last executing test programs: 23m10.124999166s ago: executing program 0 (id=1055): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) utimes$auto(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x1, 0xfd5, 0x12, 0xffffffffffffffff, 0x0) mmap$auto(0x9, 0x1ff, 0x3, 0x8000000008011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0xefdd, 0x4, 0xfffffffa) semget$auto(0x80000000, 0x13c, 0x3ff) unshare$auto(0x6) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0x80000000) close_range$auto(0x2, 0x8, 0x0) personality$auto(0xfffffffc) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x8001af85, &(0x7f0000000000)={0x6}) socket(0x27, 0xa, 0xfff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0) mmap$auto(0xfffffffffffffffb, 0x2, 0x100000021, 0x400009b75, 0xea8a, 0x8000) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/sctp/snmp\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) open(0x0, 0x3d5a41, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200400, 0x63) mmap$auto(0x0, 0x11, 0xdf, 0x9b72, r3, 0x8000) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x400000000000fdf1}, 0xd39) 23m8.204356731s ago: executing program 0 (id=1058): mmap$auto(0x0, 0x20009, 0xa1a5, 0xeb1, 0x6, 0x8000) mmap$auto(0x0, 0x2020009, 0x1000003, 0x1000000eb2, 0xffffffffffffffff, 0x8000) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40001) epoll_wait$auto(r0, 0x0, 0x596deb1b, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x4002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) 23m4.039489859s ago: executing program 0 (id=1066): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x482301, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x2, 0x1d30, 0x100, 0x400000004, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x9, 0x4, 0x1000000fca, 0x9, 0x4, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) r3 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10009b7f, 0x2, 0xfffffffffffffffa) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r4, &(0x7f0000000000)='system.posix_acl_access\x00') futimesat$auto(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000001100)={0x7fffffffffffffff, 0x3}) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto(0x400, 0x7fff, 0x0, 0xfffd, 0x100000000000007) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r2, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) 23m2.593691278s ago: executing program 0 (id=1069): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x88880, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x44098) msgctl$auto_IPC_SET(0xc8ab, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x86}, 0x4000841) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r2, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) 23m0.651090693s ago: executing program 0 (id=1074): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fchdir$auto(0xffffffffffffffff) pselect6$auto(0x3, &(0x7f0000000040)={[0x6, 0x0, 0x8, 0xfffffffffffff923, 0x5, 0x3, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x4005, 0x1, 0xcd, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f00000003c0)={[0xcc, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x803]}, &(0x7f0000000200)={0x2, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r1 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) r2 = socket(0xa, 0x2, 0x88) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r2, 0x8003) madvise$auto(0x20000000, 0x7, 0x3) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0xffff, 0x7, 0xfffffffffffffffc) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) 22m57.778875497s ago: executing program 0 (id=1080): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) ioctl$auto_FS_IOC_SETFLAGS(r0, 0x40086602, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0xf, 0xa, 0xf) setsockopt$auto(r2, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') 22m56.53544412s ago: executing program 32 (id=1080): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) ioctl$auto_FS_IOC_SETFLAGS(r0, 0x40086602, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0xf, 0xa, 0xf) setsockopt$auto(r2, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') 17m9.77401726s ago: executing program 3 (id=2118): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x482301, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x2, 0x1d30, 0x100, 0x400000004, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x9, 0x4, 0x1000000fca, 0x9, 0x4, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) r2 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10009b7f, 0x2, 0xfffffffffffffffa) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r3, &(0x7f0000000000)='system.posix_acl_access\x00') futimesat$auto(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000001100)={0x7fffffffffffffff, 0x3}) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) prctl$auto(0x400, 0x7fff, 0x0, 0xfffd, 0x100000000000007) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r1, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) 17m4.406240891s ago: executing program 3 (id=2141): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.6/usbmon/usbmon22/dev\x00', 0xa001, 0x0) (rerun: 64) r0 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r0, 0x107, 0x17, 0x0, 0x8) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) clone$auto(0x20003b42, 0x8400, 0x0, 0x0, 0xfffffffffffffff9) (async, rerun: 64) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x200000000006, 0x8) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x1, 0x0, 0x8) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x1, 0x5, 0xdf, 0x40009b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) (async) write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1", 0x23) (async) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') (async, rerun: 64) creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) (rerun: 64) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/conf/erspan0/medium_id\x00', 0x101042, 0x0) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x7fffe000) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x1902, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r5, 0x0, 0x20) (async) close_range$auto(0x0, r5, 0x4000000000002) socket(0x2, 0x801, 0x106) (async) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r6, 0x1269, 0x0) 17m1.429978687s ago: executing program 3 (id=2153): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.5/usb6/ep_00/bEndpointAddress\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000000580)='K\x00', 0x3) 16m55.482023447s ago: executing program 3 (id=2169): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x401, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) socket(0x18, 0x5, 0x7) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1136daefdad8374b297345969e5c4ccccca7eb6d337a0876c66d1e5008c65b34d116", @ANYRES16=0x0, @ANYBLOB="100026bd7000ffdbdf25590000000400340106001a01ff07000004006c000400b800"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r3 = epoll_create$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) pidfd_open$auto(0x0, 0x6) ioctl$auto(r3, 0x4020565d, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000400)=@enable_stats={0x5}, 0x1d) epoll_ctl$auto(0x5, 0x1, r4, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) acct$auto(&(0x7f0000000280)='/dev/v4l-subdev5\x00') 16m49.972985318s ago: executing program 3 (id=2185): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x20009, 0x20000000) sendto$auto(0x3, 0x0, 0xf, 0xe, 0x0, 0x1a) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) 16m36.952055988s ago: executing program 3 (id=2211): socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB='Z'], 0x1ac}}, 0x40000) 16m21.475076724s ago: executing program 33 (id=2211): socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB='Z'], 0x1ac}}, 0x40000) 14m40.846437551s ago: executing program 2 (id=2477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) 14m40.360395414s ago: executing program 2 (id=2479): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x20009, 0x20000000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0xff, 0x7, 0xd, 0x8, 0x948f, 0x3, 0x8000000000000000, 0x3, 0x3, 0x65, 0x8000001f, 0xe, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0xd2f7, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/available_events\x00', 0x122080, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) socket(0xa, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) 14m35.748012896s ago: executing program 2 (id=2489): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f00000001c0)="0125c50fd891795a7891e3c225ab01854f826a9346d0639dbb667c19199aeac13c0d032ed29a08cf12dc0000", 0x2c) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r1, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/platform/drivers/xhci-hcd/uevent\x00', 0x88d43, 0x0) setpriority$auto_PRIO_PGRP(0x1, 0xffffffffffffffff, 0x101) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000240)="352c8efa610c0bcf83a4ebdb040000800000000021cb244b19a48bb5e0edbcb8d589821a02f53f90ddb991d12df9735b745b9554dfb0ad77a37be296eb", 0x3d) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x50882, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 14m30.8245065s ago: executing program 2 (id=2497): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x7, 0x0) open(0x0, 0x10d543, 0x165) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(r0, 0x1, 0xfe, 0x81, 0x0, 0xd) 14m29.668042927s ago: executing program 2 (id=2500): r0 = clone$auto(0x2ef1, 0x9, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0xfffffffb, 0x2) capget$auto(&(0x7f0000000080)={0x8, 0xffffffffffffffff}, &(0x7f00000000c0)={0x5, 0x49, 0x81}) capget$auto(&(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)={0x4, 0x8, 0x4}) msgctl$auto_MSG_STAT(0x2a, 0xb, &(0x7f0000000200)={{0x6, 0xee01, 0xffffffffffffffff, 0x5, 0x2, 0x9, 0x8}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0x4, 0x2, 0x7, 0x10, 0x1, 0x4, 0x6d, 0x3, 0xce, @inferred=0x0, @inferred=0x0}) rt_tgsigqueueinfo$auto(r0, r1, 0x9, &(0x7f0000000280)={@siginfo_0_0={0x2, 0x4, 0x95ca, @_sigchld={r2, r3, 0x100, 0x9, 0xffff}}}) shmctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000001340)={{0x5, r3, r4, 0x7, 0x8, 0x6, 0x8000}, 0x1, 0x3, 0x5, 0x5, @inferred=r6, @raw=0xcdc, 0x0, 0x0, &(0x7f0000000300)="e14b938aaf8ac9ffafc0b77bbd76ee74ca4f1b057acf708f429abc0ba2e27f03bba699b7499cc473342863c040a7d1a419955d100a7ab0df", &(0x7f0000000340)="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"}) r7 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000013c0), 0x4000, 0x0) getcwd$auto(&(0x7f0000001400)='/dev/rfkill\x00', 0x9) r8 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) ioctl$auto_FS_IOC_SETFSLABEL2(r8, 0x41009432, &(0x7f0000001440)="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") getcwd$auto(&(0x7f0000001540)='/dev/rfkill\x00', 0xe93) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r8) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xec, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_QOS_MAP={0xd5, 0xc7, "8cd76f452c49a21fdf55ccdad11ec38bd67a3ad7dd2b78c6436aa0822b05938ccd6605cbd671e510e53524db7152c741c7dc1db82f74b0a5175ad300c4d1c88e4df569408b8dcdcff0f755405b8338320917bfee330c8e571c2bfc3946ad6f784d6267bb2bf67baf7320fdb53c5e19aa3ad8f4e6de988e53b2a01dd7bd2d1482f21b5088189be049e730eb11f62ce416ef0c9763bdfd2ba26e3b71f534bd12c9a9bc1c0941be2b4b2becba5984ee46c39c0765851b8a27e395612c3b874308bc04c471f714aec437a474bdee11d595b44b"}]}, 0xec}, 0x1, 0x0, 0x0, 0x20040804}, 0xa01d) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r10, &(0x7f0000001ac0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000017c0)={0x2b8, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x95, 0x84, 0x0, 0x1, [@typed={0xc, 0xad, 0x0, 0x0, @u64=0x5a0}, @generic="bff70f2294935cb428f5391eba9149e90206413a6cbc78def29a5c80d69464ce95847a34a7e3041e5687a8185a109fc620509770536779c3b8c0b3c103b70c952b73c88e01e3cd11b0", @typed={0x39, 0xf8, 0x0, 0x0, @binary="e08c19d19b8e5b3ec21d9265b5535228d6f89124f6fc458923393835f95f2a608bea5664545d41fa9ee9d791db0a5e176329e237b5"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x3}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x8a, 0xba, "9d178a98347b467380191732a05f8c913115d6e28620278bc31eb7c2811cc1d5d0092263e9dab3ad992e11617d3ad1ed66d267e7dea3ee0a561a6d9d5b169dde42fd755ccfe269805178f066266bdebe93e8975928bcecec99ca5d2bd05ca6194a743d0aef3181aea2b9c4d1a2249016d3ae6a0d978b0621b2e5fdfbe96c2e0cd4c73a237ea9"}, @NL80211_ATTR_SAR_SPEC={0x158, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x8a}, @NL80211_SAR_ATTR_SPECS={0x144, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x17e6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffff81e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2b}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x401}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3cb0}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x50e8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbf4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x32}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2e5b}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x94}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xafd}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@nested={0xc, 0xf6, 0x0, 0x1, [@nested={0x4, 0x51}, @nested={0x4, 0xbd}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r11 = ioctl$auto_TUNSETVNETHDRSZ2(r8, 0x400454d8, &(0x7f0000001b00)=0x7f) ioctl$auto_BLKFLSBUF(r11, 0x1261, 0x0) read$auto(r11, &(0x7f0000001b40)='.&{]%\x00', 0x4) r12 = inotify_init1$auto(0x1) write$auto_seq_oss_f_ops_seq_oss(r8, &(0x7f0000001b80)="710bbc9cb11191ff11c7d519725326126c2844e74e7790d027affb109e6dbe32f6a597f7cd0961006fb858f6a2b54b2aa3ece856ef9bf687ca26cfffe8fe0bfe99720e2568f72b7e77054b2b1023598b7178da5b07aac9cac908611d36091aa24913cfe6a6f84c823fb1d914cdcf1804f27c6dd82aa96430258af41c88165dec206b233603fcb6fa35e006635247bdba8242759582f5f7a180aebe83cc15", 0x9e) tgkill$auto_SIGCONT(r5, r5, 0x12) close_range$auto(r7, r12, 0x3) read$auto_trace_options_fops_trace(r11, &(0x7f0000001c40)=""/233, 0xe9) ioctl$auto(r8, 0x5, r10) mlockall$auto(0x3) r13 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001d80), r12) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x48, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, r11}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_OFF(r8, 0x7004, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r11, 0x80044100, &(0x7f0000001ec0)=0x6) 14m26.87529851s ago: executing program 2 (id=2503): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x149001, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x6) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) linkat$auto(r2, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0xa) 14m11.263498911s ago: executing program 34 (id=2503): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x149001, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x6) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) linkat$auto(r2, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0xa) 9m26.096482553s ago: executing program 4 (id=3181): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) msgctl$auto_IPC_INFO(0xfad, 0x3, &(0x7f0000000080)={{0x200, 0xee01, 0x0, 0x100, 0x100, 0x2, 0xdd3f}, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0xc8, 0x2, 0x247079be, 0x7, 0x8, 0xffffffff, 0xff, 0x2, 0x0, @inferred, @raw=0x100}) r1 = setfsuid$auto(0x0) setuid$auto(r1) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2183, 0x0) msgctl$auto_IPC_SET(0x7fc0, 0x1, &(0x7f0000000300)={{0x2, 0xee00, 0xee00, 0x3, 0x2, 0x100, 0x4}, &(0x7f0000000080)=0xa, &(0x7f00000000c0)=0x3, 0x5, 0x400, 0x7, 0x1, 0xe5, 0x3, 0x5, 0x9, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r4 = fsopen$auto(0x0, 0x1) r5 = getgid() fsconfig$auto(r4, 0xfffffffb, 0x0, 0x0, r5) fstat$auto(r2, &(0x7f0000000380)={0x90, 0x4, 0x3, 0x7268, r3, r5, 0x0, 0x6, 0x5, 0xf8b, 0xb35, 0x17bfaf74, 0x8a, 0x4, 0x1, 0xe}) keyctl$auto_KEY_SPEC_REQUESTOR_KEYRING(0xfffffff7, r0, r1, r5, 0xfffffffffffffff8) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e0, 0x91) 9m22.412425327s ago: executing program 4 (id=3187): unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, 0x0, 0x4000040) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r2) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48041) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) 9m18.479293118s ago: executing program 4 (id=3198): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0x2c3002, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d23edb3100000000000000000075210d2de44406c2fb21", 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x3) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x20040850) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\r'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000280)={0x0, 0xffeb}, 0x1, 0x0, 0x8, 0x7}, 0x8}, 0xffffffff, 0xb00) open(0x0, 0x161342, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r2) 9m13.633542754s ago: executing program 4 (id=3209): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async) link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) (async) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, 0x0) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x4) bpf$auto(0x5, 0x0, 0x47) mmap$auto(0x2000, 0x80009, 0x1, 0x8000000008011, r0, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r1) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000006f906ae2ca3a2a0c68219ae077aa351e38fbe829dc7eccd59b88e3deb7f88eb4e2d31a66c0067f11734462c96ddf7db63ed1866ce965a65c8d0eb2a1428d040a4996277933b4cf707108616ceed3469396a9c648371987b1864a9fca176fc6ec81040197108a7527a7e60b3d53533cd68328d6b6a57f87b087af4595a713530ebacac3ca7238ad5e71af0afaec19e1a32d30be23fd0e8b434c7fa9c19021cf61ee9669a9ee11f7737eabd77778aa0a35ab63f34c1e8740a508fd27260893770a1960b0fdbc8d", @ANYRES16=r2, @ANYBLOB="24732dbd7000fbdbdf2507000000080002001108000006000b00f9ff0000080003005309000008000400010000000800020000040000190001002f6465762f6275732f7573622f3030312f30303100000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 9m13.255429271s ago: executing program 5 (id=3210): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/bNumInterfaces\x00', 0x3aad01, 0x0) socket(0xa, 0x3, 0x3a) socketpair$auto(0xfffffffc, 0x2, 0x4, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000480)=0xff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf52, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) socket(0x1f, 0x3, 0x400001) socket(0x6, 0x1, 0xf) select$auto(0x9, &(0x7f0000000040)={[0x401, 0x1, 0x8, 0x7, 0x40, 0x7fffffff, 0x80000001, 0x0, 0x8, 0x80000000c28, 0x9be, 0x8, 0x1, 0x0, 0x1, 0x1c0]}, &(0x7f0000000380)={[0x8, 0xfffffffffffffffc, 0x0, 0x800000000000, 0x8, 0x800, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x4, 0x8e, 0x5, 0x8, 0x100000000, 0x9, 0x4]}, &(0x7f0000000400)={[0x94, 0x6, 0x2000000000000d, 0x481, 0x2, 0x5, 0x1, 0x1, 0x22d, 0x9, 0x1000, 0x5, 0x3dc7, 0x3, 0x2, 0x7]}, &(0x7f00000000c0)={0x7c050b5f, 0x9}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x44000, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x10, 0x940, 0x1ffde, 0x2, 0x4, 0x7, 0x9, 0x6, 0x0, 0x8000000000000001, 0xb0, 0x7, 0x20000001, 0x3, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x1000, 0x7, 0x9, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffc, 0x400000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0xffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5757, 0x0, 0x2, 0x1]}, 0x7, 0x281) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="06200000e472b9f63d2bccd48c7d2e9da50064537b47b96563f392e7faf9d165b82e85f9970cf7c7f8b1198ba604e59ba4147ec0021f1f3320fcdff19a8ed88552b05832eebf964ebf96adca3fee912e3f06a6cb7b4927f7fece025945fabb71b3958b69519cd137fb07545024ac595feffc31b58136", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4081) socket(0xa, 0x801, 0x84) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x82}, 0x6, 0xfffffffffffffff8, 0x2003) 9m12.230012207s ago: executing program 4 (id=3215): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/total_ps_buffered\x00', 0x141482, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x8000000000000, 0x128009, 0x6, 0xeb1, r0, 0x20000008000) fsopen$auto(0x0, 0x1) socket(0xa, 0x2, 0x7d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7fffffff, 0x7f, 0x2eb1, 0x401, 0x2000000000008000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) bpf$auto(0xa, &(0x7f00000000c0)=@query={@target_ifindex, 0x4, 0x20, 0x2, 0x3, @prog_cnt=0xc, 0x0, 0xd8, 0x0, 0x56a, 0x1}, 0x91) r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r6, &(0x7f0000000700)='!dev_\x00\x00\x00\x00\x00', 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x80a86f3d, 0xffffffffffffffff) 9m7.92868232s ago: executing program 5 (id=3221): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x985) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4845) (async) ioperm$auto(0x2, 0x3, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0xa0100, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x109b80, 0x0) (async) r3 = socket(0x21, 0x5, 0x0) (async) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x5, 0x4) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f4ffffff", @ANYBLOB="01002bbd"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0x7b2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, 0x0, 0x5) 9m6.679205289s ago: executing program 4 (id=3225): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x800000008000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 9m6.298117516s ago: executing program 5 (id=3226): ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2, 0x1, 0x0) r2 = getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2020009, 0x6, 0xfa, r1, 0x2) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0xb) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x0, 0xfffffffffffd0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x8}) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto(r3, 0x0, 0xff) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r4, 0x0, 0x1, 0x27) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x5, 0x1) 9m1.371888401s ago: executing program 5 (id=3242): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setresuid$auto(0x909b, 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$auto(r0, &(0x7f0000000080)=@in={0x28}, 0x68) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, r0, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim16/power/runtime_suspended_time\x00', 0x64181, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x208080, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffffff, &(0x7f00000000c0)=""/36, 0x24) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0) pread64$auto(r3, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0x100000004, 0x100) 9m0.511663892s ago: executing program 5 (id=3246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r3) sendmsg$auto_HWSIM_CMD_REGISTER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r2) sendmsg$auto_HWSIM_CMD_REGISTER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820300"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 8m58.779659831s ago: executing program 5 (id=3249): setxattr$auto(0x0, 0x0, 0x0, 0x800000, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x109c01, 0x0) ioctl$auto(r0, 0x92106411, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x80200, 0x10, 0x3}, 0x18) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8000b) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$auto_SO_OOBINLINE(r2, 0x80000001, 0xa, &(0x7f0000000080)=',\x00', 0xfffffffc) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) 8m51.569435527s ago: executing program 35 (id=3225): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x800000008000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 8m43.656551985s ago: executing program 36 (id=3249): setxattr$auto(0x0, 0x0, 0x0, 0x800000, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x109c01, 0x0) ioctl$auto(r0, 0x92106411, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x80200, 0x10, 0x3}, 0x18) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8000b) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$auto_SO_OOBINLINE(r2, 0x80000001, 0xa, &(0x7f0000000080)=',\x00', 0xfffffffc) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) 23.154170032s ago: executing program 6 (id=4806): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88\xca\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = open$dir(&(0x7f0000000040)='}[,&*}\x00', 0x5b5202, 0x20) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x4, 0x9) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x12, 0x0, 0x28) read$auto(r0, 0x0, 0x2) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x7, 0x0) r1 = open(&(0x7f0000000000)='}[,&*}\x00', 0x8000, 0x488) getdents$auto(r1, 0x0, 0x40) 22.411906469s ago: executing program 6 (id=4808): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0x1c, 0x5d7, 0x9) sysfs$auto(0x7, 0x6, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto(r0, 0x0, 0x300001000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/68, 0x44) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000040)=0x3) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x8ba, 0x9, 0x2, 0x6]}, 0x0) 18.325991283s ago: executing program 7 (id=4821): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1a, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001200)={0xf2f, [{0x529, 0x5}, {0x19f1a9bc, 0x7}, {0x800, 0x5}, {0x9, 0x45053277}, {0x7d, 0xf}, {0x7fffffffffffffff, 0x5}, {0x8, 0x1000}, {0x8, 0xf94}, {0x9, 0x5}, {0x7fff}, {0x80000000, 0x5}, {0x6b, 0x6}, {0x6, 0xfffffffffffffe00}, {0x1}, {0x5, 0xb11}, {0x8, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x5bf8}, {0x6, 0xfff}, {0x100, 0x1000}, {0x10000}, {0x6, 0x1}, {0x9, 0xee}, {0x9, 0x2}, {0xff, 0x6}, {0x7, 0x4}, {0x8, 0xb}, {0x9, 0x6}, {0x9, 0x101}, {0x1, 0x9}, {0x5, 0x2c3}, {0x3, 0xfe}, {0x9, 0x40}, {0x5b, 0x6}, {0xfff, 0x10000}, {0x5, 0x7fffffffffffffff}, {0x40004}, {0x2, 0x12580000}, {0x9}, {0x9, 0x100000001}, {0x2, 0x7}, {0x6, 0x5}, {0x10, 0x4}, {0x9, 0x1}, {0x5, 0xf}, {0x9, 0x200}, {0xb, 0x4d97}, {0xffffffffffffff7f, 0x8000000000000001}, {0x7f, 0x800}, {0x3, 0x10000}, {0x6, 0xffffffffffffffff}, {0x6, 0x2}, {0x5, 0x3}, {}, {0x3, 0x1}, {0x1, 0xbb1}, {0x9, 0x8000}, {0x6302, 0x3}, {0x9, 0x9}, {0xa, 0x401}, {0x2}, {0x4, 0x800002}, {0x0, 0x4}, {0x7ff}, {0x6, 0x7fffffff}, {0x1, 0x9}, {0x67a, 0xffff}, {0xc, 0x8}, {0x80, 0xe0}, {0x3e75, 0x1}, {0xe8, 0x9}, {0x5}, {0x0, 0x1}, {0xfffffffffffffffe, 0x9}, {0x8, 0xf870}, {0x1ae8df8a, 0x5}, {0xf8, 0xd7c}, {0x0, 0x8}, {0x9, 0xffffffffffffffff}, {0x5de8, 0x7ff}, {0x2, 0x800}, {0xfffffffffffffff8, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x7ff}, {0x8b, 0x6e}, {0x8000000000000000, 0x3}, {0x4, 0xf434}, {0x4, 0xa0b}, {0x400000002, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0xd0c7, 0x9}, {0x7, 0x1}, {0x35d, 0x75}, {0x7, 0x3}, {0x3, 0xfffffffffffffffa}, {0x1, 0x38a}, {0x4, 0x1}, {0x100000001, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x81, 0x821}, {0x2, 0x1}, {0x100000000, 0x5}, {0x8006, 0xfffffffffffffffa}, {0x9, 0xc}, {0x0, 0x2}, {0x2, 0x70829e47}, {0x255, 0x100000001}, {0x7, 0x8}, {0x1315, 0x7}, {0x4, 0x100}, {0x2, 0x24ad}, {0xd, 0x7}, {0x5, 0x131}, {0x1}, {0x7fffffff, 0xaf06}, {0x8, 0x6}, {0x10, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0xc184}, {0x5, 0x8}, {0x101, 0x24}, {0xfab, 0x3}, {0x1, 0x8}, {0xffffffffffffff89, 0x1}, {0x7ff}, {0x3, 0x9}, {0x7fffffff, 0xffffffffffffffff}, {0x1, 0x1944}, {0x7, 0xfffffffffffffff7}, {0x4, 0xaa}, {0x3, 0xd}, {0x4, 0x6}, {0xfff, 0xa81}, {0x3, 0xc0}, {0x1ff, 0x800}, {0x1000, 0x5}, {0xb, 0x8}, {0x4, 0x6}, {0x1000000000002, 0x5}, {0x200000007, 0x6}, {0x8001, 0xb}, {0x7fffffff, 0x953c}, {0x1, 0x2}, {0x4}, {0x1, 0x5}, {0xfffffffffffffff8, 0xbd}, {0x4}, {0x54e5, 0x6000}, {0x100000001, 0x100000001}, {0x4, 0x8}, {0x200, 0x7afe}, {0x5, 0x2}, {0xfffffffffffffff7, 0x3e9}, {0x0, 0x8}, {0x3, 0x9}, {0x80, 0x1000}, {0x802, 0xd}, {0x0, 0x6}, {0x7, 0x10}, {0x80000000000000, 0x5}, {0xf, 0xc}, {0x0, 0x3}, {0x0, 0x9bd}, {0x4, 0xf96a}, {0x203b0000000000, 0x6}, {0x9}, {0x1, 0x8}, {0x1e, 0x2}, {0x6, 0x400}, {0x8, 0x80000001}, {0x3fc0, 0x6}, {0x4}, {0x7fff, 0x7}, {0x30, 0x8399}, {0xffffffffffffffff, 0x2}, {0x1ff, 0x7}, {0x5, 0x4}, {0x4, 0x79}, {0x3, 0x2}, {0x6, 0x7fff}, {0x6, 0x8}, {0x1000, 0xef62}, {0xbd1b, 0x10001}, {0x5, 0x6}, {0xbd8, 0x80000000}, {0x5, 0x80000001}, {0x1, 0x6}, {0xfff, 0x7}, {0x100, 0x3}, {0x7a}, {0x100}, {0x7, 0xffffffffffffffff}, {0x238b, 0x5}, {0x0, 0x2}, {0xd3fe, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x99, 0xfffffffffffffffc}, {0x6, 0xee}, {0x6, 0x100}, {0x78e, 0x5}, {0x1ddf, 0x6}, {0x9, 0x40}, {0x1, 0x2}, {0x8001, 0x91}, {0x8000, 0x1}, {0x9, 0x6}, {0x2, 0x4}, {0x1005, 0x3}, {0x0, 0xffff}, {0x5}, {0x5aa, 0x8020000000000}, {0x7, 0x8000000000000000}, {0x400005c4a, 0x4}, {0x3, 0x7de}, {0x0, 0x2}, {0x780000000, 0x8}, {0x9, 0xffffffffffffff3f}, {0x3, 0x4}, {0x81, 0x6a04}, {0x2, 0x1c25}, {0xffffffffffffffc0, 0x8}, {0x1, 0x427}, {0x2, 0x1}, {0x2000008, 0xed3}, {0x3, 0xf9c1}, {0x8000000000000000, 0xffffffffffffffff}, {0x2, 0x2}, {0x7, 0x7}, {0x80000001, 0x3987}, {0x66f3, 0x101}, {0x5, 0x101}, {0x4, 0x2}, {0xfff, 0x2}, {0x4, 0x8000000000000001}, {0x1}, {0xa, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0xd, 0x2}, {0x1, 0x10001000000000}, {0x0, 0x7fffffffffffffff}, {0x9, 0x6}, {0x200, 0x2f91}, {0xd5c5, 0x81}, {0x8, 0x8000}, {0x800, 0xfffffffffffffffa}, {0x301983e2, 0x5}, {0x3, 0x7}, {0x0, 0x4}], 0x7, "0a54d639d08954"}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x5408, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 14.225066965s ago: executing program 7 (id=4828): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084) socket(0xa, 0x2, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x491, 0x400, 0x9}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x2b, 0xfffffffffffffffe, 0x0) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) 11.910749694s ago: executing program 7 (id=4834): memfd_create$auto(&(0x7f00000002c0)='/sys/kerne(\x89\xbe\x11\xab\x85\xd0\x12\x03y\x87h\xcc\xd1l/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\x91\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xac\xae\xa6\xc4\x87\xb5j\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xc9\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1H', 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop14\x00', 0x204440, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x3, 0xfffffffffffffffa, 0xe3, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000001940)) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) unshare$auto(0x40000080) (async) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) (async) ioctl$auto_SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f00000001c0)="986b84574b352a7ca4c1ed6b24c668400a4718272e3faf9aa57834c28f4d09a702ae3d7c80a278d5719f960fd026e82f1e77513b4fad8c51f5c4967d9f00bdbd9c1b186067efee03ca109f5837385640d5e92d384b2663bbff677296bcbdeaf8b946bb61253199921a79f644f34de9cee603b5c5fe0616f12aeaf03571396d937b27e18d4e9e89ad2065d13de70038e19a11d480ebbe2a08e2c3bfd38e60adcb84ecb17b36e6f768550c0acb0720535614f62c7d59f244137f323fd23aa3db54d38273b77196e312f4ba1192b5c9f1") openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x484040, 0x0) (async) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x3, 0x686d8358, 0x0, 0xeb6, 0xfffffffffffffffb, 0xffffffffffffffff) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) (async) syz_clone(0xc0000211, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x0, 0x0) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x145c0, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x9, &(0x7f0000000000)={0x50, 0xf4, 0xb0}}) (async) writev$auto(0x3, &(0x7f0000000140)={0x0, 0x84}, 0x8) (async) mmap$auto(0x0, 0x6, 0x2, 0x400000000040eb2, 0xffffffffffffffff, 0x2000308000000000) 11.414292759s ago: executing program 6 (id=4836): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r0 = socket(0x10, 0x2, 0x0) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES32=r0], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) (async) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3a, 0x1, 0x0, 0x1, 0xfffffffc) (async) setresuid$auto(0x0, 0x0, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25040000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x24004840) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) close_range$auto(r1, 0xfffffffffffff001, 0x6) (async) socket(0x11, 0x80003, 0x300) (async) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.6/usbmon/usbmon22/uevent\x00', 0x210400, 0x0) read$auto(r5, 0x0, 0x20) (async) recvmsg$auto(r3, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf620547", 0x3}, 0xd3, &(0x7f0000000600)="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", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1, 0x1, 0x4, 0x7, 0x4) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) (rerun: 64) madvise$auto(0x0, 0x200007, 0x19) 5.255508656s ago: executing program 8 (id=4846): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, 0x10000000000402) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x40104d00, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x27, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="741c7b08370ae68bca175e65b99682dd965c248fc071db43bd332bad6e05ef00b5833c5bdb0f", @ANYRESOCT=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\r'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000280)={0x0, 0xffeb}, 0x1, 0x0, 0x8, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/dbroot\x00', 0xc2183, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000180)={0x20, r8, 0x403, 0x9, 0x25dfdbf8, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "196f88149b0c"}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap$auto(0x0, 0xe9a3, 0x3, 0x8000eb1, r6, 0x6) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(0xffffffffffffffff, 0x8010661b, &(0x7f00000001c0)="7f5d05000000974088e82340076200") writev$auto(r5, &(0x7f0000000180)={0x0, 0x8}, 0x1) 4.673768214s ago: executing program 7 (id=4847): r0 = socket(0x8, 0x3, 0x9) r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1000, 0x6, 0x8}, 0x4) (async) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000004bc0)={0x0, 0x0, 0x0}, 0x4004811) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) newfstatat$auto(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x8, 0x6, 0x7, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x6, 0x10001, 0x1f, 0x0, 0x7fffffff, 0x8, 0x5, 0x6, 0x6}, 0x9369096e) (async) shmctl$auto_SHM_UNLOCK(0x3, 0xc, &(0x7f0000000580)={{0x6, 0xee01, 0xee01, 0x9, 0x7, 0xff6, 0x8001}, 0x9, 0x4a26, 0x13d8, 0xbb9, @raw=0x5, @inferred=0xffffffffffffffff, 0xfb5a, 0x0, &(0x7f00000003c0)="900bbcbe2973f877226530bedc15bfdd2bd60edff296d7806c9d78cc7929c777f11705b952d34b2f52a5025a5047e1e97b704e25616d7ceadf3042213521b90f99ef0af4d83cadfe6d02beb89882f5cff8dfae42fcf344b0c4550582425b93a27fbc75b3ebff4ea46063d0e0368bd0ffe788a760b4c73a8a4863df7fd9d4a0a42d92679d16344733a8ba069847d30bf78a3eaaaa5ae1f086354a0bf434add9238762cad29bbc6fed2411b3f133e3df0e7f71d42d9f075dfdfad581e0e96145b4181a9257fec9058d9efab254297d57bd1013d3b470690ca7744ce8985fff1eb9cbb56a28e8d4feb60c", &(0x7f00000004c0)="588a16f452045f109e9238c89e1fc5c42d8520d31511a69cb4b29351309a81db4db3f8bddf36124148f425996e10baeb74bccbde06c6080f527338db76f6b03a150e6ea95939dd690b1b32c0a759e0d92f397ec0e2600623fba626fbcb2e1aada3b4a45f8df01dd19f4e18b1f8d491ff20bb85c327a15602acf17e7903af0c42456f00a2759e005d0525481c215e7338816fc3d95015cad376d57774d901fa54a10e3cb66c57c9f1b9edeab16668a998f047266f9ceab4e0012d02"}) r4 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) (async) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) (async) sendmsg$auto_TIPC_NL_SOCK_GET(r1, &(0x7f0000003100)={0xfffffffffffffffe, 0x0, &(0x7f00000030c0)={&(0x7f0000004c00)=ANY=[@ANYBLOB='X*\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf2506000000e4000380d800ee80040002800400a9800400ac800400e78004006b8007000800277b000008002600", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="8530b3129d3f017a739fe7901bfd2e1b19c149268b0aacefb750ddf332bd157650e07e81228f06630f9d8f64337a6ed203249fbd985cf7cbf5373c823bbb75a288d7602a581541ce401b531430b786575a0919a51e9b6efc65e74cc4521cf05e30bce6c8c2b58944e71e4ad80b61e67ea031f30a605d104e8d7c55e76a35e2ebf5335a0338cf435eaf6ad5a8fc992d0ca1a2b56f8ee40ad43db6ee0f2d594700ee30a12c5d0b28831dee32a65073c2a95f5b8666b49225b62ed93ae2f3450d73fabb89c686d0ac0c28d5301419e759b63f0e9ff2eccb557b39a225a881d29f57928d49c1a743fc7c3a1ca6048d7c0400d78000000008004300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000c00018008000300", @ANYRES32=r3, @ANYBLOB="00000000dfe7b74e62fdd74d49eaf21409800d00b0002f6465762f73673000000000040013fff800bfad90", @ANYRES32=r4, @ANYBLOB="e95865c7f5b07ee2fe62ea1be38060ea41ad8f31ccc888223a10e569433b0cd4979d473d93f593cbb2a3c7dec0f5861efceb92a6ec12fc9536ef0a6e78a37466671c759fdbfa116f3d2e8d5e7c0f4c73747db9f94553d78def98acdcfb134790d45d0550db357b0800bd00", @ANYRES32=r5, @ANYBLOB="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"], 0x2a58}, 0x1, 0x0, 0x0, 0x8044}, 0x10) (async) listxattrat$auto(0xffffffffffffffff, 0xfffffffffffffffc, 0x1000, 0x0, 0x3) (async) prctl$auto(0x3e, 0xb352, r5, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$auto(r6, 0x11, 0x67, 0x0, 0x0) prctl$auto(0x16, 0xfffffffffffffffe, 0x2, 0xde, 0x100) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) (async) close_range$auto(0x2, 0x8, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 4.180331669s ago: executing program 8 (id=4850): close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800) mmap$auto(0x0, 0x21005, 0x2, 0x20eb1, 0x401, 0x8c) r0 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) close_range$auto(0x2, r0, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, 0x0, 0x400d0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) 3.441767861s ago: executing program 8 (id=4853): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x5, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) utimes$auto(&(0x7f00000006c0)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) 3.009546544s ago: executing program 7 (id=4855): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x438001, 0x0) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae60, 0x10000000000402) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00/\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x01\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea!,[\x91\x8e\x1b\x95\xafQ?CL\"\x01\x0e#\xae\xa9|8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0\x12\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12mwU&[\xde?\x9a$\xb2\xd5\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00', 0xfdee, 0x1) syz_clone(0x20000000, &(0x7f0000000600)="5cdfb7b7fd1915f7112ba0f9886cf7120888e23b5bd5ce77ffacedc079e9969e58ab1b975e78f6c516bfde8fc9922f989b69bd99e502900a870d3e1aab3aa1b4c3018bb79a12a99d46097088898cd14ae5988ebf56d5549ab8e1828f63c8a1dce26a49a62b1a5bd4b148fad826366bf605d680ed4489f0143d06e13fb58d94f5099a2b59b6469f2377a5311f01842dcc9b1f1a8839876cff7691496ef2152add4c8861624cc865d20d933d720fab254c51d7799d173f9739049b1ba36b474e26cac0b2e0e368c33bcb4fbbe75d892834595a8e110e23ffe9484e8d4d0fad1333fd3c23fa2c8bf7a0cf0e31fa407d33405d98d162efb521f50131eb33956f86913b", 0x101, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f0000000380)={0xdd}) 2.840421966s ago: executing program 8 (id=4856): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r0, 0xab08, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000000c0)={0x910, r2, 0x800, 0x10001, 0x25dfdbff, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x8ec, 0x7f, "31983bcba949d631d6eb96661e62986d59eff9021812ec0199ce4b9e04db215e104f3e6ddac5bb529f74e37b9882c9c2cd65055ff3220ebba1f68d12bb22b7631fddd0dfb9eae7b010340c1aaa37c0a9e7c66b23caab77e01a17db1c6361798d4c3333da8b72852c9a78c2aa15558edc629a14f4a345546bd59f643a30c1df415952e99d17360809785c76e46f53ddb58e916ba8c866efe817e11c1ded70818952762bdafe3dad84b9991e3c3b316cd67063d8c7d242299fe58b7f3f2c03bd58cdd7cb547d3d0d0448604c91ffc7ac2af7fb2558b3b358dc1cb1353ff2c95f7f076026b63e196b7303a2564ff90b6710142dfcd32c19b9d1fc347ec40a3ddc48cfe8ce802e07378983238b4f845b6c64d63f5e6cd6df9ef46787b06d4b7f9363d36ccdfde4f7f060e9cc35b4d0ae37c4597851721718d64be743758e524d03e1dbb472009bf344f41cbf9db471ae0c4430dfdd7d3aed16fb7a21ed28cd8b3f00ec1fc0ba64daec6152804ea9632d52037cc73c473e4df041d2d9654d2bc126945783d36c66505a40e41b3a6f9904ce9b6ce278679325beed034ed7ed17b63f840bfe885963e1b993290cbb84f9b30c89ca6a3821e12bfe6c015809e8be35c9d0a8315933bcd85214dc657e721358ea86baca35b0d2fd3590e1397b2f9ffa47c7e65dbc802188215354543b21c40cff24244dbaf9d14bae55f9062c6a1ba96dd28757f758f7160e67bbe295f1e536f2d3f55e84b2e33639300f0bf7cf28332afef3954caabd5dcebc4af1897025b54f567f1e4c53bbf1baa31613072a86461445eb1f53831a9a88b11334f7eaf2efbf8073a17db49497d9682e041325f4b0b83edc6caa87c6101eede711880c8a65f898f0e621d8cc51dc86309e1e5384858c6252ba35160cf9a090b6b555fdcff584f3fa5ce2c68e750cfb36712df6925168ed783cc231527bd6cf2210688225d860264b77225304dbc2d4aa05281ee6734158bdfd45c494675798e5c3031f3e4c122c6bbd25fc78114427b4409faf34f39943d8a3674de7db06aeed571deb837cafd659510684e710713835707228924695529b4f27b8377ecf67ef1842689c887fdd365f1fc99b20b6f4f33b22c2f4a28ebfaac0b301f0f13b81915b9cf796d45e21f918edff5d1639ea6e7f317c3a853456b6a6d48b6c2665bd466c620036ed562972e7f27f9cd36c85e691f90228cf378e694221abbccb215c8cba54988060158e7d3bd9806664048674977fd38c1dc8cc04bee306cfbdb2c5526553ee02bb49e6dba42c4c2ee34487d42c44a74ad3d75fa86c5d7ebad26a28bad4269fa59f9598cd56b9fc1e687750f10f38350d64d84c450b31862ef13c1454f9ae8c4c3876bd20f945831285a829724a112ee065e069af3e298c4dd3512843eeb039b3028e0525510afb73a6c809fcc44535a2c201bbd4e2ab6a66a1a39a45f1f46cdc9ed060bcd37109e335ebd1c0f800009e6558280e8f93dca2ed34925a71ad351adf284889df7185fe25821dbb0d8a3bf1de9c447fb5990e887e6a8d3fa9a1f68839aa59a471a0a5d61a7c5fc472d77eaaa4c0de816a3fe996ab3b27677c83de381aa22cedeef505e2f5fb306783897cccab5e0824cae596dd34204f77fe08a588db7348ea50119ff88a61c9d85a90d935170135052f2747e7b79558bccc1636960a544b002621f116933b982dcefa1a505ddd710577de7f0c3c555e617a1cc29b06fdc93267e4fed80a776cb3724d3311d89bc977550f517cb3165fdfc748e1246458dbc69205b70159ce879a71e4428a1bf00741e7825d764976eb1965466a0d02e84d32f635b04528754e9f6d0fdbdf1df78d5e029806703bced095c3173f4cb091c3e5348c0cede614e8d3fa21e228b42301ecf02d586005d36f74d9f80db8a0b5f596863a811ff9b79ffdb2d2333c1e8c45a9cb29d723a6826b7707db73062a81f63ea133da0a4da02f63893e7781c7d94ceca0efe5f71e778d8b047a20502acd582011c942ad171f8fcfa87a422abd322aefbedc7ec55d48a7353a5bc7c78c40731df8aec31b533c7be9b5ce3e05cd99bd8d22d2ddbc37f0c75381667a7b65ec5baddef844e411c3caf6e04da8df63d20287166db4bc8acfcad2066150ee5bbe766ea4a23e35c13aea8b236f92b4fbc301472411bf8a6b82895cc0108ae21fb3be5efbe3a1c6ee9967fa519b53cfe64e2e59637d63a1823dc9484efa5b1356da1786a385aa8b1965401ba6f2f7a42d1a41020ec0d9df3e0f58d78333d4e5b7b94853f7eca0fe290fd033ba0e9bcfb95b89d742f1a022c394fc90f21faed20c7e49191ad40d0d0f784264780779d95f529085d27dd6c83fdffaa111bf5857aa10632c5e26ee0a793b329a153f6bfeed6f4d0dba2052c117a45f38709e037cd517d69b8f63b29942bc0d1a0db9056b876ac1dd5ce2456f577ba4f76c940759a8fa86ac8328b4d2b867584adcfe3326d96d10259375d57905603ac8fe85d68453acbd5399b5653f1d53a72463e09667ef90c4a695ec89f5ca19f7b6a15a059d0846c42768152753c504b05756db61e8bf91b9353c7af0dd1b4dfbe11614365acdb081953d62556d19eff03b96810b34ae20526d96f5025da17844086387165cfc09e1d407c6c233aec6a9c9bcc5beefd5befb30d55463e97414283579251c9db8078d800df337c99712336aa0cdffcbca99dc4bb1204449dbdf0d057cb754296b2237c512df6bbcdd28b2f4c2f3e80d7aacfc5459b687f4dee8b00c9322f80cb3e306d3483b3f4c79b6a2120ba4db21081ac0a2c56687591cae3314f581bf2fec7da9621137ec920f86de2d36e415cf32f4e7279c6820d34a46f35dc5fc4e5df3318e22efd622ed99942fe34241b094b67e9b7b2f187bc388c589e27f2aa722a763adbc555907dc324603ac85e060d336c6d4e7f946d25e448c5732bed156c7d41b3f972d805f02a0e643dc2fbef39a2ccf379803f21ee03ce3c2f79de67067f3258ef60fd52ac3988c036877f63b111ffd5005e5c6512db537236ada46a7dda3931cf614761a5183dc0f7ad1cdf403ece760f1fe7094b906605a8164fce155a6e11f80d05cac5eae1cfbb3f8745b8243ad254685ebbeaacb35ff352896d89fc7c3fff440f9b5b003ae1c6a1b2ef2b1683dba48c5e95e02e076479532b977e7a05134db76d37496d15e12ab1c6e5a1e827d037be0e7002b720a27"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x10001}]}, 0x910}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000000) 2.593900729s ago: executing program 6 (id=4857): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x7, 0xe, 0x17, 0xff, r0, 0xffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x1184, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x120, 0x1, 0x0, 0x1, [@nested={0x114, 0x116, 0x0, 0x1, [@nested={0x10d, 0x96, 0x0, 0x1, [@typed={0x5, 0xa2, 0x0, 0x0, @str='\x00'}, @generic="946a52701565afb7fc2765ea6326fe0ff7f6bd06452e763badb547a569a4451dc00c65d85becc32eb4e2eb9044b70a99a099f8bf042e3dbc88521b6415b338547f0f28aef7cb24d5c7a36c6d78702c315f1bc3cf38149b90ac45153fb66fbb69eeb9049e23f77d3ecc016898cddaa8c2ada1963a6c5f44caeef41c0701cde1d838abfaf490440a931e6a2885fe9a1d3ca6ec89b58760ac57132ba30900e57828478d9120db81faed62a243aa152ba6d17e40ae4fbff7a132724c5974624d98f8b16b5d42a4c20469e330", @generic="6c663c7aaf9af52c7f532e0d7dac503c46019e3be3204078d2dbb312a0bf6727b338a298ff2aeb20734da27a9a8744b0374c7a", @nested={0x4, 0x9a}]}]}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1048, 0x2, 0x0, 0x1, [@nested={0x1041, 0xda, 0x0, 0x1, [@typed={0x4, 0x9f}, @generic="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", @typed={0x8, 0x146, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="3eddc99bcc9008cebd60632e0840064de571260cc6", @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private0}]}]}]}, 0x1184}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x844}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_IF1_AGE={0x8, 0x3, 0x5}, @HSR_A_NODE_ADDR={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="720100006ae8003386a1144370fa0af1e7ba78f1d39c3844a98fdf6a5b03975ed9d56ef9d5dcc9edbf0b15795878174e23264fcfc5697ede37cdc80113992f27759a728da1bcab53820e8cccb89f1190cf663fd4af08cdbc2252c90f2bbdd670236f1dcbcf98f361e04ae282b7bf604c9d72fbbcb85a5fcff50d49c50bdf1836e4069b2a3c10f67681e9456be6b5c5000442eadc1ea1d5a45333dcde6d", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.456864453s ago: executing program 8 (id=4858): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000b00)={0x1c, 0x0, 0x1, 0x70bd2b, 0xe2, {}, [@NBD_ATTR_INDEX={0x8}]}, 0x1c}}, 0x80) 2.388763902s ago: executing program 1 (id=4859): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0xe4, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf2501000000180007800c00018008000180000000009c8d9708", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 2.159600215s ago: executing program 1 (id=4860): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0xb5d1af1605322dec) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2.057539946s ago: executing program 7 (id=4861): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x1d30, 0x6, 0xffffffffffffffff, @relative_id=0x2, 0x7}, 0xa3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/queues/tx-13/xps_rxqs\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) sendto$auto(r0, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r2, 0xc0044dff, 0x0) setsockopt$auto_SO_BSDCOMPAT(0xffffffffffffffff, 0x5, 0xe, &(0x7f0000000000)='+D^-$([:&\'\x00', 0x7fffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) sendto$auto(0x4, 0x0, 0x3f000000, 0x10000, &(0x7f0000000140)=@in={0x23, 0x4e33}, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x0) 2.037844712s ago: executing program 1 (id=4862): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) open(&(0x7f0000000100)='./cgroup\x00', 0x105040, 0x152) (async) r1 = open(&(0x7f0000000100)='./cgroup\x00', 0x105040, 0x152) open_by_handle_at$auto(r1, 0x0, 0xffffffff) (async) open_by_handle_at$auto(r1, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) iopl$auto(0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x17ea}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x7}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x7}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) (async) sendmsg$auto_NFC_CMD_STOP_POLL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x17ea}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x7}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x7}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r5 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r5, &(0x7f0000000380)="703a3a82d9e5cc7c2ceda8d50bfc", 0xe) (async) write$auto_uprobe_events_ops_trace_uprobe(r5, &(0x7f0000000380)="703a3a82d9e5cc7c2ceda8d50bfc", 0xe) sendfile$auto(0x1, 0x3, 0x0, 0x74c) (async) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = socket(0xa, 0x2, 0x88) capset$auto(0x0, 0x0) (async) capset$auto(0x0, 0x0) sendmmsg$auto(r2, 0x0, 0x7fff, 0x100) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/schedstat\x00', 0x103042, 0x0) setsockopt$auto(r6, 0x29, 0x10, 0x0, 0x1) (async) setsockopt$auto(r6, 0x29, 0x10, 0x0, 0x1) socket(0xa, 0x801, 0x84) 1.917898865s ago: executing program 8 (id=4863): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0xa, 0x6) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYBLOB="32bb67fb34234af6df2506000000080004001d0008b267fb2a86b8efac2e040f249592c3008505"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000070) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x51b880, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x72, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000002c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee"}}}, 0x8, &(0x7f0000000580)={{0x4, 0x2}, {0x3ebdf443, 0x2}, 0x0, 0x1, 0x5, 0xa, 0xfffffffffffff5a2, 0x8, 0x412, 0x2, 0x7, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x7fff) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) 1.189462683s ago: executing program 6 (id=4864): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) (async) r0 = gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) tkill$auto(r0, 0x7) (async) ioperm$auto(0x7, 0x6, 0x2) sysfs$auto(0x9, 0x3, 0xfffffffffffffffc) (async) socket(0x29, 0x5, 0x9) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) getsockopt$auto(0x8, 0x6, 0x4, 0xfffffffffffffffd, 0xffffffffffffffff) (async) setreuid$auto(0x4, 0x8) (async, rerun: 64) setgroups$auto(0x7, 0xffffffffffffffff) (rerun: 64) mount$auto(&(0x7f0000000040)='veth1_to_bond\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='/dev/rtc0\x00', 0x1, &(0x7f0000000100)="2145cffa18f5446972f94ab77f658126c1281d2670daf06a4225eb9bc9c7393b16580ddd59ef903ddf6db2ffe49b087187629c683463878cf0bf59ac51a8ff6a57c5588135a90aec6668187ef50d0559a617ad5fcf1c5c49e64cb6c6831fd7f5578087996155ff64f13e0b55e65c577052f8175771c826844fd56efdc985bf18a3c9529590e3925c20476fa135c70751d8194e7504ec48f6bacf3fdf08a5099dfc69d193a6525f8375583d7bd2fb1e16c84ed57903ab5ec27a29388af581d2453f1634222966171646de9da6ff0f3e1d77b26aeb37750e704b674298340ce8bbaf6ee5fd48402ccbe0") (async) setreuid$auto(0x3, 0x7) pivot_root$auto(0x0, 0xfffffffffffffffe) (async) move_pages$auto(0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 1.038061499s ago: executing program 1 (id=4865): statmount$auto(&(0x7f0000000000)={0x81, @inferred, 0x5, 0xffffffff, 0xfffffffffffffff2}, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x1}}, 0x66) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) getcwd$auto(0x0, 0xffffffffffffffff) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) 326.218745ms ago: executing program 6 (id=4866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf2503000000040007800c0002000500000003000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 160.647488ms ago: executing program 1 (id=4867): sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4c094) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) writev$auto(r0, &(0x7f0000000240)={&(0x7f0000000040)="408c3908cebc72570fae198bc69dd73430f1f82f35e541d20c03fa6463dbae426206424746e922d14d69329800"/58, 0x9}, 0xa) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r1, 0xab08, r1) 0s ago: executing program 1 (id=4868): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose7/queues/rx-0/rps_cpus\x00', 0x1c1002, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_GET(r0, 0x0, 0x4000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r1, 0x900064d1, 0xc35) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x38b4c0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x40, 0xa2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) pread64$auto(r3, 0x0, 0x40000000f42c, 0x585) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) r4 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r5 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r5, 0x0, 0x80000000006) tkill$auto(r4, 0x9) unshare$auto(0x40000080) socket(0x27, 0x3, 0x8561) kernel console output (not intermixed with test programs): ToU comm="syz.1.4132" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1657.788008][T27053] team0: Port device team_slave_1 added [ 1658.244895][T16907] block nbd13: Receive control failed (result -107) [ 1658.401115][T27139] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4136'. [ 1658.673768][T27053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.691155][T27053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.819806][T27053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.897798][T27053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.930286][T27053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.976891][T16907] Bluetooth: hci0: command tx timeout [ 1659.010097][T27053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.230568][T27053] hsr_slave_0: entered promiscuous mode [ 1659.253285][T27053] hsr_slave_1: entered promiscuous mode [ 1659.889521][T27157] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1660.218141][T16907] block nbd14: Receive control failed (result -107) [ 1660.677624][T27053] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.039354][T16907] Bluetooth: hci0: command tx timeout [ 1661.482022][T27053] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.732931][T27053] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.177925][T27053] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.006139][T16907] block nbd15: Receive control failed (result -107) [ 1663.653709][T27053] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1663.785799][T27053] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1663.870546][T27053] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1663.993085][ T30] audit: type=1804 audit(4294967318.229:158): pid=27345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4151" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1664.017997][ C0] vkms_vblank_simulate: vblank timer overrun [ 1664.107448][T27053] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1664.231829][T16907] block nbd16: Receive control failed (result -107) [ 1665.002041][T27053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.041952][T27053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.067789][T16213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.067920][T16213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.089078][T16213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.089169][T16213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.208601][T27053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1665.305573][T27401] FAULT_INJECTION: forcing a failure. [ 1665.305573][T27401] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.305616][T27401] CPU: 0 UID: 0 PID: 27401 Comm: syz.1.4158 Tainted: G U syzkaller #0 PREEMPT(full) [ 1665.305652][T27401] Tainted: [U]=USER [ 1665.305661][T27401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1665.305677][T27401] Call Trace: [ 1665.305686][T27401] [ 1665.305698][T27401] dump_stack_lvl+0x16c/0x1f0 [ 1665.305751][T27401] should_fail_ex+0x512/0x640 [ 1665.305789][T27401] ? __kmalloc_noprof+0xca/0x880 [ 1665.305818][T27401] should_failslab+0xc2/0x120 [ 1665.305855][T27401] __kmalloc_noprof+0xdd/0x880 [ 1665.305882][T27401] ? sk_prot_alloc+0x1a8/0x2a0 [ 1665.305914][T27401] ? sk_prot_alloc+0x1a8/0x2a0 [ 1665.305938][T27401] sk_prot_alloc+0x1a8/0x2a0 [ 1665.305966][T27401] sk_alloc+0x36/0xc20 [ 1665.306002][T27401] __netlink_create+0x5e/0x2c0 [ 1665.306034][T27401] ? __wake_up+0x3f/0x60 [ 1665.306068][T27401] netlink_create+0x39e/0x620 [ 1665.306102][T27401] ? __pfx_genl_bind+0x10/0x10 [ 1665.306125][T27401] ? __pfx_genl_unbind+0x10/0x10 [ 1665.306148][T27401] ? __pfx_genl_release+0x10/0x10 [ 1665.306177][T27401] __sock_create+0x338/0x8d0 [ 1665.306211][T27401] __sys_socket+0x14d/0x260 [ 1665.306240][T27401] ? __pfx___sys_socket+0x10/0x10 [ 1665.306270][T27401] ? xfd_validate_state+0x61/0x180 [ 1665.306293][T27401] ? __pfx___do_sys_close_range+0x10/0x10 [ 1665.306330][T27401] __x64_sys_socket+0x72/0xb0 [ 1665.306359][T27401] ? lockdep_hardirqs_on+0x7c/0x110 [ 1665.306394][T27401] do_syscall_64+0xcd/0x4b0 [ 1665.306433][T27401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.306459][T27401] RIP: 0033:0x7f3bce18eec9 [ 1665.306478][T27401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1665.306504][T27401] RSP: 002b:00007f3bcc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1665.306529][T27401] RAX: ffffffffffffffda RBX: 00007f3bce3e5fa0 RCX: 00007f3bce18eec9 [ 1665.306546][T27401] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1665.306562][T27401] RBP: 00007f3bce211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1665.306578][T27401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1665.306592][T27401] R13: 00007f3bce3e6038 R14: 00007f3bce3e5fa0 R15: 00007ffd66b257a8 [ 1665.306624][T27401] [ 1666.069991][T27053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.221254][T16907] block nbd17: Receive control failed (result -107) [ 1667.571958][T27053] veth0_vlan: entered promiscuous mode [ 1667.633943][T27053] veth1_vlan: entered promiscuous mode [ 1667.851412][T27053] veth0_macvtap: entered promiscuous mode [ 1667.939923][T27053] veth1_macvtap: entered promiscuous mode [ 1668.169539][T27053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1668.273209][T27053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1668.339479][T23666] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.389671][T23666] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.416882][T27446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1668.433408][T23666] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.474232][T27446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1668.499538][T23666] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.551772][T27446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1668.597246][T27446] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1668.627977][T27446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1668.783342][T27446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1669.042981][T27475] Console: switching to colour frame buffer device 4x6 [ 1669.110485][T23656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.160177][T19612] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 12 with max blocks 11 with error 117 [ 1669.326091][T23656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.390681][T19612] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1669.390681][T19612] [ 1669.714266][T16907] Bluetooth: hci3: command 0x0406 tx timeout [ 1669.755118][T19629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.824292][T27512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1669.846438][T19629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1670.044836][T27512] veth1_macvtap: left promiscuous mode [ 1670.245191][T27523] Console: switching to colour VGA+ 80x36 [ 1670.357307][T27053] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1670.513114][T16907] Bluetooth: hci1: command 0x0406 tx timeout [ 1670.589805][T16907] Bluetooth: hci0: command 0x0c1a tx timeout [ 1670.596290][T20850] Bluetooth: hci2: command 0x0406 tx timeout [ 1671.417574][ T30] audit: type=1804 audit(4294967325.708:159): pid=27578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4174" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1671.442806][ C0] vkms_vblank_simulate: vblank timer overrun [ 1671.499420][T16907] block nbd18: Receive control failed (result -107) [ 1671.660084][T27594] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4175'. [ 1672.077238][T27529] Process accounting paused [ 1672.662069][T16907] Bluetooth: hci0: command 0x0c1a tx timeout [ 1674.214527][T27670] netlink: 'syz.8.4185': attribute type 1 has an invalid length. [ 1674.258204][T27673] netlink: 'syz.8.4185': attribute type 1 has an invalid length. [ 1674.578528][ T30] audit: type=1804 audit(4294967328.874:160): pid=27672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4186" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1674.735784][T16907] Bluetooth: hci0: command 0x0c1a tx timeout [ 1674.830438][T27687] phram: not enough arguments [ 1675.778716][T27733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4191'. [ 1675.810948][T27733] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4191'. [ 1675.833967][T27733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'. [ 1676.394922][T27767] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 1676.781289][T27768] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 1677.203191][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.210017][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.162645][T27863] [U] [ 1678.165589][T27863] [U] [ 1678.168323][T27863] [U] [ 1678.171067][T27863] [U] [ 1678.188747][T27863] [U] [ 1678.191616][T27863] [U] [ 1678.194670][T27863] [U] [ 1678.197540][T27863] [U] [ 1678.219094][T27863] [U] [ 1678.221966][T27863] [U] [ 1678.224870][T27863] [U] [ 1678.227594][T27863] [U] [ 1678.249754][T27863] [U] [ 1678.252490][T27863] [U] ×¹ôY¹È)¯$v€Ô [ 1678.256785][T27863] [U] Bòâ,ì♬9È_(2å€Q ­y¡)±]¯Ãÿ˜öÛP2|íÎ+la5Ç~Ül,¨é©&][9 [ 1678.265335][T27863] [U] n蟽ZVJâê+7æˆ)'<"¾Òp©.3( [ 1678.270240][T27863] [U] yJò÷4xøÏ+0ŸËMmuXšƒ,çaŒµ% SNsÜSdª^æ7dzFD¬+I’5Žò™Õ^)$ju&Ÿbsµ¸®-ŒÁîzÅ££c‰Åì?æ6½¡Û†c O†W¹ë! [ 1678.282986][T27863] [U] ùlÛfPã YäÂÄÂgðð˜{y³ÏïDV(ù_JAYM†Ž9ô¸q¤÷-Vþ4o¿oŸ–×Èf-plï¼Mæg¾"«œ”Hýóå! [ 1678.292683][T27863] [U] ƒ÷ïÝu«VôB·a>É”Ÿþ;önI=–ÂA홆AŒW9ÇdÄtTðÁ…‰Ë…Ü›·º'šZn§»×DÃfœ'ø©éV(¢ï-þϦÀ!ìi%ykPœY ¤öÏ—rÛ•†Ó(µö ‹{…9\½<•àÙ³ò!˜ƒqÐfÝž.’\óg§#©’öecBÉ kø nÐë[‘j3`t#×BUËŒyXñ( [ 1678.310789][T27863] [U] ÕG`tYÓ|øÊùiäý!Ã5|”B¿LÕ±Íïoî [ 1678.316274][T27863] [U] ›9]:No? {™Âh«œg·ÝE®ÑÒ1†ñ/<\/Æñ€–ìsöh––ÿ ƒƒ6)£ÀÙb ìn²¶š× ËuW€€à4q˜Ô±Ââ×[À\_£ÈQ\yÖ«©5ÏÚ~´59Þ}­Í>»§SE8ÝÞ%%Ú¶X´ÝŸ-°9Ð.oçD^GáD’/€@EdãKB÷uÙŸãyˆ7.·r‡Mú_êû÷Üg½¡¼„›è§6(=*Þ²öS*_ [ 1678.336647][T27863] [U] Y Õƒ+5ŸÀXÏì&cˆöeAË’²ŸÕíÂ¥ÚÂX‚%µÂyH{ƒ,ꢱ=X#åÞ㶥ÔHYygÑbÍ$“œç ®òêk,¿/6èvw JO¶Oå¡]ÿNOTÙ½ùfÊ8QE:¡Ðxøú¦õmºh:Lc¨úAè4âçSÏã$ÉßÝMêÌ—®Ä2ùxU't똅Àl‚j¹ÆΩ¡ë"v¨€äÊÊÂzÄðïZb¶ªUÌhÞ@)y¤Y)ô„sç³ úªh¡öUÁ8:’ÿM+½;š_Ó0´hJ%ÊÍyÙ²îên$qN “—z@#MÓÎn8ûó~Q•ã…ÝORžqûìÈÏ€ƒ0ö{<ˆzœ”±Ã+Ù+>ob³¯«anîÜXI¯&§°õ>úÚ½|!ýµ/TÌŸ [ 1678.758160][T27863] [U] j-˜ôÊkW9¯_¬›”1æù›ÀãuÈÅ7»Wúgê[¾•,ž½VG~ÏŽ½ÉhÎhýzåÊÉØ4½„×»¿ˆd3-=¶Î;£}†Þ|_þŽÊ÷ eß&ê˜þõŸ¡¤ °-- u}¿ÅÇLwwz샟£X~†>®0-Ðóë€y÷?ù">Á"bìön‘ì¸î1†w\äûŸuÏÍ{RÙNì¬ÒŒÁóí(X;ÞÈ¢[¥Ö3y†ÛT¾,/ñ¼$³„ºä®d ´’Ïṉ̃+MPcóyzÜm|ãƒ"²Ú‘z•TÔúKøÙ]çë¿(Ø‘ …‚jSKW5Îv³}?KnñæÉ‹Cž0%éñàÓ´}Zª"s·[< 鉦ê_yÛmŸ*ˆ7I¸4”-h^LÙ«©;ÖÇæ£FÂ}:ãfnîà~G•¾ÍÒ(vÊ9ûU`j$“>N¬ïÔt¢(6œksè¹.Ä«n’‰CU>ÙòXý¹ñv‘›ÓÔ¬bD_Ј;ËG„Gý¤òÝÄ]îAG¬âJs‘Ö¶y©Ý4Øj¾¡ð´\GEø–…èy?cnÀtú 0Ïý~º:ýJ¬fê P÷Œµîfä+Š;M„xÎØ:Š¤Cø÷[Á¿Ûð ؽ~ÖɈE\ [ 1678.806890][T27863] [U] /2–”_»z˜Ì;ò9±÷7LI.›´&tçó/ÉN¾ [eÎj Ø$&´š£Ûûš8ÕÙÝÞ ƒ÷ÊØ`C÷éþ8ÖíÄÝÊ)Öðu9K‘sŒéFŠ ó:Æ÷z'¯¹Â¿Ã2÷ [ 1678.819485][T27863] [U] z•ÆÁ¢Ç[ÿ/,Ü¥úÙû°iG†A9 |wúá0ö­ g×°w4cVÅæÊW [ 1678.826809][T27863] [U] ¹L^Gbqd0õ4a€³3ÑX1B:<_é)jÑêY‘é¿î•˜]›aИà :àÀƒ4H€Ñ¤mrB‰Y°½öMÄ£ifÂTÄ@¦0{ºg»5K*²Jƒ®á'¦ ·Õ7DÚŸŠ+G:´–©„d?¯À5™•Š‰Aþ¤Î þÓ&¹ÑKîÒ [ 1678.842147][T27863] [U] /Ì9Ñ¥L÷?%“®nýùΦÎI0 !NÐUß6úFð§+½½ -dé *šL+ò™ [ 1678.848983][T27863] [U] Í­s(^•¶?¹ÍÏóXG)Nèö²;ØŽ…ˆ.µÑkLýXg^ePGy¸:ÿÔÐ?Ô«§ùbGŒ†îh¶`ä¼¾ffc'^‹øª2Ú0mÓÿgwMT0$ŠÞ'#Æxòi!²n@mí;î"ŒZ%óÀ‹ë|­ê5aÈqô1¿Ÿsrý¨±qoÄ„.ÅŸ¡ù­­Êãpþ?‚$$)ØÆ:mÈ^·#uÀ¼ñ÷I.®áÕÂuD¡Q@Û( 5ËöSåÜÊ¢á»Z$Š®}UUÇoãÅqFâŠz…çJËèiÙa}÷5²íN™öMæµ&g˜ [ 1678.873694][T27863] [U] Oرûp`…œÄJ¦#@ÞN6¡½RoÍ„¨€ªÛdóÔ˜l [ 1678.879539][T27863] [U] °ߗú¥‰è{fžË^ó‡*G\'Ã÷½9mŽO°?šæ‰É—ú [ 1678.886189][T27863] [U] ªºðý [ 1679.165266][T27863] [U] ¶nѯ’Ÿ4? [ 1680.081291][T27897] bond0: option all_slaves_active: invalid value () [ 1681.080173][T27946] FAULT_INJECTION: forcing a failure. [ 1681.080173][T27946] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1681.420724][T27957] FAULT_INJECTION: forcing a failure. [ 1681.420724][T27957] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.655359][T27957] CPU: 0 UID: 0 PID: 27957 Comm: syz.6.4210 Tainted: G U syzkaller #0 PREEMPT(full) [ 1681.655400][T27957] Tainted: [U]=USER [ 1681.655408][T27957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1681.655423][T27957] Call Trace: [ 1681.655431][T27957] [ 1681.655440][T27957] dump_stack_lvl+0x16c/0x1f0 [ 1681.655484][T27957] should_fail_ex+0x512/0x640 [ 1681.655521][T27957] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1681.655552][T27957] should_failslab+0xc2/0x120 [ 1681.655588][T27957] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1681.655617][T27957] ? vm_area_alloc+0x1f/0x160 [ 1681.655656][T27957] ? vm_area_alloc+0x1f/0x160 [ 1681.655678][T27957] vm_area_alloc+0x1f/0x160 [ 1681.655703][T27957] __mmap_region+0xf85/0x27a0 [ 1681.655732][T27957] ? find_held_lock+0x2b/0x80 [ 1681.655763][T27957] ? __pfx___mmap_region+0x10/0x10 [ 1681.655788][T27957] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1681.655821][T27957] ? rcu_is_watching+0x12/0xc0 [ 1681.655851][T27957] ? finish_task_switch.isra.0+0x221/0xc10 [ 1681.655881][T27957] ? lockdep_hardirqs_on+0x7c/0x110 [ 1681.655916][T27957] ? finish_task_switch.isra.0+0x221/0xc10 [ 1681.655972][T27957] ? __pfx___schedule+0x10/0x10 [ 1681.656037][T27957] ? trace_cap_capable+0x18d/0x200 [ 1681.656085][T27957] mmap_region+0x1ab/0x3f0 [ 1681.656112][T27957] ? __get_unmapped_area+0x267/0x440 [ 1681.656156][T27957] do_mmap+0xa3e/0x1210 [ 1681.656196][T27957] ? __pfx_do_mmap+0x10/0x10 [ 1681.656231][T27957] ? __pfx_down_write_killable+0x10/0x10 [ 1681.656260][T27957] vm_mmap_pgoff+0x29e/0x470 [ 1681.656301][T27957] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1681.656343][T27957] ? __x64_sys_futex+0x1e0/0x4c0 [ 1681.656379][T27957] ? __x64_sys_futex+0x1e9/0x4c0 [ 1681.656419][T27957] ksys_mmap_pgoff+0x7d/0x5c0 [ 1681.656452][T27957] ? xfd_validate_state+0x61/0x180 [ 1681.656480][T27957] __x64_sys_mmap+0x125/0x190 [ 1681.656508][T27957] do_syscall_64+0xcd/0x4b0 [ 1681.656547][T27957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.656571][T27957] RIP: 0033:0x7efca398eec9 [ 1681.656591][T27957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.656615][T27957] RSP: 002b:00007efca4752038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1681.656648][T27957] RAX: ffffffffffffffda RBX: 00007efca3be5fa0 RCX: 00007efca398eec9 [ 1681.656664][T27957] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1681.656680][T27957] RBP: 00007efca3a11f91 R08: 0000000000000401 R09: 0000000000008000 [ 1681.656695][T27957] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1681.656709][T27957] R13: 00007efca3be6038 R14: 00007efca3be5fa0 R15: 00007fff7fd35348 [ 1681.656741][T27957] [ 1682.078502][T27946] CPU: 0 UID: 0 PID: 27946 Comm: syz.8.4207 Tainted: G U syzkaller #0 PREEMPT(full) [ 1682.078545][T27946] Tainted: [U]=USER [ 1682.078554][T27946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1682.078569][T27946] Call Trace: [ 1682.078577][T27946] [ 1682.078587][T27946] dump_stack_lvl+0x16c/0x1f0 [ 1682.078632][T27946] should_fail_ex+0x512/0x640 [ 1682.078674][T27946] get_futex_key+0x1d0/0x1560 [ 1682.078713][T27946] ? __pfx_get_futex_key+0x10/0x10 [ 1682.078750][T27946] ? __pick_eevdf+0x30a/0x670 [ 1682.078789][T27946] futex_wait_setup+0x9d/0x550 [ 1682.078824][T27946] __futex_wait+0x193/0x2f0 [ 1682.078859][T27946] ? __pfx___futex_wait+0x10/0x10 [ 1682.078884][T27946] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1682.078918][T27946] ? lockdep_hardirqs_on+0x7c/0x110 [ 1682.078961][T27946] ? __pfx_futex_wake_mark+0x10/0x10 [ 1682.078994][T27946] ? futex_private_hash_put+0x176/0x300 [ 1682.079035][T27946] ? futex_private_hash_put+0x18a/0x300 [ 1682.079073][T27946] futex_wait+0xe8/0x380 [ 1682.079100][T27946] ? __pfx_futex_wait+0x10/0x10 [ 1682.079141][T27946] ? do_readv+0x218/0x340 [ 1682.079175][T27946] do_futex+0x229/0x350 [ 1682.079213][T27946] ? __pfx_do_futex+0x10/0x10 [ 1682.079247][T27946] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1682.079295][T27946] __x64_sys_futex+0x1e0/0x4c0 [ 1682.079336][T27946] ? __pfx___x64_sys_futex+0x10/0x10 [ 1682.079375][T27946] ? __pfx_do_readv+0x10/0x10 [ 1682.079410][T27946] do_syscall_64+0xcd/0x4b0 [ 1682.079450][T27946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.079476][T27946] RIP: 0033:0x7f3f70b8eec9 [ 1682.079496][T27946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1682.079520][T27946] RSP: 002b:00007f3f719830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1682.079544][T27946] RAX: ffffffffffffffda RBX: 00007f3f70de6188 RCX: 00007f3f70b8eec9 [ 1682.079561][T27946] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f70de6188 [ 1682.079576][T27946] RBP: 00007f3f70de6180 R08: 0000000000000000 R09: 0000000000000000 [ 1682.079592][T27946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.079606][T27946] R13: 00007f3f70de6218 R14: 00007ffcfddf0110 R15: 00007ffcfddf01f8 [ 1682.079637][T27946] [ 1682.383225][ T30] audit: type=1804 audit(4294967336.393:161): pid=27961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4211" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1682.922818][T27971] random: crng reseeded on system resumption [ 1683.261073][T28010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4215'. [ 1684.207113][T28037] FAULT_INJECTION: forcing a failure. [ 1684.207113][T28037] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.399610][T28037] CPU: 0 UID: 0 PID: 28037 Comm: syz.8.4216 Tainted: G U syzkaller #0 PREEMPT(full) [ 1684.399649][T28037] Tainted: [U]=USER [ 1684.399657][T28037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1684.399672][T28037] Call Trace: [ 1684.399680][T28037] [ 1684.399690][T28037] dump_stack_lvl+0x16c/0x1f0 [ 1684.399732][T28037] should_fail_ex+0x512/0x640 [ 1684.399771][T28037] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1684.399800][T28037] should_failslab+0xc2/0x120 [ 1684.399837][T28037] __kmalloc_cache_noprof+0x72/0x780 [ 1684.399864][T28037] ? alloc_netdev_mqs+0xed3/0x1550 [ 1684.399907][T28037] ? alloc_netdev_mqs+0xed3/0x1550 [ 1684.399944][T28037] alloc_netdev_mqs+0xed3/0x1550 [ 1684.399988][T28037] slip_open+0x35c/0x1150 [ 1684.400018][T28037] ? __pfx___might_resched+0x10/0x10 [ 1684.400048][T28037] ? __pfx_n_tty_close+0x10/0x10 [ 1684.400074][T28037] ? find_held_lock+0x2b/0x80 [ 1684.400103][T28037] ? __pfx_slip_open+0x10/0x10 [ 1684.400131][T28037] ? down_write+0x14d/0x200 [ 1684.400156][T28037] ? __pfx_slip_open+0x10/0x10 [ 1684.400184][T28037] tty_ldisc_open+0x9f/0x120 [ 1684.400217][T28037] tty_set_ldisc+0x32b/0x780 [ 1684.400255][T28037] tty_ioctl+0xc2d/0x1680 [ 1684.400293][T28037] ? __pfx_tty_ioctl+0x10/0x10 [ 1684.400339][T28037] ? find_held_lock+0x2b/0x80 [ 1684.400369][T28037] ? hook_file_ioctl_common+0x145/0x410 [ 1684.400404][T28037] ? __fget_files+0x20e/0x3c0 [ 1684.400436][T28037] ? __pfx_tty_ioctl+0x10/0x10 [ 1684.400475][T28037] __x64_sys_ioctl+0x18e/0x210 [ 1684.400500][T28037] do_syscall_64+0xcd/0x4b0 [ 1684.400540][T28037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.400572][T28037] RIP: 0033:0x7f3f70b8eec9 [ 1684.400592][T28037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1684.400615][T28037] RSP: 002b:00007f3f719c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1684.400638][T28037] RAX: ffffffffffffffda RBX: 00007f3f70de5fa0 RCX: 00007f3f70b8eec9 [ 1684.400655][T28037] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000009 [ 1684.400672][T28037] RBP: 00007f3f70c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1684.400687][T28037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1684.400702][T28037] R13: 00007f3f70de6038 R14: 00007f3f70de5fa0 R15: 00007ffcfddf01f8 [ 1684.400733][T28037] [ 1684.766197][T28037] Falling back ldisc for ptm1. [ 1685.828389][T16907] block nbd19: Receive control failed (result -107) [ 1687.278107][T28177] FAULT_INJECTION: forcing a failure. [ 1687.278107][T28177] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.481792][T28177] CPU: 0 UID: 0 PID: 28177 Comm: syz.7.4222 Tainted: G U syzkaller #0 PREEMPT(full) [ 1687.481830][T28177] Tainted: [U]=USER [ 1687.481839][T28177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1687.481854][T28177] Call Trace: [ 1687.481862][T28177] [ 1687.481872][T28177] dump_stack_lvl+0x16c/0x1f0 [ 1687.481916][T28177] should_fail_ex+0x512/0x640 [ 1687.481953][T28177] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1687.481993][T28177] should_failslab+0xc2/0x120 [ 1687.482030][T28177] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1687.482068][T28177] ? append_filter_err+0x3c0/0x5e0 [ 1687.482112][T28177] ? kmemdup_nul+0x49/0xf0 [ 1687.482141][T28177] ? trace_seq_putc+0x108/0x250 [ 1687.482173][T28177] kmemdup_nul+0x49/0xf0 [ 1687.482204][T28177] append_filter_err+0x3c0/0x5e0 [ 1687.482244][T28177] apply_subsystem_event_filter+0x75a/0x17e0 [ 1687.482293][T28177] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1687.482338][T28177] ? _copy_from_user+0x59/0xd0 [ 1687.482394][T28177] subsystem_filter_write+0x95/0x120 [ 1687.482435][T28177] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1687.482473][T28177] vfs_write+0x29d/0x11d0 [ 1687.482509][T28177] ? __pfx___mutex_lock+0x10/0x10 [ 1687.482546][T28177] ? __pfx_vfs_write+0x10/0x10 [ 1687.482584][T28177] ? __fget_files+0x20e/0x3c0 [ 1687.482622][T28177] ksys_write+0x12a/0x250 [ 1687.482656][T28177] ? __pfx_ksys_write+0x10/0x10 [ 1687.482699][T28177] do_syscall_64+0xcd/0x4b0 [ 1687.482740][T28177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.482765][T28177] RIP: 0033:0x7f0709d8eec9 [ 1687.482784][T28177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.482809][T28177] RSP: 002b:00007f070abff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1687.482831][T28177] RAX: ffffffffffffffda RBX: 00007f0709fe5fa0 RCX: 00007f0709d8eec9 [ 1687.482848][T28177] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1687.482862][T28177] RBP: 00007f0709e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1687.482878][T28177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.482893][T28177] R13: 00007f0709fe6038 R14: 00007f0709fe5fa0 R15: 00007ffe431ee938 [ 1687.482925][T28177] [ 1688.056730][ T30] audit: type=1804 audit(4294967342.364:162): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4221" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1688.317362][ T30] audit: type=1804 audit(4294967342.374:163): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4221" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1689.281881][T28222] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4226'. [ 1690.546324][T16907] block nbd20: Receive control failed (result -107) [ 1690.790744][T28292] syz.7.4234 (28292): /proc/28291/oom_adj is deprecated, please use /proc/28291/oom_score_adj instead. [ 1691.457079][T28347] block nbd21: Unsupported socket: should be TCP or UNIX. [ 1692.633361][T28403] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1692.828543][T28409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 1692.907855][T28404] [U] [ 1692.910836][T28404] [U] [ 1692.913679][T28404] [U] [ 1692.916779][T28404] [U] [ 1693.287340][T28404] [U] [ 1693.360173][T28404] [U] GmöÛMª$R¥ý4±Ë5×q9K5TL:–@¼P1U6êPÃlpþc g¿AØXèõÁ¼Þ³‡^ñy¢a:KkÓ®Ï'$1X›È¿nzNâxI7‰Ãî²f²Œ= , áµy{K£æ•ûb7¡J7´ [ 1693.373361][T28404] [U] kô󿤗âä [ 1694.122454][T28404] [U] KóPõ1ÁE·;Óx;ôÑ‹<ƒ Tˆ¯ø¬{;ßuqPIûhð‘eqÔ5;„œ¶«å“âxÄR¨ßî¾a’ÔÁvÉ#ý®¿ò–çÍ‚S^é1¾AÙ™OJƒæ¡µNƒ±¾aÙ|× W*Œ‰@§ëxÖŠWŽÛ bƒ†—g}/ðC@›Æ÷‡Ç¨Ä½:à°pt@ƒ×mìøÞþ¿@pÜ<¸Z•­»ŸzîÆ$…­¾¥2þ˜o”ˆÄµts…¬OÒåÄgXnP‰ÿ òz«<ò~ÊÆ¢”|êB߈ŽGØ#¼­nèÈQ™3f±lÁŸÝ«îÐmJª|8™²³öö^â“t]Ã_’"µ‰ZƒL™¼_(hØëÉI͉ßõ]“"äÏB¬% Q"?þùáé"AºãÑ´bK*tô_ÃRˆUs‰E™ñb£|6j¶ÿèS *TqÛ#af36» Ýç…óÂýß{ÍSäV#—iM-ìÆ<æõÙm¿bdªÌ6¹a·³ŸÌíbu_–x"ñ}žúëªk”¹* [ 1694.161231][T28404] [U] Ù5¼þJ#U&8/)¼h=ì©Å s ±NUÇ×à¿ØŽÀéÜ [ 1694.509928][T16907] block nbd21: Receive control failed (result -107) [ 1695.355188][T28404] [U] îª>c2ä‚®(GÝ3'›ø ×ŒFŠIfÿB­Vë±î–A =‡ÞŸqáÎÇãƒ&§l‰”ýÙba^ÂJceËÔË?B [ 1695.825247][T28404] [U] o2º³âå ‡fSýö”Ð6M˜DÂPF0»®Ä™¸¤ Î9Ÿ|ú‡ò/],ˆ¿,»v à—m»Z1ìúÖÍÞ3e›´;öyñø QZïô† ÏHësSÌjm¹ß¥Ï½Æ2^lö®/…Œ¬ÚuÔ˜Q‘öF £qwdKo2 E»½tÃúÁ².{sÊän”¾Üí[PBdˆ-üDŠ¨Ä,t;Ͼ÷â{v‹,·¥Šmz´d…ì+˦0£Ê㨓aðS§hhׄ7|jÍP”IÁ,m'Rå_ÞÁ˜ê:lh&uÛ°epʦoá†Û,åî(©¸¦,óç¬ÍÚ °=o|äîÐCûðŽÞòÀ"éš&¸®¸xˆd"ºj6Ñ’ùë_ßZ>bQ ÒÐVD\å©úéàñRês°fÜ'AO•bž›}w î—½hÇANêZ­"DT Úš>NÚ’8Â÷Qõš'¥Š'ëñ4Çñh÷—KÕNÙv_ð ù¦—X½òòtŒÎuó [ 1696.981040][T28404] [U] lþ\™ [ 1697.095863][T28404] [U] C°ÝP¡‡×Ûƒ}Ž!;TtZ—Q•O ÍÑwþ£}ã3Ü [ 1697.192531][T28404] [U] Œù€¦ÓX‹ [ 1697.196163][T28404] [U] O·Ô²õ{Ž¹ûcL¿ÒÿÔjI…Ï#1eLÜÅ´*b4Bεúó+Û‡ñÁÙžvT˜/P?¥³8ºa¸×—¼Ý¦-HQTÏŽ+ [ 1697.335657][T28404] [U] äçäëSú~®µ°ÿÖß'‰bñ ˜ÒÈ1†@ °÷C>™qFB®²1ÄqJ„-:URnÃ!‘ÖÎMYÁl‚ hcϪ¿Ý’–œƒx¨¸Lí=Ãê¶ê·¤Àb3¹ÝOG4GÕ%íÖ¨ÑkÕ [ 1697.477457][T28404] [U] H—¼tÓë@ué bïeV:ñŸ³Ã•!EH3ÖÑ–Üâ Œv}°ªs/ç“„¬¢C·°KÑ!àÌ€1õ÷Ç°CÆž¦F§¶Vî×Êűä8 [ 1697.601178][T28404] [U] ãíºÕ䂼ðþþƲz`Â~„SlÒ¢¨ykcm.*0<ÇͬÞ [ 1697.607391][T28404] [U] 0tgÐùêxP£Ši™Bæ¤Ï¾UÛ¡{…xºª£ç2d¯ÒQó{àJxìÃôüÎÎ<[¦ç•ö^P†£ˆŒ´Ê½ïÚ¥-s¬; PE³e?Æ8T [ 1697.618351][T28404] [U] iï”û ÐüF¼@>%áGnû†´k [ 1697.866643][T28404] [U] €Öm?SÖnêóÕiÒéÆS3ö¤ù [ 1697.907176][T28404] [U] PùÿÕIóe¹:jº’f'gvæ?AQE ;ˆI©8Í_¿×AKî/ƒÆiªj?NÖÝ~m—q’ŠUZ×µT(—ü›½-©  É¬F۔ʉÀ8¸dD\ŠHfÿÝÅÍ×¢uüËŠîrFyýæ$X\)ר [ 1697.919912][T28404] [U] €:V„6Ì¡‰#Þ"ëªS+žu¾Ù8`ç¦öÉÖÿ6k@ [ 1700.398170][T28676] dump_stack_lvl+0x16c/0x1f0 [ 1700.398217][T28676] should_fail_ex+0x512/0x640 [ 1700.398255][T28676] ? kasan_save_stack+0x42/0x60 [ 1700.398291][T28676] get_futex_key+0x1d0/0x1560 [ 1700.398330][T28676] ? __pfx_get_futex_key+0x10/0x10 [ 1700.398375][T28676] futex_wait_setup+0x9d/0x550 [ 1700.398410][T28676] __futex_wait+0x193/0x2f0 [ 1700.398437][T28676] ? __pfx___futex_wait+0x10/0x10 [ 1700.398467][T28676] ? __pfx_futex_wake_mark+0x10/0x10 [ 1700.398497][T28676] ? futex_private_hash_put+0x176/0x300 [ 1700.398543][T28676] ? futex_private_hash_put+0x18a/0x300 [ 1700.398579][T28676] futex_wait+0xe8/0x380 [ 1700.398605][T28676] ? __pfx_futex_wait+0x10/0x10 [ 1700.398628][T28676] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1700.398675][T28676] ? do_vfs_ioctl+0x128/0x14f0 [ 1700.398701][T28676] do_futex+0x229/0x350 [ 1700.398738][T28676] ? __pfx_do_futex+0x10/0x10 [ 1700.398784][T28676] ? find_held_lock+0x2b/0x80 [ 1700.398819][T28676] __x64_sys_futex+0x1e0/0x4c0 [ 1700.398857][T28676] ? __fget_files+0x20e/0x3c0 [ 1700.398884][T28676] ? __pfx___x64_sys_futex+0x10/0x10 [ 1700.398925][T28676] ? fput+0x9b/0xd0 [ 1700.398965][T28676] do_syscall_64+0xcd/0x4b0 [ 1700.399003][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.399028][T28676] RIP: 0033:0x7f0709d8eec9 [ 1700.399047][T28676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1700.399071][T28676] RSP: 002b:00007f070abff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1700.399094][T28676] RAX: ffffffffffffffda RBX: 00007f0709fe5fa8 RCX: 00007f0709d8eec9 [ 1700.399111][T28676] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0709fe5fa8 [ 1700.399126][T28676] RBP: 00007f0709fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.399141][T28676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1700.399155][T28676] R13: 00007f0709fe6038 R14: 00007ffe431ee850 R15: 00007ffe431ee938 [ 1700.399185][T28676] [ 1701.507777][T28773] vhci_hcd: invalid port number 16 [ 1701.542505][T28773] vhci_hcd: invalid port number 16 [ 1702.899341][T28790] could not allocate digest TFM handle  [ 1703.048494][T28791] Process accounting resumed [ 1704.119738][ T30] audit: type=1804 audit(4294967358.548:165): pid=28841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4286" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1706.431782][T28952] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1706.610326][T28958] nbd: nbd7 already in use [ 1709.181089][T29082] openvswitch: netlink: Flow key attr not present in new flow. [ 1711.068671][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1711.163759][T29187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1711.879542][T29189] netlink: 206 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1714.299435][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1714.932551][T29303] FAULT_INJECTION: forcing a failure. [ 1714.932551][T29303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1715.103818][T29303] CPU: 0 UID: 0 PID: 29303 Comm: syz.8.4331 Tainted: G U syzkaller #0 PREEMPT(full) [ 1715.103859][T29303] Tainted: [U]=USER [ 1715.103867][T29303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1715.103883][T29303] Call Trace: [ 1715.103891][T29303] [ 1715.103900][T29303] dump_stack_lvl+0x16c/0x1f0 [ 1715.103944][T29303] should_fail_ex+0x512/0x640 [ 1715.103989][T29303] strncpy_from_user+0x3b/0x2e0 [ 1715.104028][T29303] getname_flags.part.0+0x8f/0x550 [ 1715.104072][T29303] getname_flags+0x93/0xf0 [ 1715.104100][T29303] do_sys_openat2+0xb8/0x1d0 [ 1715.104122][T29303] ? __pfx_do_sys_openat2+0x10/0x10 [ 1715.104145][T29303] ? find_held_lock+0x2b/0x80 [ 1715.104177][T29303] ? handle_mm_fault+0x2ab/0xd10 [ 1715.104211][T29303] __x64_sys_openat+0x174/0x210 [ 1715.104235][T29303] ? __pfx___x64_sys_openat+0x10/0x10 [ 1715.104262][T29303] ? do_user_addr_fault+0x843/0x1370 [ 1715.104301][T29303] do_syscall_64+0xcd/0x4b0 [ 1715.104342][T29303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.104367][T29303] RIP: 0033:0x7f3f70b8d710 [ 1715.104386][T29303] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1715.104412][T29303] RSP: 002b:00007f3f719c4f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1715.104435][T29303] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3f70b8d710 [ 1715.104538][T29303] RDX: 0000000000000002 RSI: 00007f3f719c4fa0 RDI: 00000000ffffff9c [ 1715.104565][T29303] RBP: 00007f3f719c4fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1715.104581][T29303] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1715.104596][T29303] R13: 00007f3f70de6038 R14: 00007f3f70de5fa0 R15: 00007ffcfddf01f8 [ 1715.104691][T29303] [ 1715.625272][T16907] block nbd23: Receive control failed (result -107) [ 1717.782126][T29382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1719.093818][T29427] FAULT_INJECTION: forcing a failure. [ 1719.093818][T29427] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.266807][T29427] CPU: 0 UID: 0 PID: 29427 Comm: syz.6.4346 Tainted: G U syzkaller #0 PREEMPT(full) [ 1719.266847][T29427] Tainted: [U]=USER [ 1719.266856][T29427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1719.266871][T29427] Call Trace: [ 1719.266879][T29427] [ 1719.266888][T29427] dump_stack_lvl+0x16c/0x1f0 [ 1719.266931][T29427] should_fail_ex+0x512/0x640 [ 1719.266969][T29427] ? __kmalloc_noprof+0xca/0x880 [ 1719.266998][T29427] should_failslab+0xc2/0x120 [ 1719.267035][T29427] __kmalloc_noprof+0xdd/0x880 [ 1719.267060][T29427] ? __kernel_text_address+0xd/0x40 [ 1719.267088][T29427] ? constrain_params_by_rules+0x175/0xca0 [ 1719.267121][T29427] ? constrain_params_by_rules+0x175/0xca0 [ 1719.267147][T29427] constrain_params_by_rules+0x175/0xca0 [ 1719.267180][T29427] ? stack_trace_save+0x8e/0xc0 [ 1719.267219][T29427] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1719.267252][T29427] ? __kasan_kmalloc+0xaa/0xb0 [ 1719.267291][T29427] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 1719.267318][T29427] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1719.267343][T29427] ? snd_pcm_oss_sync+0x32e/0x840 [ 1719.267378][T29427] ? rcu_is_watching+0x12/0xc0 [ 1719.267408][T29427] ? snd_interval_refine+0x2fa/0x580 [ 1719.267445][T29427] snd_pcm_hw_refine+0x7de/0xad0 [ 1719.267476][T29427] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1719.267512][T29427] ? __asan_memset+0x23/0x50 [ 1719.267539][T29427] ? _snd_pcm_hw_param_min+0x259/0x630 [ 1719.267568][T29427] snd_pcm_oss_change_params_locked+0x65e/0x3a30 [ 1719.267606][T29427] ? __mutex_lock+0x1c5/0x1060 [ 1719.267643][T29427] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1719.267693][T29427] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1719.267722][T29427] snd_pcm_oss_sync+0x32e/0x840 [ 1719.267750][T29427] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1719.267776][T29427] snd_pcm_oss_release+0x28b/0x310 [ 1719.267804][T29427] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1719.267829][T29427] __fput+0x402/0xb70 [ 1719.267871][T29427] task_work_run+0x150/0x240 [ 1719.267898][T29427] ? __pfx_task_work_run+0x10/0x10 [ 1719.267925][T29427] ? __pfx___do_sys_close_range+0x10/0x10 [ 1719.267961][T29427] exit_to_user_mode_loop+0xec/0x130 [ 1719.267991][T29427] do_syscall_64+0x419/0x4b0 [ 1719.268030][T29427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.268055][T29427] RIP: 0033:0x7efca398eec9 [ 1719.268074][T29427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1719.268098][T29427] RSP: 002b:00007efca4752038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1719.268120][T29427] RAX: 0000000000000000 RBX: 00007efca3be5fa0 RCX: 00007efca398eec9 [ 1719.268136][T29427] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1719.268151][T29427] RBP: 00007efca3a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1719.268166][T29427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1719.268181][T29427] R13: 00007efca3be6038 R14: 00007efca3be5fa0 R15: 00007fff7fd35348 [ 1719.268211][T29427] [ 1719.642774][T29432] FAULT_INJECTION: forcing a failure. [ 1719.642774][T29432] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.656196][T29432] CPU: 0 UID: 0 PID: 29432 Comm: syz.7.4348 Tainted: G U syzkaller #0 PREEMPT(full) [ 1719.656275][T29432] Tainted: [U]=USER [ 1719.656283][T29432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1719.656298][T29432] Call Trace: [ 1719.656309][T29432] [ 1719.656319][T29432] dump_stack_lvl+0x16c/0x1f0 [ 1719.656362][T29432] should_fail_ex+0x512/0x640 [ 1719.656399][T29432] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1719.656432][T29432] should_failslab+0xc2/0x120 [ 1719.656468][T29432] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1719.656496][T29432] ? __dquot_initialize+0x299/0xd50 [ 1719.656530][T29432] ? __d_alloc+0x32/0xae0 [ 1719.656566][T29432] ? __d_alloc+0x32/0xae0 [ 1719.656594][T29432] __d_alloc+0x32/0xae0 [ 1719.656629][T29432] d_alloc_pseudo+0x1c/0xc0 [ 1719.656666][T29432] alloc_file_pseudo+0xcf/0x230 [ 1719.656706][T29432] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1719.656753][T29432] __shmem_file_setup+0x1a3/0x330 [ 1719.656781][T29432] shmem_zero_setup+0x93/0x1a0 [ 1719.656812][T29432] __mmap_region+0x2076/0x27a0 [ 1719.656846][T29432] ? __pfx___mmap_region+0x10/0x10 [ 1719.656872][T29432] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1719.656905][T29432] ? rcu_is_watching+0x12/0xc0 [ 1719.656935][T29432] ? finish_task_switch.isra.0+0x221/0xc10 [ 1719.656964][T29432] ? lockdep_hardirqs_on+0x7c/0x110 [ 1719.657007][T29432] ? finish_task_switch.isra.0+0x221/0xc10 [ 1719.657063][T29432] ? __pfx___schedule+0x10/0x10 [ 1719.657129][T29432] ? trace_cap_capable+0x18d/0x200 [ 1719.657178][T29432] mmap_region+0x1ab/0x3f0 [ 1719.657205][T29432] ? __get_unmapped_area+0x267/0x440 [ 1719.657249][T29432] do_mmap+0xa3e/0x1210 [ 1719.657289][T29432] ? __pfx_do_mmap+0x10/0x10 [ 1719.657324][T29432] ? __pfx_down_write_killable+0x10/0x10 [ 1719.657355][T29432] vm_mmap_pgoff+0x29e/0x470 [ 1719.657395][T29432] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1719.657428][T29432] ? ktime_get+0x1a7/0x310 [ 1719.657469][T29432] ? __x64_sys_futex+0x1e0/0x4c0 [ 1719.657504][T29432] ? __x64_sys_futex+0x1e9/0x4c0 [ 1719.657545][T29432] ksys_mmap_pgoff+0x7d/0x5c0 [ 1719.657577][T29432] ? xfd_validate_state+0x61/0x180 [ 1719.657605][T29432] __x64_sys_mmap+0x125/0x190 [ 1719.657633][T29432] do_syscall_64+0xcd/0x4b0 [ 1719.657672][T29432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.657698][T29432] RIP: 0033:0x7f0709d8eec9 [ 1719.657718][T29432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1719.657741][T29432] RSP: 002b:00007f070abff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1719.657764][T29432] RAX: ffffffffffffffda RBX: 00007f0709fe5fa0 RCX: 00007f0709d8eec9 [ 1719.657781][T29432] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 1719.657796][T29432] RBP: 00007f0709e11f91 R08: ffffffffffffffff R09: 0000000000008000 [ 1719.657812][T29432] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1719.657827][T29432] R13: 00007f0709fe6038 R14: 00007f0709fe5fa0 R15: 00007ffe431ee938 [ 1719.657858][T29432] [ 1720.402741][T29446] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 1721.326175][T29472] Invalid ELF header magic: != ELF [ 1721.956856][ T30] audit: type=1804 audit(41973.432:166): pid=29467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4357" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1722.362968][T20850] Bluetooth: hci3: unexpected event 0x20 length: 123 > 7 [ 1725.299149][T20850] block nbd24: Receive control failed (result -107) [ 1727.868251][T29716] netlink: set zone limit has 8 unknown bytes [ 1727.913202][T29719] netlink: zone id is out of range [ 1727.918988][T29719] netlink: del zone limit has 4 unknown bytes [ 1727.949403][T29716] openvswitch: HfR: Dropping previously announced user features [ 1727.984030][T29716] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4383'. [ 1728.400281][T29726] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1728.524827][T29726] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1730.386952][T29776] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1732.478756][T29868] random: crng reseeded on system resumption [ 1734.509016][T20850] block nbd25: Receive control failed (result -107) [ 1734.842965][T29945] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 1735.709532][T29816] Process accounting paused [ 1735.730048][T29956] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 1736.400750][T20850] block nbd26: Receive control failed (result -107) [ 1738.322627][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1738.332376][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.697837][T30101] FAULT_INJECTION: forcing a failure. [ 1738.697837][T30101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1738.827884][T30101] CPU: 0 UID: 0 PID: 30101 Comm: syz.6.4427 Tainted: G U syzkaller #0 PREEMPT(full) [ 1738.827924][T30101] Tainted: [U]=USER [ 1738.827932][T30101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1738.827954][T30101] Call Trace: [ 1738.827962][T30101] [ 1738.827972][T30101] dump_stack_lvl+0x16c/0x1f0 [ 1738.828018][T30101] should_fail_ex+0x512/0x640 [ 1738.828061][T30101] should_fail_alloc_page+0xe7/0x130 [ 1738.828102][T30101] prepare_alloc_pages+0x3c2/0x610 [ 1738.828144][T30101] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1738.828174][T30101] ? __pfx_css_rstat_updated+0x10/0x10 [ 1738.828215][T30101] ? rcu_is_watching+0x12/0xc0 [ 1738.828247][T30101] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 1738.828275][T30101] ? find_held_lock+0x2b/0x80 [ 1738.828306][T30101] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1738.828336][T30101] ? rcu_read_unlock+0x17/0x60 [ 1738.828380][T30101] ? folio_remove_rmap_pmd+0x5be/0xda0 [ 1738.828414][T30101] ? split_huge_pmd_locked+0x116/0x3a10 [ 1738.828440][T30101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1738.828469][T30101] ? policy_nodemask+0xea/0x4e0 [ 1738.828507][T30101] alloc_pages_mpol+0x1fb/0x550 [ 1738.828545][T30101] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1738.828581][T30101] ? __split_huge_pmd+0x203/0x350 [ 1738.828611][T30101] alloc_pages_noprof+0x131/0x390 [ 1738.828649][T30101] pte_alloc_one+0x1e/0x350 [ 1738.828682][T30101] __pte_alloc+0x6d/0x380 [ 1738.828715][T30101] ? __pfx___pte_alloc+0x10/0x10 [ 1738.828748][T30101] ? _raw_spin_unlock+0x28/0x50 [ 1738.828779][T30101] ? __pmd_alloc+0x64f/0x8b0 [ 1738.828817][T30101] move_page_tables+0x2372/0x4230 [ 1738.828852][T30101] ? __pfx_copy_vma+0x10/0x10 [ 1738.828885][T30101] ? __pfx_move_page_tables+0x10/0x10 [ 1738.828927][T30101] ? rcu_is_watching+0x12/0xc0 [ 1738.828962][T30101] ? finish_task_switch.isra.0+0x221/0xc10 [ 1738.828993][T30101] ? lockdep_hardirqs_on+0x7c/0x110 [ 1738.829031][T30101] copy_vma_and_data+0x24e/0x790 [ 1738.829063][T30101] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1738.829098][T30101] ? __vma_enter_locked+0x163/0x3f0 [ 1738.829124][T30101] ? find_held_lock+0x2b/0x80 [ 1738.829155][T30101] ? move_vma+0x52e/0x1770 [ 1738.829180][T30101] ? __vm_enough_memory+0x184/0x3f0 [ 1738.829221][T30101] move_vma+0x540/0x1770 [ 1738.829252][T30101] ? __pfx_move_vma+0x10/0x10 [ 1738.829284][T30101] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 1738.829320][T30101] ? cap_mmap_addr+0x4b/0x120 [ 1738.829356][T30101] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1738.829388][T30101] ? security_mmap_addr+0x6c/0x1e0 [ 1738.829415][T30101] ? __get_unmapped_area+0x267/0x440 [ 1738.829454][T30101] ? vrm_set_new_addr+0x208/0x290 [ 1738.829483][T30101] mremap_to+0x1b7/0x450 [ 1738.829512][T30101] do_mremap+0x13a8/0x2020 [ 1738.829540][T30101] ? futex_private_hash_put+0xf0/0x300 [ 1738.829583][T30101] ? __pfx_do_mremap+0x10/0x10 [ 1738.829617][T30101] ? ksys_write+0x190/0x250 [ 1738.829654][T30101] __do_sys_mremap+0x119/0x170 [ 1738.829681][T30101] ? __pfx___do_sys_mremap+0x10/0x10 [ 1738.829718][T30101] ? __x64_sys_futex+0x1e0/0x4c0 [ 1738.829772][T30101] do_syscall_64+0xcd/0x4b0 [ 1738.829811][T30101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.829836][T30101] RIP: 0033:0x7efca398eec9 [ 1738.829856][T30101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.829881][T30101] RSP: 002b:00007efca4752038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1738.829904][T30101] RAX: ffffffffffffffda RBX: 00007efca3be5fa0 RCX: 00007efca398eec9 [ 1738.829920][T30101] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 1738.829944][T30101] RBP: 00007efca3a11f91 R08: 0000000100000000 R09: 0000000000000000 [ 1738.829960][T30101] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1738.829974][T30101] R13: 00007efca3be6038 R14: 00007efca3be5fa0 R15: 00007fff7fd35348 [ 1738.830006][T30101] [ 1739.872551][T20850] block nbd27: Receive control failed (result -107) [ 1741.570628][T30250] netlink: 'syz.1.4434': attribute type 1 has an invalid length. [ 1744.962852][T30345] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4440'. [ 1745.080456][T30345] nbd: must specify a size in bytes for the device [ 1745.737785][T30365] nbd: must specify a size in bytes for the device [ 1746.552677][T20850] block nbd28: Receive control failed (result -107) [ 1747.381652][T30427] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1747.552342][T20850] Bluetooth: hci0: Malformed Event: 0x02 [ 1748.131522][T30459] nbd: must specify a size in bytes for the device [ 1748.942328][T20850] block nbd4128: Receive control failed (result -107) [ 1748.981668][T30481] FAULT_INJECTION: forcing a failure. [ 1748.981668][T30481] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.203499][T30501] bond0: option arp_interval: invalid value () [ 1749.257918][T30481] CPU: 0 UID: 0 PID: 30481 Comm: syz.6.4454 Tainted: G U syzkaller #0 PREEMPT(full) [ 1749.257957][T30481] Tainted: [U]=USER [ 1749.257965][T30481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1749.257980][T30481] Call Trace: [ 1749.257988][T30481] [ 1749.257999][T30481] dump_stack_lvl+0x16c/0x1f0 [ 1749.258039][T30481] should_fail_ex+0x512/0x640 [ 1749.258074][T30481] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1749.258104][T30481] should_failslab+0xc2/0x120 [ 1749.258139][T30481] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1749.258165][T30481] ? vm_area_dup+0x27/0x8d0 [ 1749.258202][T30481] ? vm_area_dup+0x27/0x8d0 [ 1749.258223][T30481] vm_area_dup+0x27/0x8d0 [ 1749.258249][T30481] __split_vma+0x18e/0x1070 [ 1749.258277][T30481] ? __pfx___split_vma+0x10/0x10 [ 1749.258300][T30481] ? __lock_acquire+0xb97/0x1ce0 [ 1749.258343][T30481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1749.258378][T30481] vma_modify+0xee1/0x2030 [ 1749.258410][T30481] ? __pfx_vma_modify+0x10/0x10 [ 1749.258442][T30481] vma_modify_flags+0x212/0x2d0 [ 1749.258601][T30481] ? __pfx_vma_modify_flags+0x10/0x10 [ 1749.258658][T30481] mprotect_fixup+0x1df/0xb40 [ 1749.258690][T30481] ? __pfx_mprotect_fixup+0x10/0x10 [ 1749.258723][T30481] do_mprotect_pkey+0x9bc/0xd40 [ 1749.258757][T30481] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1749.258782][T30481] ? vm_mmap_pgoff+0x103/0x470 [ 1749.258823][T30481] ? __pfx_sigprocmask+0x10/0x10 [ 1749.258862][T30481] ? xfd_validate_state+0x61/0x180 [ 1749.258893][T30481] __x64_sys_mprotect+0x78/0xc0 [ 1749.258916][T30481] ? lockdep_hardirqs_on+0x7c/0x110 [ 1749.258951][T30481] do_syscall_64+0xcd/0x4b0 [ 1749.258997][T30481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.259022][T30481] RIP: 0033:0x7efca398ef87 [ 1749.259043][T30481] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1749.259067][T30481] RSP: 002b:00007fff7fd352e8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1749.259089][T30481] RAX: ffffffffffffffda RBX: 00007efca1b936c0 RCX: 00007efca398ef87 [ 1749.259104][T30481] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007efca1b74000 [ 1749.259119][T30481] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1749.259133][T30481] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff7fd35440 [ 1749.259148][T30481] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1749.259198][T30481] [ 1749.706052][T30501] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1749.927156][T30535] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4460'. [ 1749.959010][T30535] nbd: must specify a device to reconfigure [ 1750.198258][T30536] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4459'. [ 1751.142079][T30580] netlink: 'syz.6.4462': attribute type 10 has an invalid length. [ 1751.244774][T30580] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4462'. [ 1751.790114][T30605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4467'. [ 1752.552989][T30625] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1752.724720][T30625] CPU: 0 UID: 0 PID: 30625 Comm: syz.6.4469 Tainted: G U syzkaller #0 PREEMPT(full) [ 1752.724759][T30625] Tainted: [U]=USER [ 1752.724767][T30625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1752.724782][T30625] Call Trace: [ 1752.724789][T30625] [ 1752.724799][T30625] dump_stack_lvl+0x16c/0x1f0 [ 1752.724841][T30625] sysfs_warn_dup+0x7f/0xa0 [ 1752.724878][T30625] sysfs_do_create_link_sd+0x124/0x140 [ 1752.724913][T30625] sysfs_create_link+0x61/0xc0 [ 1752.724955][T30625] device_add+0x62c/0x1aa0 [ 1752.724995][T30625] ? __pfx_device_add+0x10/0x10 [ 1752.725024][T30625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1752.725054][T30625] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1752.725097][T30625] wiphy_register+0x1eb0/0x2b20 [ 1752.725121][T30625] ? netdev_run_todo+0x864/0x1320 [ 1752.725144][T30625] ? __dev_printk+0x270/0x270 [ 1752.725173][T30625] ? __pfx_wiphy_register+0x10/0x10 [ 1752.725214][T30625] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1752.725261][T30625] ieee80211_register_hw+0x253d/0x4120 [ 1752.725296][T30625] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1752.725319][T30625] ? __pfx___debug_object_init+0x10/0x10 [ 1752.725355][T30625] ? find_held_lock+0x2b/0x80 [ 1752.725385][T30625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1752.725412][T30625] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1752.725438][T30625] ? __hrtimer_setup+0x176/0x280 [ 1752.725465][T30625] mac80211_hwsim_new_radio+0x32c7/0x5650 [ 1752.725531][T30625] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1752.725576][T30625] hwsim_new_radio_nl+0xba2/0x1330 [ 1752.725614][T30625] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1752.725659][T30625] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1752.725687][T30625] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1752.725721][T30625] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1752.725749][T30625] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1752.725785][T30625] ? bpf_lsm_capable+0x9/0x10 [ 1752.725830][T30625] ? security_capable+0x7e/0x260 [ 1752.725868][T30625] ? ns_capable+0xd7/0x110 [ 1752.725901][T30625] genl_rcv_msg+0x55c/0x800 [ 1752.726004][T30625] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1752.726032][T30625] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1752.726078][T30625] netlink_rcv_skb+0x155/0x420 [ 1752.726100][T30625] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1752.726127][T30625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1752.726162][T30625] ? netlink_deliver_tap+0x1ae/0xd30 [ 1752.726207][T30625] genl_rcv+0x28/0x40 [ 1752.726229][T30625] netlink_unicast+0x5aa/0x870 [ 1752.726256][T30625] ? __pfx_netlink_unicast+0x10/0x10 [ 1752.726277][T30625] ? __pfx___might_resched+0x10/0x10 [ 1752.726307][T30625] ? __lock_acquire+0xb97/0x1ce0 [ 1752.726353][T30625] netlink_sendmsg+0x8c8/0xdd0 [ 1752.726380][T30625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.726411][T30625] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1752.726454][T30625] ____sys_sendmsg+0xa95/0xc70 [ 1752.726483][T30625] ? copy_msghdr_from_user+0x10a/0x160 [ 1752.726520][T30625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1752.726554][T30625] ? __pfx_futex_wake_mark+0x10/0x10 [ 1752.726584][T30625] ___sys_sendmsg+0x134/0x1d0 [ 1752.726622][T30625] ? __pfx____sys_sendmsg+0x10/0x10 [ 1752.726695][T30625] __sys_sendmsg+0x16d/0x220 [ 1752.726733][T30625] ? __pfx___sys_sendmsg+0x10/0x10 [ 1752.726770][T30625] ? __x64_sys_futex+0x1e0/0x4c0 [ 1752.726827][T30625] do_syscall_64+0xcd/0x4b0 [ 1752.726868][T30625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.726895][T30625] RIP: 0033:0x7efca398eec9 [ 1752.726915][T30625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1752.726948][T30625] RSP: 002b:00007efca4752038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1752.726971][T30625] RAX: ffffffffffffffda RBX: 00007efca3be5fa0 RCX: 00007efca398eec9 [ 1752.726987][T30625] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1752.727003][T30625] RBP: 00007efca3a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1752.727017][T30625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.727031][T30625] R13: 00007efca3be6038 R14: 00007efca3be5fa0 R15: 00007fff7fd35348 [ 1752.727066][T30625] [ 1754.143241][T30733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1754.164354][T30733] nbd: must specify a size in bytes for the device [ 1754.472316][T30739] ovs_: entered promiscuous mode [ 1754.720108][T30759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4480'. [ 1754.742235][T30759] nbd: must specify a device to reconfigure [ 1755.238746][T30784] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1755.284155][T20850] Bluetooth: hci2: Malformed Event: 0x02 [ 1755.839223][T30814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4486'. [ 1755.860124][T30814] nbd: must specify a size in bytes for the device [ 1756.497145][T30847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4490'. [ 1756.568862][T30847] nbd: must specify a device to reconfigure [ 1756.725359][T30852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4492'. [ 1756.744624][T30852] nbd: must specify a size in bytes for the device [ 1757.301332][T30864] ======================================================= [ 1757.301332][T30864] WARNING: The mand mount option has been deprecated and [ 1757.301332][T30864] and is ignored by this kernel. Remove the mand [ 1757.301332][T30864] option from the mount to silence this warning. [ 1757.301332][T30864] ======================================================= [ 1758.051875][T30913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4503'. [ 1758.119742][T30913] nbd: must specify a device to reconfigure [ 1759.142634][T30950] FAULT_INJECTION: forcing a failure. [ 1759.142634][T30950] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.651672][T30950] CPU: 0 UID: 0 PID: 30950 Comm: syz.8.4505 Tainted: G U syzkaller #0 PREEMPT(full) [ 1759.651711][T30950] Tainted: [U]=USER [ 1759.651719][T30950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1759.651734][T30950] Call Trace: [ 1759.651742][T30950] [ 1759.651751][T30950] dump_stack_lvl+0x16c/0x1f0 [ 1759.651792][T30950] should_fail_ex+0x512/0x640 [ 1759.651830][T30950] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1759.651868][T30950] should_failslab+0xc2/0x120 [ 1759.651903][T30950] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1759.651938][T30950] ? sysctl_route_net_init+0x42/0x2c0 [ 1759.651972][T30950] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 1759.651999][T30950] ? kmemdup_noprof+0x29/0x60 [ 1759.652028][T30950] kmemdup_noprof+0x29/0x60 [ 1759.652057][T30950] sysctl_route_net_init+0x42/0x2c0 [ 1759.652085][T30950] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 1759.652115][T30950] ops_init+0x1e2/0x5f0 [ 1759.652155][T30950] setup_net+0x100/0x390 [ 1759.652177][T30950] ? __pfx_setup_net+0x10/0x10 [ 1759.652200][T30950] ? debug_mutex_init+0x37/0x70 [ 1759.652233][T30950] copy_net_ns+0x2f8/0x690 [ 1759.652260][T30950] create_new_namespaces+0x3ea/0xa90 [ 1759.652298][T30950] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1759.652332][T30950] ksys_unshare+0x45b/0xa40 [ 1759.652368][T30950] ? __pfx_ksys_unshare+0x10/0x10 [ 1759.652406][T30950] ? xfd_validate_state+0x61/0x180 [ 1759.652438][T30950] __x64_sys_unshare+0x31/0x40 [ 1759.652475][T30950] do_syscall_64+0xcd/0x4b0 [ 1759.652521][T30950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.652545][T30950] RIP: 0033:0x7f3f70b8eec9 [ 1759.652564][T30950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1759.652587][T30950] RSP: 002b:00007f3f719c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1759.652609][T30950] RAX: ffffffffffffffda RBX: 00007f3f70de5fa0 RCX: 00007f3f70b8eec9 [ 1759.652625][T30950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1759.652639][T30950] RBP: 00007f3f70c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1759.652654][T30950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1759.652668][T30950] R13: 00007f3f70de6038 R14: 00007f3f70de5fa0 R15: 00007ffcfddf01f8 [ 1759.652699][T30950] [ 1760.277285][T30962] kexec: Could not allocate control_code_buffer [ 1761.092971][T30974] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1761.581198][T20850] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1761.735628][T31092] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1763.420563][T22097] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 11 with max blocks 1 with error 117 [ 1763.477140][T22097] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1763.477140][T22097] [ 1764.021099][T31169] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4528'. [ 1765.038138][T31193] FAULT_INJECTION: forcing a failure. [ 1765.038138][T31193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1765.125456][T31193] CPU: 0 UID: 0 PID: 31193 Comm: syz.7.4532 Tainted: G U syzkaller #0 PREEMPT(full) [ 1765.125497][T31193] Tainted: [U]=USER [ 1765.125505][T31193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1765.125520][T31193] Call Trace: [ 1765.125529][T31193] [ 1765.125538][T31193] dump_stack_lvl+0x16c/0x1f0 [ 1765.125581][T31193] should_fail_ex+0x512/0x640 [ 1765.125624][T31193] should_fail_alloc_page+0xe7/0x130 [ 1765.125664][T31193] prepare_alloc_pages+0x3c2/0x610 [ 1765.125700][T31193] ? is_bpf_text_address+0x94/0x1a0 [ 1765.125743][T31193] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1765.125772][T31193] ? arch_stack_walk+0xa6/0x100 [ 1765.125814][T31193] ? stack_trace_save+0x8e/0xc0 [ 1765.125847][T31193] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1765.125875][T31193] ? rcu_is_watching+0x12/0xc0 [ 1765.125915][T31193] ? kasan_save_track+0x14/0x30 [ 1765.125944][T31193] ? __kasan_slab_alloc+0x89/0x90 [ 1765.125976][T31193] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1765.126002][T31193] ? __pmd_alloc+0xbf/0x8b0 [ 1765.126036][T31193] ? __handle_mm_fault+0xada/0x2aa0 [ 1765.126058][T31193] ? handle_mm_fault+0x589/0xd10 [ 1765.126079][T31193] ? __get_user_pages+0x54e/0x3530 [ 1765.126113][T31193] ? populate_vma_page_range+0x267/0x3f0 [ 1765.126158][T31193] ? __mm_populate+0x1d8/0x380 [ 1765.126194][T31193] ? vm_mmap_pgoff+0x37f/0x470 [ 1765.126226][T31193] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 1765.126259][T31193] ? __x64_sys_mmap+0x125/0x190 [ 1765.126281][T31193] ? do_syscall_64+0xcd/0x4b0 [ 1765.126316][T31193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1765.126347][T31193] ? policy_nodemask+0xea/0x4e0 [ 1765.126386][T31193] alloc_pages_mpol+0x1fb/0x550 [ 1765.126424][T31193] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1765.126468][T31193] alloc_pages_noprof+0x131/0x390 [ 1765.126505][T31193] pte_alloc_one+0x1e/0x350 [ 1765.126539][T31193] __pte_alloc+0x6d/0x380 [ 1765.126570][T31193] ? __pfx___pte_alloc+0x10/0x10 [ 1765.126605][T31193] ? do_raw_spin_lock+0x12c/0x2b0 [ 1765.126635][T31193] do_pte_missing+0x282c/0x3ba0 [ 1765.126661][T31193] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 1765.126702][T31193] ? __pmd_alloc+0x64f/0x8b0 [ 1765.126741][T31193] __handle_mm_fault+0x1556/0x2aa0 [ 1765.126774][T31193] ? __pfx___handle_mm_fault+0x10/0x10 [ 1765.126824][T31193] handle_mm_fault+0x589/0xd10 [ 1765.126854][T31193] __get_user_pages+0x54e/0x3530 [ 1765.126904][T31193] ? __pfx___get_user_pages+0x10/0x10 [ 1765.126949][T31193] populate_vma_page_range+0x267/0x3f0 [ 1765.126991][T31193] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1765.127030][T31193] ? __pfx_find_vma_intersection+0x10/0x10 [ 1765.127067][T31193] ? do_mmap+0x69c/0x1210 [ 1765.127104][T31193] __mm_populate+0x1d8/0x380 [ 1765.127151][T31193] ? __pfx___mm_populate+0x10/0x10 [ 1765.127193][T31193] ? up_write+0x1b2/0x520 [ 1765.127221][T31193] vm_mmap_pgoff+0x37f/0x470 [ 1765.127259][T31193] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1765.127300][T31193] ? __x64_sys_futex+0x1e0/0x4c0 [ 1765.127335][T31193] ? __x64_sys_futex+0x1e9/0x4c0 [ 1765.127376][T31193] ksys_mmap_pgoff+0x7d/0x5c0 [ 1765.127409][T31193] ? xfd_validate_state+0x61/0x180 [ 1765.127430][T31193] ? __pfx_ksys_write+0x10/0x10 [ 1765.127463][T31193] __x64_sys_mmap+0x125/0x190 [ 1765.127491][T31193] do_syscall_64+0xcd/0x4b0 [ 1765.127530][T31193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.127555][T31193] RIP: 0033:0x7f0709d8eec9 [ 1765.127574][T31193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1765.127598][T31193] RSP: 002b:00007f070abff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1765.127621][T31193] RAX: ffffffffffffffda RBX: 00007f0709fe5fa0 RCX: 00007f0709d8eec9 [ 1765.127638][T31193] RDX: 0000000000000007 RSI: 000000000004000b RDI: 0000000000000000 [ 1765.127652][T31193] RBP: 00007f0709e11f91 R08: 0000000000000007 R09: 0000000000028000 [ 1765.127667][T31193] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1765.127682][T31193] R13: 00007f0709fe6038 R14: 00007f0709fe5fa0 R15: 00007ffe431ee938 [ 1765.127713][T31193] [ 1766.032821][T25259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1766.120633][T31179] Process accounting resumed [ 1766.272251][T16907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1766.330912][T31253] nbd: must specify a size in bytes for the device [ 1766.431228][T16907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1766.614988][T25259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1766.769302][T16907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1767.407904][T31193] nbd: must specify a size in bytes for the device [ 1767.757887][T31332] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4539'. [ 1768.338832][T31202] chnl_net:caif_netlink_parms(): no params data found [ 1768.995119][T31202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.037950][T16907] Bluetooth: hci1: command tx timeout [ 1769.053695][T31202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.102818][T31202] bridge_slave_0: entered allmulticast mode [ 1769.171030][T31202] bridge_slave_0: entered promiscuous mode [ 1769.235789][T31202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.312166][T31202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.359888][T31202] bridge_slave_1: entered allmulticast mode [ 1769.413590][T31202] bridge_slave_1: entered promiscuous mode [ 1769.780513][T31202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.831581][T31504] svc: failed to register nfsdv3 RPC service (errno 111). [ 1769.870374][T31504] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1769.885803][T31202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.077531][T31202] team0: Port device team_slave_0 added [ 1770.126911][T31202] team0: Port device team_slave_1 added [ 1770.137961][T31509] svc: failed to register nfsdv3 RPC service (errno 111). [ 1770.166984][T31509] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1770.265500][T31202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.282836][T31202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.355868][T31202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.398605][T31202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.428648][T31202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.550477][T31202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.825498][T31202] hsr_slave_0: entered promiscuous mode [ 1770.851795][T31202] hsr_slave_1: entered promiscuous mode [ 1770.910342][T31202] debugfs: 'hsr0' already exists in 'hsr' [ 1770.916291][T31202] Cannot create hsr debugfs directory [ 1771.111006][T16907] Bluetooth: hci1: command tx timeout [ 1771.193370][T16907] block nbd29: Receive control failed (result -107) [ 1771.261572][T31651] Process accounting resumed [ 1771.701048][T31698] HfR: entered promiscuous mode [ 1771.747028][T31710] netlink: 'syz.8.4553': attribute type 4 has an invalid length. [ 1771.776827][T31710] netlink: 314 bytes leftover after parsing attributes in process `syz.8.4553'. [ 1771.834058][T31710] IPv6: NLM_F_CREATE should be specified when creating new route [ 1771.914464][T31202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.122728][T31697] ovs_: entered promiscuous mode [ 1772.249850][T31202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.538339][T31202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.723977][T31202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.177242][T16907] Bluetooth: hci1: command tx timeout [ 1773.312464][T31808] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4559'. [ 1773.390327][T31808] nbd: must specify a size in bytes for the device [ 1773.925702][T31202] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1773.994814][T31202] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1774.042470][T31202] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1774.267364][T31202] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1774.589888][T31850] nbd: nbd4128 already in use [ 1774.605878][T31202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1774.701369][T31202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1774.812481][T23666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.820476][T23666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1774.894461][T23666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.901852][T23666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1774.934896][T31859] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4566'. [ 1775.246139][T16907] Bluetooth: hci1: command tx timeout [ 1775.685624][T31885] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 1775.792547][T31902] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1775.995436][T31202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1776.189833][T31926] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1776.605953][T31202] veth0_vlan: entered promiscuous mode [ 1776.744443][T31202] veth1_vlan: entered promiscuous mode [ 1776.894332][ T30] audit: type=1804 audit(4294967332.473:167): pid=31937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.4575" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1776.971801][T31202] veth0_macvtap: entered promiscuous mode [ 1777.070770][T31202] veth1_macvtap: entered promiscuous mode [ 1777.236483][T31202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.332330][T31202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.481811][T30809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.545440][T30809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.562060][T31964] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4578'. [ 1777.613568][T30809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.650320][T30809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.759276][T30809] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 17 with max blocks 10 with error 117 [ 1777.891159][T30809] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1777.891159][T30809] [ 1778.030248][T30810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.077937][T30810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.203850][T31983] mtrr: base(0x50000) is not aligned on a size(0x0000) boundary [ 1778.258173][T30810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.258198][T30810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.830991][T32084] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4584'. [ 1779.914397][T32084] nbd: must specify a size in bytes for the device [ 1780.526642][T32107] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1781.384346][T32128] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4589'. [ 1781.500548][T32141] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4589'. [ 1781.592608][T32111] ovs_: entered promiscuous mode [ 1783.163703][T20850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1783.176301][T20850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1783.185384][T20850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1783.193782][T20850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1783.205108][T20850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1783.854183][T20850] block nbd30: Receive control failed (result -107) [ 1784.769767][T32243] FAULT_INJECTION: forcing a failure. [ 1784.769767][T32243] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.967316][T32243] CPU: 0 UID: 0 PID: 32243 Comm: syz.8.4597 Tainted: G U syzkaller #0 PREEMPT(full) [ 1784.967354][T32243] Tainted: [U]=USER [ 1784.967362][T32243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1784.967376][T32243] Call Trace: [ 1784.967383][T32243] [ 1784.967393][T32243] dump_stack_lvl+0x16c/0x1f0 [ 1784.967433][T32243] should_fail_ex+0x512/0x640 [ 1784.967469][T32243] ? fs_reclaim_acquire+0xae/0x150 [ 1784.967506][T32243] should_failslab+0xc2/0x120 [ 1784.967540][T32243] __kmalloc_noprof+0xdd/0x880 [ 1784.967564][T32243] ? tomoyo_encode2+0x100/0x3e0 [ 1784.967597][T32243] ? tomoyo_encode2+0x100/0x3e0 [ 1784.967625][T32243] tomoyo_encode2+0x100/0x3e0 [ 1784.967658][T32243] tomoyo_encode+0x29/0x50 [ 1784.967685][T32243] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1784.967724][T32243] tomoyo_path_number_perm+0x245/0x580 [ 1784.967748][T32243] ? tomoyo_path_number_perm+0x237/0x580 [ 1784.967776][T32243] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1784.967802][T32243] ? find_held_lock+0x2b/0x80 [ 1784.967858][T32243] ? find_held_lock+0x2b/0x80 [ 1784.967891][T32243] ? hook_file_ioctl_common+0x145/0x410 [ 1784.967924][T32243] ? __fget_files+0x20e/0x3c0 [ 1784.967957][T32243] security_file_ioctl+0x9b/0x240 [ 1784.967984][T32243] __x64_sys_ioctl+0xb7/0x210 [ 1784.968010][T32243] do_syscall_64+0xcd/0x4b0 [ 1784.968048][T32243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.968073][T32243] RIP: 0033:0x7f3f70b8eec9 [ 1784.968092][T32243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1784.968115][T32243] RSP: 002b:00007f3f719c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1784.968136][T32243] RAX: ffffffffffffffda RBX: 00007f3f70de5fa0 RCX: 00007f3f70b8eec9 [ 1784.968152][T32243] RDX: 0000000000000003 RSI: 000000000000ab07 RDI: 0000000000000003 [ 1784.968166][T32243] RBP: 00007f3f719c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.968180][T32243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.968194][T32243] R13: 00007f3f70de6038 R14: 00007f3f70de5fa0 R15: 00007ffcfddf01f8 [ 1784.968224][T32243] [ 1784.968244][T32243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1785.468663][T32253] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4598'. [ 1785.493951][T20850] Bluetooth: hci2: command tx timeout [ 1785.583780][T32259] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1785.870733][T32261] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4598'. [ 1786.274419][T32174] chnl_net:caif_netlink_parms(): no params data found [ 1786.343211][T32243] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1786.829246][T32174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.860101][T32174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.891663][T32174] bridge_slave_0: entered allmulticast mode [ 1786.932518][T32174] bridge_slave_0: entered promiscuous mode [ 1786.975829][T32174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.008794][T32174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.051275][T32174] bridge_slave_1: entered allmulticast mode [ 1787.086860][T32174] bridge_slave_1: entered promiscuous mode [ 1787.238730][T32174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.289640][T32174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.327298][ T30] audit: type=1804 audit(4294967342.987:168): pid=32414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.4604" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1787.504473][T16907] Bluetooth: hci2: command tx timeout [ 1787.639433][T16907] block nbd31: Receive control failed (result -107) [ 1788.094870][T32174] team0: Port device team_slave_0 added [ 1788.203997][T32174] team0: Port device team_slave_1 added [ 1788.652970][T32174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.756391][T32174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.794113][T32522] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1788.824834][T32522] FAULT_INJECTION: forcing a failure. [ 1788.824834][T32522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.841498][T32522] CPU: 0 UID: 0 PID: 32522 Comm: syz.1.4611 Tainted: G U syzkaller #0 PREEMPT(full) [ 1788.841536][T32522] Tainted: [U]=USER [ 1788.841544][T32522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1788.841558][T32522] Call Trace: [ 1788.841565][T32522] [ 1788.841575][T32522] dump_stack_lvl+0x16c/0x1f0 [ 1788.841616][T32522] should_fail_ex+0x512/0x640 [ 1788.841666][T32522] _copy_to_user+0x32/0xd0 [ 1788.841690][T32522] simple_read_from_buffer+0xcb/0x170 [ 1788.841717][T32522] proc_fail_nth_read+0x197/0x240 [ 1788.841748][T32522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1788.841779][T32522] ? rw_verify_area+0xcf/0x6c0 [ 1788.841805][T32522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1788.841834][T32522] vfs_read+0x1e4/0xcf0 [ 1788.841867][T32522] ? __pfx___mutex_lock+0x10/0x10 [ 1788.841905][T32522] ? __pfx_vfs_read+0x10/0x10 [ 1788.841941][T32522] ? __fget_files+0x20e/0x3c0 [ 1788.841977][T32522] ksys_read+0x12a/0x250 [ 1788.842006][T32522] ? __pfx_ksys_read+0x10/0x10 [ 1788.842044][T32522] do_syscall_64+0xcd/0x4b0 [ 1788.842083][T32522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.842108][T32522] RIP: 0033:0x7f5a21d8d8dc [ 1788.842127][T32522] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1788.842151][T32522] RSP: 002b:00007f5a22be3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1788.842173][T32522] RAX: ffffffffffffffda RBX: 00007f5a21fe5fa0 RCX: 00007f5a21d8d8dc [ 1788.842195][T32522] RDX: 000000000000000f RSI: 00007f5a22be30a0 RDI: 0000000000000004 [ 1788.842209][T32522] RBP: 00007f5a22be3090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.842224][T32522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.842238][T32522] R13: 00007f5a21fe6038 R14: 00007f5a21fe5fa0 R15: 00007fff3e4652b8 [ 1788.842269][T32522] [ 1789.304276][T32174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.383234][T32174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.390273][T32174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.576560][T16907] Bluetooth: hci2: command tx timeout [ 1789.589245][T32174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.820327][T32174] hsr_slave_0: entered promiscuous mode [ 1789.844781][T32174] hsr_slave_1: entered promiscuous mode [ 1789.870696][T32174] debugfs: 'hsr0' already exists in 'hsr' [ 1789.898024][T32174] Cannot create hsr debugfs directory [ 1790.491513][T32617] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1790.536795][ T30] audit: type=1804 audit(4294967346.204:169): pid=32608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4615" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1791.557694][T32174] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.640197][T16907] Bluetooth: hci2: command tx timeout [ 1791.902431][T32665] queue_state_write: operation too long [ 1791.914506][T32665] queue_state_write: use 'run', 'start' or 'kick' [ 1792.045765][ T30] audit: type=1806 audit(4294967347.712:170): xattr="." res=0 [ 1792.397972][T32174] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.608776][T32683] random: crng reseeded on system resumption [ 1792.641703][T32683] Restarting kernel threads ... [ 1792.658301][T32683] Done restarting kernel threads. [ 1793.009202][T32174] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.545998][T32174] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.200343][T32174] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1794.250467][T32174] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1794.305149][T32174] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1794.344074][T32174] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1794.753667][T32174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.868834][T32174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1794.931195][T30810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.938568][T30810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.959223][T16907] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1795.031223][T30810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.038642][T30810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.731584][ T316] random: crng reseeded on system resumption [ 1796.301162][T32174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1796.317024][ T309] Process accounting paused [ 1796.829578][ T30] audit: type=1800 audit(4294967352.537:171): pid=328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4627" name="members" dev="configfs" ino=134440 res=0 errno=0 [ 1796.977965][T20850] Bluetooth: hci3: command 0x0406 tx timeout [ 1797.173668][ T364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1797.182879][ T364] nbd: must specify a size in bytes for the device [ 1797.355323][ T368] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4631'. [ 1798.015367][T32174] veth0_vlan: entered promiscuous mode [ 1798.073074][T32174] veth1_vlan: entered promiscuous mode [ 1798.221030][T32174] veth0_macvtap: entered promiscuous mode [ 1798.276688][T32174] veth1_macvtap: entered promiscuous mode [ 1798.361657][T32174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.412445][T32174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.519009][ T389] block nbd8: NBD_DISCONNECT [ 1798.529544][ T389] block nbd8: Send disconnect failed -32 [ 1798.555963][T30809] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.637834][T30809] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.800987][T30809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.944608][T30809] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.446961][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1799.463476][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1800.563836][T16213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.655961][T16213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.459444][T16213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.553551][T16213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.071454][ T447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4639'. [ 1802.091453][ T447] nbd: must specify a size in bytes for the device [ 1803.744266][ T558] futex_wake_op: syz.8.4645 tries to shift op by -9; fix this program [ 1806.129640][ T634] syz.1.4654 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1806.622832][ T622] block nbd32: Unsupported socket: should be TCP or UNIX. [ 1807.631389][ T691] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1808.805762][ T743] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4662'. [ 1810.498247][ T787] Setting dangerous option i915.mitigations - tainting kernel [ 1812.391187][ T815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1812.398879][ T815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1812.450894][ T815] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1812.460480][ T815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1812.471287][ T815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1812.535856][ T834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4672'. [ 1812.625858][ T834] nbd: must specify a size in bytes for the device [ 1812.655616][ T815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1812.704592][ T815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1812.712689][ T815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1812.724224][ T815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1812.987335][ T30] audit: type=1804 audit(4294967368.781:172): pid=843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4675" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1813.123934][ T846] FAULT_INJECTION: forcing a failure. [ 1813.123934][ T846] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.168308][ T846] CPU: 0 UID: 0 PID: 846 Comm: syz.1.4676 Tainted: G U syzkaller #0 PREEMPT(full) [ 1813.168353][ T846] Tainted: [U]=USER [ 1813.168361][ T846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1813.168375][ T846] Call Trace: [ 1813.168385][ T846] [ 1813.168397][ T846] dump_stack_lvl+0x16c/0x1f0 [ 1813.168439][ T846] should_fail_ex+0x512/0x640 [ 1813.168476][ T846] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1813.168506][ T846] should_failslab+0xc2/0x120 [ 1813.168542][ T846] __kmalloc_cache_noprof+0x72/0x780 [ 1813.168567][ T846] ? rcu_is_watching+0x12/0xc0 [ 1813.168597][ T846] ? call_usermodehelper_setup+0xaf/0x360 [ 1813.168628][ T846] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1813.168656][ T846] ? call_usermodehelper_setup+0xaf/0x360 [ 1813.168685][ T846] call_usermodehelper_setup+0xaf/0x360 [ 1813.168719][ T846] __request_module+0x3bd/0x690 [ 1813.168745][ T846] ? __pfx___request_module+0x10/0x10 [ 1813.168784][ T846] ? rcu_is_watching+0x12/0xc0 [ 1813.168815][ T846] ? lockdep_hardirqs_on+0x7c/0x110 [ 1813.168856][ T846] netlink_create+0x226/0x620 [ 1813.168897][ T846] __sock_create+0x338/0x8d0 [ 1813.168931][ T846] __sys_socket+0x14d/0x260 [ 1813.168960][ T846] ? __pfx___sys_socket+0x10/0x10 [ 1813.169024][ T846] ? xfd_validate_state+0x61/0x180 [ 1813.169046][ T846] ? __pfx_ksys_write+0x10/0x10 [ 1813.169088][ T846] __x64_sys_socket+0x72/0xb0 [ 1813.169116][ T846] ? lockdep_hardirqs_on+0x7c/0x110 [ 1813.169150][ T846] do_syscall_64+0xcd/0x4b0 [ 1813.169190][ T846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.169215][ T846] RIP: 0033:0x7f5a21d8eec9 [ 1813.169236][ T846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1813.169260][ T846] RSP: 002b:00007f5a22be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1813.169283][ T846] RAX: ffffffffffffffda RBX: 00007f5a21fe5fa0 RCX: 00007f5a21d8eec9 [ 1813.169299][ T846] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010 [ 1813.169313][ T846] RBP: 00007f5a21e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1813.169328][ T846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1813.169342][ T846] R13: 00007f5a21fe6038 R14: 00007f5a21fe5fa0 R15: 00007fff3e4652b8 [ 1813.169372][ T846] [ 1813.891503][T20850] Bluetooth: hci3: command 0x0406 tx timeout [ 1814.014129][ T857] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4678'. [ 1814.481932][T20850] Bluetooth: hci1: command 0x0c1a tx timeout [ 1814.488087][T20850] Bluetooth: hci0: command 0x0c1a tx timeout [ 1814.720512][T20850] Bluetooth: hci2: command 0x0c1a tx timeout [ 1815.022032][ T891] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4209435258.1245442410.4294540435), cmd(6) [ 1815.827301][ T901] random: crng reseeded on system resumption [ 1815.861658][ T901] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1815.917037][T20850] Bluetooth: hci3: command 0x0406 tx timeout [ 1815.984596][ T904] FAULT_INJECTION: forcing a failure. [ 1815.984596][ T904] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.012727][ T904] CPU: 0 UID: 0 PID: 904 Comm: syz.1.4686 Tainted: G U syzkaller #0 PREEMPT(full) [ 1816.012767][ T904] Tainted: [U]=USER [ 1816.012775][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1816.012790][ T904] Call Trace: [ 1816.012798][ T904] [ 1816.012807][ T904] dump_stack_lvl+0x16c/0x1f0 [ 1816.012861][ T904] should_fail_ex+0x512/0x640 [ 1816.012897][ T904] ? fs_reclaim_acquire+0xae/0x150 [ 1816.012934][ T904] should_failslab+0xc2/0x120 [ 1816.012967][ T904] __kmalloc_noprof+0xdd/0x880 [ 1816.012992][ T904] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1816.013027][ T904] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1816.013055][ T904] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1816.013086][ T904] ? tomoyo_profile+0x47/0x60 [ 1816.013121][ T904] tomoyo_path_number_perm+0x245/0x580 [ 1816.013148][ T904] ? tomoyo_path_number_perm+0x237/0x580 [ 1816.013175][ T904] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1816.013202][ T904] ? find_held_lock+0x2b/0x80 [ 1816.013256][ T904] ? find_held_lock+0x2b/0x80 [ 1816.013284][ T904] ? hook_file_ioctl_common+0x145/0x410 [ 1816.013317][ T904] ? __fget_files+0x20e/0x3c0 [ 1816.013349][ T904] security_file_ioctl+0x9b/0x240 [ 1816.013376][ T904] __x64_sys_ioctl+0xb7/0x210 [ 1816.013401][ T904] do_syscall_64+0xcd/0x4b0 [ 1816.013439][ T904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.013463][ T904] RIP: 0033:0x7f5a21d8eec9 [ 1816.013481][ T904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1816.013505][ T904] RSP: 002b:00007f5a22be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1816.013527][ T904] RAX: ffffffffffffffda RBX: 00007f5a21fe5fa0 RCX: 00007f5a21d8eec9 [ 1816.013543][ T904] RDX: 0000000000000003 RSI: 000000000000ab08 RDI: 0000000000000003 [ 1816.013558][ T904] RBP: 00007f5a22be3090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.013573][ T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.013587][ T904] R13: 00007f5a21fe6038 R14: 00007f5a21fe5fa0 R15: 00007fff3e4652b8 [ 1816.013616][ T904] [ 1816.605194][T20850] Bluetooth: hci1: command 0x0c1a tx timeout [ 1816.709864][ T904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1816.752767][ T904] block nbd8: NBD_DISCONNECT [ 1816.758613][ T904] block nbd8: Send disconnect failed -32 [ 1816.790119][T20850] Bluetooth: hci2: command 0x0c1a tx timeout [ 1817.412872][ T944] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4691'. [ 1817.834321][ T30] audit: type=1804 audit(4294967373.656:173): pid=910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4685" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1818.623641][T20850] Bluetooth: hci1: command 0x0c1a tx timeout [ 1818.858658][T20850] Bluetooth: hci2: command 0x0c1a tx timeout [ 1819.134747][ T964] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4695'. [ 1819.555549][ T997] block nbd8: NBD_DISCONNECT [ 1819.560651][ T997] block nbd8: Send disconnect failed -32 [ 1819.573902][ T960] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4695'. [ 1821.148998][ T1036] FAULT_INJECTION: forcing a failure. [ 1821.148998][ T1036] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.286122][ T1036] CPU: 0 UID: 0 PID: 1036 Comm: syz.6.4700 Tainted: G U syzkaller #0 PREEMPT(full) [ 1821.286162][ T1036] Tainted: [U]=USER [ 1821.286170][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1821.286185][ T1036] Call Trace: [ 1821.286193][ T1036] [ 1821.286203][ T1036] dump_stack_lvl+0x16c/0x1f0 [ 1821.286246][ T1036] should_fail_ex+0x512/0x640 [ 1821.286283][ T1036] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1821.286314][ T1036] should_failslab+0xc2/0x120 [ 1821.286351][ T1036] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1821.286379][ T1036] ? vm_area_alloc+0x1f/0x160 [ 1821.286409][ T1036] ? vm_area_alloc+0x1f/0x160 [ 1821.286432][ T1036] vm_area_alloc+0x1f/0x160 [ 1821.286465][ T1036] __mmap_region+0xf85/0x27a0 [ 1821.286494][ T1036] ? find_held_lock+0x2b/0x80 [ 1821.286524][ T1036] ? __pfx___mmap_region+0x10/0x10 [ 1821.286551][ T1036] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1821.286584][ T1036] ? rcu_is_watching+0x12/0xc0 [ 1821.286615][ T1036] ? finish_task_switch.isra.0+0x221/0xc10 [ 1821.286645][ T1036] ? lockdep_hardirqs_on+0x7c/0x110 [ 1821.286679][ T1036] ? finish_task_switch.isra.0+0x221/0xc10 [ 1821.286736][ T1036] ? __pfx___schedule+0x10/0x10 [ 1821.286801][ T1036] ? trace_cap_capable+0x18d/0x200 [ 1821.286848][ T1036] mmap_region+0x1ab/0x3f0 [ 1821.286875][ T1036] ? __get_unmapped_area+0x267/0x440 [ 1821.286913][ T1036] do_mmap+0xa3e/0x1210 [ 1821.286953][ T1036] ? __pfx_do_mmap+0x10/0x10 [ 1821.286988][ T1036] ? __pfx_down_write_killable+0x10/0x10 [ 1821.287017][ T1036] vm_mmap_pgoff+0x29e/0x470 [ 1821.287057][ T1036] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1821.287092][ T1036] ? do_sigaltstack.constprop.0+0x547/0x800 [ 1821.287121][ T1036] ? __x64_sys_futex+0x1e0/0x4c0 [ 1821.287162][ T1036] ? __x64_sys_futex+0x1e9/0x4c0 [ 1821.287203][ T1036] ksys_mmap_pgoff+0x7d/0x5c0 [ 1821.287236][ T1036] ? xfd_validate_state+0x61/0x180 [ 1821.287263][ T1036] __x64_sys_mmap+0x125/0x190 [ 1821.287292][ T1036] do_syscall_64+0xcd/0x4b0 [ 1821.287330][ T1036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.287356][ T1036] RIP: 0033:0x7efca398eec9 [ 1821.287375][ T1036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1821.287399][ T1036] RSP: 002b:00007efca4752038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1821.287422][ T1036] RAX: ffffffffffffffda RBX: 00007efca3be5fa0 RCX: 00007efca398eec9 [ 1821.287438][ T1036] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1821.287459][ T1036] RBP: 00007efca3a11f91 R08: fffffffffffffffa R09: 0000000000008000 [ 1821.287475][ T1036] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1821.287490][ T1036] R13: 00007efca3be6038 R14: 00007efca3be5fa0 R15: 00007fff7fd35348 [ 1821.287521][ T1036] [ 1821.864358][ T30] audit: type=1804 audit(4294967377.617:174): pid=1054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4703" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1824.721087][ T1155] random: crng reseeded on system resumption [ 1825.499147][ T30] audit: type=1800 audit(4294967381.356:175): pid=1177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4716" name="dbroot" dev="configfs" ino=136729 res=0 errno=0 [ 1825.851173][ T1187] FAULT_INJECTION: forcing a failure. [ 1825.851173][ T1187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1826.296025][ T1187] CPU: 0 UID: 0 PID: 1187 Comm: syz.8.4717 Tainted: G U syzkaller #0 PREEMPT(full) [ 1826.296064][ T1187] Tainted: [U]=USER [ 1826.296079][ T1187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1826.296093][ T1187] Call Trace: [ 1826.296101][ T1187] [ 1826.296110][ T1187] dump_stack_lvl+0x16c/0x1f0 [ 1826.296152][ T1187] should_fail_ex+0x512/0x640 [ 1826.296194][ T1187] _copy_from_user+0x2e/0xd0 [ 1826.296231][ T1187] copy_msghdr_from_user+0x98/0x160 [ 1826.296268][ T1187] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1826.296317][ T1187] ___sys_sendmsg+0xfe/0x1d0 [ 1826.296353][ T1187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1826.296422][ T1187] __sys_sendmsg+0x16d/0x220 [ 1826.296458][ T1187] ? __pfx___sys_sendmsg+0x10/0x10 [ 1826.296511][ T1187] do_syscall_64+0xcd/0x4b0 [ 1826.296548][ T1187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.296572][ T1187] RIP: 0033:0x7f3f70b8eec9 [ 1826.296590][ T1187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1826.296613][ T1187] RSP: 002b:00007f3f719c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1826.296635][ T1187] RAX: ffffffffffffffda RBX: 00007f3f70de5fa0 RCX: 00007f3f70b8eec9 [ 1826.296651][ T1187] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000003 [ 1826.296665][ T1187] RBP: 00007f3f719c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.296680][ T1187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1826.296694][ T1187] R13: 00007f3f70de6038 R14: 00007f3f70de5fa0 R15: 00007ffcfddf01f8 [ 1826.296723][ T1187] [ 1826.473137][ T1174] Process accounting resumed [ 1826.682537][ T1197] block nbd8: NBD_DISCONNECT [ 1826.687258][ T1197] block nbd8: Send disconnect failed -32 [ 1827.370308][ T1221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1827.998375][ T1212] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 1831.052536][ T1367] zswap: compressor not available [ 1831.498297][ T1398] FAULT_INJECTION: forcing a failure. [ 1831.498297][ T1398] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.683316][ T1398] CPU: 0 UID: 0 PID: 1398 Comm: syz.7.4730 Tainted: G U syzkaller #0 PREEMPT(full) [ 1831.683354][ T1398] Tainted: [U]=USER [ 1831.683362][ T1398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1831.683377][ T1398] Call Trace: [ 1831.683385][ T1398] [ 1831.683394][ T1398] dump_stack_lvl+0x16c/0x1f0 [ 1831.683436][ T1398] should_fail_ex+0x512/0x640 [ 1831.683471][ T1398] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1831.683503][ T1398] should_failslab+0xc2/0x120 [ 1831.683537][ T1398] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1831.683564][ T1398] ? __alloc_skb+0x2b2/0x380 [ 1831.683602][ T1398] ? __alloc_skb+0x2b2/0x380 [ 1831.683632][ T1398] __alloc_skb+0x2b2/0x380 [ 1831.683663][ T1398] ? __pfx___alloc_skb+0x10/0x10 [ 1831.683699][ T1398] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1831.683744][ T1398] ? __lock_acquire+0xb97/0x1ce0 [ 1831.683786][ T1398] netlink_alloc_large_skb+0x69/0x140 [ 1831.683826][ T1398] netlink_sendmsg+0x698/0xdd0 [ 1831.683852][ T1398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1831.683878][ T1398] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1831.683920][ T1398] ____sys_sendmsg+0xa95/0xc70 [ 1831.683948][ T1398] ? copy_msghdr_from_user+0x10a/0x160 [ 1831.683984][ T1398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1831.684024][ T1398] ___sys_sendmsg+0x134/0x1d0 [ 1831.684062][ T1398] ? __pfx____sys_sendmsg+0x10/0x10 [ 1831.684133][ T1398] __sys_sendmsg+0x16d/0x220 [ 1831.684170][ T1398] ? __pfx___sys_sendmsg+0x10/0x10 [ 1831.684225][ T1398] do_syscall_64+0xcd/0x4b0 [ 1831.684263][ T1398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.684286][ T1398] RIP: 0033:0x7f8f2978eec9 [ 1831.684304][ T1398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1831.684327][ T1398] RSP: 002b:00007f8f2a5cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1831.684349][ T1398] RAX: ffffffffffffffda RBX: 00007f8f299e5fa0 RCX: 00007f8f2978eec9 [ 1831.684365][ T1398] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000003 [ 1831.684380][ T1398] RBP: 00007f8f2a5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.684395][ T1398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.684409][ T1398] R13: 00007f8f299e6038 R14: 00007f8f299e5fa0 R15: 00007ffdf942a6f8 [ 1831.684439][ T1398] [ 1832.400813][ T1420] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4734'. [ 1835.733602][ T1599] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1836.767694][ T1639] netlink: 'syz.8.4742': attribute type 1 has an invalid length. [ 1838.466472][ T1710] FAULT_INJECTION: forcing a failure. [ 1838.466472][ T1710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1838.556136][T22097] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 11 with max blocks 39 with error 117 [ 1838.599416][ T1710] CPU: 0 UID: 0 PID: 1710 Comm: syz.8.4752 Tainted: G U syzkaller #0 PREEMPT(full) [ 1838.599456][ T1710] Tainted: [U]=USER [ 1838.599464][ T1710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1838.599479][ T1710] Call Trace: [ 1838.599487][ T1710] [ 1838.599496][ T1710] dump_stack_lvl+0x16c/0x1f0 [ 1838.599538][ T1710] should_fail_ex+0x512/0x640 [ 1838.599580][ T1710] should_fail_alloc_page+0xe7/0x130 [ 1838.599619][ T1710] prepare_alloc_pages+0x3c2/0x610 [ 1838.599659][ T1710] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1838.599688][ T1710] ? stack_trace_save+0x8e/0xc0 [ 1838.599721][ T1710] ? __pfx_stack_trace_save+0x10/0x10 [ 1838.599754][ T1710] ? stack_depot_save_flags+0x29/0x9c0 [ 1838.599792][ T1710] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1838.599831][ T1710] ? kasan_save_stack+0x42/0x60 [ 1838.599862][ T1710] ? kasan_save_stack+0x33/0x60 [ 1838.599891][ T1710] ? kasan_save_track+0x14/0x30 [ 1838.599921][ T1710] ? __kasan_slab_alloc+0x89/0x90 [ 1838.599954][ T1710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1838.599982][ T1710] ? __walk_page_range+0x163/0x820 [ 1838.600011][ T1710] ? madvise_vma_behavior+0xa54/0x2d50 [ 1838.600049][ T1710] ? madvise_do_behavior+0x1e2/0x530 [ 1838.600085][ T1710] ? do_madvise+0x176/0x240 [ 1838.600120][ T1710] ? __x64_sys_madvise+0xa9/0x110 [ 1838.600157][ T1710] ? do_syscall_64+0xcd/0x4b0 [ 1838.600191][ T1710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.600230][ T1710] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1838.600259][ T1710] ? policy_nodemask+0xea/0x4e0 [ 1838.600297][ T1710] alloc_pages_mpol+0x1fb/0x550 [ 1838.600343][ T1710] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1838.600392][ T1710] alloc_pages_noprof+0x131/0x390 [ 1838.600429][ T1710] pte_alloc_one+0x1e/0x350 [ 1838.600462][ T1710] __pte_alloc+0x6d/0x380 [ 1838.600495][ T1710] ? __pfx___pte_alloc+0x10/0x10 [ 1838.600528][ T1710] ? _raw_spin_unlock+0x28/0x50 [ 1838.600558][ T1710] ? __pmd_alloc+0x64f/0x8b0 [ 1838.600596][ T1710] walk_pgd_range+0xb84/0x1f50 [ 1838.600630][ T1710] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1838.600665][ T1710] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1838.600704][ T1710] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1838.600744][ T1710] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1838.600781][ T1710] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1838.600818][ T1710] ? __pfx_walk_pgd_range+0x10/0x10 [ 1838.600856][ T1710] __walk_page_range+0x163/0x820 [ 1838.600889][ T1710] ? find_vma+0xbf/0x140 [ 1838.600920][ T1710] ? __pfx_find_vma+0x10/0x10 [ 1838.600954][ T1710] ? walk_page_test+0x9b/0x180 [ 1838.600985][ T1710] walk_page_range_mm+0x461/0xb40 [ 1838.601019][ T1710] ? __pfx_walk_page_range_mm+0x10/0x10 [ 1838.601058][ T1710] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1838.601087][ T1710] madvise_vma_behavior+0xa54/0x2d50 [ 1838.601129][ T1710] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 1838.601167][ T1710] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1838.601206][ T1710] ? mas_prev+0x9b/0xf0 [ 1838.601227][ T1710] ? __pfx_mas_prev+0x10/0x10 [ 1838.601257][ T1710] ? find_vma_prev+0xd3/0x150 [ 1838.601289][ T1710] ? find_held_lock+0x2b/0x80 [ 1838.601330][ T1710] ? __pfx_find_vma_prev+0x10/0x10 [ 1838.601376][ T1710] ? __futex_wait+0x24b/0x2f0 [ 1838.601406][ T1710] madvise_walk_vmas+0x31f/0x9c0 [ 1838.601449][ T1710] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1838.601497][ T1710] madvise_do_behavior+0x1e2/0x530 [ 1838.601535][ T1710] ? futex_private_hash_put+0x18a/0x300 [ 1838.601571][ T1710] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1838.601611][ T1710] ? down_read+0x13d/0x480 [ 1838.601647][ T1710] do_madvise+0x176/0x240 [ 1838.601684][ T1710] ? __pfx_do_madvise+0x10/0x10 [ 1838.601721][ T1710] ? do_futex+0x122/0x350 [ 1838.601776][ T1710] ? xfd_validate_state+0x61/0x180 [ 1838.601798][ T1710] ? __pfx_ksys_write+0x10/0x10 [ 1838.601834][ T1710] __x64_sys_madvise+0xa9/0x110 [ 1838.601872][ T1710] ? lockdep_hardirqs_on+0x7c/0x110 [ 1838.601906][ T1710] do_syscall_64+0xcd/0x4b0 [ 1838.601944][ T1710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.601969][ T1710] RIP: 0033:0x7f3f70b8eec9 [ 1838.601988][ T1710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1838.602013][ T1710] RSP: 002b:00007f3f719c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1838.602035][ T1710] RAX: ffffffffffffffda RBX: 00007f3f70de5fa0 RCX: 00007f3f70b8eec9 [ 1838.602052][ T1710] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 1838.602067][ T1710] RBP: 00007f3f70c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1838.602082][ T1710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1838.602096][ T1710] R13: 00007f3f70de6038 R14: 00007f3f70de5fa0 R15: 00007ffcfddf01f8 [ 1838.602127][ T1710] [ 1839.119124][T22097] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1839.119124][T22097] [ 1839.393115][ T1738] FAULT_INJECTION: forcing a failure. [ 1839.393115][ T1738] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.405972][ T1738] CPU: 0 UID: 0 PID: 1738 Comm: syz.6.4757 Tainted: G U syzkaller #0 PREEMPT(full) [ 1839.406010][ T1738] Tainted: [U]=USER [ 1839.406018][ T1738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1839.406032][ T1738] Call Trace: [ 1839.406043][ T1738] [ 1839.406053][ T1738] dump_stack_lvl+0x16c/0x1f0 [ 1839.406094][ T1738] should_fail_ex+0x512/0x640 [ 1839.406130][ T1738] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1839.406156][ T1738] should_failslab+0xc2/0x120 [ 1839.406197][ T1738] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1839.406226][ T1738] ? skb_clone+0x190/0x3f0 [ 1839.406268][ T1738] ? skb_clone+0x190/0x3f0 [ 1839.406302][ T1738] skb_clone+0x190/0x3f0 [ 1839.406339][ T1738] netlink_deliver_tap+0xabd/0xd30 [ 1839.406383][ T1738] netlink_unicast+0x64c/0x870 [ 1839.406409][ T1738] ? __pfx_netlink_unicast+0x10/0x10 [ 1839.406431][ T1738] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1839.406469][ T1738] ? __lock_acquire+0xb97/0x1ce0 [ 1839.406514][ T1738] netlink_sendmsg+0x8c8/0xdd0 [ 1839.406541][ T1738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.406566][ T1738] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1839.406608][ T1738] ____sys_sendmsg+0xa95/0xc70 [ 1839.406637][ T1738] ? copy_msghdr_from_user+0x10a/0x160 [ 1839.406673][ T1738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1839.406714][ T1738] ___sys_sendmsg+0x134/0x1d0 [ 1839.406751][ T1738] ? __pfx____sys_sendmsg+0x10/0x10 [ 1839.406823][ T1738] __sys_sendmsg+0x16d/0x220 [ 1839.406860][ T1738] ? __pfx___sys_sendmsg+0x10/0x10 [ 1839.406916][ T1738] do_syscall_64+0xcd/0x4b0 [ 1839.406954][ T1738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.406978][ T1738] RIP: 0033:0x7efca398eec9 [ 1839.406997][ T1738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1839.407020][ T1738] RSP: 002b:00007efca4752038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1839.407043][ T1738] RAX: ffffffffffffffda RBX: 00007efca3be5fa0 RCX: 00007efca398eec9 [ 1839.407060][ T1738] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000003 [ 1839.407075][ T1738] RBP: 00007efca4752090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.407089][ T1738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.407104][ T1738] R13: 00007efca3be6038 R14: 00007efca3be5fa0 R15: 00007fff7fd35348 [ 1839.407134][ T1738] /[ 1840.318608][ T1751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4759'. [ 1841.415377][T20850] block nbd32: Receive control failed (result -107) [ 1841.476850][ T1779] FAULT_INJECTION: forcing a failure. [ 1841.476850][ T1779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1841.543575][ T1779] CPU: 0 UID: 0 PID: 1779 Comm: syz.7.4765 Tainted: G U syzkaller #0 PREEMPT(full) [ 1841.543614][ T1779] Tainted: [U]=USER [ 1841.543622][ T1779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1841.543636][ T1779] Call Trace: [ 1841.543644][ T1779] [ 1841.543653][ T1779] dump_stack_lvl+0x16c/0x1f0 [ 1841.543693][ T1779] should_fail_ex+0x512/0x640 [ 1841.543733][ T1779] _copy_to_iter+0x29f/0x1710 [ 1841.543762][ T1779] ? __pfx__copy_to_iter+0x10/0x10 [ 1841.543789][ T1779] ? __up_read+0x1f8/0x750 [ 1841.543812][ T1779] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1841.543848][ T1779] ? mm_access+0x22d/0x2e0 [ 1841.543884][ T1779] copy_page_to_iter+0x12a/0x1e0 [ 1841.543910][ T1779] process_vm_rw_core.constprop.0+0x5ad/0x970 [ 1841.543953][ T1779] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1841.544000][ T1779] ? iovec_from_user+0xbb/0x140 [ 1841.544024][ T1779] process_vm_rw+0x216/0x2c0 [ 1841.544055][ T1779] ? __pfx_process_vm_rw+0x10/0x10 [ 1841.544125][ T1779] ? xfd_validate_state+0x61/0x180 [ 1841.544147][ T1779] ? __pfx_ksys_write+0x10/0x10 [ 1841.544179][ T1779] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1841.544216][ T1779] ? do_syscall_64+0x91/0x4b0 [ 1841.544252][ T1779] ? lockdep_hardirqs_on+0x7c/0x110 [ 1841.544285][ T1779] do_syscall_64+0xcd/0x4b0 [ 1841.544322][ T1779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.544347][ T1779] RIP: 0033:0x7f8f2978eec9 [ 1841.544365][ T1779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1841.544389][ T1779] RSP: 002b:00007f8f2a5ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1841.544414][ T1779] RAX: ffffffffffffffda RBX: 00007f8f299e6090 RCX: 00007f8f2978eec9 [ 1841.544431][ T1779] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000050 [ 1841.544446][ T1779] RBP: 00007f8f29811f91 R08: 000000000000000a R09: 0000000000000000 [ 1841.544460][ T1779] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 1841.544474][ T1779] R13: 00007f8f299e6128 R14: 00007f8f299e6090 R15: 00007ffdf942a6f8 [ 1841.544503][ T1779] [ 1841.762618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1841.773897][ T1779] ptrace attach of "./syz-executor exec"[32174] was attempted by "./syz-executor exec"[1779] [ 1842.084424][T16907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1842.100554][T16907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1842.186610][T25259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1842.257917][ T1790] FAULT_INJECTION: forcing a failure. [ 1842.257917][ T1790] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.300952][ T1790] CPU: 0 UID: 0 PID: 1790 Comm: syz.8.4766 Tainted: G U syzkaller #0 PREEMPT(full) [ 1842.300992][ T1790] Tainted: [U]=USER [ 1842.300999][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1842.301014][ T1790] Call Trace: [ 1842.301022][ T1790] [ 1842.301031][ T1790] dump_stack_lvl+0x16c/0x1f0 [ 1842.301075][ T1790] should_fail_ex+0x512/0x640 [ 1842.301112][ T1790] ? __kmalloc_noprof+0xca/0x880 [ 1842.301140][ T1790] should_failslab+0xc2/0x120 [ 1842.301177][ T1790] __kmalloc_noprof+0xdd/0x880 [ 1842.301199][ T1790] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1842.301241][ T1790] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1842.301278][ T1790] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1842.301307][ T1790] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1842.301338][ T1790] ? __mutex_lock+0x1c5/0x1060 [ 1842.301377][ T1790] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1842.301519][ T1790] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1842.301550][ T1790] ? genl_get_cmd+0x194/0x580 [ 1842.301584][ T1790] ? __radix_tree_lookup+0x21f/0x2c0 [ 1842.301622][ T1790] genl_rcv_msg+0x55c/0x800 [ 1842.301652][ T1790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1842.301679][ T1790] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1842.301721][ T1790] netlink_rcv_skb+0x155/0x420 [ 1842.301743][ T1790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1842.301770][ T1790] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1842.301804][ T1790] ? netlink_deliver_tap+0x1ae/0xd30 [ 1842.301844][ T1790] genl_rcv+0x28/0x40 [ 1842.301866][ T1790] netlink_unicast+0x5aa/0x870 [ 1842.301891][ T1790] ? __pfx_netlink_unicast+0x10/0x10 [ 1842.301913][ T1790] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1842.301949][ T1790] ? __lock_acquire+0xb97/0x1ce0 [ 1842.301994][ T1790] netlink_sendmsg+0x8c8/0xdd0 [ 1842.302021][ T1790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1842.302165][ T1790] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1842.302311][ T1790] ____sys_sendmsg+0xa95/0xc70 [ 1842.302342][ T1790] ? copy_msghdr_from_user+0x10a/0x160 [ 1842.302378][ T1790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1842.302420][ T1790] ___sys_sendmsg+0x134/0x1d0 [ 1842.302459][ T1790] ? __pfx____sys_sendmsg+0x10/0x10 [ 1842.302531][ T1790] __sys_sendmsg+0x16d/0x220 [ 1842.302568][ T1790] ? __pfx___sys_sendmsg+0x10/0x10 [ 1842.302624][ T1790] do_syscall_64+0xcd/0x4b0 [ 1842.302663][ T1790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.302687][ T1790] RIP: 0033:0x7f3f70b8eec9 [ 1842.302708][ T1790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1842.302731][ T1790] RSP: 002b:00007f3f719c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1842.302753][ T1790] RAX: ffffffffffffffda RBX: 00007f3f70de5fa0 RCX: 00007f3f70b8eec9 [ 1842.302769][ T1790] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000003 [ 1842.302783][ T1790] RBP: 00007f3f719c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.302798][ T1790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1842.302812][ T1790] R13: 00007f3f70de6038 R14: 00007f3f70de5fa0 R15: 00007ffcfddf01f8 [ 1842.302843][ T1790] [ 1842.616229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1842.843559][T25259] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1842.876496][ T1804] sd 0:0:1:0: PR command failed: 1026 [ 1842.882122][ T1804] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1842.889707][ T1804] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1843.014197][T16907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1843.076756][T25259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1843.522743][ T1783] chnl_net:caif_netlink_parms(): no params data found [ 1844.723184][ T1783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.762920][ T1783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.813750][ T1783] bridge_slave_0: entered allmulticast mode [ 1844.864416][ T1783] bridge_slave_0: entered promiscuous mode [ 1844.885332][T25259] Bluetooth: hci2: command 0x0c1a tx timeout [ 1844.929218][ T1783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.960169][ T1783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.981688][ T2015] input: f¬ as /devices/virtual/input/input55 [ 1845.002843][ T1783] bridge_slave_1: entered allmulticast mode [ 1845.048908][ T1783] bridge_slave_1: entered promiscuous mode [ 1845.202089][T25259] Bluetooth: hci1: command tx timeout [ 1845.372451][ T1783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.436645][ T1783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.680215][ T1783] team0: Port device team_slave_0 added [ 1845.700218][ T1783] team0: Port device team_slave_1 added [ 1845.785484][ T2104] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4778'. [ 1845.832487][ T2104] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4778'. [ 1845.869017][ T2104] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4778'. [ 1846.035016][ T30] audit: type=1804 audit(4294967401.993:176): pid=2085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4776" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1846.115590][ T1783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.164519][ T1783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.251447][ T1783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.281998][ T1783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.344482][ T1783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.466932][ T1783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.271354][T25259] Bluetooth: hci1: command tx timeout [ 1847.991296][ T1783] hsr_slave_0: entered promiscuous mode [ 1848.037078][ T1783] hsr_slave_1: entered promiscuous mode [ 1848.077600][ T1783] debugfs: 'hsr0' already exists in 'hsr' [ 1848.083761][ T1783] Cannot create hsr debugfs directory [ 1849.289946][ T1783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.341000][T25259] Bluetooth: hci1: command tx timeout [ 1849.668333][ T2281] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4787'. [ 1849.680285][ T1783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.772806][ T2281] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4787'. [ 1849.828415][ T2281] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4787'. [ 1850.004467][ T1783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.367075][ T1783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.152765][ T1783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1851.221868][ T1783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1851.229796][ T2330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4793'. [ 1851.309227][ T2330] nbd: must specify a size in bytes for the device [ 1851.355535][ T1783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1851.412614][T25259] Bluetooth: hci1: command tx timeout [ 1851.456255][ T1783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1851.925965][ T2292] kexec: Could not allocate control_code_buffer [ 1852.027039][ T1783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.116845][ T1783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.215804][T30811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.223547][T30811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.367752][T30811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.374982][T30811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.663988][T25259] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1853.792864][ T2405] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1853.835513][ T1783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.034880][ T2426] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4803'. [ 1854.067609][ T2426] nbd: must specify a size in bytes for the device [ 1854.202370][ T1783] veth0_vlan: entered promiscuous mode [ 1854.313236][ T1783] veth1_vlan: entered promiscuous mode [ 1854.496391][ T1783] veth0_macvtap: entered promiscuous mode [ 1854.551187][ T1783] veth1_macvtap: entered promiscuous mode [ 1854.704741][ T1783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.803359][ T1783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.861449][T30811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.905493][T30811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.970122][T30811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.055174][T30811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.359706][T22097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.402128][T22097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.571423][T16213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.605642][T16213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.679328][ T2548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4813'. [ 1856.719805][ T2548] nbd: must specify a size in bytes for the device [ 1858.637307][ T2601] input: f¬ as /devices/virtual/input/input56 [ 1858.677844][T25259] block nbd33: Receive control failed (result -107) [ 1859.375534][ T2624] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1859.390926][ T2619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4818'. [ 1860.573355][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1860.602462][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.502430][ T2691] zram: Added device: zram2 [ 1863.983407][ T2898] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 1865.281310][T25259] block nbd34: Receive control failed (result -107) [ 1865.482844][ T2490] Process accounting paused [ 1866.086112][ T2947] netlink: 'syz.1.4833': attribute type 32 has an invalid length. [ 1866.108118][ T2947] netlink: 'syz.1.4833': attribute type 33 has an invalid length. [ 1866.142984][ T2947] netlink: 'syz.1.4833': attribute type 35 has an invalid length. [ 1866.174523][ T2947] netlink: 'syz.1.4833': attribute type 37 has an invalid length. [ 1866.174587][ T2947] netlink: 'syz.1.4833': attribute type 39 has an invalid length. [ 1866.174602][ T2947] netlink: 'syz.1.4833': attribute type 40 has an invalid length. [ 1866.174617][ T2947] netlink: 'syz.1.4833': attribute type 41 has an invalid length. [ 1866.174633][ T2947] netlink: 'syz.1.4833': attribute type 44 has an invalid length. [ 1866.174648][ T2947] netlink: 'syz.1.4833': attribute type 46 has an invalid length. [ 1866.174663][ T2947] netlink: 'syz.1.4833': attribute type 47 has an invalid length. [ 1866.174677][ T2947] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4833'. [ 1866.174818][ T2948] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4833'. [ 1867.839374][ T30] audit: type=1804 audit(4294967308.801:177): pid=2991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4837" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1868.901018][ T2956] tty tty17: ldisc open failed (-12), clearing slot 16 [ 1869.127852][ T3004] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1869.486855][T25259] block nbd35: Receive control failed (result -107) [ 1871.206512][ T3077] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1871.257019][ T3077] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1871.298466][ T3077] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1872.966909][ T3124] zero sized request [ 1873.338604][ T30] audit: type=1800 audit(4294967314.329:178): pid=3128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4846" name="dbroot" dev="configfs" ino=140468 res=0 errno=0 [ 1873.655119][ T3150] netlink: set zone limit has 8 unknown bytes [ 1874.132404][ T3166] futex_wake_op: syz.1.4852 tries to shift op by -9; fix this program [ 1875.197138][ T3193] block nbd8: NBD_DISCONNECT [ 1875.225756][ T3193] block nbd8: Send disconnect failed -32 [ 1875.573178][T25259] block nbd36: Receive control failed (result -107) [ 1877.717392][ T3283] dyndbg: bad flag-op @, at start of @Œ9μrW [ 1877.745899][ T3283] dyndbg: flags parse failed [ 1877.755206][ T3283] block nbd8: NBD_DISCONNECT [ 1877.772604][ T3283] block nbd8: Send disconnect failed -32 [ 1878.232491][ T3295] nbd0: detected capacity change from 0 to 25165824 [ 1878.394955][T20063] [ 1878.397352][T20063] ====================================================== [ 1878.404373][T20063] WARNING: possible circular locking dependency detected [ 1878.411410][T20063] syzkaller #0 Tainted: G U [ 1878.417410][T20063] ------------------------------------------------------ [ 1878.424441][T20063] udevd/20063 is trying to acquire lock: [ 1878.430330][T20063] ffff88802564ba70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x423/0x12d0 [ 1878.439604][T20063] [ 1878.439604][T20063] but task is already holding lock: [ 1878.447152][T20063] ffff888026140178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 1878.455706][T20063] [ 1878.455706][T20063] which lock already depends on the new lock. [ 1878.455706][T20063] [ 1878.466208][T20063] [ 1878.466208][T20063] the existing dependency chain (in reverse order) is: [ 1878.475259][T20063] [ 1878.475259][T20063] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1878.482491][T20063] __mutex_lock+0x193/0x1060 [ 1878.487627][T20063] nbd_queue_rq+0xbd/0x12d0 [ 1878.492674][T20063] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 1878.498784][T20063] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 1878.505659][T20063] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1878.512275][T20063] blk_mq_run_hw_queue+0x239/0x670 [ 1878.518009][T20063] blk_mq_dispatch_list+0x514/0x1310 [ 1878.523841][T20063] blk_mq_flush_plug_list+0x130/0x600 [ 1878.529752][T20063] __blk_flush_plug+0x2c4/0x4b0 [ 1878.535139][T20063] __submit_bio+0x545/0x690 [ 1878.540194][T20063] submit_bio_noacct_nocheck+0x53d/0xc10 [ 1878.546363][T20063] submit_bio_noacct+0xbbb/0x1f60 [ 1878.551953][T20063] block_read_full_folio+0x4db/0x850 [ 1878.557790][T20063] filemap_read_folio+0xc8/0x2a0 [ 1878.563286][T20063] do_read_cache_folio+0x263/0x5c0 [ 1878.568956][T20063] read_part_sector+0xd4/0x370 [ 1878.574262][T20063] adfspart_check_ICS+0x93/0x940 [ 1878.579752][T20063] bdev_disk_changed+0x723/0x1520 [ 1878.585495][T20063] blkdev_get_whole+0x187/0x290 [ 1878.590890][T20063] bdev_open+0x2c7/0xe40 [ 1878.595710][T20063] blkdev_open+0x34e/0x4f0 [ 1878.600721][T20063] do_dentry_open+0x97f/0x1530 [ 1878.606038][T20063] vfs_open+0x82/0x3f0 [ 1878.610671][T20063] path_openat+0x1de4/0x2cb0 [ 1878.615822][T20063] do_filp_open+0x20b/0x470 [ 1878.620893][T20063] do_sys_openat2+0x11b/0x1d0 [ 1878.626198][T20063] __x64_sys_openat+0x174/0x210 [ 1878.631598][T20063] do_syscall_64+0xcd/0x4b0 [ 1878.636655][T20063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.643200][T20063] [ 1878.643200][T20063] -> #4 (set->srcu){.+.+}-{0:0}: [ 1878.650344][T20063] __synchronize_srcu+0xa1/0x290 [ 1878.655818][T20063] blk_mq_quiesce_queue+0x149/0x1b0 [ 1878.661564][T20063] queue_wb_lat_store+0x269/0x3d0 [ 1878.667131][T20063] queue_attr_store+0x26b/0x310 [ 1878.672523][T20063] sysfs_kf_write+0xef/0x150 [ 1878.677677][T20063] kernfs_fop_write_iter+0x3ac/0x570 [ 1878.683617][T20063] vfs_write+0x7d0/0x11d0 [ 1878.688511][T20063] ksys_write+0x12a/0x250 [ 1878.693392][T20063] do_syscall_64+0xcd/0x4b0 [ 1878.698442][T20063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.704960][T20063] [ 1878.704960][T20063] -> #3 (&q->q_usage_counter(io)#68){++++}-{0:0}: [ 1878.713782][T20063] blk_alloc_queue+0x619/0x760 [ 1878.719099][T20063] blk_mq_alloc_queue+0x172/0x280 [ 1878.724681][T20063] __blk_mq_alloc_disk+0x29/0x120 [ 1878.730261][T20063] add_mtd_blktrans_dev+0x7ad/0x15a0 [ 1878.736243][T20063] mtdblock_add_mtd+0x1cc/0x270 [ 1878.741639][T20063] blktrans_notify_add+0x9f/0xf0 [ 1878.747131][T20063] add_mtd_device+0xb07/0x1720 [ 1878.752438][T20063] mtd_device_parse_register+0x7c2/0xb10 [ 1878.758631][T20063] mtdram_init_device+0x298/0x350 [ 1878.764425][T20063] init_mtdram+0xba/0x1b0 [ 1878.769301][T20063] do_one_initcall+0x120/0x6e0 [ 1878.774701][T20063] kernel_init_freeable+0x5c2/0x910 [ 1878.780485][T20063] kernel_init+0x1c/0x2b0 [ 1878.785448][T20063] ret_from_fork+0x56d/0x730 [ 1878.790594][T20063] ret_from_fork_asm+0x1a/0x30 [ 1878.795911][T20063] [ 1878.795911][T20063] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1878.803321][T20063] fs_reclaim_acquire+0x102/0x150 [ 1878.808949][T20063] kmem_cache_alloc_node_noprof+0x5e/0x770 [ 1878.815425][T20063] __alloc_skb+0x2b2/0x380 [ 1878.820402][T20063] tcp_stream_alloc_skb+0x34/0x560 [ 1878.826089][T20063] tcp_sendmsg_locked+0x12d9/0x42e0 [ 1878.831852][T20063] tcp_sendmsg+0x2e/0x50 [ 1878.836643][T20063] inet_sendmsg+0xb9/0x140 [ 1878.841668][T20063] sock_write_iter+0x509/0x610 [ 1878.846999][T20063] vfs_write+0x7d0/0x11d0 [ 1878.851963][T20063] ksys_write+0x1f8/0x250 [ 1878.856863][T20063] do_syscall_64+0xcd/0x4b0 [ 1878.861959][T20063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.868510][T20063] [ 1878.868510][T20063] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1878.876803][T20063] lock_sock_nested+0x41/0xf0 [ 1878.882163][T20063] inet_shutdown+0x67/0x440 [ 1878.887232][T20063] nbd_mark_nsock_dead+0xae/0x5d0 [ 1878.892939][T20063] recv_work+0x671/0xa80 [ 1878.897800][T20063] process_one_work+0x9cc/0x1b70 [ 1878.903372][T20063] worker_thread+0x6c8/0xf10 [ 1878.908498][T20063] kthread+0x3c5/0x780 [ 1878.913100][T20063] ret_from_fork+0x56d/0x730 [ 1878.918280][T20063] ret_from_fork_asm+0x1a/0x30 [ 1878.923692][T20063] [ 1878.923692][T20063] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1878.931387][T20063] __lock_acquire+0x12a6/0x1ce0 [ 1878.936806][T20063] lock_acquire+0x179/0x350 [ 1878.941887][T20063] __mutex_lock+0x193/0x1060 [ 1878.947052][T20063] nbd_queue_rq+0x423/0x12d0 [ 1878.952702][T20063] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 1878.958897][T20063] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 1878.965935][T20063] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1878.972462][T20063] blk_mq_run_hw_queue+0x239/0x670 [ 1878.978378][T20063] blk_mq_dispatch_list+0x514/0x1310 [ 1878.984216][T20063] blk_mq_flush_plug_list+0x130/0x600 [ 1878.990331][T20063] __blk_flush_plug+0x2c4/0x4b0 [ 1878.995732][T20063] __submit_bio+0x545/0x690 [ 1879.000820][T20063] submit_bio_noacct_nocheck+0x53d/0xc10 [ 1879.007269][T20063] submit_bio_noacct+0xbbb/0x1f60 [ 1879.012847][T20063] block_read_full_folio+0x4db/0x850 [ 1879.018683][T20063] filemap_read_folio+0xc8/0x2a0 [ 1879.024161][T20063] do_read_cache_folio+0x263/0x5c0 [ 1879.029995][T20063] read_part_sector+0xd4/0x370 [ 1879.035408][T20063] adfspart_check_ICS+0x93/0x940 [ 1879.041158][T20063] bdev_disk_changed+0x723/0x1520 [ 1879.046728][T20063] blkdev_get_whole+0x187/0x290 [ 1879.052243][T20063] bdev_open+0x2c7/0xe40 [ 1879.057227][T20063] blkdev_open+0x34e/0x4f0 [ 1879.062373][T20063] do_dentry_open+0x97f/0x1530 [ 1879.067905][T20063] vfs_open+0x82/0x3f0 [ 1879.072549][T20063] path_openat+0x1de4/0x2cb0 [ 1879.077699][T20063] do_filp_open+0x20b/0x470 [ 1879.082748][T20063] do_sys_openat2+0x11b/0x1d0 [ 1879.087987][T20063] __x64_sys_openat+0x174/0x210 [ 1879.093407][T20063] do_syscall_64+0xcd/0x4b0 [ 1879.098692][T20063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.105153][T20063] [ 1879.105153][T20063] other info that might help us debug this: [ 1879.105153][T20063] [ 1879.115750][T20063] Chain exists of: [ 1879.115750][T20063] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1879.115750][T20063] [ 1879.127958][T20063] Possible unsafe locking scenario: [ 1879.127958][T20063] [ 1879.135515][T20063] CPU0 CPU1 [ 1879.141163][T20063] ---- ---- [ 1879.146554][T20063] lock(&cmd->lock); [ 1879.150589][T20063] lock(set->srcu); [ 1879.157203][T20063] lock(&cmd->lock); [ 1879.163720][T20063] lock(&nsock->tx_lock); [ 1879.168331][T20063] [ 1879.168331][T20063] *** DEADLOCK *** [ 1879.168331][T20063] [ 1879.176513][T20063] 3 locks held by udevd/20063: [ 1879.181286][T20063] #0: ffff888025f74358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1879.190810][T20063] #1: ffff88814371c210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 1879.200871][T20063] #2: ffff888026140178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 1879.210063][T20063] [ 1879.210063][T20063] stack backtrace: [ 1879.216064][T20063] CPU: 0 UID: 0 PID: 20063 Comm: udevd Tainted: G U syzkaller #0 PREEMPT(full) [ 1879.216100][T20063] Tainted: [U]=USER [ 1879.216108][T20063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1879.216122][T20063] Call Trace: [ 1879.216132][T20063] [ 1879.216142][T20063] dump_stack_lvl+0x116/0x1f0 [ 1879.216182][T20063] print_circular_bug+0x275/0x350 [ 1879.216219][T20063] check_noncircular+0x14c/0x170 [ 1879.216256][T20063] __lock_acquire+0x12a6/0x1ce0 [ 1879.216296][T20063] lock_acquire+0x179/0x350 [ 1879.216331][T20063] ? nbd_queue_rq+0x423/0x12d0 [ 1879.216358][T20063] ? __pfx___might_resched+0x10/0x10 [ 1879.216389][T20063] ? nbd_queue_rq+0x423/0x12d0 [ 1879.216414][T20063] __mutex_lock+0x193/0x1060 [ 1879.216447][T20063] ? nbd_queue_rq+0x423/0x12d0 [ 1879.216477][T20063] ? __pfx___mutex_lock+0x10/0x10 [ 1879.216509][T20063] ? lock_acquire+0x179/0x350 [ 1879.216546][T20063] ? mark_held_locks+0x49/0x80 [ 1879.216583][T20063] ? nbd_queue_rq+0x423/0x12d0 [ 1879.216608][T20063] nbd_queue_rq+0x423/0x12d0 [ 1879.216634][T20063] ? __schedule+0x11a3/0x5de0 [ 1879.216669][T20063] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1879.216698][T20063] ? __pfx___schedule+0x10/0x10 [ 1879.216727][T20063] ? irqentry_exit+0x3b/0x90 [ 1879.216761][T20063] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 1879.216790][T20063] ? sbitmap_find_bit+0x500/0x6f0 [ 1879.216821][T20063] ? sbitmap_get+0x1e5/0x360 [ 1879.216846][T20063] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1879.216876][T20063] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 1879.216909][T20063] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 1879.216940][T20063] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1879.216974][T20063] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1879.217001][T20063] blk_mq_run_hw_queue+0x239/0x670 [ 1879.217023][T20063] ? blk_mq_run_hw_queue+0x22b/0x670 [ 1879.217047][T20063] blk_mq_dispatch_list+0x514/0x1310 [ 1879.217077][T20063] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1879.217104][T20063] ? find_held_lock+0x2b/0x80 [ 1879.217131][T20063] ? blk_add_trace_plug+0xf5/0x290 [ 1879.217166][T20063] blk_mq_flush_plug_list+0x130/0x600 [ 1879.217193][T20063] ? trace_block_plug+0x17f/0x200 [ 1879.217229][T20063] ? blk_add_rq_to_plug+0x30a/0x540 [ 1879.217256][T20063] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1879.217285][T20063] ? blk_mq_submit_bio+0x9e6/0x3380 [ 1879.217315][T20063] __blk_flush_plug+0x2c4/0x4b0 [ 1879.217341][T20063] ? __pfx___blk_flush_plug+0x10/0x10 [ 1879.217365][T20063] ? __lock_acquire+0x62e/0x1ce0 [ 1879.217403][T20063] __submit_bio+0x545/0x690 [ 1879.217427][T20063] ? __pfx___submit_bio+0x10/0x10 [ 1879.217459][T20063] ? submit_bio_noacct_nocheck+0x53d/0xc10 [ 1879.217485][T20063] submit_bio_noacct_nocheck+0x53d/0xc10 [ 1879.217513][T20063] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1879.217541][T20063] ? __pfx___might_resched+0x10/0x10 [ 1879.217572][T20063] submit_bio_noacct+0xbbb/0x1f60 [ 1879.217600][T20063] block_read_full_folio+0x4db/0x850 [ 1879.217636][T20063] ? __pfx_blkdev_get_block+0x10/0x10 [ 1879.217666][T20063] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1879.217692][T20063] filemap_read_folio+0xc8/0x2a0 [ 1879.217717][T20063] ? __pfx_filemap_read_folio+0x10/0x10 [ 1879.217742][T20063] ? __filemap_get_folio+0x32b/0xc30 [ 1879.217772][T20063] do_read_cache_folio+0x263/0x5c0 [ 1879.217800][T20063] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1879.217829][T20063] read_part_sector+0xd4/0x370 [ 1879.217852][T20063] adfspart_check_ICS+0x93/0x940 [ 1879.217874][T20063] ? snprintf+0xc7/0x100 [ 1879.217913][T20063] ? __pfx_snprintf+0x10/0x10 [ 1879.217944][T20063] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1879.217971][T20063] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1879.217995][T20063] bdev_disk_changed+0x723/0x1520 [ 1879.218021][T20063] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1879.218047][T20063] blkdev_get_whole+0x187/0x290 [ 1879.218072][T20063] bdev_open+0x2c7/0xe40 [ 1879.218097][T20063] blkdev_open+0x34e/0x4f0 [ 1879.218125][T20063] do_dentry_open+0x97f/0x1530 [ 1879.218156][T20063] ? __pfx_blkdev_open+0x10/0x10 [ 1879.218185][T20063] vfs_open+0x82/0x3f0 [ 1879.218222][T20063] path_openat+0x1de4/0x2cb0 [ 1879.218254][T20063] ? __pfx_path_openat+0x10/0x10 [ 1879.218286][T20063] do_filp_open+0x20b/0x470 [ 1879.218314][T20063] ? __pfx_do_filp_open+0x10/0x10 [ 1879.218351][T20063] ? alloc_fd+0x471/0x7d0 [ 1879.218380][T20063] do_sys_openat2+0x11b/0x1d0 [ 1879.218400][T20063] ? __pfx_do_sys_openat2+0x10/0x10 [ 1879.218422][T20063] ? __sys_recvmsg+0x189/0x220 [ 1879.218458][T20063] ? __pfx___sys_recvmsg+0x10/0x10 [ 1879.218495][T20063] __x64_sys_openat+0x174/0x210 [ 1879.218517][T20063] ? __pfx___x64_sys_openat+0x10/0x10 [ 1879.218545][T20063] do_syscall_64+0xcd/0x4b0 [ 1879.218581][T20063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.218605][T20063] RIP: 0033:0x7f28e6ca7407 [ 1879.218627][T20063] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1879.218649][T20063] RSP: 002b:00007fff368b9240 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1879.218673][T20063] RAX: ffffffffffffffda RBX: 00007f28e73e9880 RCX: 00007f28e6ca7407 [ 1879.218689][T20063] RDX: 00000000000a0800 RSI: 000055ec94742520 RDI: ffffffffffffff9c [ 1879.218704][T20063] RBP: 000055ec94741910 R08: 0000000000000000 R09: 0000000000000000 [ 1879.218719][T20063] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ec94741500 [ 1879.218733][T20063] R13: 000055ec94760930 R14: 0000000000000000 R15: 000055ec94741500 [ 1879.218754][T20063] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1880.980640][T32099] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz-executor: Error -117 reading block bitmap for 2 [ 1881.421196][T20063] block nbd0: Dead connection, failed to find a fallback [ 1881.430108][T20063] block nbd0: shutting down sockets [ 1881.472652][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1881.485886][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1881.497885][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1881.558127][ T3285] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.1.4868: Error -117 reading block bitmap for 2 [ 1881.612528][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1881.620538][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1881.644917][T30811] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.672459][T21840] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.6.3174: Error -117 reading block bitmap for 2 [ 1881.687388][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1881.726795][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1881.737961][T30811] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.761852][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1881.793055][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1881.823448][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1881.834241][T30811] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.851943][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1881.880918][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1881.888872][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1881.907358][T30811] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.944066][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1881.957747][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1881.993804][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1882.080942][T20063] ldm_validate_partition_table(): Disk read failed. [ 1882.087969][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1882.148415][T30811] bridge_slave_1: left allmulticast mode [ 1882.159111][T30811] bridge_slave_1: left promiscuous mode [ 1882.167188][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1882.177638][T30811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.192690][T20063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1882.208734][T30811] bridge_slave_0: left allmulticast mode [ 1882.229075][T20063] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1882.237076][T20063] Dev nbd0: unable to read RDB block 0 [ 1882.243927][T30811] bridge_slave_0: left promiscuous mode [ 1882.263384][T30811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.290091][T20063] nbd0: unable to read partition table [ 1882.319644][T20063] ldm_validate_partition_table(): Disk read failed. [ 1882.326689][T20063] Dev nbd0: unable to read RDB block 0 [ 1882.398575][T20063] nbd0: unable to read partition table [ 1882.425837][ T3252] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.8.4863: Error -117 reading block bitmap for 2 [ 1882.536352][T30811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1882.562700][T30811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1882.601850][T30811] bond0 (unregistering): Released all slaves [ 1882.891462][T30811] hsr_slave_0: left promiscuous mode [ 1882.916039][T30811] hsr_slave_1: left promiscuous mode [ 1882.957451][T30811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1882.987473][T30811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1883.004507][T30811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1883.027266][T30811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.041704][T30811] veth1_macvtap: left promiscuous mode [ 1883.048417][T30811] veth0_macvtap: left promiscuous mode [ 1883.054017][T30811] veth1_vlan: left promiscuous mode [ 1883.059894][T30811] veth0_vlan: left promiscuous mode [ 1883.251132][T30811] team0 (unregistering): Port device team_slave_1 removed [ 1883.285826][T30811] team0 (unregistering): Port device team_slave_0 removed