___x64_sys_openat+0x10/0x10 [ 1344.327688][T27841] ? rcu_is_watching+0x12/0xc0 [ 1344.327708][T27841] do_syscall_64+0x115/0x840 [ 1344.327728][T27841] ? clear_bhb_loop+0x40/0x90 [ 1344.327747][T27841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.327763][T27841] RIP: 0033:0x7f25de55d68e [ 1344.327777][T27841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1344.327792][T27841] RSP: 002b:00007f25df4bbec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1344.327807][T27841] RAX: ffffffffffffffda RBX: 00007f25df4bc6c0 RCX: 00007f25de55d68e [ 1344.327819][T27841] RDX: 0000000000000002 RSI: 00007f25df4bbf90 RDI: ffffffffffffff9c [ 1344.327836][T27841] RBP: 00007f25de632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1344.327846][T27841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.327855][T27841] R13: 00007f25de816038 R14: 00007f25de815fa0 R15: 00007fffb41d4488 [ 1344.327875][T27841] [ 1345.008032][T27846] ima: policy update failed [ 1345.046929][ T29] audit: type=1802 audit(2147488359.464:42): pid=27846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5007" res=0 errno=0 [ 1346.075828][T27852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5008'. [ 1346.151057][T27859] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5008'. [ 1346.743477][T27856] FAULT_INJECTION: forcing a failure. [ 1346.743477][T27856] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.804967][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1346.855554][T27856] CPU: 0 UID: 0 PID: 27856 Comm: syz.8.5009 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1346.855584][T27856] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1346.855591][T27856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1346.855610][T27856] Call Trace: [ 1346.855617][T27856] [ 1346.855623][T27856] dump_stack_lvl+0x100/0x190 [ 1346.855654][T27856] should_fail_ex.cold+0x5/0xa [ 1346.855674][T27856] should_failslab+0xc2/0x120 [ 1346.855693][T27856] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1346.855716][T27856] ? alloc_empty_file+0x5b/0x1c0 [ 1346.855738][T27856] ? __pfx_stack_trace_save+0x10/0x10 [ 1346.855760][T27856] alloc_empty_file+0x5b/0x1c0 [ 1346.855782][T27856] path_openat+0xe8/0x31a0 [ 1346.855799][T27856] ? kasan_save_stack+0x3f/0x50 [ 1346.855813][T27856] ? kasan_save_stack+0x30/0x50 [ 1346.855826][T27856] ? kasan_save_track+0x14/0x30 [ 1346.855840][T27856] ? __kasan_slab_alloc+0x89/0x90 [ 1346.855855][T27856] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1346.855876][T27856] ? do_getname+0x35/0x390 [ 1346.855896][T27856] ? do_sys_openat2+0xc5/0x1e0 [ 1346.855917][T27856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.855935][T27856] ? __pfx_path_openat+0x10/0x10 [ 1346.855960][T27856] do_file_open+0x20e/0x430 [ 1346.855980][T27856] ? __pfx_do_file_open+0x10/0x10 [ 1346.856011][T27856] ? alloc_fd+0x476/0x790 [ 1346.856038][T27856] ? do_getname+0x191/0x390 [ 1346.856063][T27856] do_sys_openat2+0x10d/0x1e0 [ 1346.856085][T27856] ? __pfx_do_sys_openat2+0x10/0x10 [ 1346.856109][T27856] ? do_raw_spin_lock+0x128/0x260 [ 1346.856130][T27856] __x64_sys_openat+0x12d/0x210 [ 1346.856153][T27856] ? __pfx___x64_sys_openat+0x10/0x10 [ 1346.856178][T27856] ? rcu_is_watching+0x12/0xc0 [ 1346.856206][T27856] do_syscall_64+0x115/0x840 [ 1346.856228][T27856] ? clear_bhb_loop+0x40/0x90 [ 1346.856247][T27856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.856263][T27856] RIP: 0033:0x7fa9e059ce59 [ 1346.856277][T27856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.856292][T27856] RSP: 002b:00007fa9e13dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1346.856307][T27856] RAX: ffffffffffffffda RBX: 00007fa9e0816090 RCX: 00007fa9e059ce59 [ 1346.856318][T27856] RDX: 0000000000002000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1346.856328][T27856] RBP: 00007fa9e0632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1346.856338][T27856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1346.856348][T27856] R13: 00007fa9e0816128 R14: 00007fa9e0816090 R15: 00007ffd2958ac18 [ 1346.856368][T27856] [ 1346.856493][T27870] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1348.736817][T27895] netlink: 146 bytes leftover after parsing attributes in process `syz.1.5022'. [ 1349.026860][T27901] busy [ 1349.052603][T27901] ima: policy update failed [ 1349.069097][ T29] audit: type=1802 audit(2147488363.523:43): pid=27901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5023" res=0 errno=0 [ 1350.175193][T27914] FAULT_INJECTION: forcing a failure. [ 1350.175193][T27914] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.225067][T27914] CPU: 0 UID: 0 PID: 27914 Comm: syz.1.5025 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1350.225097][T27914] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1350.225104][T27914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1350.225113][T27914] Call Trace: [ 1350.225119][T27914] [ 1350.225125][T27914] dump_stack_lvl+0x100/0x190 [ 1350.225166][T27914] should_fail_ex.cold+0x5/0xa [ 1350.225185][T27914] should_failslab+0xc2/0x120 [ 1350.225203][T27914] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1350.225223][T27914] ? proc_thread_self_get_link+0x1a6/0x210 [ 1350.225244][T27914] proc_thread_self_get_link+0x1a6/0x210 [ 1350.225261][T27914] pick_link+0xac2/0x13c0 [ 1350.225276][T27914] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1350.225295][T27914] step_into_slowpath+0x9ba/0xf90 [ 1350.225314][T27914] ? __pfx_step_into_slowpath+0x10/0x10 [ 1350.225332][T27914] ? lookup_fast+0x2da/0x600 [ 1350.225345][T27914] ? inode_permission+0x374/0x620 [ 1350.225367][T27914] link_path_walk+0xf28/0x1cc0 [ 1350.225389][T27914] path_openat+0x1be/0x31a0 [ 1350.225405][T27914] ? kasan_save_stack+0x3f/0x50 [ 1350.225418][T27914] ? kasan_save_stack+0x30/0x50 [ 1350.225431][T27914] ? kasan_save_track+0x14/0x30 [ 1350.225444][T27914] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1350.225470][T27914] ? __pfx_path_openat+0x10/0x10 [ 1350.225501][T27914] do_file_open+0x20e/0x430 [ 1350.225520][T27914] ? __pfx_do_file_open+0x10/0x10 [ 1350.225550][T27914] ? alloc_fd+0x476/0x790 [ 1350.225569][T27914] ? do_getname+0x191/0x390 [ 1350.225590][T27914] do_sys_openat2+0x10d/0x1e0 [ 1350.225612][T27914] ? __pfx_do_sys_openat2+0x10/0x10 [ 1350.225639][T27914] __x64_sys_openat+0x12d/0x210 [ 1350.225660][T27914] ? __pfx___x64_sys_openat+0x10/0x10 [ 1350.225680][T27914] ? ksys_write+0x1ac/0x250 [ 1350.225698][T27914] ? rcu_is_watching+0x12/0xc0 [ 1350.225716][T27914] do_syscall_64+0x115/0x840 [ 1350.225736][T27914] ? clear_bhb_loop+0x40/0x90 [ 1350.225754][T27914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.225769][T27914] RIP: 0033:0x7f25de55d68e [ 1350.225784][T27914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1350.225802][T27914] RSP: 002b:00007f25df49af98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1350.225819][T27914] RAX: ffffffffffffffda RBX: 00007f25df49b6c0 RCX: 00007f25de55d68e [ 1350.225829][T27914] RDX: 0000000000000002 RSI: 00007f25de632676 RDI: ffffffffffffff9c [ 1350.225838][T27914] RBP: 00007f25de632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1350.225847][T27914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1350.225855][T27914] R13: 00007f25de816128 R14: 00007f25de816090 R15: 00007fffb41d4488 [ 1350.225874][T27914] [ 1350.498997][T27914] FAULT_INJECTION: forcing a failure. [ 1350.498997][T27914] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.513125][T27914] CPU: 0 UID: 0 PID: 27914 Comm: syz.1.5025 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1350.513150][T27914] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1350.513156][T27914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1350.513165][T27914] Call Trace: [ 1350.513171][T27914] [ 1350.513176][T27914] dump_stack_lvl+0x100/0x190 [ 1350.513204][T27914] should_fail_ex.cold+0x5/0xa [ 1350.513223][T27914] should_failslab+0xc2/0x120 [ 1350.513240][T27914] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1350.513262][T27914] ? alloc_empty_file+0x5b/0x1c0 [ 1350.513282][T27914] ? __pfx_stack_trace_save+0x10/0x10 [ 1350.513303][T27914] alloc_empty_file+0x5b/0x1c0 [ 1350.513330][T27914] path_openat+0xe8/0x31a0 [ 1350.513346][T27914] ? kasan_save_stack+0x3f/0x50 [ 1350.513359][T27914] ? kasan_save_stack+0x30/0x50 [ 1350.513372][T27914] ? kasan_save_track+0x14/0x30 [ 1350.513385][T27914] ? __kasan_slab_alloc+0x89/0x90 [ 1350.513399][T27914] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1350.513419][T27914] ? do_getname+0x35/0x390 [ 1350.513441][T27914] ? do_sys_openat2+0xc5/0x1e0 [ 1350.513461][T27914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.513479][T27914] ? __pfx_path_openat+0x10/0x10 [ 1350.513503][T27914] do_file_open+0x20e/0x430 [ 1350.513521][T27914] ? __pfx_do_file_open+0x10/0x10 [ 1350.513551][T27914] ? alloc_fd+0x476/0x790 [ 1350.513570][T27914] ? do_getname+0x191/0x390 [ 1350.513591][T27914] do_sys_openat2+0x10d/0x1e0 [ 1350.513611][T27914] ? __pfx_do_sys_openat2+0x10/0x10 [ 1350.513631][T27914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1350.513654][T27914] ? __fget_files+0x21f/0x3d0 [ 1350.513676][T27914] __x64_sys_openat+0x12d/0x210 [ 1350.513697][T27914] ? __pfx___x64_sys_openat+0x10/0x10 [ 1350.513717][T27914] ? ksys_write+0x1ac/0x250 [ 1350.513735][T27914] ? rcu_is_watching+0x12/0xc0 [ 1350.513753][T27914] do_syscall_64+0x115/0x840 [ 1350.513771][T27914] ? clear_bhb_loop+0x40/0x90 [ 1350.513788][T27914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.513803][T27914] RIP: 0033:0x7f25de59ce59 [ 1350.513815][T27914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.513829][T27914] RSP: 002b:00007f25df49b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1350.513844][T27914] RAX: ffffffffffffffda RBX: 00007f25de816090 RCX: 00007f25de59ce59 [ 1350.513854][T27914] RDX: 0000000000001002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1350.513863][T27914] RBP: 00007f25df49b090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.513872][T27914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.513880][T27914] R13: 00007f25de816128 R14: 00007f25de816090 R15: 00007fffb41d4488 [ 1350.513899][T27914] [ 1351.412388][T27921] FAULT_INJECTION: forcing a failure. [ 1351.412388][T27921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.587598][T27921] CPU: 0 UID: 0 PID: 27921 Comm: syz.2.5027 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1351.587625][T27921] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1351.587632][T27921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1351.587641][T27921] Call Trace: [ 1351.587646][T27921] [ 1351.587652][T27921] dump_stack_lvl+0x100/0x190 [ 1351.587681][T27921] should_fail_ex.cold+0x5/0xa [ 1351.587699][T27921] _copy_from_iter+0x1f4/0x1690 [ 1351.587722][T27921] ? rcu_is_watching+0x12/0xc0 [ 1351.587738][T27921] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1351.587755][T27921] ? __kasan_slab_alloc+0x89/0x90 [ 1351.587770][T27921] ? __pfx__copy_from_iter+0x10/0x10 [ 1351.587791][T27921] ? __asan_memset+0x23/0x50 [ 1351.587810][T27921] ? __build_skb_around+0x278/0x390 [ 1351.587834][T27921] ? is_vmalloc_addr+0x86/0xa0 [ 1351.587857][T27921] netlink_sendmsg+0x808/0xda0 [ 1351.587881][T27921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1351.587901][T27921] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1351.587919][T27921] sock_write_iter+0x524/0x5a0 [ 1351.587937][T27921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1351.587955][T27921] ? __pfx_sock_write_iter+0x10/0x10 [ 1351.587979][T27921] ? bpf_lsm_file_permission+0x9/0x10 [ 1351.587993][T27921] ? security_file_permission+0x76/0x210 [ 1351.588012][T27921] ? rw_verify_area+0xce/0x6d0 [ 1351.588029][T27921] vfs_write+0x6ac/0x1070 [ 1351.588045][T27921] ? __pfx_sock_write_iter+0x10/0x10 [ 1351.588064][T27921] ? __pfx_vfs_write+0x10/0x10 [ 1351.588079][T27921] ? find_held_lock+0x2b/0x80 [ 1351.588107][T27921] ksys_write+0x1f8/0x250 [ 1351.588123][T27921] ? __pfx_ksys_write+0x10/0x10 [ 1351.588143][T27921] ? rcu_is_watching+0x12/0xc0 [ 1351.588161][T27921] do_syscall_64+0x115/0x840 [ 1351.588180][T27921] ? clear_bhb_loop+0x40/0x90 [ 1351.588198][T27921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.588213][T27921] RIP: 0033:0x7f8817f9ce59 [ 1351.588225][T27921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.588240][T27921] RSP: 002b:00007f8818ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1351.588255][T27921] RAX: ffffffffffffffda RBX: 00007f8818215fa0 RCX: 00007f8817f9ce59 [ 1351.588265][T27921] RDX: 0000000000001d30 RSI: 0000200000000000 RDI: 0000000000000003 [ 1351.588279][T27921] RBP: 00007f8818ec2090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.588289][T27921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.588300][T27921] R13: 00007f8818216038 R14: 00007f8818215fa0 R15: 00007fff2de9aa08 [ 1351.588320][T27921] [ 1352.111676][T27925] busy [ 1352.172316][T27925] ima: policy update failed [ 1352.299761][ T29] audit: type=1802 audit(2147488366.658:44): pid=27925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5029" res=0 errno=0 [ 1352.548440][T27932] netlink: 146 bytes leftover after parsing attributes in process `syz.7.5031'. [ 1355.181610][T27956] FAULT_INJECTION: forcing a failure. [ 1355.181610][T27956] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.223283][T27958] FAULT_INJECTION: forcing a failure. [ 1355.223283][T27958] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.271153][T27958] CPU: 0 UID: 0 PID: 27958 Comm: syz.7.5037 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1355.271182][T27958] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1355.271189][T27958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1355.271199][T27958] Call Trace: [ 1355.271205][T27958] [ 1355.271212][T27958] dump_stack_lvl+0x100/0x190 [ 1355.271243][T27958] should_fail_ex.cold+0x5/0xa [ 1355.271264][T27958] ? memcg_list_lru_alloc+0x4ec/0x740 [ 1355.271279][T27958] should_failslab+0xc2/0x120 [ 1355.271298][T27958] __kmalloc_noprof+0xe0/0x850 [ 1355.271321][T27958] ? __lock_acquire+0x4a5/0x2630 [ 1355.271347][T27958] memcg_list_lru_alloc+0x4ec/0x740 [ 1355.271367][T27958] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1355.271395][T27958] __memcg_slab_post_alloc_hook+0x27e/0xff0 [ 1355.271421][T27958] ? kasan_save_track+0x14/0x30 [ 1355.271438][T27958] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 1355.271461][T27958] ? alloc_inode+0x183/0x250 [ 1355.271488][T27958] alloc_inode+0x183/0x250 [ 1355.271511][T27958] path_from_stashed+0x25b/0x750 [ 1355.271530][T27958] ? do_raw_spin_unlock+0x145/0x1e0 [ 1355.271550][T27958] ns_get_path+0x60/0x80 [ 1355.271569][T27958] proc_ns_get_link+0x121/0x230 [ 1355.271586][T27958] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1355.271605][T27958] ? atime_needs_update+0x8b/0x6b0 [ 1355.271621][T27958] pick_link+0xd17/0x13c0 [ 1355.271637][T27958] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1355.271656][T27958] step_into_slowpath+0x9ba/0xf90 [ 1355.271675][T27958] ? __pfx_step_into_slowpath+0x10/0x10 [ 1355.271690][T27958] ? find_held_lock+0x2b/0x80 [ 1355.271713][T27958] path_openat+0xf95/0x31a0 [ 1355.271738][T27958] ? __pfx_path_openat+0x10/0x10 [ 1355.271762][T27958] do_file_open+0x20e/0x430 [ 1355.271782][T27958] ? __pfx_do_file_open+0x10/0x10 [ 1355.271813][T27958] ? alloc_fd+0x476/0x790 [ 1355.271836][T27958] ? do_getname+0x191/0x390 [ 1355.271858][T27958] do_sys_openat2+0x10d/0x1e0 [ 1355.271881][T27958] ? __pfx_do_sys_openat2+0x10/0x10 [ 1355.271913][T27958] ? __fget_files+0x21f/0x3d0 [ 1355.271934][T27958] __x64_sys_openat+0x12d/0x210 [ 1355.271958][T27958] ? __pfx___x64_sys_openat+0x10/0x10 [ 1355.271984][T27958] ? rcu_is_watching+0x12/0xc0 [ 1355.272003][T27958] do_syscall_64+0x115/0x840 [ 1355.272026][T27958] ? clear_bhb_loop+0x40/0x90 [ 1355.272045][T27958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.272061][T27958] RIP: 0033:0x7f092855d68e [ 1355.272075][T27958] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1355.272090][T27958] RSP: 002b:00007f092949fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1355.272105][T27958] RAX: ffffffffffffffda RBX: 00007f09294a06c0 RCX: 00007f092855d68e [ 1355.272116][T27958] RDX: 0000000000000002 RSI: 00007f092949ff90 RDI: ffffffffffffff9c [ 1355.272125][T27958] RBP: 00007f0928632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1355.272135][T27958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.272144][T27958] R13: 00007f0928816038 R14: 00007f0928815fa0 R15: 00007fff2f50e168 [ 1355.272163][T27958] [ 1355.952524][T27956] CPU: 0 UID: 0 PID: 27956 Comm: syz.2.5035 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1355.952551][T27956] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1355.952558][T27956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1355.952567][T27956] Call Trace: [ 1355.952573][T27956] [ 1355.952579][T27956] dump_stack_lvl+0x100/0x190 [ 1355.952607][T27956] should_fail_ex.cold+0x5/0xa [ 1355.952625][T27956] ? tomoyo_encode2+0xfb/0x3c0 [ 1355.952644][T27956] should_failslab+0xc2/0x120 [ 1355.952662][T27956] __kmalloc_noprof+0xe0/0x850 [ 1355.952683][T27956] ? rcu_is_watching+0x12/0xc0 [ 1355.952702][T27956] tomoyo_encode2+0xfb/0x3c0 [ 1355.952724][T27956] tomoyo_encode+0x29/0x50 [ 1355.952743][T27956] tomoyo_realpath_from_path+0x18c/0x690 [ 1355.952767][T27956] tomoyo_check_open_permission+0x2af/0x3c0 [ 1355.952786][T27956] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1355.952810][T27956] ? hook_file_open+0x24e/0x7a0 [ 1355.952837][T27956] ? lock_acquire+0x1b1/0x370 [ 1355.952871][T27956] tomoyo_file_open+0x6b/0x90 [ 1355.952886][T27956] security_file_open+0xb5/0x1e0 [ 1355.952905][T27956] do_dentry_open+0x588/0x14d0 [ 1355.952928][T27956] vfs_open+0x82/0x3f0 [ 1355.952950][T27956] path_openat+0x208c/0x31a0 [ 1355.952974][T27956] ? __pfx_path_openat+0x10/0x10 [ 1355.952999][T27956] do_file_open+0x20e/0x430 [ 1355.953017][T27956] ? __pfx_do_file_open+0x10/0x10 [ 1355.953041][T27956] ? __pfx_kfree_link+0x10/0x10 [ 1355.953064][T27956] ? alloc_fd+0x476/0x790 [ 1355.953083][T27956] ? do_getname+0x191/0x390 [ 1355.953104][T27956] do_sys_openat2+0x10d/0x1e0 [ 1355.953125][T27956] ? __pfx_do_sys_openat2+0x10/0x10 [ 1355.953146][T27956] ? rcu_is_watching+0x12/0xc0 [ 1355.953166][T27956] __x64_sys_openat+0x12d/0x210 [ 1355.953188][T27956] ? __pfx___x64_sys_openat+0x10/0x10 [ 1355.953212][T27956] ? rcu_is_watching+0x12/0xc0 [ 1355.953230][T27956] do_syscall_64+0x115/0x840 [ 1355.953249][T27956] ? clear_bhb_loop+0x40/0x90 [ 1355.953267][T27956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.953281][T27956] RIP: 0033:0x7f8817f5d68e [ 1355.953294][T27956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1355.953308][T27956] RSP: 002b:00007f8818ea0f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1355.953323][T27956] RAX: ffffffffffffffda RBX: 00007f8818ea16c0 RCX: 00007f8817f5d68e [ 1355.953333][T27956] RDX: 0000000000000002 RSI: 00007f8818032676 RDI: ffffffffffffff9c [ 1355.953342][T27956] RBP: 00007f8818032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1355.953350][T27956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1355.953359][T27956] R13: 00007f8818216128 R14: 00007f8818216090 R15: 00007fff2de9aa08 [ 1355.953378][T27956] [ 1355.953401][T27956] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1356.380189][T27963] FAULT_INJECTION: forcing a failure. [ 1356.380189][T27963] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.400692][T27963] CPU: 0 UID: 0 PID: 27963 Comm: syz.7.5038 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1356.400719][T27963] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1356.400726][T27963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1356.400736][T27963] Call Trace: [ 1356.400741][T27963] [ 1356.400748][T27963] dump_stack_lvl+0x100/0x190 [ 1356.400776][T27963] should_fail_ex.cold+0x5/0xa [ 1356.400795][T27963] should_failslab+0xc2/0x120 [ 1356.400812][T27963] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1356.400834][T27963] ? skb_clone+0x190/0x400 [ 1356.400853][T27963] skb_clone+0x190/0x400 [ 1356.400868][T27963] netlink_deliver_tap+0xaed/0xcc0 [ 1356.400890][T27963] netlink_unicast+0x62b/0x850 [ 1356.400914][T27963] ? __pfx_netlink_unicast+0x10/0x10 [ 1356.400931][T27963] ? __build_skb_around+0x278/0x390 [ 1356.400952][T27963] ? is_vmalloc_addr+0x86/0xa0 [ 1356.400975][T27963] netlink_sendmsg+0x8b0/0xda0 [ 1356.400996][T27963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1356.401016][T27963] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1356.401035][T27963] sock_write_iter+0x524/0x5a0 [ 1356.401053][T27963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1356.401071][T27963] ? __pfx_sock_write_iter+0x10/0x10 [ 1356.401095][T27963] ? bpf_lsm_file_permission+0x9/0x10 [ 1356.401108][T27963] ? security_file_permission+0x76/0x210 [ 1356.401127][T27963] ? rw_verify_area+0xce/0x6d0 [ 1356.401143][T27963] vfs_write+0x6ac/0x1070 [ 1356.401159][T27963] ? __pfx_sock_write_iter+0x10/0x10 [ 1356.401178][T27963] ? __pfx_vfs_write+0x10/0x10 [ 1356.401193][T27963] ? find_held_lock+0x2b/0x80 [ 1356.401222][T27963] ksys_write+0x1f8/0x250 [ 1356.401237][T27963] ? __pfx_ksys_write+0x10/0x10 [ 1356.401255][T27963] ? rcu_is_watching+0x12/0xc0 [ 1356.401280][T27963] do_syscall_64+0x115/0x840 [ 1356.401300][T27963] ? clear_bhb_loop+0x40/0x90 [ 1356.401317][T27963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.401332][T27963] RIP: 0033:0x7f092859ce59 [ 1356.401345][T27963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.401359][T27963] RSP: 002b:00007f09294a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1356.401374][T27963] RAX: ffffffffffffffda RBX: 00007f0928815fa0 RCX: 00007f092859ce59 [ 1356.401384][T27963] RDX: 0000000000001d30 RSI: 0000200000000000 RDI: 0000000000000003 [ 1356.401393][T27963] RBP: 00007f09294a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.401401][T27963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.401410][T27963] R13: 00007f0928816038 R14: 00007f0928815fa0 R15: 00007fff2f50e168 [ 1356.401429][T27963] [ 1357.900788][T27971] netlink: 146 bytes leftover after parsing attributes in process `syz.7.5041'. [ 1357.979921][T27954] Process accounting resumed [ 1358.324975][T27978] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5043'. [ 1358.393826][T27981] netlink: 25 bytes leftover after parsing attributes in process `syz.7.5043'. [ 1359.434482][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1359.442640][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.743646][T28015] FAULT_INJECTION: forcing a failure. [ 1360.743646][T28015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.793665][T28015] CPU: 0 UID: 0 PID: 28015 Comm: syz.1.5051 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1360.793692][T28015] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1360.793699][T28015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1360.793708][T28015] Call Trace: [ 1360.793713][T28015] [ 1360.793719][T28015] dump_stack_lvl+0x100/0x190 [ 1360.793748][T28015] should_fail_ex.cold+0x5/0xa [ 1360.793766][T28015] _copy_from_iter+0x1f4/0x1690 [ 1360.793788][T28015] ? rcu_is_watching+0x12/0xc0 [ 1360.793806][T28015] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1360.793823][T28015] ? __kasan_slab_alloc+0x89/0x90 [ 1360.793838][T28015] ? __pfx__copy_from_iter+0x10/0x10 [ 1360.793858][T28015] ? __asan_memset+0x23/0x50 [ 1360.793878][T28015] ? __build_skb_around+0x278/0x390 [ 1360.793899][T28015] ? is_vmalloc_addr+0x86/0xa0 [ 1360.793922][T28015] netlink_sendmsg+0x808/0xda0 [ 1360.793944][T28015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.793965][T28015] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1360.793984][T28015] sock_write_iter+0x524/0x5a0 [ 1360.794002][T28015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.794020][T28015] ? __pfx_sock_write_iter+0x10/0x10 [ 1360.794044][T28015] ? bpf_lsm_file_permission+0x9/0x10 [ 1360.794057][T28015] ? security_file_permission+0x76/0x210 [ 1360.794076][T28015] ? rw_verify_area+0xce/0x6d0 [ 1360.794092][T28015] vfs_write+0x6ac/0x1070 [ 1360.794109][T28015] ? __pfx_sock_write_iter+0x10/0x10 [ 1360.794128][T28015] ? __pfx_vfs_write+0x10/0x10 [ 1360.794142][T28015] ? find_held_lock+0x2b/0x80 [ 1360.794171][T28015] ksys_write+0x1f8/0x250 [ 1360.794186][T28015] ? __pfx_ksys_write+0x10/0x10 [ 1360.794204][T28015] ? rcu_is_watching+0x12/0xc0 [ 1360.794221][T28015] do_syscall_64+0x115/0x840 [ 1360.794241][T28015] ? clear_bhb_loop+0x40/0x90 [ 1360.794258][T28015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.794273][T28015] RIP: 0033:0x7f25de59ce59 [ 1360.794288][T28015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.794302][T28015] RSP: 002b:00007f25df4bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1360.794316][T28015] RAX: ffffffffffffffda RBX: 00007f25de815fa0 RCX: 00007f25de59ce59 [ 1360.794326][T28015] RDX: 0000000000001d30 RSI: 0000200000000000 RDI: 0000000000000003 [ 1360.794335][T28015] RBP: 00007f25df4bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.794344][T28015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.794352][T28015] R13: 00007f25de816038 R14: 00007f25de815fa0 R15: 00007fffb41d4488 [ 1360.794371][T28015] [ 1361.626645][T28018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1361.666159][T28018] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1362.894454][T16803] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1362.912748][T16803] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1362.924023][T16803] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1362.932016][T16803] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1362.943746][T16803] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1364.953652][T28041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.990188][T16803] Bluetooth: hci8: command tx timeout [ 1365.007188][T28041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.037512][T28041] bridge_slave_0: entered allmulticast mode [ 1365.071730][T28041] bridge_slave_0: entered promiscuous mode [ 1365.106890][T28041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.137296][T28041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.168882][T28041] bridge_slave_1: entered allmulticast mode [ 1365.203289][T28041] bridge_slave_1: entered promiscuous mode [ 1365.330627][T28041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.384988][T28041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.525482][T28041] team0: Port device team_slave_0 added [ 1365.567594][T28041] team0: Port device team_slave_1 added [ 1365.766507][T28041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.805795][T28041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.837283][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'. [ 1365.922768][T28041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.937184][T28083] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1365.974878][T28041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.013301][T28041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.136216][T28041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.161953][T28085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5063'. [ 1366.269111][T28087] netlink: 25 bytes leftover after parsing attributes in process `syz.7.5063'. [ 1366.331970][T28041] hsr_slave_0: entered promiscuous mode [ 1366.359168][T28041] hsr_slave_1: entered promiscuous mode [ 1366.388385][T28041] debugfs: 'hsr0' already exists in 'hsr' [ 1366.422319][T28041] Cannot create hsr debugfs directory [ 1367.064986][T16803] Bluetooth: hci8: command tx timeout [ 1367.771944][T28041] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1367.829734][T28041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1367.981842][T28103] netlink: 'syz.2.5067': attribute type 8 has an invalid length. [ 1367.998638][T28041] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1368.034749][T28041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1368.070637][T28041] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1368.127096][T28041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1368.224338][T28041] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1368.296648][T28041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1368.976707][T28041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.056367][T28041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.102789][T12837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.109940][T12837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.133789][T16803] Bluetooth: hci8: command tx timeout [ 1369.197865][T12837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.205033][T12837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.909911][T28130] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1371.088208][T28130] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 1371.201624][T16803] Bluetooth: hci8: command tx timeout [ 1371.214772][T28041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.080439][T28143] busy [ 1372.164368][T28041] veth0_vlan: entered promiscuous mode [ 1372.205361][T28143] ima: policy update failed [ 1372.334630][ T29] audit: type=1802 audit(2147488386.893:45): pid=28143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.5070" res=0 errno=0 [ 1372.409912][T28041] veth1_vlan: entered promiscuous mode [ 1372.533210][T28041] veth0_macvtap: entered promiscuous mode [ 1372.574155][T28041] veth1_macvtap: entered promiscuous mode [ 1372.639351][T28041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.678270][T28041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1372.726916][T28062] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.767036][T28062] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.797694][T28062] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.849832][T28062] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.130746][T27684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.173587][T27684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.241946][T27684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.270377][T27684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.263077][T28165] FAULT_INJECTION: forcing a failure. [ 1374.263077][T28165] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.319853][T28165] CPU: 0 UID: 0 PID: 28165 Comm: syz.9.5073 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1374.319880][T28165] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1374.319886][T28165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1374.319895][T28165] Call Trace: [ 1374.319900][T28165] [ 1374.319907][T28165] dump_stack_lvl+0x100/0x190 [ 1374.319942][T28165] should_fail_ex.cold+0x5/0xa [ 1374.319961][T28165] should_failslab+0xc2/0x120 [ 1374.319978][T28165] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1374.320000][T28165] ? skb_clone+0x190/0x400 [ 1374.320018][T28165] skb_clone+0x190/0x400 [ 1374.320033][T28165] netlink_deliver_tap+0xaed/0xcc0 [ 1374.320055][T28165] netlink_dump+0x909/0xd00 [ 1374.320074][T28165] ? __pfx_netlink_dump+0x10/0x10 [ 1374.320102][T28165] __netlink_dump_start+0x6d6/0x990 [ 1374.320126][T28165] xsk_diag_handler_dump+0x1ac/0x250 [ 1374.320216][T28165] ? __pfx_xsk_diag_handler_dump+0x10/0x10 [ 1374.320235][T28165] ? __pfx_xsk_diag_dump+0x10/0x10 [ 1374.320255][T28165] ? sock_diag_lock_handler+0x10f/0x2e0 [ 1374.320330][T28165] sock_diag_rcv_msg+0x431/0x7a0 [ 1374.320354][T28165] netlink_rcv_skb+0x159/0x420 [ 1374.320372][T28165] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1374.320395][T28165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1374.320426][T28165] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1374.320447][T28165] netlink_unicast+0x585/0x850 [ 1374.320467][T28165] ? __pfx_netlink_unicast+0x10/0x10 [ 1374.320484][T28165] ? __build_skb_around+0x278/0x390 [ 1374.320505][T28165] ? is_vmalloc_addr+0x86/0xa0 [ 1374.320529][T28165] netlink_sendmsg+0x8b0/0xda0 [ 1374.320550][T28165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1374.320571][T28165] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1374.320590][T28165] sock_write_iter+0x524/0x5a0 [ 1374.320608][T28165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1374.320626][T28165] ? __pfx_sock_write_iter+0x10/0x10 [ 1374.320653][T28165] ? bpf_lsm_file_permission+0x9/0x10 [ 1374.320667][T28165] ? security_file_permission+0x76/0x210 [ 1374.320687][T28165] ? rw_verify_area+0xce/0x6d0 [ 1374.320704][T28165] vfs_write+0x6ac/0x1070 [ 1374.320720][T28165] ? __pfx_sock_write_iter+0x10/0x10 [ 1374.320742][T28165] ? __pfx_vfs_write+0x10/0x10 [ 1374.320757][T28165] ? find_held_lock+0x2b/0x80 [ 1374.320789][T28165] ksys_write+0x1f8/0x250 [ 1374.320805][T28165] ? __pfx_ksys_write+0x10/0x10 [ 1374.320822][T28165] ? rcu_is_watching+0x12/0xc0 [ 1374.320840][T28165] do_syscall_64+0x115/0x840 [ 1374.320860][T28165] ? clear_bhb_loop+0x40/0x90 [ 1374.320877][T28165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.320891][T28165] RIP: 0033:0x7fe86279ce59 [ 1374.320904][T28165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.320921][T28165] RSP: 002b:00007fe86367f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1374.320936][T28165] RAX: ffffffffffffffda RBX: 00007fe862a15fa0 RCX: 00007fe86279ce59 [ 1374.320945][T28165] RDX: 0000000000001d30 RSI: 0000200000000000 RDI: 0000000000000003 [ 1374.320954][T28165] RBP: 00007fe86367f090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.320963][T28165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.320971][T28165] R13: 00007fe862a16038 R14: 00007fe862a15fa0 R15: 00007ffd8d075178 [ 1374.320991][T28165] [ 1376.825015][T28185] netlink: 82 bytes leftover after parsing attributes in process `syz.9.5079'. [ 1377.236828][T28196] binder: 28194:28196 ioctl c0046209 ffffffffffffffff returned -22 [ 1377.531177][T28196] binder: 28194:28196 ioctl ae60 10000000000402 returned -22 [ 1377.560814][T28196] binder: 28194:28196 ioctl ae41 0 returned -22 [ 1379.252328][T28221] FAULT_INJECTION: forcing a failure. [ 1379.252328][T28221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.311801][T28221] CPU: 0 UID: 0 PID: 28221 Comm: syz.9.5086 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1379.311828][T28221] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1379.311834][T28221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1379.311843][T28221] Call Trace: [ 1379.311849][T28221] [ 1379.311855][T28221] dump_stack_lvl+0x100/0x190 [ 1379.311882][T28221] should_fail_ex.cold+0x5/0xa [ 1379.311902][T28221] _copy_to_user+0x32/0xd0 [ 1379.311924][T28221] simple_read_from_buffer+0xcb/0x170 [ 1379.311943][T28221] proc_fail_nth_read+0x1af/0x230 [ 1379.311965][T28221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1379.311988][T28221] ? rw_verify_area+0xce/0x6d0 [ 1379.312002][T28221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1379.312023][T28221] vfs_read+0x1e4/0xb30 [ 1379.312041][T28221] ? __pfx_vfs_read+0x10/0x10 [ 1379.312056][T28221] ? __fget_files+0x215/0x3d0 [ 1379.312077][T28221] ? __fget_files+0x21f/0x3d0 [ 1379.312098][T28221] ksys_read+0x12a/0x250 [ 1379.312114][T28221] ? __pfx_ksys_read+0x10/0x10 [ 1379.312131][T28221] ? rcu_is_watching+0x12/0xc0 [ 1379.312149][T28221] do_syscall_64+0x115/0x840 [ 1379.312169][T28221] ? clear_bhb_loop+0x40/0x90 [ 1379.312186][T28221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.312201][T28221] RIP: 0033:0x7fe86275d68e [ 1379.312214][T28221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1379.312228][T28221] RSP: 002b:00007fe86367efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1379.312249][T28221] RAX: ffffffffffffffda RBX: 00007fe86367f6c0 RCX: 00007fe86275d68e [ 1379.312259][T28221] RDX: 000000000000000f RSI: 00007fe86367f0a0 RDI: 0000000000000004 [ 1379.312268][T28221] RBP: 00007fe86367f090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.312277][T28221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.312285][T28221] R13: 00007fe862a16038 R14: 00007fe862a15fa0 R15: 00007ffd8d075178 [ 1379.312304][T28221] [ 1381.957665][T24051] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1381.990408][T24051] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1382.004491][T24051] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1382.012284][T24051] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1382.019671][T24051] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1382.993682][T28253] nvme_fabrics: missing parameter 'transport=%s' [ 1383.054491][T28253] nvme_fabrics: missing parameter 'nqn=%s' [ 1383.830743][T28268] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1384.100399][T24051] Bluetooth: hci9: command tx timeout [ 1385.656096][T28241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.687038][T28241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.718224][T28241] bridge_slave_0: entered allmulticast mode [ 1385.767361][T28241] bridge_slave_0: entered promiscuous mode [ 1386.103360][T28241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.145035][T28241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.172919][T16803] Bluetooth: hci9: command tx timeout [ 1386.192497][T28241] bridge_slave_1: entered allmulticast mode [ 1386.213430][T28241] bridge_slave_1: entered promiscuous mode [ 1386.404388][T28241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.467940][T28241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.607841][T28241] team0: Port device team_slave_0 added [ 1386.632812][T28241] team0: Port device team_slave_1 added [ 1386.731231][T28241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.760131][T28241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.809979][ T30] INFO: task syz.4.4788:26581 blocked for more than 143 seconds. [ 1386.841732][ T30] Tainted: G I L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1386.874633][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1386.902567][T28241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.939913][ T30] task:syz.4.4788 state:D stack:27528 pid:26581 tgid:26579 ppid:19525 task_flags:0x400140 flags:0x00080002 [ 1386.979899][T28241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.995739][ T30] Call Trace: [ 1387.008032][T28241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.036385][ T30] [ 1387.051421][ T30] __schedule+0x1295/0x67a0 [ 1387.074870][ T30] ? __pfx___schedule+0x10/0x10 [ 1387.110463][ T30] ? find_held_lock+0x2b/0x80 [ 1387.131950][ T30] ? schedule+0x2bf/0x390 [ 1387.148750][ T30] schedule+0xdd/0x390 [ 1387.157619][T28241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.184023][ T30] schedule_preempt_disabled+0x13/0x30 [ 1387.208199][ T30] __mutex_lock+0xced/0x1b10 [ 1387.232712][ T30] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1387.262109][ T30] ? __nla_validate_parse+0x1e7/0x28b0 [ 1387.297639][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1387.323159][ T30] ? net_generic+0xea/0x2a0 [ 1387.349995][ T30] ? net_generic+0xea/0x2a0 [ 1387.374147][ T30] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1387.401834][ T30] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1387.425843][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 1387.446048][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1387.464158][ T30] ? genl_get_cmd+0x3e7/0x760 [ 1387.479535][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1387.541148][ T30] ? security_capable+0x80/0x260 [ 1387.568264][ T30] genl_rcv_msg+0x560/0x800 [ 1387.582737][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1387.604875][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1387.623041][ T30] netlink_rcv_skb+0x159/0x420 [ 1387.635930][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1387.646099][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1387.658811][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1387.670920][ T30] genl_rcv+0x28/0x40 [ 1387.678122][ T30] netlink_unicast+0x585/0x850 [ 1387.691457][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1387.701672][ T30] netlink_sendmsg+0x8b0/0xda0 [ 1387.712699][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1387.725068][ T30] ? __import_iovec+0x1d2/0x640 [ 1387.736747][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1387.749965][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 1387.767353][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1387.779351][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1387.792850][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 1387.803027][ T30] ___sys_sendmsg+0x190/0x1e0 [ 1387.813349][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1387.825797][ T30] __sys_sendmsg+0x170/0x220 [ 1387.838568][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1387.851886][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 1387.862325][ T30] ? rcu_is_watching+0x12/0xc0 [ 1387.873697][ T30] do_syscall_64+0x115/0x840 [ 1387.884594][ T30] ? clear_bhb_loop+0x40/0x90 [ 1387.905381][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.922319][ T30] RIP: 0033:0x7ff75079ce59 [ 1387.926820][ T30] RSP: 002b:00007ff7516ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1387.946191][ T30] RAX: ffffffffffffffda RBX: 00007ff750a16090 RCX: 00007ff75079ce59 [ 1387.964842][ T30] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000003 [ 1387.981827][ T30] RBP: 00007ff750832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1388.001317][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1388.019993][ T30] R13: 00007ff750a16128 R14: 00007ff750a16090 R15: 00007ffcc6cb0588 [ 1388.036420][ T30] [ 1388.047356][ T30] [ 1388.047356][ T30] Showing all locks held in the system: [ 1388.114601][ T30] 1 lock held by khungtaskd/30: [ 1388.125215][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1388.146420][ T30] 2 locks held by getty/5391: [ 1388.157618][ T30] #0: ffff8880382290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1388.181015][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1388.208880][ T30] 2 locks held by kworker/0:1/11846: [ 1388.222438][ T30] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1388.240861][T24051] Bluetooth: hci9: command tx timeout [ 1388.253097][ T30] #1: ffffc9000329fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1388.280900][ T30] 4 locks held by kworker/u10:10/12822: [ 1388.286499][ T30] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1388.316601][ T30] #1: ffffc9000eca7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1388.340822][ T30] #2: ffffffff90606ba0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1388.360472][ T30] #3: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1388.380696][ T30] 2 locks held by syz.3.4770/26494: [ 1388.391977][ T30] #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1388.412759][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1388.440364][ T30] 2 locks held by syz-executor/26562: [ 1388.452869][ T30] #0: ffff888027f960d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1388.473694][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1388.495032][ T30] 2 locks held by syz.4.4788/26581: [ 1388.510552][ T30] #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1388.528075][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1388.567403][ T30] 2 locks held by kworker/0:5/26710: [ 1388.590156][ T30] 2 locks held by syz-executor/26720: [ 1388.607293][ T30] #0: ffff88807aaa40d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1388.628583][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1388.652794][ T30] 2 locks held by syz-executor/26818: [ 1388.668777][ T30] #0: ffff888032ca60d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1388.679722][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1388.689783][ T30] 2 locks held by syz-executor/27327: [ 1388.695190][ T30] #0: ffff88802a78c0d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1388.710413][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1388.723621][ T30] 2 locks held by syz-executor/27506: [ 1388.730329][ T30] #0: ffff88807a34c0d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1388.741170][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1388.751570][ T30] 2 locks held by syz-executor/28041: [ 1388.756949][ T30] #0: ffff8880594d00d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1388.771447][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1388.781419][ T30] 1 lock held by syz.7.5085/28232: [ 1388.786537][ T30] #0: ffff8880a5380ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1388.796531][ T30] 2 locks held by syz-executor/28241: [ 1388.802188][ T30] #0: ffffffff90d985e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1388.815653][ T30] #1: ffffffff90606ba0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1388.851085][ T30] [ 1388.859721][T28241] hsr_slave_0: entered promiscuous mode [ 1388.865327][ T30] ============================================= [ 1388.865327][ T30] [ 1388.889306][T28241] hsr_slave_1: entered promiscuous mode [ 1388.898277][ T30] NMI backtrace for cpu 0 [ 1388.898300][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 1388.898322][ T30] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1388.898328][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1388.898337][ T30] Call Trace: [ 1388.898343][ T30] [ 1388.898349][ T30] dump_stack_lvl+0x100/0x190 [ 1388.898377][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1388.898394][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1388.898410][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1388.898430][ T30] sys_info+0x141/0x190 [ 1388.898450][ T30] watchdog+0xcb1/0x1030 [ 1388.898473][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1388.898491][ T30] ? __pfx_watchdog+0x10/0x10 [ 1388.898510][ T30] ? __kthread_parkme+0x18c/0x230 [ 1388.898530][ T30] ? kthread+0x13a/0x450 [ 1388.898548][ T30] ? __pfx_watchdog+0x10/0x10 [ 1388.898565][ T30] kthread+0x370/0x450 [ 1388.898584][ T30] ? __pfx_kthread+0x10/0x10 [ 1388.898605][ T30] ret_from_fork+0x72b/0xd50 [ 1388.898621][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1388.898637][ T30] ? __switch_to+0x800/0x1100 [ 1388.898654][ T30] ? __switch_to_asm+0x39/0x70 [ 1388.898671][ T30] ? __pfx_kthread+0x10/0x10 [ 1388.898692][ T30] ret_from_fork_asm+0x1a/0x30 [ 1388.898717][ T30] [ 1389.037808][T28241] debugfs: 'hsr0' already exists in 'hsr' [ 1389.050000][T28241] Cannot create hsr debugfs directory [ 1389.312402][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1389.319366][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 1389.330029][ T30] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1389.336506][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1389.346539][ T30] Call Trace: [ 1389.349801][ T30] [ 1389.352717][ T30] dump_stack_lvl+0x100/0x190 [ 1389.357391][ T30] vpanic+0x552/0x970 [ 1389.361357][ T30] ? __pfx_vpanic+0x10/0x10 [ 1389.365843][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1389.371982][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1389.378130][ T30] panic+0xd1/0xe0 [ 1389.381836][ T30] ? __pfx_panic+0x10/0x10 [ 1389.386238][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1389.392377][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1389.398515][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1389.404650][ T30] ? watchdog.cold+0x1ec/0x234 [ 1389.409397][ T30] ? watchdog+0xcc1/0x1030 [ 1389.413801][ T30] watchdog.cold+0x1fd/0x234 [ 1389.418382][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1389.424177][ T30] ? __pfx_watchdog+0x10/0x10 [ 1389.428840][ T30] ? __kthread_parkme+0x18c/0x230 [ 1389.433852][ T30] ? kthread+0x13a/0x450 [ 1389.438084][ T30] ? __pfx_watchdog+0x10/0x10 [ 1389.442745][ T30] kthread+0x370/0x450 [ 1389.446803][ T30] ? __pfx_kthread+0x10/0x10 [ 1389.451380][ T30] ret_from_fork+0x72b/0xd50 [ 1389.455969][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1389.461094][ T30] ? __switch_to+0x800/0x1100 [ 1389.465771][ T30] ? __switch_to_asm+0x39/0x70 [ 1389.470525][ T30] ? __pfx_kthread+0x10/0x10 [ 1389.475107][ T30] ret_from_fork_asm+0x1a/0x30 [ 1389.479869][ T30] [ 1389.482940][ T30] Kernel Offset: disabled [ 1389.487265][ T30] Rebooting in 86400 seconds..