last executing test programs: 12m39.120684158s ago: executing program 32 (id=196): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) mlockall$auto(0x7) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, r1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x7, 0xffff) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000004, 0x8}) getcpu$auto(&(0x7f0000000080)=0x8d, &(0x7f00000000c0)=0x7, &(0x7f0000000180)={[0x9, 0x7, 0x4, 0x9, 0x7, 0x23a, 0x0, 0x8, 0xffffffffffff9636, 0x7, 0x0, 0x200, 0x81, 0x9, 0x4, 0x1]}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x18, 0x5, 0x0) socket(0x26, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x37, "664d74a5489db0541a88047e21e51a99e8b814c8e129e7787dad485d49466090", @raw=0x8}) fanotify_mark$auto(0x0, 0x201, 0x9, 0x4, 0x0) 9m41.639222308s ago: executing program 4 (id=829): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) mmap$auto(0x83, 0x2020009, 0x8, 0xebf, 0xfffffffffffffffa, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0xa, 0x6, 0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000380), 0x80801, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000400)={0x8}) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x80002, 0x73) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c044}, 0x40010) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) ptrace$auto(0x6, 0x1, 0x3, 0x180000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000ac0)=""/4106, 0x100a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x7, 0xaeda, 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 9m40.622232406s ago: executing program 4 (id=830): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x5, &(0x7f0000000000)={@siginfo_0_0={0x276bb, 0x1b40, 0x4, @_sigchld={0x0, 0xee00, 0x800, 0x8, 0x2}}}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001e80)={0x2ab4, r0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC_MASK={0x35, 0xd7, "2e388fb5111738f56f7459755e5589e33304a0ad586d0fe71feda348a145da8e0f7d0433da1b84e1e90c0b88bc0b58e7b2"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x9}, @NL80211_ATTR_STA_FLAGS={0x2a5c, 0x11, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@remote}, @generic="a5202317ed2c8a0745d3e0c054ffa04feef66af3ba986ce424fc3c174d1bc05cecfd011aee1efc0212f05eb3f2f52ea9b8ae532570f226cf10d69113a194dfead9c7030e3540cf8cf9032725029b01b5816b3159bcd4718921855e3dc621ec4e63b45f508ea807cb60aaa0a8708af86fc0e045bcbe59f2fb2d7850d8fbdbbd87b6f602421e1793fa96854c6a7f93b4dd4247e3aed2e16ecdaf2957739f3cc305691e34254ee7723ee473c9754f6d3d4ab1f47af06f424a8af8c1a7f8d3a4972f64ef4eeee6304ac99e66a816d782af8abdd3799e1245e0558e8dc8325436e47903f5e4075b64a4d470d0e6c3ef", @nested={0x8, 0x2b, 0x0, 0x1, [@nested={0x4, 0xa9}]}, @typed={0x8, 0x89, 0x0, 0x0, @u32=0x4}, @nested={0x8c, 0x25, 0x0, 0x1, [@typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="373d4474cb16310d55f9faba2f96b68e975d777b14dbe0d9bfcadf8c34eb150e59023dcc909660f2e2cabc2fb97f3bb7d8e8611481e4c439d16ba22040426dad008ded4bda6d0240ef09134fab2e2b8eb67f22edb84ac7eaff1023e3eeb3888c998ab0c8112321c7dc14c739dc5c5ff592f7918d969e31572c7b413038bcd0e4"]}, @typed={0x8, 0x20, 0x0, 0x0, @pid=r2}, @nested={0x2400, 0x7b, 0x0, 0x1, [@generic="3e8ae35ceffb2b95f017cd9ec3cbaf2729e5c3db15a88de518b2a90193a4a693a12b2ee548880b92ed81f88c0176a5733a18bc83c35d1cafa3348f0c35ce99115507d8f396ffcb414366fa2e5791073f093e47e8f82588b2d39484546bcc03c8a8544c2fc53b4a9c14cce2066656a87863ca00d67208633d1196d8b7ab51ec9b91815eb0f51546a54d18b884ad5803033ae40a829f7157b5f2821aaa262373f65044cc8510befc125492c88e1e415c5cccfd8fff3b3820f4361eb2ccfdfe549c81dd4e32c3495e687fdefbfdabf2c2bdcc6816aa", @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0xc, 0x14d, 0x0, 0x0, @u64=0x7fffffffffffffff}, @nested={0x1310, 0xc9, 0x0, 0x1, [@typed={0x4, 0x11f}, @nested={0x12c, 0x123, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="39d9809df098e2bf5946a81392545fc21ebe6f343457cb08ae11257ae7093bf8094fca8c3a85378a457dcf7d0f041a347f028d2d6e9d698b1a8d8eea6c19c0f96b68", @generic="59fe54e19d29a9b75729b8522a5c68f191e91a7f7870719c1c", @generic="2f9313484b7cc7c8185b8fd60d036c710e6941b72c1e1acceb35ee0680b48c6a83c85e7d8806fe601bf30580d9215ebd34b554331a6d6e886676fd476974e614155502d02faa497fe9a51384910fdad04b3c6aa8240467e5b2182c79ffac8bfc78f9ebdca61e9acdf06c9968f7df071b954ec54bfee4ef149ebb048c6467be60f7546a1bef358e6116f830174f6ea40e01ccae6a17e14eefd79a939bcf4328d47feefdf30097c6fa5ba050951f35ad8f0f", @nested={0x4, 0xc4}, @nested={0x4, 0x66}]}, @typed={0x8, 0x99, 0x0, 0x0, @uid=r3}, @generic="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", @generic="1cfbad70f09f93494ce2c8197cc1b23283f0818de9dfd29ff1f3011aa0c9b71c031ea60c2ed853b7a7229b6030b5c09956f7f2d2ee36c71e2ab954d16514353e6cd3ed0686d802c409759b1b14578d4a525c02b8e3900dbc911577233291a3d6fd0cc2d5474391699ce72dcf9002ccc1ad9be86f548ebe076491a02567e835e004191207f319d9f8edd93f75a1ac75146c8f6f6b343bd37ce3b736d8f13a1e1726f1ea4bb51a1b2331c0f174821b18a32c8bd3e0d2a8398b1f72a1f124d86d21f2", @generic="d5e6cc0392f654efaeae8647fb50452d23a2bdd6422e943c1e17598ab0326cc8bde831de39be25aa4a1837135b92b0482cbc694ded4478abb560f0f9094a277c40465b59dc6e49fca87a762b442a080851ab0d6f6a31fd52110560fe711aabed4a1af89dfdecc68049b0397d5f5953af550478131fef075d439c6181fedf699a94b872b7bd881ede316848539f63eef01cc943345c339acb3aae3f3b521621af895307e9b7e2af05423575c43c6e834074", @nested={0x4f, 0x81, 0x0, 0x1, [@generic="0907825b27c56d695328ce6c90d7a7eb9d25804399817a51573d22e53957147e391a319ef5182d7592d2c0eb96dc5fe6deaae32b7ded31a806794f9aae2486660af1d710d093b026e57cc7"]}, @typed={0x4, 0x2c}, @generic="632472f870004895e3ae1569348b"]}, @nested={0x4, 0x17}, @generic="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"]}, @nested={0x1c7, 0x7c, 0x0, 0x1, [@nested={0x4, 0x36}, @generic="2e1bd456eab8d056adbe57d88706ab38f58e84cf46ca5bc162316cd31c954ac49d318cac7e5e9fe33124f399e16f4968ab4ec61625dc48aede6c883435fc697a82508e2561ee1cfe77a456ab7d12d2e5d3ea833ff5ad71b5474f93c881c014f7968390ad764682031106f777c7f4c36a1ab4d5a872d7fb6cb62b13ee59428dcd046b3eee98a6297688deaf62f85edad2250197a6db59f7c87e857f58e6ac47fb2e1020b7b30163bc76c067f04816775d48064afd4e0cb838b5d2cbbe33da25fb4d831c", @generic="8ec8c3f7399a31d0a2f4d5e9516365c41bcabe7091807cf479917f893cfbe5aa9f8a4a18c79c1657a1ed9d1fa694", @generic="2874154d37c2fcad66a0a6301ca144d48cf545b5c78bdde559906a84f5b3571a0882b73f5e3b2e2838ef5ce55f444a8dccc48be6b4f410cf163629c0fee26e324f43a1cea45e9f95af6825441832ffc26c6c341c2f0e53dcf81ab2e3f3a151c58a3d5f11a1f6f9adff4a36bda181550084aa5d7a4424dabc32e4309298d11c6331025d91aeabc9fd9a847d4decf659aa9171cb3d6e4f158ede0cad95a18bba5509ed9d6a517f05be73e5412a78b5046d6c8b3247fb34", @typed={0x8, 0x114, 0x0, 0x0, @str='$-\'\x00'}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x41}]}, @nested={0x20a, 0xe, 0x0, 0x1, [@generic="8cf25f9b058fd91e3c6e2884745ac2d4d80826caf73a4c651658d45be364a7ed7eea306857e874cdf8ba94e8ab95dd07bfd1aaad5cf94f06d85525a67100a8ead5e5a6d4702f80928bc66dcff46573f04e7ed1f0128e402e0af1925a2d87367fded6f13c41b2c6651b5d3f01160b13ee08ceab71a77349943899a8a231a38ecf06046bdd1662b5173197d96f9e596370dd10f770ff9456f5f7731ef532a8e94a9472c93f0789fdf900726bb98f112f9ad3f790a8b9cdad4349e76351eb925d69801f2527bab5", @nested={0x4, 0xea}, @nested={0x4, 0x70}, @typed={0x8, 0x37, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x104}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xa4, 0xf8, 0x0, 0x0, @binary="e2bd610cd22715df02ac0d18234a33f95731e8c4b2f118be311bdfad68298a37dc817e2e6a2495c5771a6ae086544a9f37f08ae5e5bb8f455eba47472ea21d0ebc9284198479da871887a38e65cced3fc1cd2d669c801ac5c837f77c2da63b245aa77598e4bc25c57a2a2a89f373c8d0da2100742e4b4ef8a9dbed9bcb25a7a985d483236fbf7f29bf4336249a5513b4a49bcd2e63c6728bab74be1a290ec647"}, @generic="485532f72dbfe53fe1115136c81a0a027425ac641235631fa2787bef921a284fa6da98f4458806367dc552fac91f12fa36cf1355f073d8903e25a9b45edeb4f13e712b3e6e16927773f34dd67b4fa4407ff4120a4afb899cfb60c66221043e622fcab2b88e3c160391b6bd3218cc5a599e84ea58"]}, @generic="d62ba8d439abcb618cc2b0548467489f5b71651d5b19da2ef4862a6cca01bb6d7f25b617d7455795d538d884b6572792697f675d22ab43d1c265ecbae73a28d1a469bbac51cce972ae3d04f036c18fe7b938ae34698e6982bec93002de191a39d1830bd559d520be28296d796139f49c0ef9c4d1a240b091b8007140152caf403bdb1bac045403b43e72d9da78680fdc52c598cce039e6f0c87c8c65598de212b5e005cf1f76df8b88617b43cd3d8e40d1de606f2b1fbfa66feeea3cfb252bb06e3c455d92db3a3e59114ff1e6434ace36d84e31d5449af83ed982b7fef5c9"]}]}, 0x2ab4}, 0x1, 0x68, 0x0, 0x4000000}, 0x44011) 9m40.481110428s ago: executing program 4 (id=832): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) write$auto(r2, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) readv$auto(r0, &(0x7f0000000000)={0x0, 0x48}, 0x3) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/pagemap\x00', 0x2100, 0x0) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f00000000c0), 0x3f1002, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000100), 0x700b8dc06b352975, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff) socket(0x2, 0x80004, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r5, 0x0, 0x7) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0xfffffffffffffffa}, {0x805, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) arch_prctl$auto_ARCH_SET_CPUID(0x1012, 0x7) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x11, 0x3, 0x9) mmap$auto(0x9, 0x4, 0x3, 0x14, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) ioctl$auto_SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404, &(0x7f0000000000)="a80b418e8458bf8c10d96b5c7b65") sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x6004000) 9m39.120103768s ago: executing program 4 (id=839): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x400, 0x7, 0x6, 0x5, 0x3, 0x2000000000230006, 0x4, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x6, 0x24, 0x3, 0x103, 0xfffffffffffffff7, 0x4, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4]}, 0x1fe, 0x8) mmap$auto(0x0, 0x2020009, 0x8000000000000000, 0x40000000080eb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x8, 0x4, 0x5, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) read$auto(r1, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) ioctl$auto_SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000640)="3b7a679438747f5c56aec815377bf156a01ad38b6e6996dc6ed90d07dcfbb295c44c8a32b28caa0373acb287fd8e7afec2ea53bb6d3130a61ecb44acce179deacda1cfd71df642f13fa7ec1a159d68058575d86e395baa063bd6c049f07d5e45248ad87de0a475b7ed8674b11b39eb5ce140f11c4f43c2feb9aee2d4a2bc93d0605b755da2c9971efe523158f698d33d5adc7a36fa6af31e8cb3ef36") r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x21e8}, 0x1, 0x0, 0x0, 0x24000055}, 0x804) mmap$auto(0x0, 0x3, 0xdf, 0x400000000009b72, 0x2, 0x8000000000000001) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/devices/virtual/bluetooth/hci0/hci0:200/power/control\x00', 0xc01, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x6}, 0x6, 0xffffffffdfffffff, 0x4, 0x2e) 9m38.111916218s ago: executing program 4 (id=846): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xc48d4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0xb4300, 0x0) socket(0x10, 0x2, 0xfffffffc) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/fcloop/ctl/add_remote_port\x00', 0x801, 0x0) write$auto(r1, 0x0, 0x100000000004) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/usb/usbmon/32u\x00', 0x82000, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 9m35.911991892s ago: executing program 4 (id=852): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250c000000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = socket(0x1a, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r4 = socket(0xa, 0x2, 0x0) fadvise64$auto_POSIX_FADV_WILLNEED(r2, 0x7fff, 0x0, 0x3) setsockopt$auto(r4, 0x0, 0x30, 0x0, 0x568) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x4, 0x1ff, r6, @relative_id=0x13, 0xe600}, 0xf) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000480)={0x14c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x138, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0x130, 0x5, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xb3, 0x1, "fb7f015e92e237687fb3732db4e755310e76c9ab526345e5e3b6ed629f4ab63db305b867f409929320e205135f71d325203dc13dbfb52910f0ee09c8587fcb6542c85a9d8a43595300712d3b92c4033d9e4b921a95b471eec0b02cd941dd616a6b4244690fc116a8577acb18c809ee9e561555941fdce4066dd861ed6cb0ccc012b537276167794619f7b8ea302edfbef2782bdc751c084da73fb8011b088a2311e2648693a6ab0392c2ed51258e54"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x73, 0x1, "133545fe144249383690d25836a9e1b8e5920d3c13713ee7305edf6be0471098cc202f4a67a0e31975104f0fcf28f0a91d60c491bafd662d5189ef66eca755c87e31fce4c3eaf65f8c4e22dceea70c0fddb7f3123af0530dafcc4115e99b12f090fec7ea0b83a4e11075905f4e0b5e"}]}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24000841}, 0x40840) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r9, &(0x7f0000000040)=""/209, 0xd1) 9m35.130164876s ago: executing program 33 (id=852): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250c000000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = socket(0x1a, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r4 = socket(0xa, 0x2, 0x0) fadvise64$auto_POSIX_FADV_WILLNEED(r2, 0x7fff, 0x0, 0x3) setsockopt$auto(r4, 0x0, 0x30, 0x0, 0x568) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x4, 0x1ff, r6, @relative_id=0x13, 0xe600}, 0xf) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000480)={0x14c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x138, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0x130, 0x5, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xb3, 0x1, "fb7f015e92e237687fb3732db4e755310e76c9ab526345e5e3b6ed629f4ab63db305b867f409929320e205135f71d325203dc13dbfb52910f0ee09c8587fcb6542c85a9d8a43595300712d3b92c4033d9e4b921a95b471eec0b02cd941dd616a6b4244690fc116a8577acb18c809ee9e561555941fdce4066dd861ed6cb0ccc012b537276167794619f7b8ea302edfbef2782bdc751c084da73fb8011b088a2311e2648693a6ab0392c2ed51258e54"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x73, 0x1, "133545fe144249383690d25836a9e1b8e5920d3c13713ee7305edf6be0471098cc202f4a67a0e31975104f0fcf28f0a91d60c491bafd662d5189ef66eca755c87e31fce4c3eaf65f8c4e22dceea70c0fddb7f3123af0530dafcc4115e99b12f090fec7ea0b83a4e11075905f4e0b5e"}]}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24000841}, 0x40840) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r9, &(0x7f0000000040)=""/209, 0xd1) 3m5.635728458s ago: executing program 0 (id=2328): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x48050) shmctl$auto_IPC_RMID(0x1f, 0x0, &(0x7f00000001c0)={{0x39e0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x80, 0x9, 0x4, 0x3, @inferred, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000080)="a40ff9ad0ca4cabc791702aeee4014c0539534737541d902e9b96c49544dfccf9190082dab47d66201c5481cee066ef2d0b60e0cf831941b0ea3dbf2dae9063adaaba66b2b21bcdc92c5398554324415e8490e709b65e905f46bdb32b6f6bcb3d8ae950bbc52371ce292d3791888058a3c63bac8ec38802cc51f8382791acb45fd51fd1ab89eb4298d73b31e9ef89a8259fcf7d8fefe9d403f000fb30eaf595ccc7e8530da43a15ef97c1dc3f59d091ff015626f6127cf4a5670f6668a0120eb6e26e45de7fecf4e64d07017ad893b42be802803b03de7", &(0x7f0000000180)}) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) msgctl$auto_IPC_STAT(0x1ff, 0x2, &(0x7f0000000300)={{0x0, 0xee01, 0x0, 0x101, 0x9, 0x8, 0x6}, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2, 0x7e, 0x4, 0x8, 0xa, 0x9d, 0x1, 0x1, 0x1, @inferred, @raw=0x6}) (async) msgctl$auto_MSG_STAT(0x8, 0xb, &(0x7f0000000400)={{0xb, 0xee01, 0xffffffffffffffff, 0x7, 0x4, 0x1, 0x3}, &(0x7f0000000380)=0xf9, &(0x7f00000003c0)=0x4, 0x1, 0x8, 0x10000, 0x75b, 0x9, 0xc17, 0x253, 0x3c, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000001dc0)={0xc2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_SSIDS={0x333, 0x2d, 0x0, 0x1, [@generic="728ccd71970ab0c60bd1358c2000154e8fdb591936487609648688bb78ec3b", @typed={0x8, 0x41, 0x0, 0x0, @u32=0x3}, @typed={0xc, 0x31, 0x0, 0x0, @u64=0x4c}, @typed={0xc, 0x72, 0x0, 0x0, @u64}, @typed={0x8, 0x14a, 0x0, 0x0, @u32=0x5}, @nested={0xb1, 0x1c, 0x0, 0x1, [@typed={0x8, 0xc6, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x4b}, @typed={0x38, 0x47, 0x0, 0x0, @str='/sys/kernel/security/safesetid/gid_allowlist_policy\x00'}, @generic="ac4d661232041e8ddda17f85499be54f12ca4d2db9ce2950bc65a12d4b6f1247328e6793365157e36dc6ee32b8427e6e027051dab0aea84d07ff9c4382e54270516ed3f721247dfa77bdf38e877aab439e04080f82fffec3f2295357f2f751ebfe07c70da9fef203ae"]}, @typed={0xf9, 0xc3, 0x0, 0x0, @binary="ed57dd7979516f1f889544f9d430c6f06fa1ff0e5100a7876b29e09cb64a4068e6784cd3cd68f52182165fa87bc046a1cb89c44a96094d064ad2453f2fb06fab5c59de4a118b17675d03a57f6d8945513cd5e47da5b0e13541a18ad19770b909e1ca31e9410bafba707bf4636f2abd4208958c2773a1a7376f3b50beb97c67daf35a09e3611d8898e707b1541d2116096f461c0844d4f44f9dbf0431ed95607b5ae81479ae78ba86c43f91c69640e6b6face942d432d0724c213ed81b36f0cf2cad2b9024c5109a49c0d502240870992eec6d956f5be03ef9af38ff967100073b70e40b4b2e7306cfac41029265aa40dbda036f821"}, @nested={0x137, 0x37, 0x0, 0x1, [@typed={0x8, 0xee, 0x0, 0x0, @fd=r5}, @nested={0x4, 0xbe}, @generic="f025eb0f52a46e8fa9fbbb5a086a92ec90a990af3c252a349bfdb9e27d883bfce2881d40671631822e6eaa3bd71b2d84f8c5a80c04c21dfdd17601b9c41ba59ddd6e0b06fb82cf9d6a99236e8f19ecfdf183ba39e1948bc5b4e0a847224a00171548e56024354c85bf1705b5abfc4e5e3c112b6bdea743d78f2a644504490652d803875fb8cf1248fcdc8af6dbed1a02d9fe67defe7fd1145290cadec9e45767f27669", @generic="415b559b3f605a9004b8728495c5f5302a895d28b03c0106c1fd859dde143693894f9837423747f1c9f850aa60735fcd816833f6a4f855402c5a784dbf4d2554c4db67d76f2e78f1963de23d90ec9a5d840b924ca4a33c9ca470e6c0783bf2", @nested={0x4, 0x125}, @generic="62a99665e194f9c322151491de935727054b8bad38", @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x2}]}]}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x7f}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_CQM={0x2bf, 0x5e, 0x0, 0x1, [@generic="cf4f38938b1c39ce3894ad44924f43fe2c2a9412ba2b7a8d6279b086c0a53e3f6e47d89d2775085b2a69d8a38d4d01505b4cf4b9c46c06cfd6e1760ce1e55190a2111ef8b74d06eb3f5c45c01b07fd6b26f3", @generic="00062f889dd3cecc69c4606cc05fe3ee834611aead26ce7bf3dbe2fd75ff7dacc66f4133f3565e00f8c629af41020a1efb82c80e880adf06a52f088d11af6f58b8b8e5d7f49b666a18910628a115e40b737c7f9a321d46752b57c5f153430e81e798323504b5705978867ba6bc09dbb9aa715e9594e16daf72b84c5bca45d74a81a6b92b377fe366cb79", @typed={0xb, 0x10b, 0x0, 0x0, @str='-$]-(/\x00'}, @nested={0x45, 0xa3, 0x0, 0x1, [@generic="3fe612d0c2a0f04883f6b1246bcd0d8452a4a1db3b2087f07ab06bbebee89ef33389534e6dae1905f654401ef1f263288de48cce22d285cec3fe3b7b42", @nested={0x4, 0x85}]}, @typed={0x4, 0x137}, @generic="f238683c1f76d604d9bb06e80231da3d27abb42ea5772ddfb750be263f8d2c13093ab8f103b8adfc47d6f3d7991c5c16c063abfbb734af181feee4f4e3c33d87e21e13e6fa49d396a564d78bfd784ce41792f3645104399b3ab02398d406d454f415b48582e017be5316bd8bfe627fde5e85c9e02573c1f26dfd41858fa7ebf1ff59ad38b07885fb372dd01a8ec997e8c1a19abe91ad3f36f154a65af0f52d9b0017cc28d17d114351c9a14d5eee4040650a39110eb37c94220cb1a767e5356b7d7cbbaa201f95b71d1efc", @nested={0xbc, 0xd2, 0x0, 0x1, [@generic="4c14975e5b0700733ba1ba01eb326dea31fd2a5f977d3356f43328aeda81eb1ae534ba196e0c5da63f07a38f07e3354d00a3f762423e5d449f13fe283c1dac78ee5d8080780fc3bcdc4b9cbd40959c55e9e52b121a04fe8a0fd3cc347238d56a84272fe40ae7f28f993f45735943b7fd0b3f8e631f4fca0a7ada4aae57c945c330857be11959b8eb348a", @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="6644a714021bf0d9863f287390053129c4467454812d23e86f57"]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_FRAME={0xc3, 0x33, "d7fc12d7bea486ef844847c80a361559a3a995200a519422120c1b0abbd8551af14cd2fbd548b548a1c2c0639095a9ec2dc2e00a8ecffe321e508964aedd89a5e21a06673b43f3001ada4ffde747a15ea477eafeaad3569ae7958813119d124d3cb3cfd4ab0401fbbd6d8c76cf66edc094bcdd8625039d65be82120d1428e1ab851188212be8dcf2aa1b0388b2f15bc670fae69d778576cd4fe2adceafc44b24216a78bc6bf9d6184079cde7b9b2b92205771e75f4265da5b37cb48e140b62"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x32, 0xba, "89b1e30745d56c12b2ea76401cc70a4181c91b8b92295c36c7aa3d2da8f9103082224eaaf837f634b1473e928a54"}, @NL80211_ATTR_MLO_LINKS={0x514, 0x138, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "2cd2d17a095ded56296f0359ab93"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0xfff}]}, {0x288, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_ALPHA2={0x62, 0x21, "d7fb090a251193d3b3aa20a11fe95a75cf60efb44d07d0548dda0a4289be5b16391d67153d950c5d81cab1c3109f8206320be3addc52512d47901430892addc6e4ca4df7209e4d525fe9feaef2800877fb731050ff93d7ab044bf3ed8f8a"}, @NL80211_ATTR_FTM_RESPONDER={0x158, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x7b, 0x3, "74f30cd849c78374c09bb05e411ae5a364e68277a05d4533122590a4203802635ce0fd7251d00eafbf17410bb697251f4754c0e0ed702252762b8adf62177eb002a259ca8fa1a653bcc66622b72d5abfe4d2fbbfafc438eb88c08e5088e1fba1bcd349cd38378c9b3b51bc0676e6b4d0c536487ee94627"}, @NL80211_FTM_RESP_ATTR_LCI={0xc0, 0x2, "8058412e984dc3c569513dfa0002967a6b55bd1f116a934fb6987cba4051e671d6f04a861a68a38ebc9eab97268ee94cad473ca3dad86065ccaec0e33ba5c6fe54badc4e4bee12800e53f800678ad58ab7d4070caaa69fbc5c00b49d6fc63be6d4f664f7dd0c97757038126d3e0798b921b668f1e935c08a3441faf9253c6984307dae09f7ea273a75d5282ca5cd03e571eaafc0bc8ed0e4b5c99dfe4ee12b1cceeeb286802573276eb2a1770907cfa5235fa96dfa16fde5fb611e8e"}, @NL80211_FTM_RESP_ATTR_LCI={0x14, 0x2, "b732235372337d5969609709e11b9bf0"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@nested={0x4, 0x13a}, @typed={0x8, 0xf3, 0x0, 0x0, @uid=r6}, @typed={0x8, 0xf4, 0x0, 0x0, @uid=r7}]}, @NL80211_ATTR_S1G_CAPABILITY={0x95, 0x128, "09c955d5589c6d1375b41dd28205e93328f2ae9fda314a44a2e0643cbbb950536c740bc99e9405e2e8346bde2713a81dfd3477fbab7c5c8254c8611a72d1dc2bc9f13d5f01987fffc775aa083bd40fbb63712a2b2f0bc5f0164092d5cdf1ce0086e07085368d8a649b7eb10bd3f91ef964c79aa6a185b6e3c9ee94c78ba6a9ac2ab6c354c9ce329516e9e0cae236f9aabf"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x9d}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}]}]}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_MNTR_FLAGS={0x100, 0x17, "893c53c872ccc6b38163ffc661fa7ce73225ed2b85d37ec8d9b11905a9873014e52bef8b685202939074ae7bfbe88fb34d742ed35001dd67fda153c9c35c77c76af3ed0628821caad219aeeefb9403d3fc479d3619ea8806d940a11a09dd6777a947ace7ea212e960388f1c0a6c0b9e72b3c86f6462a1e14634bd71e2b20f149e25b5e120965cdc3f84b9fe83a120f06ae7ac737bdf3c942f17607d5ab4e3c3bf222859cb8df4505405eeb6357a49ba3f60e696e477636914dcad981cf5afd10000e384bc881f79bee45293db230cddab3080e2199a3fc87106d6d65e3772b84ea5c46101a198b942b536fce19374483c816f170dd637284c35a07f3"}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}, @NL80211_ATTR_EMA_RNR_ELEMS={0x4a, 0x145, 0x0, 0x1, [@generic="f37ebeeea8a727b5486a84f74fca306819f7ee9f92946475567a793c1df491e897b35186e93dc75c9fdd061f66137998ae24da3e5228a57918f3e241a4b95ba41c30d1839109"]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x8c, 0xba, "88f92d560bf9c87bcea7c3f9b96eb3e9214c127e46d2cfa4d6abdf2ce7b296d89e3e5c017b0932e3125a474be65d6bb0ea303ca51fb20061cf18e9e877a4e47ececc44bde29ed9a9ad50007d1b87e25d0a7d1cb182d5040090bcf0b732cfc825cf2295e50d16287e565805c3f46caa0720e23c69e440d579a9f9a040d2f963b515b434b32ce0257c"}]}]}]}, 0xc2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) write$auto(0x3, 0x0, 0x100082) 3m3.54293956s ago: executing program 0 (id=2336): r0 = eventfd$auto(0x7f) readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x8) read$auto(r0, 0x0, 0xcc9c) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x5}, 0x9d86) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x21, 0x2, 0x2) fcntl$auto(0x3, 0x4, 0xa553) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) fcntl$auto_F_SETFD(r1, 0x2, 0x1) r2 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x6, 0x0, 0xffffffffffffffff, 0x7, 0x1) write$auto(r2, &(0x7f0000000000)='\'\x00', 0x108) 2m59.730793515s ago: executing program 0 (id=2350): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161742, 0x100) fcntl$auto(0x3, 0x4, 0xa553) (async) fcntl$auto(0x3, 0x4, 0xa553) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) (async) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) (async) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) inotify_init1$auto(0xfff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) read$auto(r2, 0x0, 0x1f40) (async) read$auto(r2, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) (async) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) setsockopt$auto_SO_BSDCOMPAT(r1, 0x7, 0xe, 0x0, 0xfff) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) clock_settime$auto(0xfffffffe, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x4663c1, 0x154) (async) open(&(0x7f0000000800)='./file0\x00', 0x4663c1, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2m57.841700074s ago: executing program 0 (id=2359): acct$auto(&(0x7f0000000000)='/dev/cec31\x00') r0 = eventfd$auto(0x7f) readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x8) read$auto(r0, 0x0, 0xcc9c) write$auto(r0, &(0x7f0000000400)='\'\x00', 0x8) 2m57.507458883s ago: executing program 0 (id=2360): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x23, 0x80805, 0x0) (async) r0 = socket(0x23, 0x80805, 0x0) bind$auto(r0, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x5, 0xc) (async) socket(0x10, 0x5, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040854) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040854) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x3, 0x4, 0xa553) (async) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x80010001000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x5712, &(0x7f00000002c0)={0x0, 0xd4}, 0x4, 0x0, 0x1b72e86f, 0x9}, 0x9}, 0xf, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(r1, 0x399e9f4b, 0x4, &(0x7f0000000100)='\x16#]_@{-/:\x00', 0x8) close_range$auto(0x2, 0x8, 0x0) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) 2m55.916030023s ago: executing program 0 (id=2363): mmap$auto(0xff, 0x400008, 0xfffffffffffffffa, 0x9b72, 0x2, 0x5) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyprintk\x00', 0x12b401, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x40044) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 2m46.256380143s ago: executing program 5 (id=2391): quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x108c0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000140)={0x3}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000085) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x10500, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d64680100"}, 0x1d) 2m44.867206921s ago: executing program 5 (id=2393): socket(0x11, 0x3, 0x9) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone3(&(0x7f0000000280)={0x220004000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x2f}, &(0x7f0000000140)=""/80, 0x50, &(0x7f00000001c0)=""/121, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r0}}, 0x58) process_vm_readv$auto(r1, &(0x7f0000000340)={&(0x7f0000000300)="012207b2de1628e60a1350b3f38cc360ac06fad418d7624b", 0x1}, 0xe8, &(0x7f00000003c0)={&(0x7f0000000380)="05af5c52875fa4a9f09a1e6cd59537a0724fca244a3631129a87b5d804911d359f5efa90e65e602a5c46", 0x2}, 0x1, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/midiC2D0\x00', 0xdd761dafd20bbb3b, 0x0) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sysfs$auto(0x2, 0x100000000000039, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) 2m44.51870239s ago: executing program 5 (id=2397): mmap$auto(0xfffffffffffffffc, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec16\x00', 0x1a1100, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) 2m43.986320812s ago: executing program 5 (id=2398): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r2 = socket(0x1e, 0x6, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x3) dup$auto(r4) write$auto(r3, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)) getdents$auto(r5, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r7 = socket(0x10, 0xa, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(r0, r0, &(0x7f0000000040)=0x8, 0x0) socket(0x18, 0x5, 0x1) 2m40.003828137s ago: executing program 34 (id=2363): mmap$auto(0xff, 0x400008, 0xfffffffffffffffa, 0x9b72, 0x2, 0x5) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyprintk\x00', 0x12b401, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x40044) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 2m39.999559257s ago: executing program 5 (id=2404): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/netdevsim/unlink_device\x00', 0x10b081, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_setup$auto(0x3, &(0x7f0000000080)={0x98ef, 0x5, 0x8db1, 0x1, 0x2, 0x3, r0, [0x7, 0x10001, 0x1], {0x1, 0x82488cb, 0x6, 0x3, 0xa, 0x0, 0x100, 0xfffffff8, 0x3}, {0x9, 0x200, 0xb4, 0x3, 0x4, 0x2, 0x10000, 0xe6, 0x5}}) r2 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r2, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003e, 0x1, 0x1ffde, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0x3, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x4002ffffffffffe, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r5, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109500, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r6) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8001) prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) 2m38.853377776s ago: executing program 5 (id=2407): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2a, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x1, 0xffffffffffffffff, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0xffff) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0, @ANYRESHEX], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) mmap$auto(0x8, 0x5, 0xfff, 0x8000000008011, 0x3, 0x0) socket(0x18, 0xa, 0x1) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x325181, 0x0) mmap$auto(0x4, 0x4, 0x5, 0x80000200009b72, 0x1000, 0x5) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) mmap$auto(0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r4, r4, &(0x7f0000000040)=0x2, 0x7) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2m29.72597969s ago: executing program 2 (id=2431): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmctl$auto(0x8, 0x8, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x7fffffffffffffff, 0x6, 0x10001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mmap$auto(0xfff7fffffffffff7, 0x400008, 0xdf, 0x10, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r1, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\xa6-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) 2m28.635169536s ago: executing program 2 (id=2432): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket(0x18, 0x3, 0x2) accept$auto(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_ADD(r3, 0x0, 0x440d4) (async) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) (async) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xcd9e}, 0x4, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1) (async) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (async) read$auto(r4, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r7 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r7, 0x4c80, 0xfffffffffffffffd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x23001, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 2m27.604014427s ago: executing program 2 (id=2436): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sysfs$auto(0x2, 0x100000000000039, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) 2m27.518234161s ago: executing program 2 (id=2437): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)=""/223, 0xdf) mmap$auto(0x10000000000000, 0x2419ec9d, 0xdf, 0x13, r0, 0x27ffc) (async) close_range$auto(0xffffffffffffffff, r0, 0x9) (async) r3 = socketpair$auto(0x1, 0x0, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), r3) (async) shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000380)={{0x40, 0xee00, 0xee01, 0x3, 0x2, 0x2, 0x4}, 0xff, 0x5, 0x10, 0x32, @inferred, @raw=0x54, 0xd9, 0x0, &(0x7f0000000240)="05388c6e88975ca93cebc0eb947fdb431c748a6f9c211b1873cefa1b3bfa397ad9966f256e081276c6c72bc3ec64c0e6779e9cee56fb81cc330ce97965ef825014eef0afab46e6a84dabd1de5e34f5c370387cb3f4e238a3cf6a0a2c95666b390be8cfc5abad76abcb3682bdd3187eec93a581435764d90189", &(0x7f00000002c0)="16149b32d5688bce30b5f749cc95dc8904aff9d444dd39ad5508d8f48ce2eb81414d0e61800975a20678b92456773abeb56a019c6bff72d5d157264249fa7c3d8c5b4f65d87922efda34bfe8f37bc22cf5f55dd06eebf1e7261c3a23a028aff99161dbcaffeefadad6e8a1d6205c1ade54c20ce41dcd030784d976f6a123d98afe6113d2693b65005bf165c7c3131c"}) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) (async) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x204, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xc9}, @NL802154_ATTR_PEER={0x1d8, 0x28, 0x0, 0x1, [@generic="6a91b3e410c7e5bb1b40a79040f2058d61303e8f7c9daa04d76e717771fe16d5d9bb63f521c0b80275c3cba2b3110bf4e204d7e4999b2e238289387295728f8630c8b35e353783934030eacfcc888633b4e7c3befa97fffeb031ddac1231a0ad6bc82e130f14d1b44e1f5a4e4316e0c76a1de4335b52684f89f8b9a30ef54e93969399bd41e26894674001996b5d65fcce4c61574c788b92c7ad55e3ac442493272f18d1234b99b7691acf7432fd4777a3615a9b3a9f705fa3f75cdaf522de13223ee20c3e91bccca8b99325814107f09a4062566fc42a05b6797e89", @nested={0xf2, 0x13a, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @u32=0xc}, @typed={0x8, 0xc8, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x4, 0x0, 0x0, @u32=0x8000000}, @nested={0x4, 0x45}, @nested={0x4, 0x3e}, @nested={0x4, 0x20}, @generic="08fdfcc047ae9c73169044d8bf7c33cc1a5d346e8fd9f633f474a21529c62682e60e97981f882a431d08c28d3d15e91ab6182580cd758b5f24524cb36d971daf37af82bbaaf16dc09c1447ebf59f4d58f703c63da98c689b135d459be13ee0512785660c8a8e90014cfd87b31204536598a819ea2445163875019cfad9945af00972fb0ef6cfafc67904556b395f49caed0b3181323a5068ff11b24be13ef6b409b2d318752411b6f750b1261b38540541ac061ad90bf76b127ab520d419e6798196143dda4700000000"]}, @typed={0x4, 0x14f}]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x204}, 0x1, 0x0, 0x0, 0x8000}, 0x8815) (async) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) r7 = socketpair$auto(0x20004, 0x1, 0x1, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) r9 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r7) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r9, 0x3823db16596e4f38, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) ioctl$auto_TIOCSETD2(r8, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) connect$auto(0x3, 0x0, 0x10) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x73) 2m26.795880993s ago: executing program 2 (id=2441): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, 0x0, 0x6f4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) clone$auto(0x10fffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xe45e) 2m26.343676551s ago: executing program 2 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(0x0, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r2, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) 2m23.766696281s ago: executing program 35 (id=2407): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2a, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x1, 0xffffffffffffffff, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0xffff) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0, @ANYRESHEX], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) mmap$auto(0x8, 0x5, 0xfff, 0x8000000008011, 0x3, 0x0) socket(0x18, 0xa, 0x1) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x325181, 0x0) mmap$auto(0x4, 0x4, 0x5, 0x80000200009b72, 0x1000, 0x5) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) mmap$auto(0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r4, r4, &(0x7f0000000040)=0x2, 0x7) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2m16.708296256s ago: executing program 7 (id=2467): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xa, 0x80040009, 0x4, 0x8000000000009b72, 0xffffffffffffffff, 0x800028000) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) r0 = bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2c0}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1d}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x401}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xb9}]}, 0x4c}}, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_USER_PVERSION2(r1, 0x40044104, &(0x7f00000000c0)=0x4) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x54fa, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x7fffffff, 0x4000000000002bc8, 0xfff, 0x6, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) setresuid$auto(0x8, 0x8, 0x0) 2m15.77850751s ago: executing program 7 (id=2471): socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) mmap$auto(0x0, 0x4000000200006, 0xb82, 0x40eb1, 0x602, 0x300000000000) sysfs$auto(0x2, 0x100000000000039, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) 2m15.670314211s ago: executing program 7 (id=2472): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyrd\x00', 0x4000, 0x0) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x400, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x0, 0x38, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) setpgid$auto(0x0, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r3, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 2m14.704215485s ago: executing program 7 (id=2474): socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sysfs$auto(0x2, 0x100000000000039, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) 2m14.595158332s ago: executing program 7 (id=2475): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/rq_affinity\x00', 0x10b042, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x5) 2m14.458490901s ago: executing program 7 (id=2477): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14803100fb0019028c150fac9b0fb82c9be56c28b984c1ff741b99183e398bae100e89375e", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) madvise$auto(0x1, 0x5, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x20) write$auto(r2, 0x0, 0x5) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0x4048ae9b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) write$auto(0x3, 0x0, 0x6) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x200000, 0x48e, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) 2m11.140505942s ago: executing program 36 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(0x0, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r2, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) 1m59.30139557s ago: executing program 37 (id=2477): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14803100fb0019028c150fac9b0fb82c9be56c28b984c1ff741b99183e398bae100e89375e", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) madvise$auto(0x1, 0x5, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x20) write$auto(r2, 0x0, 0x5) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0x4048ae9b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) write$auto(0x3, 0x0, 0x6) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x200000, 0x48e, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) 1m1.646181348s ago: executing program 9 (id=2691): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x10, 0x2, 0x14) (async) socket(0x11, 0x80003, 0x300) (async) socket(0x1d, 0x2, 0x7) (async) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r2 = open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x2, '\v\x00\x00\x00\x00\x00\x00\x00'}, 0x2) write$auto_sg_fops_sg(r2, &(0x7f0000000540)='0', 0x1) (async) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x550, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0xc, 0x131, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xcbc3}]}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'xfrm0\x00'}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}, @NL80211_ATTR_KEY={0x512, 0x50, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cddbb6139231df71d99a96799fd96debbc7e16", @typed={0x100, 0x54, 0x0, 0x0, @binary="ee64fd58796e435044f57da0ba8af1c11ed308e00fcb660ee3f658529dd8236e0d4ad290580d12f9a59f1a19362a4195cc8e742aa171721921b8303f91e19fb195276e6957066db429981a9200e9121e7be49a63c4cfb4973f2ff77372117afc702ead0f04396ef9bc2b274ea50c64db843e042d40a3c63817316db2e73aec325b35d3c43ee203a4267f47a460f18c95083ca5ea5996327349aff1c1393b1312fa025fb1c484c87f5e49e9a03ba6963c93445099c0923ef8958bfee51914e464ccb27c7300d90d9d5dde63e91ae6639a770a59e0778c8c916626177b0d276a750779299f6af3a5a8328541cc7fa7bb72f75712dcaf91b5ed45c53ae5"}, @generic="6fe51a683964cdb84a1b62224f7a61ed74716460d2542823cf1ed33763fbc8b0b2367bde5751ec3593dd1435e522ae31ea8cc56c93cf49682ece3aca4d3fd58f38cd82ea46d2e286105dc02d63833e3842a27329e2f05f534b540bd88f63a00e019c077d77feb0b9440795419a799cd601630abb9739b6b42f27c301b27c756844aa93bcc9f7", @generic="a5637325f5247c7bc045c33ad96cd3c073aa33ce81eb635d53eabae50c8370fc5d03e3b6b6902de5c4d1fdcb4352c3a52f1a2f725e4ffe6a9e", @generic="9c764386de7e3e08b14af12038c84fc4695fc407b31b40c7971dfd1c214d57c4d85f8ef5981badb02db35813944aa36cbea524c776b503121b136c4e9e1749f5eaaf52b1a0ce6d100e92eb5820e76bf672b05bc407d7da88fb8c86fac0ea875e379bfeac5ee163aed1ead46d49cf51591122ac3174f58b1ff9f08ae7fe1ef74c05a9e3ffa86d143738fc54a51a8b2b609e98fc63faf6d12951e73b90bc11b67927e5ddf305defc9aad36a8ef11686e8c5af5090be1dfb9afa7c46e6759711db53cd8d0cd665104967f0be992e51c05d5eab04574ca870225ba1d93e5d2c7b37864718665c05c", @typed={0x4, 0x2e}, @generic="df26e53e3deafd40f6876f79124a3b7e0bf69c532caa41972dfecee4f66d196a7063e71eb55f1bcbf3ebe9a76867a5a7d6d0d3c2e876b87fcb0d88504f2fd42fc0ab2f1309d8191323ca078fc4031c4c3fa55f64050e3156418b76ae37cab4b2d2dcc00f5e59f9f50853501345dfed3a750005e667714c7719c45db37ab9", @nested={0x1c2, 0x42, 0x0, 0x1, [@generic="8c966379b01cb0fe175102669790d4e591cae3c93e094bf915be6c3ac082c4902e57e217c61c464c8b3f5bacf51ce30ba24ab5fcc73d41f7635de9df6af0c0c0788f88e72016c4db5ed9affa2dc604edfea5079f08319e446c0e44b615cf62d7b871c0a335f8ea8663f35f3658fca9a3d8b8bdda7099eb20f1586722cf9f999d03de80817ab009f77bfce6a247a59479ad3b9fa1d64bedfb815fe1fec0670b8f4133078a59e13e6094e062dffb2356a560beaa1a129a7329c2343115d2309d8c4e7e84ae53128be551d815d7dbd6e457758eadbede338faa8ea4c903d70317f2b8cffc8cb608bd631dcee14826a8be5e681858c76120b5d192", @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="329fb05dda2eb32ecb12839fa17ee086be94e37b8397ac19598c00178d212b7937408a1ceaeea0a541d911391c977c7a1ba7a1f613dd2aec12e237cb32aebc49d1e225c1fddcac36bdcce8c0ad1924120996e2a4af0c1d69d741c1b45e4240300170b4d5bb9a07223c6e9f841b470f76d089b5abc2b86d3399569a48798a3e2bf4920cea61603360b1bbea644013655ad1527e0905f3dbe26d066bf2c71ac53df53f87a8d2125c06f9", @nested={0x4, 0x9b}, @nested={0x4, 0x40}]}, @typed={0x8, 0x148, 0x0, 0x0, @fd=r0}]}]}, 0x550}, 0x1, 0x0, 0x0, 0x2}, 0x58) syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r4 = socket(0x2, 0x1, 0x0) (async) socket(0xa, 0x5, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r7, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) r8 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r8], 0x1ac}}, 0x40000) (async) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000140), r3) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000003040)={0x2740, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0xf1, 0x9, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@empty}, @generic="7279aa0f7780c6d9b2c58209bdaad8ee836d1a93a179efe849c13fe6afef65d7d4863874ba697f22be827d203494fdce626b57d89338bdd898ea82e6832bc7b99fe286f74c8b6b53428212bef2f15ff2bd78a2705d3195fb23fa4fef2f8bedf748e02841e6e82c61f4d26ad1122d8c96ee9ac8deccd458e9650c2fc259aecec915657f59bc33d8883faa78ecc44f607dbf6d5994017416297d5dec9949d1dff539a7f0c9bfdc44d9999daa807cf8bb4a375a81426138b7d12cdde324a2cb0c26d000dbc5a49a1416dc53e8867987bdd2c17253eae0110cc41b906fafa424e5bf6909dfb8d4"]}, @MACSEC_ATTR_SA_CONFIG={0x10ec, 0x3, 0x0, 0x1, [@generic="38a85dd181d0e816868ee5f6b111a703c50f215b3bf309abb7dc2a7639c40d992cbc725636e344ca804308d77fc36897c5c710122eab33839d46e915494235aa4c50e256c7bb795c8be25b8866399bdc21dd7d521dabf65e9b717e7f98f411b36875277404c02fe356d9090c42d3a402b5527f8d468c75fb4f3a3c2469a4d57c1c25c8fd5692a0841530f459764280725a60bbf7cfaafe1757ff2371e8364e880e31a21334db245b15ad5730f331ed6838ed6e85ede47efe726d6cac42364592d4b302fae6b15d1e1ab3328e8eddef46f22932fcf29678a317d8c54a317d1766103736481d99edfc7a357b7929d94b5c738de566b442a814f6406856dd49f772a83fb2dff2cef5ef644f1b1bbcb5d32797fff9a63c22cdbd721af12e0da9bf9f0b78da22b57b4e312abd5d80e515e167d191c4870777df9f6d3825a23aa42677e8d71860ff01d581cecc9e1996a25fd591aaaf6b61e03822b1ab343eb989276de8d5528379a34e45a1ced0c5682a50f5d24ee8a01e1337b0aa2f8cce8e4c904fdaa3d6eda8da2defeb3784fe634f53c4e1f4fa4f35ca4d090438ef76d79677157029c3274fa73e37d42f980ef3cfba794fc8d1849a2c27afc668f0d942b223dfc72baae7275d41b0936e9067fc3265d180cbfbe3232898454b7ba804f85ff01cd28817ccc4d0634dfb003ed27af3d6c535d94d9bc7765521d5027526f2169d9bbdf14d52bf49441d2b1fbec5427793c9529d795ad0bb8ed1343de9b9c53c31cce3e23753277e8305754346cf12314b8aab3149dbfe7b1fe846409ab0686b8f6824a35237daf257f1ab3154b511e9494a5ca740223fb7d52f19265a52b4bdc7977def7c303b4af7beb097a1e54f608cec7d09308d76824e0521cc450a8a76c47db244a51f8362deb7f3b3060b92f6e35616ebb50598dc5dcb35d44dcd4099f99f15c44ac20baf27d9ec5fc156b0727298f2ee7be0d24606d9a852af3003058323ee763cd544c9107e89d07432ade7b4d83246b9f1739d5990ebd092f90bd1ae82f749c95275c4acae763fd51e4779d14a7d8e80e777c2e7ba4d1f722609c87ce5f6d7ec8177ecd26bce2c336957e07ed6882c763a373e47b78a97cc00fb880a687c54985f0b2ddaa88466cb7797b58323f516de29e9a0219bde3b8e784c29985cc1e17a6774eb789a1ec1bac389b4c803f60a0a077a83074d31148831ff095cf18a0f8632f035a63a7e3541170787e45f977696b853080769d8a2c5ae8e0fff9865582ce608c4b478c27f4c2a206bde950e76cbac9663024bf0195541b0b86ecb2d2f4bb5076d5d2c97d3eee370a06e8b4ac52faca343d2d984209e7adfd7df5b6d4571f484218ba7a87918185b53fb5571d7165be97c7abaad159f037e3e368f7c083461cba18c44c86fcef6495f969076f198ff1dc2cdb1e666b6acb4be8e427341b6d08eb6f9bceae52d65f6c341cbaec85c87ad9f9c98d3be05751c7bbf460233139d9878eedb251bfec83261598a337838bc88a47325242d6bc4d687d156ac0de3a2fa4cee1c9c1c0d086b23eecd350f7d41deca0c4d9d94e7acda274f85f4435dca51bea0326defd9cba893d3ae8f046957ee7f06da7768ee06533954c741cec9bd36d60e7cad1f71d7e0da99abc9af332a6128adfab95d30b596afd4033961ada69eee54ad7d45ce672bf903cb736d528b6cdc9d7752f226a2a03738eb7ac7f66af69a0283702506eeda6cc45d659ed2e777d227ad73ed83a28e1fd0ad9a16f79abec7346e6eb42131fa61944d7a320ecc3d286dc219153d0f8f43feab54c1b4a4af449bba11a8bc661e27578130ef2189169490a20e9916306b79e63042ea9da150bd1d266847f1b35dd154f18dbb24873bf109daacb7150a9ae1e451d3fdcaad803552ea65f94bb23da8d14fe42df45a65e2073b3b0e4316d0e708e5a42290f42eb035db79d0fe3f8d58fed8b16a7d940899752ac939f0d554b2fb500327647584c8278b4143df85bbd75d4ade20f8b35e5872ecb73b97be0178365b8c4316a816dac2cbbc7320ba695eb3ca0d43692729a53c86c10576ce7087ea8edafaa042c013161cac93092d298496cf6110804973fe04da2636d494fdda042ab69184daac2c4bea2dc017a40e6db5df2465c38dfec0132587c3f6d2e9682cc17cc6e7153a9b55049507f8adaffdcf4970846e57e7811e20daaf229c3efe82c5c6a2e4a6aaa13c381b27b1718466ce58075946861dcb78cb3c074b6ff19360d0fac11df029c736d1497bad5e6930725b436cfce7704de639501ba60071ccea45909bfd83115e9ef12169743ada12b3b6ad00a93e93ca48099a7f461aba4c9f000bc508150cf7749a45c8012337ad3d2fc83be3ec19f7ee4cb8ac07b50c8d2d0a57c1c3f2ff4c740e09c54403e1ef456b6a0985f47322275f60a420fbe2b9e4a70d6a0ebae6cad8a9769bd11e6144367a9244518fc2c7ee8e849a9a5d677e4cd89e2aceb720817bb2f9970db56f9685ced9eabce603592604475d75ae54e270ee40d20c627c526e906a562a21cbed339f2fce5154f2d712a7f7bca999e5e7e8491166ee65f2ea048f45e09efd09035ce76498895b78d14fb0269fc940915513686ffef4044e5239e6805d3845d085e0da02088e5a19968a4fe7878a3ca268dcc61df710ab2c0c07f7e10c82c427c94d1b35b2241318a100ad8b379ae0b3c142f6a14ba1fafcb1f0b1518b32a3eb0f3d2cbc304c440715d121515bd29b041cff102c92e964216be15445045f455ededc12374c1b28d40788b01d4cdc15ebead5ea8dfafeb3a4a9fea1305ee4ad54e19196128bff16535bf4a1e2667125d15d9439a2f7b9d557e9522fd163205534c4c82af997dd2d0f926d32ed90560e2ea5f11212f092d2c1c524e3786818de0c07ac7d32a9fa3608b8d92f96e1249ba9b67c0d99d011126709f3be3b00e9d31d7cb74a5a91b06263f6c42ac51a759cd70e2d1279e8733688c4bb7c703e43d8ad463438ce328cf2c46178c1aa762f22adfd475da0ea1dc9f66e9b2057e0353a3971b24c4a8b4ef82d4a2ce2a703a9c0c3a98f14bd1958ceb554da1cd43da91e4682194a4fe7d2bfc5747c2db99cfb23364cdf38eed921760b3ee71b9cffb93ccc7677427c287a5ab108a4326feb04d11149246dad34cf2d8773f8a9199187b6279ea083eb3639927eedb2982076799ffaf3e19d5b1ba10b0ec8f53a6ae489a9d30e8c5d7586e3d3cd46350bdbd9192de361ce1febbd8add7983a177f8319437fe73115c1c97e506f5e92585879963fa97f1afbae84063e000e0624fcb670086dfdf300f52ea5fd4da55977859d55d51516a5556752948d0e3dea9bec2d3d0e4335cdc07fc35cf778faec903d9e5ec97ba1d34750adb95094533f2e217d497fb10e09d762cf23e0fa0081692dc00791a2222bbc3b339f040e232da72c34501b2c31f91f3ac4775d1a0040401bb9d7d3a735aeb894943ec2012ff5bfc8af2e1cba81726e2407c343a0c968dcfa2273b5ca4a83d94398dd4a667b9ff863ef2b02b9a5e645a20d148e8ce882084e1b3713a776a9442cf8d3135436f9e0424531965ae38209ecea85fa921e0e947953c808ec5d21fb8f05fea053eae9a7b0f3b1e780bc074066b07e55fe40133bec3d4477f21d45e9e561a4b89b0f38a55e46b46b7db2987c146e757b73bf48245b53d8dd1e37419d2060cc0b7bd2d8569db792b921519954eee525657625111964f18e2fe8a256eeef88f08903db492416bf2c3f99f679b671f04119dc11e6288c33c6f40b18cee36473e05a51994c75192c6d49796da6c1654649c5337a75d9f8d39e1d8c0f1310adc207dfd965c80743fff762b81a892babbd635b1818ac00573ba148ec9f074c7cc5e452aa8a7b6e4b0d86175cd56f58820878502f0939ca689e8b274d52972227378a0fd3da9a4f4c18ad2b8bd91b4e42aa14df6aabf9c58a01f7650b18d700e77ef1e6be709fb85464f784c043c149ce16ab99c0ee3e00a67130c30c1302d213a3b346dd2ddab4d504a8a6e1dc25749d590acca76628cabcc5d0a40aabdc6e3dde8f3657f302fec293fe660e06fd18e58e9df8dfef3386042f5a60ef4e439800b7830d0db04c809c8e350e1729b818b86dd95fd79623919dbceec5beb4e2283a783e4117d236d2ef0c3c24f1fe29b4021a612dffbb00d2127f0172502eb30e13f9d347f32e06520735e1e15359cf92e40ab980cac5f5f5a5a2c973048b61d9c9650df7ae4746cd7d90ab6256f6666a1ba0a6ee633be3992e52af28497881aa9c210c76834cb0660ec8b9a7693661c1f69e94a400141aa5f923ec54612a91afe2716c15ff505bc274a81eb1f67d870b08bab292a0175d99ead82ab1df542d14d29b61020550d691ffd183fa78f268a4df3832403f5f2618c01c28502d8b20527d706c5ef3a1567b0fee6c3b978cb5b958c3c9115456878c529aacdab320028c1ee43ef1e3c986f489c616db2ce68eaa588f1d715d20fc28cdd0f6271b5d03ad8a5d26645f004b81d852185c8847310696afe3a1f06ff68236b7d95a6c339b5a14de25ed00c801ae89a52822d3f973a1e3496f497d14377b438555ca83aa48bf1bd483cd5c03ea1ca4c1e253698e41d3ca1a7eda19947fc3013494b67b15d9daedfbfb0877bfa10cc58b9c1895e039e6e0d5e64ff0f916a9399ce635a68c571f940e7e7e09d82b6ea5f086a46eea564d6d45dc843e9b50a2fe25f10b40fdc9f3c0fd0d6d2d2b75a89760ef77974eacbf1d5afb801b4f2b4f307af8c14d10248fec6938061ad99e72316d37a43938d962fc824fd6fafd66d07d075367446e8d9d384aaa7791e41eebe15a1f7d2e8479c092ba7dffd021da3d75ba9912ee3fc8a25e1bd5fa9f37d5c13d7687e80340d1a1068529ddda87caf847b906230854b56ed515e64b95036eb926252de761594c80e8b2d6f5cc445e15dde41617611791846976467d09b9a4c3f978936cf43bb2f12ce5246b638fa587c9839791085ba67c4bf85b96bc50676edf4d6996b4a4d9ebf54f19fac37881b37bc6fdfc4758fe5de0b42de96df74b1def1b8e398f761f3b2a4d8f4943ffcdc1116f639b3fd0b42fa26b4d8acb7558de43a98847f1b767d59477db709910b4a3fb369938f028e948d029d18edccba52a17ea2261f7aee21b2e810d482a357f97962dc198dedad8cbe468983f2756cfeb889bb959e4cb799647faed5a9eef8e09b40c0bfec14ba94c6bf3cc8340b6c3ca0ef9a5021556e4a7da805c0549c550a5dd55d6a57333934f2162e41d7f30f2dae6b3e49dbfbe1e0e229e273a922c9fb143c2ffd11763e56b6517b4bacf5338d7dbe4bf430defb1ea0376e7a39df5e27294ff9faec9f7e93d4e5359836baf017dd9e1e01fe839523d2c3f9a5c06a2d29e16b897c5ca4ffeeeba1b2c1ac2c5271b68a3e9d1e5bafae197400d9afd95629ea334e601d3d8353b1fbe1adb5d2e1c6292f3b2dd1971a48e3a2145571f4b486a12e850036dcb8245c19f8043204a1d7a2f975f2f193a0fca1eb679c277f374eec6fe2fc8ee5ece76299cff171045a425982cc2308335183601b0ecd6ca87f9ce0179970a57becf3a8355580a860488157aa383a33d7dfac6976783d7c27c06044507baf22239d6c101128666eee8378213150a1fde5ca68fc16149df1ad6117fd23a1b290c3d5b4658dd15c92eb118710b63301e6581247815e30794ec9980be927507ad72d6921005e96176db73c71ff91ce7a2ff9ba8efc26821340b36a75926e004e864ada8274", @typed={0x8, 0x12, 0x0, 0x0, @fd=r5}, @nested={0xde, 0xf0, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @fd=r6}, @typed={0x66, 0xf1, 0x0, 0x0, @binary="a84cb28cfedf08695b801a776aa17a77c7f04a837b78794eb9a43cba20d99412d83a6881787f08e3c9fe7b9c311540a4537bf4f0d99e8c3b8e63306de06b584fbb7f2014754baa14f3bb84c23564d6789c188b1bf9463b25ec5f11b3aa8835c03dc7"}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x148}, @typed={0xc, 0x67, 0x0, 0x0, @u64=0x2}, @generic="3313637a4a8acbadc8d1762016a0ecd907bd266584ba0639fa847771cf4677e6c9051eebb3c2c19a475cfb25ad682eaca42a68590650e118e0d1", @typed={0x8, 0xa5, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xf9}]}]}, @MACSEC_ATTR_SA_CONFIG={0x9b, 0x3, 0x0, 0x1, [@generic="aab6152db3f815b0d47150e6ba6f56bd226d417b579c7752d6c709fb7e64a7d048afd1a2020e1cea48a14c0d04f424954a7266192c0f65d18e2cd763d2aff796172f91f409bd79d8d1c61b488f0571b877438a996de9433611340a9a937d8c163b5c59edbf6a65af3849d6925c79d2f544405660332a1f63b28b4d82abb32f5bddbf0c5816a3b7e4418566d1c1e4058016f8a7", @nested={0x4, 0xa4}]}, @MACSEC_ATTR_SA_CONFIG={0x1098, 0x3, 0x0, 0x1, [@generic="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", @typed={0x8, 0x6, 0x0, 0x0, @fd=r4}, @generic="b1fc954886defe6c774ed8e9c5ddbeb2748df001c38080166261266681a819597df529faaab95d321ea8a55e616ebf682b3680c18646efcfae6667aebfe73a54ee6342823152ca22299be1a69374dca876d49ed01e37fac594d6d23ec8b1091f9a950e7b5271383d1d934a92786586", @generic="ae9a84b1900a576ffff17b5a95aa8deeebd2b82e4d0c1e0553e34813fc"]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x40d, 0x3, 0x0, 0x1, [@generic="34d4dfc31e0de601dd97bd3d574cc1a96bb4d17ad3970dc75860ef88f8596e999cf22fceb7e3a38e1a2fda87c7c0815ab9ec51194b8a6f0a37b7d0b285cf7a2c32a1e5046ffb254c255ac3a601c051b5215930b518d033992eac1a940b039d6441cf238f22daae5216d71ef175fddb67e65a0f16971f3bd7a26e6679b78869e9d0ad5d9f311ee3aa17dd5ddf23aab74281e9ff1d2f6b7a2c9b80ffb90b43c44050430b175d5f56bbc422fd5c7df8618129339dea148fae97ed2c66719e439529672123f8", @generic="91f699b685a5168b539a9db3ae0a9cdead4a21ec914d95d6819aba5d33370b0f0d817ef8c90954464cd04f40c8de2f16e6f694a0b17e3d69457eedc5c43321d6bf215e5910f6d1c2fba5c9e3399aff562dd546e7631885132daa928535d042579ca0ba53d2c4f5a61bdd6168d1e850181799e621162ede7bb28383bbfa75ebb4f9b290c1b5b74e44588a57d3e009a3a53dcb1e0a0ee1e3835ea0a620971348f7ac146505d17fd807ef856e89b0b196a78325e1c0859bc818e20540366dcc5ce6eeb1099394b9fb081e2c2c8b9507368f81d69c059de5483d741db4c153f76ba0e257e306de950fca04854cb1b9bf4346011a47187847", @nested={0x12f, 0x43, 0x0, 0x1, [@nested={0x4, 0x1e}, @typed={0x33, 0x148, 0x0, 0x0, @binary="e4d190c7ae58c3fa11ccf2c64bf3bc543eacd03a1eb97dfbdfbce8e6a689f18e9a3a3492c2fa30f9391092754744f3"}, @generic="e36a1c9c54f73197d9a7dae2963bd75f8c0c37934b69917adb7d0c1d73c8401fba82d262f410ba444d1e8a51a8cc4d3b89179d25369e39045e41dbdb060e20cc85ffd09f915efb02395113782c6a1af2eef0a483d5895b625ba28cef127220f42e2110500d03edfe2aee71a4e1b43d41935524c1b3ff6888461d22d2cf565982f73c661ea682bb186333273bc01131fa912c83b4db9a", @generic="37fe5ecd4e6ada232b05cf8f717712e133730bd3a8dcd4946e955dd839398d7523c2362b423c6004accb308875b5bdd8a164d2f5fb9343439fe8ceea5136e3c7be90b1ced1aef619d3ef9592cbabd28eb7fda582b8e7987e1039c001ba"]}, @nested={0x10, 0x108, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @u32=0x70000000}, @nested={0x4, 0x24}]}, @generic="fbdf0fb1ffa6d8d0fb782bca9054e0ecd9c398936b5ba1e9952b6aa0fe94b9d650b742c88659c9ccd354ee5cbff2fdea6ff2d4fc4db842", @nested={0xd8, 0xd7, 0x0, 0x1, [@typed={0x8a, 0x7e, 0x0, 0x0, @binary="beb10a60d5b2f3d0094e054a852591ac6cbea7d4169766c1d0a5568a51ce6dac3519af67387367a88bb29293f23a9d37694fd2e6a924e9e1959f04ede67d231ad71a349442f7eae822f8795d598e6b3bf2bb3f98bed5568e06c87662af08bdeb9b7c391c096eb8e1c090ff81919b7ad220be6befef1c2c0432ae669024a662b9b5467899a941"}, @generic="71a7dbc51154081a328dbfeebba5dd97bd8f9ae0c3d7226bc63b8e8c21bb754504078984e7f069f5288524dc49cd0647f842a5f6", @typed={0x4, 0x48}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x89d0}, @nested={0x4, 0x44}]}, @generic]}]}, 0x2740}, 0x1, 0x0, 0x0, 0x4000}, 0x40810) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 1m0.725927639s ago: executing program 9 (id=2693): socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5}, 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m0.431974117s ago: executing program 9 (id=2694): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0xffffffffffffffff, 0x10000000009, 0x8000, 0xe238, r1, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYBLOB='^\x00', @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x1c, r5, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) semget$auto(0x1, 0x7254dc02, 0x0) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x1, 0x0, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r2, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) 58.152243601s ago: executing program 9 (id=2702): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x200000000000011, 0x2, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) seccomp$auto(0x3, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x8000000000000, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x100, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0xb, 0x5, 0x9, 0x5}, &(0x7f00000001c0)=0x2, &(0x7f0000000300)=0x1, 0x1, 0xfff, 0x0, 0x807, 0x9, 0x3, 0x9, 0xf, @raw=0xff, @inferred=0xffffffffffffffff}) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, r1, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(0xffffffffffffffff, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0x1000dd, 0x9b72, 0x2, 0x5d8) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/abs\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001180)=""/187, 0xbb) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/manager\x00', 0x42282, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) 56.451294015s ago: executing program 9 (id=2707): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) (rerun: 64) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) mlock$auto(0x81, 0xffff) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 32) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x39, 0x1, 0x4, 0x0, 0x4) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) syslog$auto(0x3, 0x0, 0x5) (async) poll$auto(0x0, 0x7f, 0x9) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) (async, rerun: 64) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='}[,&*}\x00', &(0x7f0000000200)={0x92580, 0x0, 0x31}, 0x18) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) 55.280478281s ago: executing program 9 (id=2712): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7fffeffd) (async) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xfffffffffffffff8, 0xe2, 0xeb1, 0x405, 0x7ffd) (async) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) (async) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r2 = socket(0x2, 0x1, 0x106) (rerun: 64) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x4d0000, 0xeb) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x20000000000065, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) (async) sendmsg$auto(r1, 0x0, 0x95) (async, rerun: 32) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x7f, 0x9, 0x6, 0x1, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) (async) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) (async, rerun: 64) socket(0x10, 0x2, 0xc) (rerun: 64) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x10, 0x2, 0xc) 40.138779275s ago: executing program 38 (id=2712): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7fffeffd) (async) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xfffffffffffffff8, 0xe2, 0xeb1, 0x405, 0x7ffd) (async) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) (async) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r2 = socket(0x2, 0x1, 0x106) (rerun: 64) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x4d0000, 0xeb) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x20000000000065, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) (async) sendmsg$auto(r1, 0x0, 0x95) (async, rerun: 32) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x7f, 0x9, 0x6, 0x1, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) (async) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) (async, rerun: 64) socket(0x10, 0x2, 0xc) (rerun: 64) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x10, 0x2, 0xc) 16.275837432s ago: executing program 1 (id=2783): socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x5, 0x2000000) socket(0x2, 0x1, 0x106) clock_getres$auto(0x1000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="7000fbdbdf252b6f0a0f22e5c93e0800000004000e0000000000"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r1, 0x11) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) 15.310372554s ago: executing program 1 (id=2787): socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sysfs$auto(0x2, 0x100000000000039, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r2, &(0x7f0000000100)='/surit\x8b\xafR\xf2y/integrity?iqa/policy\x00\xa2\xf4\x92_\xe8\xaeD\xca/ \xe5\xed`\xa4\xb5b\xff\x8c\xcf8\x00\xd5s\xb36\"\'\xb0\x84k\x98\xd7\xca\x06O\xd8Y\x15{W\f=XM\xb7\xf4\xca\xdf\x8fe\xe2\x91>`D{\x9e\xfe\x92\x9f|#5P\x8b\xdd\xd2/\b\xb5g\x18\xed\xaa \x9fs\xe0\x04\x84\x04\x02\x89\x84%d\xc1@\x91W\xf8\xf65\xa8\x1d\xde\alUZ\xab\x17\xba\xf8\x02\x12\x94\xdc\xcb\xc3\x06\x82\xc8G4>J\x83\xd3^\x8d', 0x2000000000c5) read$auto(0x3, 0x0, 0x80) r3 = mq_open$auto(&(0x7f00000001c0)='@\x00', 0x8, 0xff00, &(0x7f0000000200)={0x5, 0x61bb, 0x9, 0x55f}) ioctl$auto_PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000240)=0x78) r4 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x540a, 0x0) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r4, 0xc1004110, &(0x7f0000000040)={0x3cdc80, [0x4, 0x6, 0xc31], [{0x2, 0x10000}, {0x4, 0x70, 0x0, 0x1, 0x1, 0x1}, {0xcf, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x836e, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x4db, 0x100, 0x1}, {0x3, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xffffff31, 0x1, 0x0, 0x1}, {0x3, 0x100, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xff, 0x80000000}], 0x1, 0x7, 0x4, 0x4, 0x8, 0x94bf, 0x0, "c95ef840fa5396cd6ac429fd111a286a242d1edd7a644d0744b0a99ba98672339058e9f7540a38055c83f68b614e48d7aae998f208715a9b7742adae19071535"}) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$auto(r0, 0x0, 0x6) setsockopt$auto(0x3, 0x1, 0x34, 0x0, 0x4) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf256700000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0xffffffffffffffff) 14.204986753s ago: executing program 1 (id=2789): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) socket(0x25, 0x800, 0x0) memfd_create$auto(&(0x7f0000000880)='}\x05\xba\xe6\xfa\xd7\x00\x00\x80\xd0Y\xaa\x8a>\xe9\x8c\x066\x8cvX\x19\xaa\xc8t\xdb\xc4\xb3\xbd\xbf\x10\x81\xb7l\xab_\xfdw\xc7\xfa\x1f\xe1\x00\x00\x01\xff\xb7Q\x17\xdb\xd8\"\xde\x88\xdc\xde\xc0!&\xce\aV\xc8\xd3\x02\x9d8\xc5\xc8\x1ct\x989n\x86\xb1\xe7\xb2\xf0\xd6;\x96{T\xc4\x8f\x9d\xd4R\r\xfb\x18\x03\'q\x80nq`b\xbfs\xfb\xb1\xd0\xda\xd8\x95\x8a1\xd2\x85\xb9\xa2\xcd|\xcc\xf6\x02\x00\x00\x00\x00\x00\x00\x00\xfbf \x11 \xc5\x8d<\xa3\x10L\x1a\xb0\x1d\xa4\xdd\x88\xdbB\xe3\xe2<\xab^\x02c\n\x84\xb6\\\xe9\xbc\xf2\xe9;6\xcd\x98^\xf1\xbc\x15\x7f\x8aT\x80\xca\xa7\x94\"\xd05\xbc\xa0o\xe8\x12&f\xd6\\\xbd-\xd3@\x9a\xc20rK\x1a\xb6\xe9XO\x99r\x02\xda\xa7\xd3\x1b9\xfcE\x7f\xdf\xf7S\x88\x81\xc5\xbb\xba\xc0\xbb\x9e\xf4\x80V\xc2\xbe\xcfrV\xca\xcb\n\x8a\x17\xcd6\xf1n\x80>`\xac/a\xed\xc7\x86P\xc5\xe9\xb1\xf3\xde\x1aZ&\x11\xf0\xbdbaWmoW#:\xd2.\x06\b\x80s\xa0\xc5\"O]\xd0\xf9q\xa2\xfai2\xb9\xc8e\xb06\xe0\x7f\x00\x00\x00\xc9\xed\xa0\x87<{\xba\x99\xf8,\x18\x8a6\x80\xc24\xc3\xff.\x8e\x97\xc74L\x89DB\xde\xee79\xc1\x19\x84\xee\xca07\xb4\xd7\xd6+\xe2\xbf\xb5W\xca6c(\xcb\xfao\x020\xf1d\x98\xf5\xa3\xd3w\x1er\xfa\x98\xfa\x87\x80\xc8\x98=\x18 \x9f\x03\xe0\xa2\x0e\x89\xfaJ\x0eZ\xba@\n\xca\xd0U8\x03\xb3:\xc1]\\Am\x03\\\xfcC\xc1y\xb3\x1a\xa6\xae\x80Q\xb6\\\xa31\x11\'\xdeXn\xdb\xab\xd1\x1f\xf6\xf8pRO\x0eU\xcb\a\x1c\xa2\xa7\x1e\xeaV\xe85\xb6\xc7\xb7\xec\x1e\x85\x96\x0e\\\x99\x8c\xa5\xdaIg\x97\xe3\xe4\xfe\x86\xeb\xc6\x19\x01\x11\fq\x81L\xd4\x98\xf3\x90\x83', 0x2ce8) mmap$auto(0x400000000000, 0x9, 0x8, 0x800000000c812, 0x3, 0x0) (async) mmap$auto(0x400000000000, 0x9, 0x8, 0x800000000c812, 0x3, 0x0) ftruncate$auto(0x3, 0x0) r1 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x80) (async) read$auto(0x3, 0x0, 0x80) r2 = socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x100, 0x0) socketpair$auto(0xfffffffe, 0x0, 0xfffffffc, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) syz_clone(0x100000, &(0x7f0000000440)="62e93a9465f40950da6f43b961a69b1c6d627910a08660ace36c6af6d0c4bf0d8c6fa7b7e1798eb3e43f01be78a2d53627f724cf109d582c7e3113d7b3dc4d09189d47928c5e30827e3d", 0x4a, &(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000580)="e1ccbefe7cb58b09344beca439748b12acb4397e04437f28390cf4034d6918e1cdb68fb7d6c63e879f78d49497a5858d97e4adfc786a1305b9856cca0c4ce9c5cf80172b2f5e9417e9438e3ca92a6a4b32952f1b909fe71a6c3c44a21f1805ed96663f231da36888ec622db539aafb061d1759c2ebd774680558ac07ee94cb4bfcb46bbeffbf052e278e99953bfd08badaa975f30d534bdbf3b5d3d63a65900f2802857ad346f88b2e5930d38ce9a1db84e0aab5b9e2") openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r4, @ANYRES32=r4], 0x1e4}, 0x1, 0x0, 0x0, 0x20000080}, 0x91b06a8a9526e0ba) (async) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r4, @ANYRES32=r4], 0x1e4}, 0x1, 0x0, 0x0, 0x20000080}, 0x91b06a8a9526e0ba) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x6) (async) r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010049bd01000000df251c000400000000000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) (async) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010049bd01000000df251c000400000000000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 12.264167584s ago: executing program 1 (id=2795): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x107e82, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x107181, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 11.148234393s ago: executing program 1 (id=2799): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x200000000000011, 0x2, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x6e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x3, 0x1d) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0xa6f, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0xd, 0x6, 0x5}, &(0x7f00000001c0)=0xe6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x9, 0x3e8, 0x4, 0x9, 0xd28}) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, r1, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(r3, 0x0, 0x40000001) ioctl$auto_SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) 6.904022443s ago: executing program 8 (id=2809): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x107e82, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 6.71541091s ago: executing program 8 (id=2811): select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xb, 0x1, 0x948b, 0x3, 0x4, 0x10060000000, 0x6, 0x62, 0x8000001d, 0x8, 0x6d3b, 0x9, 0x8, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x9, 0xee8, 0x0, 0xef1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x55) socket(0x2, 0x4, 0x1) setsockopt$auto(0x3, 0x10, 0x14, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0), 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$auto(r2, &(0x7f00000001c0)='y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000180), r0) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4000011) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x389803, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x5f) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttys0\x00', 0x127a01, 0x0) ioctl$auto_TIOCMBIS(r3, 0x5416, &(0x7f0000000040)="1e66cfea880288ddc30115c3e01d1aff43b6768c2e86242394c3d7f3cf5a8996deaf1c8cf1cb09e2fb7f001651c62c2b820be9720e64b82be79af1c74ed80c8e43e561c1504568ddfaa46191ffc8508ddc0327b6378f2a7a2d") close_range$auto(0x2, 0x8, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020006, 0x7, 0xeb1, 0x0, 0x1008000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) eventfd$auto(0x5d5d) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x1) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 5.279045525s ago: executing program 3 (id=2814): sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x9f6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x102, 0x0, 0xfffffffffffffffd) fallocate$auto(r0, 0x1, 0x2, 0x6) prctl$auto(0xb, 0xfff, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8dd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x44000, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x43, 0x8000000, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x2, 0x3ff) 4.85825132s ago: executing program 8 (id=2815): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) (async, rerun: 32) mprotect$auto(0x0, 0x3, 0x6) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r1, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="cb50144768de8c0b730c8be1950bcdd0508889056edf4ead415efeb6798738507064c3afd886489d890570451d2635f1cee50100000000000080b2a690a3", 0xffffffffffffffff) (async) msgrcv$auto(0x6, 0x0, 0xfffffffffffffffd, 0x4000000006, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_SNAPSHOT_FREE(r2, 0x3305, 0x0) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 4.168541536s ago: executing program 6 (id=2816): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) execve$auto(0x0, 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vhci_hcd.2/usb13/13-0:1.0/usb13-port2/early_stop\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r0, 0x0, 0x20) mmap$auto(0x7fff, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120079"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000003c0)={0x0, 0x55}, 0x1, 0x0, 0x0, 0x401}, 0x7}, 0x3, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000180)={0x0, 0x7}, 0x4) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) ioctl$auto_SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000005c0)="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") openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/addresses\x00', 0x82200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/162, 0xa2) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2462, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 4.159289348s ago: executing program 3 (id=2817): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2, 0x3, 0x4) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) r0 = socket(0x10, 0x2, 0x10000f) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async, rerun: 32) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) (rerun: 32) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x55) (async) write$auto(0x3, 0x0, 0xfdef) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40000, 0x0) 3.913254726s ago: executing program 3 (id=2818): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) (rerun: 64) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) (async, rerun: 32) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x6) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00000050de4e929031b68bda872bd572934102293256ca9da855f4fe93f57e125fc0457b1a55bc8b91b572ed0a75f628636f4eb1092a2b349f5feaae2082d80e64200f10938af40ed58d4a016df5cda8145f321060a4ef6a9459d8ef21de90d12d467765a2ab831d2e2c2357abf76c402a5f2324a2b5c99f670581763fe7221c5891198ff117be6d4d878f993c8387a3c9c5a91b0dcc64f999018f1d117f943a", @ANYRES16=r3, @ANYBLOB="200028bd7000fedbdf251100000018001e8014000a00fe80000000000000000000000000002a"], 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x8050) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x5014c0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) (async, rerun: 32) symlink$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)='./file0\x00') (rerun: 32) mmap$auto(0x7, 0xfffffffffffffffd, 0xdf, 0xe13f, 0xffffffffffffffff, 0x81) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080)) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r5, &(0x7f0000001380)="22d2", 0x2) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) (async) r6 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r6, &(0x7f0000000280)=""/210, 0xd2) ioctl$auto_NVRAM_INIT(r6, 0x7040, 0x0) (async, rerun: 32) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/sockstat\x00', 0xc0880, 0x0) (rerun: 32) read$auto(r7, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) r8 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x604241, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r8, &(0x7f0000000400)=""/205, 0xcd) (async) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000180)='\x00\x10\\.\x87\xf8Bw\x9bJx\amt\n\xfe\x9c', &(0x7f0000000580)=0xfb) futex$auto(0x0, 0x5, 0x9, 0x0, 0x0, 0xffff7fff) 3.590946418s ago: executing program 8 (id=2819): openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x2301, 0x0) r0 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000005700), 0x28000, 0x0) read$auto_proc_coredump_filter_operations_base(r0, 0x0, 0x0) r1 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r1, 0x209, 0xa, r1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000c80)="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", 0x159) socket(0x1b, 0x3, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x11000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) write$auto_rfkill_fops_core(r4, &(0x7f0000000200)="9dea31913cb498217735bbce17f68148281da8acc8b124f8dc04f11f1fa2a9ae7463c4f77ee1feaf711d833ea95c4f433afc6d44d6e591370504369fcc8b786d2db722ab2d5d80df1c7d2ae6eeb0b7cd11d603918ac22abe77711c05c1c11d59bb7c542b966790f31b3d100e436e619db789dd3ae1413d0d9bf34731f5e94f49f389f79f3a3ed9d518bee3c6545f096462d8dad84732", 0x96) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r5, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) ioctl$auto_OTPERASE(r1, 0x400c4d19, &(0x7f0000000000)={0x8, 0x80000000, 0x8}) 3.342957127s ago: executing program 6 (id=2820): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x107e82, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 3.076791535s ago: executing program 6 (id=2821): mmap$auto(0x0, 0x2020009, 0x1007, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto(r0, 0x802c550a, 0x1) pread64$auto(r0, &(0x7f0000000000)='/:).\'^+!/&}!\'*+\x00', 0xc, 0xbadf) setrlimit$auto(0x1000000007, 0x0) socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x1007, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) (async) ioctl$auto(r0, 0x802c550a, 0x1) (async) pread64$auto(r0, &(0x7f0000000000)='/:).\'^+!/&}!\'*+\x00', 0xc, 0xbadf) (async) setrlimit$auto(0x1000000007, 0x0) (async) socket(0x25, 0x1, 0x0) (async) 2.775942414s ago: executing program 3 (id=2822): r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1f, 0x80000, 0xf8) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x14}, @NL80211_ATTR_MLO_SUPPORT={0x4}]}, 0x24}}, 0x4000000) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0x80000000, 0x6, 0x9, 0x3d4a, 0x7, 0x6d3f, 0xa, 0x4, 0x9]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) 2.673306299s ago: executing program 6 (id=2823): quotactl$auto(0x8, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r0, @ANYBLOB="000229bd7000ffffdf251300000002000000060000000500050008ec000005001d0004000000050017000d00000005082800120000000500210002000000"], 0x44}}, 0xc80) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000085) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa34, 0x400, 0x4000000) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfb8, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x510, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x6ba96918, 0x5, 0x90, 0xfffffff4}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r1 = gettid() rt_sigsuspend$auto(&(0x7f0000000000)={0x2}, 0x8) tkill$auto(r1, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000140), 0x303302, 0x0) 2.543059582s ago: executing program 8 (id=2824): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r2, 0x10010000, r0) ioctl$auto(0x3, 0xae41, r1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(r3, &(0x7f00000000c0)=@in={0x2, 0x3, @multicast1}, 0x55) 1.953164097s ago: executing program 8 (id=2825): ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, 0x0) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000880)=0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop3\x00', 0x5012c0, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xfffffffffffffffb, 0x8) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) pkey_free$auto(0xfffffffd) r1 = epoll_create1$auto(0x8) setreuid$auto(0x7, 0x806) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x40001, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r1) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="58490df9", @ANYRES16=r2, @ANYBLOB="000828bd7000fcdbdf25020000000400160005002f00010000000c0001005b5e275d242b2f2a0400160005001200010000000400160006002800070000000a001800000000000000000008003b0008000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000004}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/callback_tcpport\x00', 0x183042, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/name\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/134, 0x86) write$auto(0x4, 0x0, 0x100082) r4 = getpgid(0x0) prlimit64$auto(r4, 0xa3d, 0x0, 0x0) 1.640425374s ago: executing program 6 (id=2826): r0 = socket(0x29, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0x17, &(0x7f0000000140)='\x00\x00C\x80\'\xf9\xc4\xf5W_\xa2\x00\x05\x00\x00\x00\f\x8a\x7f\xcf\x9d\xc4ZrAF\xc7\xeeV\xda\x8ex\x1d\xddzL\xba\xc11\xc6\x1c\xe2\xe9\xbb,\x80\xd3\xcc\xf8\xd5h\xf7S\x81r[\xc8\xf1w \xd1\x00\xb3I\x82Y\xbe\xaa\xdf\xd5\xea\x95V?K\xf2\xd0\x02A\xf020\xe1\xd5^\xa8\xa9\xa0\xd5\xfa\x17I\x17\xf5\xdc\xb8\x1bt\xfc\xd9Ei5l\xef\xfbs\x04\xa0\xd8\x94E\b~\xd9\xbb\xeb\xc7\xfe\xe7\xde)\xc4r\x89\x03\xe0;\xa7\x1d+\xd5\x94N\xf4>-\xe3\xd3\x8d\xc7\xa4*\x96\xf7', 0x4) fanotify_init$auto(0x9, 0x9a29) 1.455341738s ago: executing program 6 (id=2827): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xf, 0x400000000000006, 0xeb1, 0xffffffffffffffff, 0x10000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x180, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socket(0x1e, 0x800, 0x800) (async) socket(0x1e, 0x800, 0x800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4c010}, 0x4040050) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/set_event\x00', 0x627043, 0x0) write$auto(r3, 0x0, 0x4) sysfs$auto(0x3, 0x6, 0x22) (async) sysfs$auto(0x3, 0x6, 0x22) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001040), 0x200, 0x0) close_range$auto(0xffffffffffffffff, r4, 0x80000001) rseq$auto(&(0x7f0000000840)={0xa, 0x9, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000840)={0xa, 0x9, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @none, 0x1}, 0x5c) (async) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @none, 0x1}, 0x5c) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) 1.146455459s ago: executing program 3 (id=2828): socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x48050) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd12\x00', 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) write$auto(0x3, 0x0, 0x100082) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/block/sr0/queue/iosched/front_merges\x00', 0x20502, 0x0) read$auto(r2, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) 616.708878ms ago: executing program 1 (id=2829): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x801, 0x6) setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xa4) (async) setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) (async) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) (async) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) (async) sendfile$auto(r6, r6, 0x0, 0x3) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 0s ago: executing program 3 (id=2830): bind$auto(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) open(0x0, 0x591002, 0x408) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket(0x1e, 0x72b06ae57fdad57f, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) write$auto(r0, 0x0, 0x7ef) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) read$auto(0x3, 0x0, 0x80) get_robust_list$auto(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r4, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) r6 = getpgrp(0x0) r7 = set_tid_address$auto(&(0x7f0000000100)) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x414, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x8}, @NL802154_ATTR_SEC_KEY={0x83, 0x30, 0x0, 0x1, [@typed={0x59, 0xa9, 0x0, 0x0, @binary="e1dc136fa5aa82f823caf538cbb2f6af1b9611c99028892d4002cdb9a880b736fc4bd624139a3266157b4aede9a6fb67e5a29e82e0dcdfa6c6e78f52299da3726bf936e74804462c397a94610963065f4113ffdf09"}, @generic="61af2054d25081760fa861", @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x2b, 0x0, 0x0, @pid=r6}]}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x8}, @NL802154_ATTR_SEC_DEVICE={0xac, 0x2e, 0x0, 0x1, [@nested={0xa5, 0xcb, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @pid=r7}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0xb9}, @generic="31a5614fdb38575d6566ea9ee165f43feb458a1d02eea7ffe2df6fec970bf074a8e3dab32307e9d5bb6d7858730fbcd21e40656ca0c1a82e5bfed9a9fd6e596d4414495fc6bfdd8f2ace7fd74f872bb5acef8539d556c8e8a38f87d4301c8a303984dd66e69db1ffc0cb9abe5b8f6d934ee1c037d738ad7968af36e942651f4f8d"]}]}, @NL802154_ATTR_SEC_DEVICE={0xdc, 0x2e, 0x0, 0x1, [@nested={0xd8, 0xc3, 0x0, 0x1, [@typed={0x4, 0x9e}, @typed={0xc, 0x46, 0x0, 0x0, @u64=0x800}, @typed={0xbc, 0xd0, 0x0, 0x0, @binary="b80107cc3e2f1356563d3f8130d171b30f3dc5f5b15dff5e8ae2c8406c84c0d8b9196366c693c93c5653dfc95f9db38535211ac431180f69b838753aa317520730dd69a0c381ce400c44faf715c136c154f0b76449cac8ff1a46da69f79f9c7174580ead8d78dd283661ffff65ae71bf3ecbd3d774d105e5787e02489f20648a0d01bb0b43696dc0598ed6fd788ed0d2824dcb99bc287f524ce4ae9e5aab8e451ee3c52ab2f520371c4a0ebcdf1e2912f99ea0df2e605e09"}, @typed={0x8, 0x10c, 0x0, 0x0, @u32=0x800}]}]}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0xfffff001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1d3, 0x2b, 0x0, 0x1, [@generic="17dadc75970c8f44dad88ae9d2f1e51fb7304e43c13f8b3c2cf6a19f606f7537e459dc65392f10af2dcad461bb4bf5483b1e407afc0551abe2656ba0e109d2d44ddb4e458aa62ff09b2f3724340f6f7bee4263a976f94b39afda0cb29b69f26efa153b89dc4b4a5182ab418227587eafc327efc6639e37a63cbd00cdb467adcd352ffe1a5fb2bf4fe71b62cd5a4892f56e84872fd84aa30f9549040e760d543076be184855f165f9b5ef6546fb48d9d83a76ac5b53b4f22ce89860d6afb24a993d3c1083840a295048b5e4c837fe297ea8762a", @nested={0xfb, 0x9, 0x0, 0x1, [@nested={0x4, 0xe}, @generic="790cba2d5c79acf50abd0063c66b4c7891c2443d42bb99b6806c385e85006c7f7abaa748f767a6d1916caac0763be993bc80dd12c0bcd710204b73032f4e19c91eac2126befcb4c731e5d7d59c4cb73e93b4703a8632df1ab2a13da05ac6808b84093e577925ed857dc14d4b8694a84963996af0f1a254a97bfea03e7a6fc6232ef6770fcdf48ae3188881960297bf66daae8034daff", @nested={0x4, 0x14d}, @generic="f607b834c21985e2b057b8203911f2932209bd51f20ed428a4b2bc47eb48f748c8c54926bf91297b8330718bf53fef997037004b0a193cf7b1987a1d891c4239daad85db93b7b6c925dd1b2936fe8e2c19", @typed={0x4, 0x75}, @nested={0x4, 0x28}]}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7020eb629edcd28e46753fcf4eb1", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'caif0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_SET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r8, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@OVS_DP_ATTR_NAME={0xd, 0x1, 'nl802154\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x3}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(r2, 0x0, 0x9) close_range$auto(0x2, 0x8, 0xfffffffe) kernel console output (not intermixed with test programs): slab+0xc2/0x120 [ 752.226810][T18086] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 752.226844][T18086] ? sk_prot_alloc+0x60/0x2a0 [ 752.226878][T18086] sk_prot_alloc+0x60/0x2a0 [ 752.226909][T18086] sk_alloc+0x36/0xc20 [ 752.226947][T18086] inet_create+0x3a1/0x1040 [ 752.226979][T18086] ? inet_create+0x93/0x1040 [ 752.227016][T18086] __sock_create+0x335/0x8d0 [ 752.227054][T18086] mptcp_subflow_create_socket+0xf5/0xed0 [ 752.227091][T18086] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 752.227133][T18086] __mptcp_nmpc_sk+0x182/0x890 [ 752.227166][T18086] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 752.227202][T18086] ? __local_bh_enable_ip+0xa4/0x120 [ 752.227238][T18086] mptcp_getsockopt+0xcf8/0xe20 [ 752.227266][T18086] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 752.227303][T18086] ? find_held_lock+0x2b/0x80 [ 752.227330][T18086] ? __might_fault+0xe3/0x190 [ 752.227361][T18086] ? __might_fault+0xe3/0x190 [ 752.227390][T18086] ? __might_fault+0x13b/0x190 [ 752.227434][T18086] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 752.227462][T18086] do_sock_getsockopt+0x34a/0x440 [ 752.227498][T18086] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 752.227526][T18086] ? __fget_files+0x204/0x3c0 [ 752.227574][T18086] __sys_getsockopt+0x123/0x1b0 [ 752.227621][T18086] __x64_sys_getsockopt+0xbd/0x160 [ 752.227657][T18086] ? do_syscall_64+0x91/0x4c0 [ 752.227680][T18086] ? lockdep_hardirqs_on+0x7c/0x110 [ 752.227718][T18086] do_syscall_64+0xcd/0x4c0 [ 752.227745][T18086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.227772][T18086] RIP: 0033:0x7fe7f018eec9 [ 752.227794][T18086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.227820][T18086] RSP: 002b:00007fe7f0f86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 752.227845][T18086] RAX: ffffffffffffffda RBX: 00007fe7f03e6180 RCX: 00007fe7f018eec9 [ 752.227863][T18086] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 752.227880][T18086] RBP: 00007fe7f0211f91 R08: 0000000000000000 R09: 0000000000000000 [ 752.227896][T18086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.227912][T18086] R13: 00007fe7f03e6218 R14: 00007fe7f03e6180 R15: 00007ffdc85357f8 [ 752.227949][T18086] [ 752.820526][T18098] vivid-003: ================= START STATUS ================= [ 752.852815][T18098] vivid-003: Radio HW Seek Mode: Bounded [ 752.877331][T18098] vivid-003: Radio Programmable HW Seek: false [ 752.885360][T18098] vivid-003: RDS Rx I/O Mode: Block I/O [ 752.906098][T18098] vivid-003: Generate RBDS Instead of RDS: false [ 752.919483][T18098] vivid-003: RDS Reception: true [ 752.929710][T18098] vivid-003: RDS Program Type: 0 inactive [ 752.941335][T18098] vivid-003: RDS PS Name: inactive [ 752.965248][T18098] vivid-003: RDS Radio Text: inactive [ 752.993568][T18098] vivid-003: RDS Traffic Announcement: false inactive [ 753.002395][T18098] vivid-003: RDS Traffic Program: false inactive [ 753.010109][T18098] vivid-003: RDS Music: false inactive [ 753.016433][T18098] vivid-003: ================== END STATUS ================== [ 753.434645][T18112] kafs: addr_prefs: Invalid Command [ 753.598448][T10207] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 753.606281][T10207] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 753.616609][T10207] CPU: 0 UID: 0 PID: 10207 Comm: kworker/u11:2 Tainted: G U syzkaller #0 PREEMPT(full) [ 753.616650][T10207] Tainted: [U]=USER [ 753.616659][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 753.616676][T10207] Workqueue: hci1 hci_rx_work [ 753.616713][T10207] Call Trace: [ 753.616722][T10207] [ 753.616731][T10207] dump_stack_lvl+0x16c/0x1f0 [ 753.616771][T10207] sysfs_warn_dup+0x7f/0xa0 [ 753.616804][T10207] sysfs_create_dir_ns+0x24b/0x2b0 [ 753.616835][T10207] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 753.616865][T10207] ? find_held_lock+0x2b/0x80 [ 753.616899][T10207] ? do_raw_spin_unlock+0x172/0x230 [ 753.616939][T10207] kobject_add_internal+0x2c4/0x9b0 [ 753.616971][T10207] kobject_add+0x16e/0x240 [ 753.616997][T10207] ? __pfx_kobject_add+0x10/0x10 [ 753.617026][T10207] ? do_raw_spin_unlock+0x172/0x230 [ 753.617064][T10207] ? kobject_put+0xab/0x5a0 [ 753.617099][T10207] device_add+0x288/0x1aa0 [ 753.617128][T10207] ? __pfx_dev_set_name+0x10/0x10 [ 753.617159][T10207] ? __pfx_device_add+0x10/0x10 [ 753.617185][T10207] ? mgmt_send_event_skb+0x2fb/0x460 [ 753.617227][T10207] hci_conn_add_sysfs+0x17e/0x230 [ 753.617265][T10207] le_conn_complete_evt+0x1260/0x2150 [ 753.617307][T10207] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 753.617338][T10207] ? bt_warn+0xe4/0x120 [ 753.617365][T10207] ? __pfx_bt_warn+0x10/0x10 [ 753.617403][T10207] hci_le_conn_complete_evt+0x23c/0x370 [ 753.617456][T10207] hci_le_meta_evt+0x357/0x5e0 [ 753.617490][T10207] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 753.617529][T10207] hci_event_packet+0x682/0x11c0 [ 753.617562][T10207] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 753.617596][T10207] ? __pfx_hci_event_packet+0x10/0x10 [ 753.617633][T10207] ? kcov_remote_start+0x3c9/0x6d0 [ 753.617668][T10207] ? lockdep_hardirqs_on+0x7c/0x110 [ 753.617712][T10207] hci_rx_work+0x2c5/0x16b0 [ 753.617747][T10207] ? rcu_is_watching+0x12/0xc0 [ 753.617780][T10207] process_one_work+0x9cc/0x1b70 [ 753.617820][T10207] ? __pfx_process_one_work+0x10/0x10 [ 753.617856][T10207] ? assign_work+0x1a0/0x250 [ 753.617896][T10207] worker_thread+0x6c8/0xf10 [ 753.617927][T10207] ? __kthread_parkme+0x19e/0x250 [ 753.617958][T10207] ? __pfx_worker_thread+0x10/0x10 [ 753.617998][T10207] kthread+0x3c2/0x780 [ 753.618034][T10207] ? __pfx_kthread+0x10/0x10 [ 753.618073][T10207] ? rcu_is_watching+0x12/0xc0 [ 753.618098][T10207] ? __pfx_kthread+0x10/0x10 [ 753.618136][T10207] ret_from_fork+0x56d/0x730 [ 753.618170][T10207] ? __pfx_kthread+0x10/0x10 [ 753.618205][T10207] ret_from_fork_asm+0x1a/0x30 [ 753.618253][T10207] [ 753.869893][T10207] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 753.883785][T10207] Bluetooth: hci1: failed to register connection device [ 755.109862][T18139] FAULT_INJECTION: forcing a failure. [ 755.109862][T18139] name failslab, interval 1, probability 0, space 0, times 0 [ 755.122731][T18139] CPU: 1 UID: 0 PID: 18139 Comm: syz.1.2392 Tainted: G U syzkaller #0 PREEMPT(full) [ 755.122755][T18139] Tainted: [U]=USER [ 755.122760][T18139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 755.122769][T18139] Call Trace: [ 755.122774][T18139] [ 755.122780][T18139] dump_stack_lvl+0x16c/0x1f0 [ 755.122806][T18139] should_fail_ex+0x512/0x640 [ 755.122828][T18139] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 755.122848][T18139] should_failslab+0xc2/0x120 [ 755.122868][T18139] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 755.122885][T18139] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 755.122907][T18139] ? ptlock_alloc+0x1f/0x70 [ 755.122924][T18139] ptlock_alloc+0x1f/0x70 [ 755.122938][T18139] pte_alloc_one+0x82/0x3a0 [ 755.122955][T18139] __pte_alloc+0x6d/0x3c0 [ 755.122974][T18139] ? __pfx___pte_alloc+0x10/0x10 [ 755.122993][T18139] ? walk_pgd_range+0x13b4/0x1f50 [ 755.123014][T18139] walk_pgd_range+0xb84/0x1f50 [ 755.123034][T18139] ? __pfx_guard_install_set_pte+0x10/0x10 [ 755.123053][T18139] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 755.123076][T18139] ? __pfx_guard_install_set_pte+0x10/0x10 [ 755.123098][T18139] ? __pfx_guard_install_set_pte+0x10/0x10 [ 755.123117][T18139] ? __pfx_guard_install_set_pte+0x10/0x10 [ 755.123137][T18139] ? __pfx_walk_pgd_range+0x10/0x10 [ 755.123160][T18139] __walk_page_range+0x163/0x820 [ 755.123179][T18139] ? find_vma+0xbf/0x140 [ 755.123197][T18139] ? __pfx_find_vma+0x10/0x10 [ 755.123217][T18139] ? walk_page_test+0x9b/0x180 [ 755.123235][T18139] walk_page_range_mm+0x461/0xb40 [ 755.123256][T18139] ? __pfx_walk_page_range_mm+0x10/0x10 [ 755.123279][T18139] ? __anon_vma_prepare+0x2e2/0x5e0 [ 755.123297][T18139] madvise_vma_behavior+0xa62/0x2d60 [ 755.123327][T18139] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 755.123351][T18139] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 755.123374][T18139] ? __pfx_mas_prev+0x10/0x10 [ 755.123400][T18139] ? find_vma_prev+0xda/0x160 [ 755.123419][T18139] ? rcu_is_watching+0x12/0xc0 [ 755.123434][T18139] ? __pfx_find_vma_prev+0x10/0x10 [ 755.123459][T18139] ? __lock_acquire+0x62e/0x1ce0 [ 755.123481][T18139] madvise_walk_vmas+0x31f/0x9c0 [ 755.123505][T18139] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 755.123531][T18139] madvise_do_behavior+0x1e2/0x530 [ 755.123550][T18139] ? futex_private_hash_put+0x18a/0x300 [ 755.123569][T18139] ? __pfx_madvise_do_behavior+0x10/0x10 [ 755.123590][T18139] ? down_read+0x13d/0x480 [ 755.123613][T18139] do_madvise+0x176/0x240 [ 755.123633][T18139] ? __pfx_do_madvise+0x10/0x10 [ 755.123653][T18139] ? do_futex+0x122/0x350 [ 755.123683][T18139] ? xfd_validate_state+0x61/0x180 [ 755.123704][T18139] ? __pfx_ksys_write+0x10/0x10 [ 755.123725][T18139] __x64_sys_madvise+0xa9/0x110 [ 755.123745][T18139] ? lockdep_hardirqs_on+0x7c/0x110 [ 755.123766][T18139] do_syscall_64+0xcd/0x4c0 [ 755.123780][T18139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.123795][T18139] RIP: 0033:0x7f1f84b8eec9 [ 755.123808][T18139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.123822][T18139] RSP: 002b:00007f1f85a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 755.123837][T18139] RAX: ffffffffffffffda RBX: 00007f1f84de5fa0 RCX: 00007f1f84b8eec9 [ 755.123848][T18139] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 755.123861][T18139] RBP: 00007f1f84c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 755.123875][T18139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.123887][T18139] R13: 00007f1f84de6038 R14: 00007f1f84de5fa0 R15: 00007fffc4cb3538 [ 755.123917][T18139] [ 755.484516][T18137] FAULT_INJECTION: forcing a failure. [ 755.484516][T18137] name fail_futex, interval 1, probability 0, space 0, times 0 [ 755.497699][T18137] CPU: 1 UID: 0 PID: 18137 Comm: syz.5.2391 Tainted: G U syzkaller #0 PREEMPT(full) [ 755.497722][T18137] Tainted: [U]=USER [ 755.497726][T18137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 755.497735][T18137] Call Trace: [ 755.497740][T18137] [ 755.497746][T18137] dump_stack_lvl+0x16c/0x1f0 [ 755.497772][T18137] should_fail_ex+0x512/0x640 [ 755.497806][T18137] get_futex_key+0xff0/0x1560 [ 755.497827][T18137] ? __pfx_get_futex_key+0x10/0x10 [ 755.497843][T18137] ? __mutex_trylock_common+0xe9/0x250 [ 755.497868][T18137] futex_wake+0xea/0x530 [ 755.497890][T18137] ? __pfx_futex_wake+0x10/0x10 [ 755.497919][T18137] do_futex+0x1e3/0x350 [ 755.497937][T18137] ? __pfx_do_futex+0x10/0x10 [ 755.497953][T18137] ? __might_fault+0xe3/0x190 [ 755.497974][T18137] mm_release+0x24e/0x300 [ 755.497991][T18137] do_exit+0x68e/0x2bf0 [ 755.498019][T18137] ? __pfx_do_exit+0x10/0x10 [ 755.498038][T18137] ? do_raw_spin_lock+0x12c/0x2b0 [ 755.498059][T18137] ? find_held_lock+0x2b/0x80 [ 755.498075][T18137] do_group_exit+0xd3/0x2a0 [ 755.498096][T18137] get_signal+0x2673/0x26d0 [ 755.498129][T18137] ? inet_stream_connect+0x79/0xa0 [ 755.498157][T18137] ? __local_bh_enable_ip+0xa4/0x120 [ 755.498186][T18137] ? __pfx_get_signal+0x10/0x10 [ 755.498213][T18137] ? do_futex+0x122/0x350 [ 755.498241][T18137] ? __pfx_do_futex+0x10/0x10 [ 755.498271][T18137] arch_do_signal_or_restart+0x8f/0x790 [ 755.498303][T18137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 755.498343][T18137] ? xfd_validate_state+0x61/0x180 [ 755.498373][T18137] ? __sys_setsockopt+0x140/0x1a0 [ 755.498413][T18137] exit_to_user_mode_loop+0x84/0x110 [ 755.498448][T18137] do_syscall_64+0x41c/0x4c0 [ 755.498474][T18137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.498499][T18137] RIP: 0033:0x7fe7f018eec9 [ 755.498519][T18137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.498543][T18137] RSP: 002b:00007fe7f0f650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 755.498565][T18137] RAX: fffffffffffffe00 RBX: 00007fe7f03e6278 RCX: 00007fe7f018eec9 [ 755.498579][T18137] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe7f03e6278 [ 755.498594][T18137] RBP: 00007fe7f03e6270 R08: 0000000000000000 R09: 0000000000000000 [ 755.498608][T18137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.498616][T18137] R13: 00007fe7f03e6308 R14: 00007ffdc8535710 R15: 00007ffdc85357f8 [ 755.498634][T18137] [ 756.339355][T18152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 756.345529][T18152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 756.362255][T18152] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 756.385946][T18152] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 756.406877][T18152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 756.416070][T18152] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 756.974505][T18145] FAULT_INJECTION: forcing a failure. [ 756.974505][T18145] name failslab, interval 1, probability 0, space 0, times 0 [ 756.987471][T18145] CPU: 1 UID: 0 PID: 18145 Comm: syz.2.2394 Tainted: G U syzkaller #0 PREEMPT(full) [ 756.987503][T18145] Tainted: [U]=USER [ 756.987509][T18145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 756.987518][T18145] Call Trace: [ 756.987524][T18145] [ 756.987529][T18145] dump_stack_lvl+0x16c/0x1f0 [ 756.987557][T18145] should_fail_ex+0x512/0x640 [ 756.987579][T18145] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 756.987599][T18145] should_failslab+0xc2/0x120 [ 756.987619][T18145] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 756.987636][T18145] ? sk_prot_alloc+0x60/0x2a0 [ 756.987655][T18145] sk_prot_alloc+0x60/0x2a0 [ 756.987671][T18145] sk_alloc+0x36/0xc20 [ 756.987691][T18145] inet_create+0x3a1/0x1040 [ 756.987709][T18145] ? inet_create+0x93/0x1040 [ 756.987728][T18145] __sock_create+0x335/0x8d0 [ 756.987748][T18145] mptcp_subflow_create_socket+0xf5/0xed0 [ 756.987767][T18145] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 756.987790][T18145] __mptcp_nmpc_sk+0x182/0x890 [ 756.987807][T18145] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 756.987826][T18145] ? __local_bh_enable_ip+0xa4/0x120 [ 756.987855][T18145] mptcp_getsockopt+0xcf8/0xe20 [ 756.987871][T18145] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 756.987886][T18145] ? find_held_lock+0x2b/0x80 [ 756.987901][T18145] ? __might_fault+0xe3/0x190 [ 756.987918][T18145] ? __might_fault+0xe3/0x190 [ 756.987932][T18145] ? __might_fault+0x13b/0x190 [ 756.987955][T18145] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 756.987970][T18145] do_sock_getsockopt+0x34a/0x440 [ 756.987986][T18145] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 756.988000][T18145] ? __fget_files+0x204/0x3c0 [ 756.988024][T18145] __sys_getsockopt+0x123/0x1b0 [ 756.988049][T18145] __x64_sys_getsockopt+0xbd/0x160 [ 756.988068][T18145] ? do_syscall_64+0x91/0x4c0 [ 756.988082][T18145] ? lockdep_hardirqs_on+0x7c/0x110 [ 756.988110][T18145] do_syscall_64+0xcd/0x4c0 [ 756.988134][T18145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.988161][T18145] RIP: 0033:0x7f128198eec9 [ 756.988179][T18145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.988194][T18145] RSP: 002b:00007f12827bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 756.988209][T18145] RAX: ffffffffffffffda RBX: 00007f1281be5fa0 RCX: 00007f128198eec9 [ 756.988219][T18145] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 756.988227][T18145] RBP: 00007f1281a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 756.988237][T18145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.988245][T18145] R13: 00007f1281be6038 R14: 00007f1281be5fa0 R15: 00007fff404b2d88 [ 756.988264][T18145] [ 758.379211][ T9580] Bluetooth: hci0: command 0x0c1a tx timeout [ 758.385263][T18120] Bluetooth: hci1: command 0x0c1a tx timeout [ 758.458391][ T9580] Bluetooth: hci2: command 0x0c1a tx timeout [ 758.464463][T18120] Bluetooth: hci4: command 0x0c1a tx timeout [ 760.458341][T18120] Bluetooth: hci1: command 0x0c1a tx timeout [ 760.744584][T18174] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 760.888359][T18179] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 761.464480][T18182] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 761.516091][ T9580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 761.527437][ T9580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 761.537231][ T9580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 761.549361][ T9580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 761.573199][ T9580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 761.715146][T18192] FAULT_INJECTION: forcing a failure. [ 761.715146][T18192] name failslab, interval 1, probability 0, space 0, times 0 [ 761.803811][T18192] CPU: 0 UID: 0 PID: 18192 Comm: syz.2.2406 Tainted: G U syzkaller #0 PREEMPT(full) [ 761.803837][T18192] Tainted: [U]=USER [ 761.803842][T18192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 761.803851][T18192] Call Trace: [ 761.803857][T18192] [ 761.803863][T18192] dump_stack_lvl+0x16c/0x1f0 [ 761.803890][T18192] should_fail_ex+0x512/0x640 [ 761.803913][T18192] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 761.803934][T18192] should_failslab+0xc2/0x120 [ 761.803953][T18192] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 761.803970][T18192] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 761.803993][T18192] ? ptlock_alloc+0x1f/0x70 [ 761.804010][T18192] ptlock_alloc+0x1f/0x70 [ 761.804024][T18192] pte_alloc_one+0x82/0x3a0 [ 761.804040][T18192] __pte_alloc+0x6d/0x3c0 [ 761.804059][T18192] ? __pfx___pte_alloc+0x10/0x10 [ 761.804079][T18192] ? walk_pgd_range+0x13b4/0x1f50 [ 761.804101][T18192] walk_pgd_range+0xb84/0x1f50 [ 761.804121][T18192] ? __pfx_guard_install_set_pte+0x10/0x10 [ 761.804140][T18192] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 761.804160][T18192] ? __pfx_guard_install_set_pte+0x10/0x10 [ 761.804181][T18192] ? __pfx_guard_install_set_pte+0x10/0x10 [ 761.804200][T18192] ? __pfx_guard_install_set_pte+0x10/0x10 [ 761.804220][T18192] ? __pfx_walk_pgd_range+0x10/0x10 [ 761.804243][T18192] __walk_page_range+0x163/0x820 [ 761.804262][T18192] ? find_vma+0xbf/0x140 [ 761.804280][T18192] ? __pfx_find_vma+0x10/0x10 [ 761.804300][T18192] ? walk_page_test+0x9b/0x180 [ 761.804319][T18192] walk_page_range_mm+0x461/0xb40 [ 761.804339][T18192] ? __pfx_walk_page_range_mm+0x10/0x10 [ 761.804362][T18192] ? __anon_vma_prepare+0x2e2/0x5e0 [ 761.804380][T18192] madvise_vma_behavior+0xa62/0x2d60 [ 761.804410][T18192] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 761.804433][T18192] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 761.804457][T18192] ? __pfx_mas_prev+0x10/0x10 [ 761.804483][T18192] ? find_vma_prev+0xda/0x160 [ 761.804505][T18192] ? __pfx_find_vma_prev+0x10/0x10 [ 761.804531][T18192] ? __lock_acquire+0x62e/0x1ce0 [ 761.804554][T18192] madvise_walk_vmas+0x31f/0x9c0 [ 761.804578][T18192] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 761.804604][T18192] madvise_do_behavior+0x1e2/0x530 [ 761.804624][T18192] ? futex_private_hash_put+0x18a/0x300 [ 761.804642][T18192] ? __pfx_madvise_do_behavior+0x10/0x10 [ 761.804664][T18192] ? down_read+0x13d/0x480 [ 761.804687][T18192] do_madvise+0x176/0x240 [ 761.804706][T18192] ? __pfx_do_madvise+0x10/0x10 [ 761.804726][T18192] ? do_futex+0x122/0x350 [ 761.804756][T18192] ? xfd_validate_state+0x61/0x180 [ 761.804777][T18192] ? __pfx_ksys_write+0x10/0x10 [ 761.804797][T18192] __x64_sys_madvise+0xa9/0x110 [ 761.804817][T18192] ? lockdep_hardirqs_on+0x7c/0x110 [ 761.804841][T18192] do_syscall_64+0xcd/0x4c0 [ 761.804855][T18192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.804871][T18192] RIP: 0033:0x7f128198eec9 [ 761.804883][T18192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.804898][T18192] RSP: 002b:00007f128279e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 761.804912][T18192] RAX: ffffffffffffffda RBX: 00007f1281be6090 RCX: 00007f128198eec9 [ 761.804922][T18192] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 761.804931][T18192] RBP: 00007f1281a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 761.804940][T18192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.804949][T18192] R13: 00007f1281be6128 R14: 00007f1281be6090 R15: 00007fff404b2d88 [ 761.804968][T18192] [ 762.543694][T18120] Bluetooth: hci1: command 0x0c1a tx timeout [ 762.596419][T18195] chnl_net:caif_netlink_parms(): no params data found [ 762.759406][T18195] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.782991][T18195] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.798600][T18195] bridge_slave_0: entered allmulticast mode [ 762.808439][T18195] bridge_slave_0: entered promiscuous mode [ 762.822645][T18195] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.838368][T18195] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.845714][T18195] bridge_slave_1: entered allmulticast mode [ 762.860826][T18195] bridge_slave_1: entered promiscuous mode [ 763.030096][T18195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.089608][T18195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.171687][T18195] team0: Port device team_slave_0 added [ 763.184592][T18195] team0: Port device team_slave_1 added [ 763.232797][T18195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.239870][T18195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.276948][T18195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.301655][T18195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.309292][T18195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.340208][T18195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.402392][T18195] hsr_slave_0: entered promiscuous mode [ 763.409779][T18195] hsr_slave_1: entered promiscuous mode [ 763.416041][T18195] debugfs: 'hsr0' already exists in 'hsr' [ 763.425265][T18195] Cannot create hsr debugfs directory [ 763.659655][T18120] Bluetooth: hci3: command tx timeout [ 763.854399][T18195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 763.874999][T18195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 763.890213][T18195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 763.923086][T18195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 764.230338][T18216] FAULT_INJECTION: forcing a failure. [ 764.230338][T18216] name failslab, interval 1, probability 0, space 0, times 0 [ 764.243725][T18216] CPU: 0 UID: 0 PID: 18216 Comm: syz.1.2409 Tainted: G U syzkaller #0 PREEMPT(full) [ 764.243770][T18216] Tainted: [U]=USER [ 764.243779][T18216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 764.243795][T18216] Call Trace: [ 764.243804][T18216] [ 764.243815][T18216] dump_stack_lvl+0x16c/0x1f0 [ 764.243859][T18216] should_fail_ex+0x512/0x640 [ 764.243897][T18216] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 764.243935][T18216] should_failslab+0xc2/0x120 [ 764.243970][T18216] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 764.244003][T18216] ? sk_prot_alloc+0x60/0x2a0 [ 764.244038][T18216] sk_prot_alloc+0x60/0x2a0 [ 764.244069][T18216] sk_alloc+0x36/0xc20 [ 764.244106][T18216] inet_create+0x3a1/0x1040 [ 764.244145][T18216] ? inet_create+0x93/0x1040 [ 764.244183][T18216] __sock_create+0x335/0x8d0 [ 764.244223][T18216] mptcp_subflow_create_socket+0xf5/0xed0 [ 764.244262][T18216] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 764.244304][T18216] __mptcp_nmpc_sk+0x182/0x890 [ 764.244336][T18216] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 764.244372][T18216] ? __local_bh_enable_ip+0xa4/0x120 [ 764.244408][T18216] mptcp_getsockopt+0xcf8/0xe20 [ 764.244438][T18216] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 764.244465][T18216] ? find_held_lock+0x2b/0x80 [ 764.244490][T18216] ? __might_fault+0xe3/0x190 [ 764.244520][T18216] ? __might_fault+0xe3/0x190 [ 764.244546][T18216] ? __might_fault+0x13b/0x190 [ 764.244589][T18216] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 764.244617][T18216] do_sock_getsockopt+0x34a/0x440 [ 764.244648][T18216] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 764.244674][T18216] ? __fget_files+0x204/0x3c0 [ 764.244721][T18216] __sys_getsockopt+0x123/0x1b0 [ 764.244766][T18216] __x64_sys_getsockopt+0xbd/0x160 [ 764.244801][T18216] ? do_syscall_64+0x91/0x4c0 [ 764.244825][T18216] ? lockdep_hardirqs_on+0x7c/0x110 [ 764.244861][T18216] do_syscall_64+0xcd/0x4c0 [ 764.244888][T18216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.244915][T18216] RIP: 0033:0x7f1f84b8eec9 [ 764.244936][T18216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.244962][T18216] RSP: 002b:00007f1f85a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 764.244987][T18216] RAX: ffffffffffffffda RBX: 00007f1f84de5fa0 RCX: 00007f1f84b8eec9 [ 764.245006][T18216] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 764.245022][T18216] RBP: 00007f1f84c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 764.245039][T18216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.245055][T18216] R13: 00007f1f84de6038 R14: 00007f1f84de5fa0 R15: 00007fffc4cb3538 [ 764.245092][T18216] [ 764.246319][T18231] kafs: addr_prefs: Invalid Command [ 764.302207][T18195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.549181][T18195] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.563544][T17635] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.570687][T17635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.626244][T17635] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.633452][T17635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.648530][T18120] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 765.548854][T18247] random: crng reseeded on system resumption [ 765.744255][ T9580] Bluetooth: hci3: command tx timeout [ 765.982467][T18195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.204390][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 766.870111][T18278] FAULT_INJECTION: forcing a failure. [ 766.870111][T18278] name fail_futex, interval 1, probability 0, space 0, times 0 [ 766.897136][T18278] CPU: 1 UID: 0 PID: 18278 Comm: syz.1.2419 Tainted: G U syzkaller #0 PREEMPT(full) [ 766.897180][T18278] Tainted: [U]=USER [ 766.897188][T18278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 766.897203][T18278] Call Trace: [ 766.897212][T18278] [ 766.897222][T18278] dump_stack_lvl+0x16c/0x1f0 [ 766.897266][T18278] should_fail_ex+0x512/0x640 [ 766.897305][T18278] ? mt_find+0x757/0xa30 [ 766.897333][T18278] get_futex_key+0x1d0/0x1560 [ 766.897369][T18278] ? __pfx_get_futex_key+0x10/0x10 [ 766.897396][T18278] ? __pfx_mt_find+0x10/0x10 [ 766.897437][T18278] futex_wait_setup+0x9d/0x550 [ 766.897484][T18278] __futex_wait+0x194/0x2f0 [ 766.897527][T18278] ? __pfx___futex_wait+0x10/0x10 [ 766.897568][T18278] ? __pfx_futex_wake_mark+0x10/0x10 [ 766.897605][T18278] ? futex_private_hash_put+0x176/0x300 [ 766.897640][T18278] ? futex_private_hash_put+0x18a/0x300 [ 766.897670][T18278] futex_wait+0xe8/0x380 [ 766.897703][T18278] ? __pfx_futex_wait+0x10/0x10 [ 766.897747][T18278] ? madvise_unlock+0x7c/0x220 [ 766.897784][T18278] do_futex+0x229/0x350 [ 766.897817][T18278] ? __pfx_do_futex+0x10/0x10 [ 766.897871][T18278] __x64_sys_futex+0x1e0/0x4c0 [ 766.897917][T18278] ? __pfx___x64_sys_futex+0x10/0x10 [ 766.897951][T18278] ? xfd_validate_state+0x61/0x180 [ 766.897987][T18278] ? __pfx___do_sys_prctl+0x10/0x10 [ 766.898017][T18278] do_syscall_64+0xcd/0x4c0 [ 766.898040][T18278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.898062][T18278] RIP: 0033:0x7f1f84b8eec9 [ 766.898083][T18278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.898112][T18278] RSP: 002b:00007f1f85a070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 766.898135][T18278] RAX: ffffffffffffffda RBX: 00007f1f84de5fa8 RCX: 00007f1f84b8eec9 [ 766.898152][T18278] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f84de5fa8 [ 766.898166][T18278] RBP: 00007f1f84de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 766.898180][T18278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.898193][T18278] R13: 00007f1f84de6038 R14: 00007fffc4cb3450 R15: 00007fffc4cb3538 [ 766.898224][T18278] [ 766.920653][T18195] veth0_vlan: entered promiscuous mode [ 767.384430][T18195] veth1_vlan: entered promiscuous mode [ 767.485813][T18195] veth0_macvtap: entered promiscuous mode [ 767.521222][T18195] veth1_macvtap: entered promiscuous mode [ 767.585769][T18195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.613573][T18195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.637369][ T9658] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.676151][ T9658] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.693508][ T9658] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.704309][ T9658] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.819618][ T9580] Bluetooth: hci3: command tx timeout [ 767.836913][T12353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.862204][T12353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.922484][T17635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.932781][T17635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.046289][T18311] kafs: addr_prefs: Invalid Command [ 769.112940][ T9580] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 769.560310][T18326] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 769.898552][ T9580] Bluetooth: hci3: command tx timeout [ 770.046765][T18330] FAULT_INJECTION: forcing a failure. [ 770.046765][T18330] name failslab, interval 1, probability 0, space 0, times 0 [ 770.061724][T18330] CPU: 1 UID: 0 PID: 18330 Comm: syz.6.2424 Tainted: G U syzkaller #0 PREEMPT(full) [ 770.061763][T18330] Tainted: [U]=USER [ 770.061771][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 770.061786][T18330] Call Trace: [ 770.061794][T18330] [ 770.061803][T18330] dump_stack_lvl+0x16c/0x1f0 [ 770.061843][T18330] should_fail_ex+0x512/0x640 [ 770.061880][T18330] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 770.061913][T18330] should_failslab+0xc2/0x120 [ 770.061946][T18330] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 770.061976][T18330] ? sk_prot_alloc+0x60/0x2a0 [ 770.062006][T18330] sk_prot_alloc+0x60/0x2a0 [ 770.062035][T18330] sk_alloc+0x36/0xc20 [ 770.062080][T18330] inet_create+0x3a1/0x1040 [ 770.062108][T18330] ? inet_create+0x93/0x1040 [ 770.062138][T18330] __sock_create+0x335/0x8d0 [ 770.062171][T18330] mptcp_subflow_create_socket+0xf5/0xed0 [ 770.062205][T18330] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 770.062242][T18330] __mptcp_nmpc_sk+0x182/0x890 [ 770.062269][T18330] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 770.062302][T18330] ? __local_bh_enable_ip+0xa4/0x120 [ 770.062334][T18330] mptcp_getsockopt+0xcf8/0xe20 [ 770.062372][T18330] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 770.062399][T18330] ? find_held_lock+0x2b/0x80 [ 770.062422][T18330] ? __might_fault+0xe3/0x190 [ 770.062447][T18330] ? __might_fault+0xe3/0x190 [ 770.062473][T18330] ? __might_fault+0x13b/0x190 [ 770.062512][T18330] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 770.062537][T18330] do_sock_getsockopt+0x34a/0x440 [ 770.062567][T18330] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 770.062592][T18330] ? __fget_files+0x204/0x3c0 [ 770.062687][T18330] __sys_getsockopt+0x123/0x1b0 [ 770.062733][T18330] __x64_sys_getsockopt+0xbd/0x160 [ 770.062763][T18330] ? do_syscall_64+0x91/0x4c0 [ 770.062782][T18330] ? lockdep_hardirqs_on+0x7c/0x110 [ 770.062812][T18330] do_syscall_64+0xcd/0x4c0 [ 770.062831][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.062853][T18330] RIP: 0033:0x7f8624b8eec9 [ 770.062872][T18330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.062898][T18330] RSP: 002b:00007f8625a43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 770.062921][T18330] RAX: ffffffffffffffda RBX: 00007f8624de6180 RCX: 00007f8624b8eec9 [ 770.062937][T18330] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 770.062953][T18330] RBP: 00007f8624c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 770.062969][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.062984][T18330] R13: 00007f8624de6218 R14: 00007f8624de6180 R15: 00007fffc1459368 [ 770.063016][T18330] [ 771.132021][T18341] FAULT_INJECTION: forcing a failure. [ 771.132021][T18341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 771.188310][T18341] CPU: 0 UID: 0 PID: 18341 Comm: syz.6.2426 Tainted: G U syzkaller #0 PREEMPT(full) [ 771.188353][T18341] Tainted: [U]=USER [ 771.188362][T18341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.188377][T18341] Call Trace: [ 771.188386][T18341] [ 771.188397][T18341] dump_stack_lvl+0x16c/0x1f0 [ 771.188439][T18341] should_fail_ex+0x512/0x640 [ 771.188483][T18341] should_fail_alloc_page+0xe7/0x130 [ 771.188519][T18341] prepare_alloc_pages+0x3c2/0x610 [ 771.188556][T18341] ? stack_depot_save_flags+0x29/0x9c0 [ 771.188597][T18341] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 771.188628][T18341] ? kasan_save_stack+0x42/0x60 [ 771.188656][T18341] ? kasan_save_stack+0x33/0x60 [ 771.188681][T18341] ? kasan_save_track+0x14/0x30 [ 771.188716][T18341] ? __kasan_slab_alloc+0x89/0x90 [ 771.188744][T18341] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 771.188773][T18341] ? ptlock_alloc+0x1f/0x70 [ 771.188797][T18341] ? pte_alloc_one+0x82/0x3a0 [ 771.188822][T18341] ? __pte_alloc+0x6d/0x3c0 [ 771.188852][T18341] ? walk_pgd_range+0xb84/0x1f50 [ 771.188880][T18341] ? __walk_page_range+0x163/0x820 [ 771.188909][T18341] ? walk_page_range_mm+0x461/0xb40 [ 771.188937][T18341] ? madvise_vma_behavior+0xa62/0x2d60 [ 771.188971][T18341] ? madvise_walk_vmas+0x31f/0x9c0 [ 771.189005][T18341] ? madvise_do_behavior+0x1e2/0x530 [ 771.189038][T18341] ? do_madvise+0x176/0x240 [ 771.189070][T18341] ? __x64_sys_madvise+0xa9/0x110 [ 771.189104][T18341] ? do_syscall_64+0xcd/0x4c0 [ 771.189126][T18341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.189155][T18341] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 771.189193][T18341] ? look_up_lock_class+0x59/0x150 [ 771.189241][T18341] ? __lock_acquire+0xb97/0x1ce0 [ 771.189271][T18341] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.189308][T18341] ? policy_nodemask+0xea/0x4e0 [ 771.189333][T18341] alloc_pages_mpol+0x1fb/0x550 [ 771.189354][T18341] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 771.189374][T18341] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 771.189398][T18341] alloc_pages_noprof+0x131/0x390 [ 771.189418][T18341] pte_alloc_one+0x1c/0x3a0 [ 771.189435][T18341] __pte_alloc+0x6d/0x3c0 [ 771.189454][T18341] ? __pfx___pte_alloc+0x10/0x10 [ 771.189473][T18341] ? walk_pgd_range+0x13b4/0x1f50 [ 771.189494][T18341] walk_pgd_range+0xb84/0x1f50 [ 771.189514][T18341] ? __pfx_guard_install_set_pte+0x10/0x10 [ 771.189533][T18341] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 771.189553][T18341] ? __pfx_guard_install_set_pte+0x10/0x10 [ 771.189575][T18341] ? __pfx_guard_install_set_pte+0x10/0x10 [ 771.189594][T18341] ? __pfx_guard_install_set_pte+0x10/0x10 [ 771.189614][T18341] ? __pfx_walk_pgd_range+0x10/0x10 [ 771.189636][T18341] __walk_page_range+0x163/0x820 [ 771.189655][T18341] ? find_vma+0xbf/0x140 [ 771.189673][T18341] ? __pfx_find_vma+0x10/0x10 [ 771.189693][T18341] ? walk_page_test+0x9b/0x180 [ 771.189719][T18341] walk_page_range_mm+0x461/0xb40 [ 771.189741][T18341] ? __pfx_walk_page_range_mm+0x10/0x10 [ 771.189765][T18341] ? __anon_vma_prepare+0x2e2/0x5e0 [ 771.189783][T18341] madvise_vma_behavior+0xa62/0x2d60 [ 771.189807][T18341] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 771.189830][T18341] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 771.189853][T18341] ? __pfx_mas_prev+0x10/0x10 [ 771.189879][T18341] ? find_vma_prev+0xda/0x160 [ 771.189898][T18341] ? find_held_lock+0x2b/0x80 [ 771.189911][T18341] ? __pfx_find_vma_prev+0x10/0x10 [ 771.189932][T18341] ? futex_unqueue+0x133/0x2c0 [ 771.189954][T18341] ? __futex_wait+0x24c/0x2f0 [ 771.189978][T18341] madvise_walk_vmas+0x31f/0x9c0 [ 771.190002][T18341] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 771.190028][T18341] madvise_do_behavior+0x1e2/0x530 [ 771.190048][T18341] ? futex_private_hash_put+0x18a/0x300 [ 771.190065][T18341] ? __pfx_madvise_do_behavior+0x10/0x10 [ 771.190087][T18341] ? down_read+0x13d/0x480 [ 771.190110][T18341] do_madvise+0x176/0x240 [ 771.190129][T18341] ? __pfx_do_madvise+0x10/0x10 [ 771.190148][T18341] ? do_futex+0x122/0x350 [ 771.190178][T18341] ? xfd_validate_state+0x61/0x180 [ 771.190199][T18341] ? __pfx_ksys_write+0x10/0x10 [ 771.190219][T18341] __x64_sys_madvise+0xa9/0x110 [ 771.190239][T18341] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.190259][T18341] do_syscall_64+0xcd/0x4c0 [ 771.190274][T18341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.190288][T18341] RIP: 0033:0x7f8624b8eec9 [ 771.190302][T18341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.190315][T18341] RSP: 002b:00007f8625a64038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 771.190329][T18341] RAX: ffffffffffffffda RBX: 00007f8624de6090 RCX: 00007f8624b8eec9 [ 771.190339][T18341] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 771.190348][T18341] RBP: 00007f8624c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 771.190356][T18341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.190365][T18341] R13: 00007f8624de6128 R14: 00007f8624de6090 R15: 00007fffc1459368 [ 771.190384][T18341] [ 772.215471][T18357] openvswitch: netlink: Message has 20 unknown bytes. [ 773.787388][T18396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2440'. [ 774.230422][T18409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2442'. [ 776.467751][T18120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 776.477517][T18120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 776.486166][T18120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 776.499469][T18120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 776.508972][T18120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 777.007706][T18438] chnl_net:caif_netlink_parms(): no params data found [ 777.148608][T18438] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.156697][T18438] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.164294][T18438] bridge_slave_0: entered allmulticast mode [ 777.172748][T18438] bridge_slave_0: entered promiscuous mode [ 777.182132][T18438] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.190045][T18438] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.197417][T18438] bridge_slave_1: entered allmulticast mode [ 777.206473][T18438] bridge_slave_1: entered promiscuous mode [ 777.262670][T18438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.264336][T18120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 777.276251][T18438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.289202][T18120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 777.302634][T18120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 777.321880][T18120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 777.330472][T18120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 777.342821][T18438] team0: Port device team_slave_0 added [ 777.352666][T18438] team0: Port device team_slave_1 added [ 777.395819][T18438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.403571][T18438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.430280][T18438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.448290][T18438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.460310][T18438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.487382][T18438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.572131][T18438] hsr_slave_0: entered promiscuous mode [ 777.578446][T18438] hsr_slave_1: entered promiscuous mode [ 777.584846][T18438] debugfs: 'hsr0' already exists in 'hsr' [ 777.590957][T18438] Cannot create hsr debugfs directory [ 777.944407][T18438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.044125][T18453] chnl_net:caif_netlink_parms(): no params data found [ 778.095356][T18438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.216816][T18438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.316147][T18438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.342731][T18453] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.353571][T18453] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.360978][T18453] bridge_slave_0: entered allmulticast mode [ 778.368546][T18453] bridge_slave_0: entered promiscuous mode [ 778.383546][T18453] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.396566][T18453] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.403961][T18453] bridge_slave_1: entered allmulticast mode [ 778.415287][T18453] bridge_slave_1: entered promiscuous mode [ 778.525800][T18453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.543978][T18453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.621463][ T9580] Bluetooth: hci5: command tx timeout [ 778.662719][T18453] team0: Port device team_slave_0 added [ 778.747210][T18453] team0: Port device team_slave_1 added [ 778.911809][T18453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.926567][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.982296][T18453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.053374][T18438] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 779.076846][T18453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.087826][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.114875][T18453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.137646][T18438] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 779.177752][T18438] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 779.214114][T18438] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 779.255996][T18475] Invalid ELF header magic: != ELF [ 779.277741][T18453] hsr_slave_0: entered promiscuous mode [ 779.287483][T18453] hsr_slave_1: entered promiscuous mode [ 779.299037][T18453] debugfs: 'hsr0' already exists in 'hsr' [ 779.309408][T18453] Cannot create hsr debugfs directory [ 779.421481][ T9580] Bluetooth: hci6: command tx timeout [ 779.707635][T18438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.796735][T18438] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.809364][T18453] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 779.833128][T18453] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 779.855004][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.862238][T12759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.879706][T18453] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 779.926411][T18453] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 779.966650][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.973881][T12759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.316997][T18453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.376525][T18453] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.386734][ T9580] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 780.404897][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.418886][T12759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.434246][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.441427][T12759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.468938][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.498160][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.507452][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.515723][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.542935][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.557378][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.565489][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.575203][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.583375][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.593793][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.601863][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.609675][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.618427][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.626928][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.635184][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.643411][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.651528][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.659339][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.667549][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.675724][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.683881][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.692095][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.701064][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.708893][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.712004][ T9580] Bluetooth: hci5: command tx timeout [ 780.717287][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.729933][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.738175][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.746401][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.754693][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.762873][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.771010][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.778830][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.805562][T18438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.813124][T18493] binder: 18492:18493 ioctl 6f44 ffffffffffffffff returned -22 [ 780.878190][T18438] veth0_vlan: entered promiscuous mode [ 780.894008][T18438] veth1_vlan: entered promiscuous mode [ 780.942749][T18438] veth0_macvtap: entered promiscuous mode [ 780.954917][T18438] veth1_macvtap: entered promiscuous mode [ 780.979894][T18438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.006692][T18438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.029073][T17635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.052872][T17635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.074460][T17635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.086324][T17635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.171349][T18453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.243084][ T9658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.267438][ T9658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.361098][T12353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.386842][T12353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.502024][ T9580] Bluetooth: hci6: command tx timeout [ 782.513817][T18453] veth0_vlan: entered promiscuous mode [ 782.580380][T18453] veth1_vlan: entered promiscuous mode [ 782.635327][T18453] veth0_macvtap: entered promiscuous mode [ 782.679231][T18453] veth1_macvtap: entered promiscuous mode [ 782.743527][T18453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.779396][T18453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.787668][ T9580] Bluetooth: hci5: command tx timeout [ 782.822896][T12759] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.862997][T17635] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.916190][T17635] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.977392][T17635] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.137876][T10342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.151489][T10342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.236947][T12759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.262970][T12759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.582602][ T9580] Bluetooth: hci6: command tx timeout [ 784.037104][T18560] FAULT_INJECTION: forcing a failure. [ 784.037104][T18560] name failslab, interval 1, probability 0, space 0, times 0 [ 784.073239][T18560] CPU: 0 UID: 0 PID: 18560 Comm: syz.7.2467 Tainted: G U syzkaller #0 PREEMPT(full) [ 784.073283][T18560] Tainted: [U]=USER [ 784.073293][T18560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 784.073309][T18560] Call Trace: [ 784.073319][T18560] [ 784.073329][T18560] dump_stack_lvl+0x16c/0x1f0 [ 784.073374][T18560] should_fail_ex+0x512/0x640 [ 784.073412][T18560] ? fs_reclaim_acquire+0xae/0x150 [ 784.073454][T18560] should_failslab+0xc2/0x120 [ 784.073496][T18560] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 784.073529][T18560] ? security_inode_alloc+0x3b/0x2b0 [ 784.073564][T18560] security_inode_alloc+0x3b/0x2b0 [ 784.073595][T18560] inode_init_always_gfp+0xce4/0x1030 [ 784.073631][T18560] alloc_inode+0x86/0x240 [ 784.073667][T18560] new_inode+0x22/0x1c0 [ 784.073704][T18560] hugetlbfs_get_inode+0x354/0x730 [ 784.073737][T18560] hugetlb_file_setup+0x15b/0x620 [ 784.073766][T18560] ksys_mmap_pgoff+0x189/0x5c0 [ 784.073807][T18560] __x64_sys_mmap+0x125/0x190 [ 784.073854][T18560] do_syscall_64+0xcd/0x4c0 [ 784.073888][T18560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.073916][T18560] RIP: 0033:0x7f977118eec9 [ 784.073936][T18560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.073963][T18560] RSP: 002b:00007f9771f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 784.073986][T18560] RAX: ffffffffffffffda RBX: 00007f97713e5fa0 RCX: 00007f977118eec9 [ 784.074004][T18560] RDX: 0000000000000002 RSI: 0000000000200006 RDI: 0000000000000000 [ 784.074020][T18560] RBP: 00007f9771211f91 R08: 0000000000000602 R09: 0000300000000000 [ 784.074037][T18560] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 784.074052][T18560] R13: 00007f97713e6038 R14: 00007f97713e5fa0 R15: 00007ffef7b93268 [ 784.074088][T18560] [ 784.123226][T18560] sock: sock_timestamping_bind_phc: sock not bind to device [ 784.862938][ T9580] Bluetooth: hci5: command tx timeout [ 785.664093][ T9580] Bluetooth: hci6: command tx timeout [ 787.597328][T18608] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 788.892110][T18616] kexec: Could not allocate control_code_buffer [ 790.472575][T18120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 790.492774][T18120] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 790.508698][T18120] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 790.522343][T18120] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 790.532249][T18120] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 790.885057][T18288] Process accounting resumed [ 791.635042][T18648] chnl_net:caif_netlink_parms(): no params data found [ 792.317108][T18648] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.324255][T18648] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.336700][T18648] bridge_slave_0: entered allmulticast mode [ 792.344578][T18648] bridge_slave_0: entered promiscuous mode [ 792.590045][T18648] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.597292][T18648] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.610046][T18648] bridge_slave_1: entered allmulticast mode [ 792.618675][T18648] bridge_slave_1: entered promiscuous mode [ 792.627399][T18120] Bluetooth: hci7: command tx timeout [ 792.837732][T18648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.852733][T18648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.229146][T18648] team0: Port device team_slave_0 added [ 793.301930][T18648] team0: Port device team_slave_1 added [ 793.900924][T18648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.915786][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.942350][T18648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.966399][T18648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.978715][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.012780][T18648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.173949][T18648] hsr_slave_0: entered promiscuous mode [ 794.188785][T18648] hsr_slave_1: entered promiscuous mode [ 794.195350][T18648] debugfs: 'hsr0' already exists in 'hsr' [ 794.207402][T18648] Cannot create hsr debugfs directory [ 794.275317][T18708] random: crng reseeded on system resumption [ 794.375077][T18708] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2500'. [ 794.715866][T18120] Bluetooth: hci7: command tx timeout [ 795.382104][T18648] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 795.399394][T18648] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 795.457856][T18648] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 795.531433][T18648] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 796.014718][T18648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.131559][T18648] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.175403][T17622] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.182536][T17622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.255417][T17635] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.262625][T17635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.792403][T18120] Bluetooth: hci7: command tx timeout [ 797.425488][T18648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.754284][T18648] veth0_vlan: entered promiscuous mode [ 798.792908][T18648] veth1_vlan: entered promiscuous mode [ 798.802036][T18776] random: crng reseeded on system resumption [ 798.871038][T18120] Bluetooth: hci7: command tx timeout [ 798.887789][T18648] veth0_macvtap: entered promiscuous mode [ 798.922573][T18648] veth1_macvtap: entered promiscuous mode [ 798.988945][T18648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.051402][T18648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.098900][T12758] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.121479][T18782] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2511'. [ 799.167072][T12758] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.247953][T12758] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.291038][T12758] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.490830][T10342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.518681][T10342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.584900][T17622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.605893][T17622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.275116][T18797] warning: `syz.1.2516' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 800.477622][T18801] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 801.487832][T18817] misc userio: Invalid payload size [ 801.785961][T18824] scsi_dev_info_list_add_str: bad dev info string 'e' '' '' [ 801.835023][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2522'. [ 802.300662][ T9580] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 802.317611][ T9580] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 802.328038][ T9580] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 802.342050][ T9580] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 802.351113][ T9580] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 803.068466][T18835] chnl_net:caif_netlink_parms(): no params data found [ 803.807090][T18835] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.827672][T18835] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.841788][T18835] bridge_slave_0: entered allmulticast mode [ 803.851548][T18835] bridge_slave_0: entered promiscuous mode [ 803.892919][T18835] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.907648][T18835] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.927377][T18835] bridge_slave_1: entered allmulticast mode [ 803.936926][T18835] bridge_slave_1: entered promiscuous mode [ 804.044912][T18835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.241227][T18835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.473631][ T9580] Bluetooth: hci8: command tx timeout [ 804.534916][T18865] FAULT_INJECTION: forcing a failure. [ 804.534916][T18865] name failslab, interval 1, probability 0, space 0, times 0 [ 804.557355][T18865] CPU: 0 UID: 0 PID: 18865 Comm: syz.6.2526 Tainted: G U syzkaller #0 PREEMPT(full) [ 804.557394][T18865] Tainted: [U]=USER [ 804.557402][T18865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 804.557416][T18865] Call Trace: [ 804.557424][T18865] [ 804.557434][T18865] dump_stack_lvl+0x16c/0x1f0 [ 804.557470][T18865] should_fail_ex+0x512/0x640 [ 804.557494][T18865] ? fs_reclaim_acquire+0xae/0x150 [ 804.557517][T18865] ? tomoyo_encode2+0x100/0x3e0 [ 804.557537][T18865] should_failslab+0xc2/0x120 [ 804.557557][T18865] __kmalloc_noprof+0xd2/0x510 [ 804.557574][T18865] ? d_absolute_path+0x136/0x1a0 [ 804.557598][T18865] tomoyo_encode2+0x100/0x3e0 [ 804.557622][T18865] tomoyo_encode+0x29/0x50 [ 804.557641][T18865] tomoyo_realpath_from_path+0x18f/0x6e0 [ 804.557668][T18865] tomoyo_get_exe+0x63/0xa0 [ 804.557683][T18865] tomoyo_write_control+0x689/0x1430 [ 804.557706][T18865] ? __pfx_tomoyo_write_control+0x10/0x10 [ 804.557725][T18865] ? __pfx_tomoyo_write+0x10/0x10 [ 804.557746][T18865] vfs_write+0x2a0/0x11d0 [ 804.557766][T18865] ? __pfx___mutex_lock+0x10/0x10 [ 804.557779][T18865] ? __pfx_vfs_write+0x10/0x10 [ 804.557801][T18865] ? __fget_files+0x20e/0x3c0 [ 804.557823][T18865] ksys_write+0x12a/0x250 [ 804.557840][T18865] ? __pfx_ksys_write+0x10/0x10 [ 804.557862][T18865] do_syscall_64+0xcd/0x4c0 [ 804.557877][T18865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.557892][T18865] RIP: 0033:0x7f8624b8eec9 [ 804.557905][T18865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.557919][T18865] RSP: 002b:00007f8625a64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 804.557933][T18865] RAX: ffffffffffffffda RBX: 00007f8624de6090 RCX: 00007f8624b8eec9 [ 804.557943][T18865] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 804.557951][T18865] RBP: 00007f8625a64090 R08: 0000000000000000 R09: 0000000000000000 [ 804.557960][T18865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.557968][T18865] R13: 00007f8624de6128 R14: 00007f8624de6090 R15: 00007fffc1459368 [ 804.557987][T18865] [ 804.558418][T18865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 804.807834][T18835] team0: Port device team_slave_0 added [ 804.827095][T18835] team0: Port device team_slave_1 added [ 804.959215][T18835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.968881][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.006951][T18835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.038492][T18835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.054322][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.086346][T18835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.254457][T18835] hsr_slave_0: entered promiscuous mode [ 805.260812][T18835] hsr_slave_1: entered promiscuous mode [ 805.267388][T18835] debugfs: 'hsr0' already exists in 'hsr' [ 805.273704][T18835] Cannot create hsr debugfs directory [ 806.285807][T18835] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 806.323436][T18835] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 806.389851][T18835] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 806.428491][T18835] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 806.556066][ T9580] Bluetooth: hci8: command tx timeout [ 806.611690][T18835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.636675][T18835] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.650570][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.657715][T12759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.680939][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.688139][T10342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.740007][T18835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 806.750625][T18835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 806.938429][T18835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.192654][T18835] veth0_vlan: entered promiscuous mode [ 807.208822][T18835] veth1_vlan: entered promiscuous mode [ 807.241754][T18835] veth0_macvtap: entered promiscuous mode [ 807.251942][T18835] veth1_macvtap: entered promiscuous mode [ 807.275163][T18835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.298484][T18835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.313035][T10342] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.325831][T10342] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.343089][T10342] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.356217][T10342] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.457645][T10342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.480669][T10342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.518360][T10342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.531354][T10342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.647603][ T9580] Bluetooth: hci8: command tx timeout [ 808.687708][T18922] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 808.719512][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.728356][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.726597][ T9580] Bluetooth: hci8: command tx timeout [ 810.831226][T18977] FAULT_INJECTION: forcing a failure. [ 810.831226][T18977] name failslab, interval 1, probability 0, space 0, times 0 [ 810.860081][T18977] CPU: 0 UID: 0 PID: 18977 Comm: syz.6.2536 Tainted: G U syzkaller #0 PREEMPT(full) [ 810.860120][T18977] Tainted: [U]=USER [ 810.860129][T18977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 810.860143][T18977] Call Trace: [ 810.860152][T18977] [ 810.860162][T18977] dump_stack_lvl+0x16c/0x1f0 [ 810.860214][T18977] should_fail_ex+0x512/0x640 [ 810.860251][T18977] ? fs_reclaim_acquire+0xae/0x150 [ 810.860290][T18977] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 810.860326][T18977] should_failslab+0xc2/0x120 [ 810.860359][T18977] __kmalloc_noprof+0xd2/0x510 [ 810.860399][T18977] tomoyo_realpath_from_path+0xc2/0x6e0 [ 810.860445][T18977] tomoyo_get_exe+0x63/0xa0 [ 810.860473][T18977] tomoyo_write_control+0x689/0x1430 [ 810.860516][T18977] ? __pfx_tomoyo_write_control+0x10/0x10 [ 810.860550][T18977] ? __pfx_tomoyo_write+0x10/0x10 [ 810.860582][T18977] vfs_write+0x2a0/0x11d0 [ 810.860617][T18977] ? __pfx___mutex_lock+0x10/0x10 [ 810.860641][T18977] ? __pfx_vfs_write+0x10/0x10 [ 810.860687][T18977] ? __fget_files+0x20e/0x3c0 [ 810.860728][T18977] ksys_write+0x12a/0x250 [ 810.860756][T18977] ? __pfx_ksys_write+0x10/0x10 [ 810.860797][T18977] do_syscall_64+0xcd/0x4c0 [ 810.860824][T18977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.860850][T18977] RIP: 0033:0x7f8624b8eec9 [ 810.860871][T18977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.860896][T18977] RSP: 002b:00007f8625a22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.860919][T18977] RAX: ffffffffffffffda RBX: 00007f8624de6270 RCX: 00007f8624b8eec9 [ 810.860937][T18977] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.860952][T18977] RBP: 00007f8625a22090 R08: 0000000000000000 R09: 0000000000000000 [ 810.860968][T18977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.860983][T18977] R13: 00007f8624de6308 R14: 00007f8624de6270 R15: 00007fffc1459368 [ 810.861020][T18977] [ 810.861031][T18977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 814.426919][T19031] FAULT_INJECTION: forcing a failure. [ 814.426919][T19031] name failslab, interval 1, probability 0, space 0, times 0 [ 814.471276][T19031] CPU: 0 UID: 0 PID: 19031 Comm: syz.6.2558 Tainted: G U syzkaller #0 PREEMPT(full) [ 814.471320][T19031] Tainted: [U]=USER [ 814.471328][T19031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 814.471343][T19031] Call Trace: [ 814.471352][T19031] [ 814.471363][T19031] dump_stack_lvl+0x16c/0x1f0 [ 814.471407][T19031] should_fail_ex+0x512/0x640 [ 814.471446][T19031] ? __kmalloc_noprof+0xbf/0x510 [ 814.471485][T19031] ? __netlink_kernel_create+0x17f/0x750 [ 814.471521][T19031] should_failslab+0xc2/0x120 [ 814.471566][T19031] __kmalloc_noprof+0xd2/0x510 [ 814.471600][T19031] ? __netlink_create+0x208/0x2c0 [ 814.471634][T19031] __netlink_kernel_create+0x17f/0x750 [ 814.471680][T19031] ? __pfx___netlink_kernel_create+0x10/0x10 [ 814.471717][T19031] ? find_held_lock+0x2b/0x80 [ 814.471741][T19031] ? audit_net_init+0x190/0x440 [ 814.471777][T19031] audit_net_init+0x1ae/0x440 [ 814.471808][T19031] ? __pfx_audit_net_init+0x10/0x10 [ 814.471837][T19031] ? __pfx_audit_receive+0x10/0x10 [ 814.471867][T19031] ? __pfx_audit_multicast_bind+0x10/0x10 [ 814.471899][T19031] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 814.471931][T19031] ? __kmalloc_noprof+0x242/0x510 [ 814.471967][T19031] ? __pfx_audit_net_init+0x10/0x10 [ 814.471997][T19031] ops_init+0x1e2/0x5f0 [ 814.472025][T19031] setup_net+0x10f/0x380 [ 814.472047][T19031] ? lockdep_init_map_type+0x5c/0x280 [ 814.472083][T19031] ? __pfx_setup_net+0x10/0x10 [ 814.472109][T19031] ? debug_mutex_init+0x37/0x70 [ 814.472137][T19031] copy_net_ns+0x2a6/0x5f0 [ 814.472185][T19031] create_new_namespaces+0x3ea/0xa90 [ 814.472220][T19031] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 814.472257][T19031] ksys_unshare+0x45b/0xa40 [ 814.472292][T19031] ? __pfx_ksys_unshare+0x10/0x10 [ 814.472325][T19031] ? xfd_validate_state+0x61/0x180 [ 814.472371][T19031] __x64_sys_unshare+0x31/0x40 [ 814.472403][T19031] do_syscall_64+0xcd/0x4c0 [ 814.472431][T19031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.472458][T19031] RIP: 0033:0x7f8624b8eec9 [ 814.472481][T19031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.472505][T19031] RSP: 002b:00007f8625a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 814.472537][T19031] RAX: ffffffffffffffda RBX: 00007f8624de5fa0 RCX: 00007f8624b8eec9 [ 814.472556][T19031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 814.472572][T19031] RBP: 00007f8624c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 814.472589][T19031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.472606][T19031] R13: 00007f8624de6038 R14: 00007f8624de5fa0 R15: 00007fffc1459368 [ 814.472644][T19031] [ 814.473840][T19031] audit: cannot initialize netlink socket in namespace [ 814.516695][T19034] hub 1-0:1.0: USB hub found [ 814.793054][T19034] hub 1-0:1.0: 1 port detected [ 819.008827][T19132] FAULT_INJECTION: forcing a failure. [ 819.008827][T19132] name failslab, interval 1, probability 0, space 0, times 0 [ 819.067625][T19132] CPU: 0 UID: 0 PID: 19132 Comm: syz.6.2567 Tainted: G U syzkaller #0 PREEMPT(full) [ 819.067659][T19132] Tainted: [U]=USER [ 819.067665][T19132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.067675][T19132] Call Trace: [ 819.067680][T19132] [ 819.067687][T19132] dump_stack_lvl+0x16c/0x1f0 [ 819.067719][T19132] should_fail_ex+0x512/0x640 [ 819.067756][T19132] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 819.067793][T19132] should_failslab+0xc2/0x120 [ 819.067827][T19132] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 819.067857][T19132] ? proc_create_net_data+0x155/0x1c0 [ 819.067894][T19132] ? fib_notifier_ops_register+0x32/0x270 [ 819.067936][T19132] ? __pfx_ip6mr_net_init+0x10/0x10 [ 819.067963][T19132] kmemdup_noprof+0x29/0x60 [ 819.067997][T19132] fib_notifier_ops_register+0x32/0x270 [ 819.068039][T19132] ? __pfx_ip6mr_net_init+0x10/0x10 [ 819.068065][T19132] ip6mr_net_init+0x57/0x4e0 [ 819.068091][T19132] ? __pfx_ip6mr_net_init+0x10/0x10 [ 819.068116][T19132] ops_init+0x1e2/0x5f0 [ 819.068154][T19132] setup_net+0x10f/0x380 [ 819.068177][T19132] ? lockdep_init_map_type+0x5c/0x280 [ 819.068216][T19132] ? __pfx_setup_net+0x10/0x10 [ 819.068244][T19132] ? debug_mutex_init+0x37/0x70 [ 819.068277][T19132] copy_net_ns+0x2a6/0x5f0 [ 819.068310][T19132] create_new_namespaces+0x3ea/0xa90 [ 819.068351][T19132] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 819.068386][T19132] ksys_unshare+0x45b/0xa40 [ 819.068423][T19132] ? __pfx_ksys_unshare+0x10/0x10 [ 819.068460][T19132] ? xfd_validate_state+0x61/0x180 [ 819.068509][T19132] __x64_sys_unshare+0x31/0x40 [ 819.068541][T19132] do_syscall_64+0xcd/0x4c0 [ 819.068566][T19132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.068594][T19132] RIP: 0033:0x7f8624b8eec9 [ 819.068617][T19132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.068643][T19132] RSP: 002b:00007f8625a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 819.068669][T19132] RAX: ffffffffffffffda RBX: 00007f8624de5fa0 RCX: 00007f8624b8eec9 [ 819.068688][T19132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 819.068705][T19132] RBP: 00007f8624c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 819.068722][T19132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.068739][T19132] R13: 00007f8624de6038 R14: 00007f8624de5fa0 R15: 00007fffc1459368 [ 819.068777][T19132] [ 819.312915][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.196728][T19157] random: crng reseeded on system resumption [ 820.287503][T19155] FAULT_INJECTION: forcing a failure. [ 820.287503][T19155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.315943][T19155] CPU: 0 UID: 0 PID: 19155 Comm: syz.6.2571 Tainted: G U syzkaller #0 PREEMPT(full) [ 820.315983][T19155] Tainted: [U]=USER [ 820.315992][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.316006][T19155] Call Trace: [ 820.316015][T19155] [ 820.316025][T19155] dump_stack_lvl+0x16c/0x1f0 [ 820.316066][T19155] should_fail_ex+0x512/0x640 [ 820.316106][T19155] _copy_from_user+0x2e/0xd0 [ 820.316134][T19155] get_timespec64+0x8b/0x1b0 [ 820.316164][T19155] ? __pfx_get_timespec64+0x10/0x10 [ 820.316191][T19155] ? ktime_get+0x200/0x310 [ 820.316228][T19155] __x64_sys_futex+0x288/0x4c0 [ 820.316263][T19155] ? __pfx___x64_sys_futex+0x10/0x10 [ 820.316294][T19155] ? xfd_validate_state+0x61/0x180 [ 820.316341][T19155] do_syscall_64+0xcd/0x4c0 [ 820.316377][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.316402][T19155] RIP: 0033:0x7f8624b8eec9 [ 820.316422][T19155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.316447][T19155] RSP: 002b:00007fffc14594c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 820.316472][T19155] RAX: ffffffffffffffda RBX: 00000000000c83e5 RCX: 00007f8624b8eec9 [ 820.316490][T19155] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8624de5fac [ 820.316506][T19155] RBP: 0000000000000032 R08: 00007f8625a86000 R09: 0000000fc14597bf [ 820.316522][T19155] R10: 00007fffc14595c0 R11: 0000000000000246 R12: 00007f8624de5fac [ 820.316539][T19155] R13: 00007fffc14595c0 R14: 00000000000c8417 R15: 00007fffc14595e0 [ 820.316573][T19155] [ 822.789895][T19225] zram: Removed device: zram0 [ 826.512047][T19302] random: crng reseeded on system resumption [ 826.552817][T19304] blktrace: Concurrent blktraces are not allowed on loop12 [ 830.550090][T19364] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 830.601911][T19364] CIFS mount error: No usable UNC path provided in device string! [ 830.601911][T19364] [ 830.629646][T19364] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 833.114035][T19401] FAULT_INJECTION: forcing a failure. [ 833.114035][T19401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 833.134015][T19401] CPU: 1 UID: 0 PID: 19401 Comm: syz.1.2607 Tainted: G U syzkaller #0 PREEMPT(full) [ 833.134062][T19401] Tainted: [U]=USER [ 833.134072][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 833.134089][T19401] Call Trace: [ 833.134099][T19401] [ 833.134110][T19401] dump_stack_lvl+0x16c/0x1f0 [ 833.134155][T19401] should_fail_ex+0x512/0x640 [ 833.134200][T19401] should_fail_alloc_page+0xe7/0x130 [ 833.134240][T19401] prepare_alloc_pages+0x3c2/0x610 [ 833.134286][T19401] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 833.134319][T19401] ? stack_trace_save+0x8e/0xc0 [ 833.134349][T19401] ? __pfx_stack_trace_save+0x10/0x10 [ 833.134378][T19401] ? rcu_is_watching+0x12/0xc0 [ 833.134406][T19401] ? stack_depot_save_flags+0x29/0x9c0 [ 833.134453][T19401] ? kasan_save_stack+0x42/0x60 [ 833.134482][T19401] ? kasan_save_stack+0x33/0x60 [ 833.134510][T19401] ? kasan_save_track+0x14/0x30 [ 833.134541][T19401] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 833.134576][T19401] ? walk_pgd_range+0x88b/0x1f50 [ 833.134607][T19401] ? walk_page_range_mm+0x461/0xb40 [ 833.134639][T19401] ? madvise_walk_vmas+0x31f/0x9c0 [ 833.134675][T19401] ? madvise_do_behavior+0x1e2/0x530 [ 833.134710][T19401] ? do_madvise+0x176/0x240 [ 833.134743][T19401] ? __x64_sys_madvise+0xa9/0x110 [ 833.134778][T19401] ? do_syscall_64+0xcd/0x4c0 [ 833.134806][T19401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.134851][T19401] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 833.134894][T19401] ? policy_nodemask+0xea/0x4e0 [ 833.134935][T19401] alloc_pages_mpol+0x1fb/0x550 [ 833.134971][T19401] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 833.135017][T19401] alloc_pages_noprof+0x131/0x390 [ 833.135053][T19401] pte_alloc_one+0x1c/0x3a0 [ 833.135083][T19401] __pte_alloc+0x6d/0x3c0 [ 833.135118][T19401] ? __pfx___pte_alloc+0x10/0x10 [ 833.135153][T19401] ? _raw_spin_unlock+0x28/0x50 [ 833.135186][T19401] ? __pmd_alloc+0x3fb/0x930 [ 833.135227][T19401] walk_pgd_range+0xb84/0x1f50 [ 833.135265][T19401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 833.135299][T19401] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 833.135336][T19401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 833.135376][T19401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 833.135412][T19401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 833.135449][T19401] ? __pfx_walk_pgd_range+0x10/0x10 [ 833.135493][T19401] __walk_page_range+0x163/0x820 [ 833.135529][T19401] ? find_vma+0xbf/0x140 [ 833.135562][T19401] ? __pfx_find_vma+0x10/0x10 [ 833.135599][T19401] ? walk_page_test+0x9b/0x180 [ 833.135633][T19401] walk_page_range_mm+0x461/0xb40 [ 833.135672][T19401] ? __pfx_walk_page_range_mm+0x10/0x10 [ 833.135715][T19401] ? __anon_vma_prepare+0x2e2/0x5e0 [ 833.135750][T19401] madvise_vma_behavior+0xa62/0x2d60 [ 833.135792][T19401] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 833.135837][T19401] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 833.135877][T19401] ? __pfx_mas_prev+0x10/0x10 [ 833.135917][T19401] ? find_vma_prev+0xda/0x160 [ 833.135949][T19401] ? find_held_lock+0x2b/0x80 [ 833.135972][T19401] ? __pfx_find_vma_prev+0x10/0x10 [ 833.136007][T19401] ? futex_unqueue+0x133/0x2c0 [ 833.136049][T19401] ? __futex_wait+0x24c/0x2f0 [ 833.136091][T19401] madvise_walk_vmas+0x31f/0x9c0 [ 833.136135][T19401] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 833.136183][T19401] madvise_do_behavior+0x1e2/0x530 [ 833.136219][T19401] ? futex_private_hash_put+0x18a/0x300 [ 833.136252][T19401] ? __pfx_madvise_do_behavior+0x10/0x10 [ 833.136290][T19401] ? down_read+0x13d/0x480 [ 833.136335][T19401] do_madvise+0x176/0x240 [ 833.136370][T19401] ? __pfx_do_madvise+0x10/0x10 [ 833.136403][T19401] ? do_futex+0x122/0x350 [ 833.136459][T19401] ? xfd_validate_state+0x61/0x180 [ 833.136494][T19401] ? __pfx_ksys_write+0x10/0x10 [ 833.136532][T19401] __x64_sys_madvise+0xa9/0x110 [ 833.136567][T19401] ? lockdep_hardirqs_on+0x7c/0x110 [ 833.136604][T19401] do_syscall_64+0xcd/0x4c0 [ 833.136631][T19401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.136658][T19401] RIP: 0033:0x7f5db298eec9 [ 833.136686][T19401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.136712][T19401] RSP: 002b:00007f5db37cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 833.136736][T19401] RAX: ffffffffffffffda RBX: 00007f5db2be5fa0 RCX: 00007f5db298eec9 [ 833.136753][T19401] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 833.136767][T19401] RBP: 00007f5db2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 833.136782][T19401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.136802][T19401] R13: 00007f5db2be6038 R14: 00007f5db2be5fa0 R15: 00007ffcfe6af0e8 [ 833.136839][T19401] [ 833.286964][ T9580] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 833.679041][T19368] ima: policy update failed [ 833.686443][ T30] audit: type=1802 audit(4294968596.674:29): pid=19368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2602" res=0 errno=0 [ 834.894721][T19422] FAULT_INJECTION: forcing a failure. [ 834.894721][T19422] name failslab, interval 1, probability 0, space 0, times 0 [ 835.001307][T19422] CPU: 0 UID: 0 PID: 19422 Comm: syz.1.2610 Tainted: G U syzkaller #0 PREEMPT(full) [ 835.001365][T19422] Tainted: [U]=USER [ 835.001375][T19422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.001393][T19422] Call Trace: [ 835.001404][T19422] [ 835.001415][T19422] dump_stack_lvl+0x16c/0x1f0 [ 835.001469][T19422] should_fail_ex+0x512/0x640 [ 835.001516][T19422] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 835.001550][T19422] should_failslab+0xc2/0x120 [ 835.001593][T19422] __kmalloc_cache_noprof+0x6a/0x3e0 [ 835.001623][T19422] ? sctp_endpoint_new+0x7c/0xcd0 [ 835.001669][T19422] sctp_endpoint_new+0x7c/0xcd0 [ 835.001716][T19422] sctp_init_sock+0xe2d/0x1330 [ 835.001755][T19422] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 835.001794][T19422] sctp_v6_init_sock+0x16/0x70 [ 835.001826][T19422] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 835.001864][T19422] inet6_create+0xb2d/0x12b0 [ 835.001897][T19422] ? inet6_create+0x7f/0x12b0 [ 835.001932][T19422] __sock_create+0x335/0x8d0 [ 835.001971][T19422] __sys_socket+0x14d/0x260 [ 835.002005][T19422] ? __pfx___sys_socket+0x10/0x10 [ 835.002038][T19422] ? xfd_validate_state+0x61/0x180 [ 835.002078][T19422] ? __pfx_ksys_write+0x10/0x10 [ 835.002120][T19422] __x64_sys_socket+0x72/0xb0 [ 835.002152][T19422] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.002192][T19422] do_syscall_64+0xcd/0x4c0 [ 835.002219][T19422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.002249][T19422] RIP: 0033:0x7f5db298eec9 [ 835.002273][T19422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.002301][T19422] RSP: 002b:00007f5db37aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 835.002329][T19422] RAX: ffffffffffffffda RBX: 00007f5db2be6090 RCX: 00007f5db298eec9 [ 835.002360][T19422] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 835.002377][T19422] RBP: 00007f5db2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 835.002395][T19422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.002413][T19422] R13: 00007f5db2be6128 R14: 00007f5db2be6090 R15: 00007ffcfe6af0e8 [ 835.002451][T19422] [ 836.933181][T19454] tty tty39: ldisc open failed (-12), clearing slot 38 [ 837.367987][T19472] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 838.518944][ T30] audit: type=1800 audit(4294968601.501:30): pid=19494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2628" name="lu_gp_id" dev="configfs" ino=80287 res=0 errno=0 [ 839.881212][T19523] FAULT_INJECTION: forcing a failure. [ 839.881212][T19523] name fail_futex, interval 1, probability 0, space 0, times 0 [ 839.978807][T19523] CPU: 1 UID: 0 PID: 19523 Comm: syz.6.2632 Tainted: G U syzkaller #0 PREEMPT(full) [ 839.978833][T19523] Tainted: [U]=USER [ 839.978839][T19523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 839.978849][T19523] Call Trace: [ 839.978854][T19523] [ 839.978867][T19523] dump_stack_lvl+0x16c/0x1f0 [ 839.978897][T19523] should_fail_ex+0x512/0x640 [ 839.978923][T19523] get_futex_key+0x1d0/0x1560 [ 839.978945][T19523] ? __pfx_get_futex_key+0x10/0x10 [ 839.978969][T19523] futex_wake+0xea/0x530 [ 839.978992][T19523] ? __pfx_futex_wake+0x10/0x10 [ 839.979013][T19523] ? rcu_is_watching+0x12/0xc0 [ 839.979035][T19523] do_futex+0x1e3/0x350 [ 839.979054][T19523] ? __pfx_do_futex+0x10/0x10 [ 839.979074][T19523] ? __pfx___might_resched+0x10/0x10 [ 839.979091][T19523] __x64_sys_futex+0x1e0/0x4c0 [ 839.979111][T19523] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 839.979134][T19523] ? __pfx___x64_sys_futex+0x10/0x10 [ 839.979153][T19523] ? __pfx___do_sys_close_range+0x10/0x10 [ 839.979177][T19523] do_syscall_64+0xcd/0x4c0 [ 839.979192][T19523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.979207][T19523] RIP: 0033:0x7f8624b8eec9 [ 839.979219][T19523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.979233][T19523] RSP: 002b:00007f8625a850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 839.979248][T19523] RAX: ffffffffffffffda RBX: 00007f8624de5fa8 RCX: 00007f8624b8eec9 [ 839.979257][T19523] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8624de5fac [ 839.979266][T19523] RBP: 00007f8624de5fa0 R08: 00007f8625a86000 R09: 0000000000000000 [ 839.979275][T19523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.979284][T19523] R13: 00007f8624de6038 R14: 00007fffc1459280 R15: 00007fffc1459368 [ 839.979302][T19523] [ 841.952939][T19556] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 842.394337][T19568] futex_wake_op: syz.9.2631 tries to shift op by -9; fix this program [ 847.733010][T19683] tipc: Can't bind to reserved service type 1 [ 849.078581][T19713] program syz.1.2655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 849.471079][T19718] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 850.591068][T19723] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 850.653194][T19723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 850.674349][T19723] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 850.695962][T19723] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 850.720165][T19723] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 850.754092][T19723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 850.794903][T19723] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 850.859617][T19723] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 850.894887][T19723] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 850.958377][T19723] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 851.022199][T19723] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 851.137076][T19723] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 851.181615][T19723] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 851.214369][T19723] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 851.317918][T19723] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 851.342811][T19723] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 851.364601][T19723] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 851.381897][T19723] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 851.429225][T19723] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 851.442266][T19723] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 851.476973][T19723] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 851.887410][T19761] syz.1.2666 (19761): /proc/19752/oom_adj is deprecated, please use /proc/19752/oom_score_adj instead. [ 852.176656][ T9580] Bluetooth: hci0: command 0x0c1a tx timeout [ 852.668983][ T9580] Bluetooth: hci1: command 0x0c1a tx timeout [ 852.738170][ T9580] Bluetooth: hci4: command 0x0c1a tx timeout [ 852.745293][T18120] Bluetooth: hci2: command 0x0c1a tx timeout [ 852.828433][ T9580] Bluetooth: hci3: command 0x0c1a tx timeout [ 852.992970][ T9580] Bluetooth: hci5: command 0x0c1a tx timeout [ 853.008924][T19783] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 853.231774][ T9580] Bluetooth: hci6: command 0x0c1a tx timeout [ 853.378317][ T9580] Bluetooth: hci7: command 0x0c1a tx timeout [ 853.467340][ T9580] Bluetooth: hci8: command 0x0c1a tx timeout [ 854.240132][T19800] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2674'. [ 854.367942][T19804] netlink: 93 bytes leftover after parsing attributes in process `syz.6.2674'. [ 854.545974][T19800] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2674'. [ 854.634317][T19809] netlink: 93 bytes leftover after parsing attributes in process `syz.6.2674'. [ 854.834089][ T9580] Bluetooth: hci4: command 0x0c1a tx timeout [ 854.898237][T18120] Bluetooth: hci3: command 0x0c1a tx timeout [ 855.064496][T18120] Bluetooth: hci5: command 0x0c1a tx timeout [ 855.299154][T18120] Bluetooth: hci6: command 0x0c1a tx timeout [ 855.458405][T18120] Bluetooth: hci7: command 0x0c1a tx timeout [ 855.543757][T18120] Bluetooth: hci8: command 0x0c1a tx timeout [ 856.978664][T18120] Bluetooth: hci3: command 0x0c1a tx timeout [ 857.139669][T18120] Bluetooth: hci5: command 0x0c1a tx timeout [ 857.161259][T19858] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 857.384938][T18120] Bluetooth: hci6: command 0x0c1a tx timeout [ 857.451535][T19849] zswap: compressor not available [ 857.546269][T18120] Bluetooth: hci7: command 0x0c1a tx timeout [ 857.622595][T18120] Bluetooth: hci8: command 0x0c1a tx timeout [ 857.637807][T19865] random: crng reseeded on system resumption [ 859.059482][T18120] Bluetooth: hci3: command 0x0c1a tx timeout [ 861.064383][T19934] FAULT_INJECTION: forcing a failure. [ 861.064383][T19934] name failslab, interval 1, probability 0, space 0, times 0 [ 861.212525][T19934] CPU: 1 UID: 0 PID: 19934 Comm: syz.6.2695 Tainted: G U syzkaller #0 PREEMPT(full) [ 861.212567][T19934] Tainted: [U]=USER [ 861.212576][T19934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 861.212590][T19934] Call Trace: [ 861.212598][T19934] [ 861.212609][T19934] dump_stack_lvl+0x16c/0x1f0 [ 861.212651][T19934] should_fail_ex+0x512/0x640 [ 861.212686][T19934] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 861.212721][T19934] should_failslab+0xc2/0x120 [ 861.212752][T19934] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 861.212783][T19934] ? __kernfs_new_node+0xd2/0x8e0 [ 861.212820][T19934] __kernfs_new_node+0xd2/0x8e0 [ 861.212851][T19934] ? do_syscall_64+0xcd/0x4c0 [ 861.212873][T19934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.212900][T19934] ? __pfx___kernfs_new_node+0x10/0x10 [ 861.212942][T19934] ? find_held_lock+0x2b/0x80 [ 861.212969][T19934] ? kernfs_root+0xee/0x2a0 [ 861.213008][T19934] kernfs_new_node+0x13c/0x1e0 [ 861.213050][T19934] kernfs_create_dir_ns+0x4c/0x1a0 [ 861.213090][T19934] sysfs_create_dir_ns+0x13a/0x2b0 [ 861.213128][T19934] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 861.213157][T19934] ? find_held_lock+0x2b/0x80 [ 861.213188][T19934] ? do_raw_spin_unlock+0x172/0x230 [ 861.213227][T19934] kobject_add_internal+0x2c4/0x9b0 [ 861.213260][T19934] kobject_init_and_add+0x11b/0x190 [ 861.213288][T19934] ? __pfx_kobject_init_and_add+0x10/0x10 [ 861.213324][T19934] ? up_write+0x1b2/0x520 [ 861.213367][T19934] sysfs_slab_add+0x18e/0x1e0 [ 861.213396][T19934] do_kmem_cache_create+0x529/0x720 [ 861.213427][T19934] ? __kmem_cache_create_args+0x205/0x390 [ 861.213460][T19934] __kmem_cache_create_args+0x225/0x390 [ 861.213494][T19934] mon_text_open+0x313/0x4f0 [ 861.213527][T19934] ? __pfx_mon_text_open+0x10/0x10 [ 861.213559][T19934] ? __debugfs_file_get+0x1fe/0x840 [ 861.213597][T19934] ? __pfx_mon_text_ctor+0x10/0x10 [ 861.213627][T19934] ? __pfx_apparmor_file_open+0x10/0x10 [ 861.213655][T19934] ? lockdown_is_locked_down+0x3f/0x130 [ 861.213681][T19934] ? bpf_lsm_locked_down+0x9/0x10 [ 861.213710][T19934] ? __pfx_mon_text_open+0x10/0x10 [ 861.213739][T19934] full_proxy_open_regular+0x1b6/0x360 [ 861.213769][T19934] do_dentry_open+0x982/0x1530 [ 861.213801][T19934] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 861.213836][T19934] vfs_open+0x82/0x3f0 [ 861.213876][T19934] path_openat+0x1de4/0x2cb0 [ 861.213919][T19934] ? __pfx_path_openat+0x10/0x10 [ 861.213959][T19934] do_filp_open+0x20b/0x470 [ 861.213990][T19934] ? __pfx_do_filp_open+0x10/0x10 [ 861.214047][T19934] ? alloc_fd+0x471/0x7d0 [ 861.214086][T19934] do_sys_openat2+0x11b/0x1d0 [ 861.214125][T19934] ? __pfx_do_sys_openat2+0x10/0x10 [ 861.214177][T19934] __x64_sys_openat+0x174/0x210 [ 861.214201][T19934] ? __pfx___x64_sys_openat+0x10/0x10 [ 861.214241][T19934] do_syscall_64+0xcd/0x4c0 [ 861.214267][T19934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.214292][T19934] RIP: 0033:0x7f8624b8eec9 [ 861.214313][T19934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.214338][T19934] RSP: 002b:00007f8625a64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 861.214363][T19934] RAX: ffffffffffffffda RBX: 00007f8624de6090 RCX: 00007f8624b8eec9 [ 861.214381][T19934] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 861.214397][T19934] RBP: 00007f8624c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 861.214414][T19934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.214428][T19934] R13: 00007f8624de6128 R14: 00007f8624de6090 R15: 00007fffc1459368 [ 861.214465][T19934] [ 861.214636][T19934] kobject: kobject_add_internal failed for mon_text_ffff88805c607000 (error: -12 parent: slab) [ 861.722568][T19934] SLUB: Unable to add cache mon_text_ffff88805c607000 to sysfs [ 862.385351][T19950] Invalid ELF header magic: != ELF [ 863.354732][T19964] ptrace attach of "./syz-executor exec"[18195] was attempted by "[*uk\x09-DczC\x0d]0\x1bRdO@;{ H^kC%g)S.G\x0d޴tSj]Ň$*\x0a^RG!\x09OtRQce#MB071Uи@!3]\x09\x0cmqgC^Ce50Š,LndB(\x07os$:Y|f\x09?{ׁ[q<ȿM.6jliDMau sL$\x0cA\x0a{\x0b\x1b&T\x5c[7{~SFNVNL@54*pi - )im>o2exA(fm; ;h\x1bo4^>fE\x5cW{ NT:߱0Z@\x0d\x22?Gz$8k\x0a11i3LطD\x07.!@Wݫ\x22~Z=?ly,eqJIc®9huuFe\x0dۆjWUȝ~Dj9PJv@S4gK=\x0dOȃ}d5T:\x0c-1|{n囌n/Z4eoF=\x07pa\x0cIo0'sq`v]03 ,f@׃I?,gV|ң\x0d1@•u|Y,z0Kw%i^+t\x1b22gDCҠor@]wyjdkAfw:XaS#9ץż:'&>=PԌ*sp,|儣Ҳ\x1b}Ӟ`$)I&\x0b{Rx=g!`LAdxzVG&3\x09/c( [ 863.661534][T19973] binder: 19971:19973 ioctl c0046209 ffffffffffffffff returned -22 [ 863.752889][ C1] vkms_vblank_simulate: vblank timer overrun [ 864.308680][T19985] random: crng reseeded on system resumption [ 864.648313][T19988] could not allocate digest TFM handle [ 865.803971][T20028] random: crng reseeded on system resumption [ 867.426320][T20039] syz.8.2716 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 868.644567][T20055] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 869.366818][T20065] netlink: 146 bytes leftover after parsing attributes in process `syz.8.2720'. [ 870.187873][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.194715][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.282851][ T30] audit: type=1804 audit(4294988000.261:31): pid=20087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2724" name="/newroot/sys/kernel/debug/tracing/timestamp_mode" dev="tracefs" ino=1080 res=1 errno=0 [ 871.768279][T20098] Invalid ELF header magic: != ELF [ 872.090756][T20105] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2728'. [ 876.191741][T20184] MTRR 1 not used [ 876.207423][T20182] Invalid ELF header magic: != ELF [ 876.765090][T18120] Bluetooth: hci5: unexpected event 0x36 length: 123 > 7 [ 879.283914][T17617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.451549][T17617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.650423][T20229] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2752'. [ 879.725306][T20228] cgroup: fork rejected by pids controller in /syz8 [ 879.734563][T17617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.003118][T17617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.322721][ T9580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 880.334592][ T9580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 880.345150][ T9580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 880.379501][ T9580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 880.389508][ T9580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 881.474681][T20302] chnl_net:caif_netlink_parms(): no params data found [ 881.776703][ T9580] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 881.789176][ T9580] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 881.808019][ T9580] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 881.818417][ T9580] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 881.830338][ T9580] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 882.420753][T20320] zswap: compressor not available [ 882.428378][ T9580] Bluetooth: hci5: command tx timeout [ 883.198256][T20333] ima: policy update failed [ 883.231935][ T30] audit: type=1802 audit(4294988013.197:32): pid=20333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2756" res=0 errno=0 [ 883.647945][T20302] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.678152][T20302] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.685449][T20302] bridge_slave_0: entered allmulticast mode [ 883.719786][T20302] bridge_slave_0: entered promiscuous mode [ 883.739491][T20302] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.746646][T20302] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.778231][T20302] bridge_slave_1: entered allmulticast mode [ 883.786176][T20302] bridge_slave_1: entered promiscuous mode [ 883.967633][ T9580] Bluetooth: hci9: command tx timeout [ 884.358410][T20340] openvswitch: netlink: Multiple metadata blocks provided [ 884.509092][ T9580] Bluetooth: hci5: command tx timeout [ 884.912165][T20302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.942153][T20302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.689459][T20302] team0: Port device team_slave_0 added [ 885.711538][T20302] team0: Port device team_slave_1 added [ 886.038867][ T9580] Bluetooth: hci9: command tx timeout [ 886.589942][ T9580] Bluetooth: hci5: command tx timeout [ 886.892837][T17617] bridge_slave_1: left allmulticast mode [ 886.898516][T17617] bridge_slave_1: left promiscuous mode [ 886.929838][T17617] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.045800][T17617] bridge_slave_0: left allmulticast mode [ 887.066643][T17617] bridge_slave_0: left promiscuous mode [ 887.073145][T17617] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.298164][T20247] syz.8.2753 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 887.331881][T20247] CPU: 1 UID: 0 PID: 20247 Comm: syz.8.2753 Tainted: G U syzkaller #0 PREEMPT(full) [ 887.331924][T20247] Tainted: [U]=USER [ 887.331932][T20247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 887.331947][T20247] Call Trace: [ 887.331956][T20247] [ 887.331966][T20247] dump_stack_lvl+0x16c/0x1f0 [ 887.332008][T20247] dump_header+0x101/0x930 [ 887.332044][T20247] oom_kill_process+0x272/0xa40 [ 887.332081][T20247] out_of_memory+0x350/0x1700 [ 887.332122][T20247] ? __pfx_out_of_memory+0x10/0x10 [ 887.332164][T20247] mem_cgroup_out_of_memory+0x118/0x130 [ 887.332202][T20247] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 887.332249][T20247] ? do_raw_spin_unlock+0x172/0x230 [ 887.332293][T20247] try_charge_memcg+0x72b/0xd50 [ 887.332331][T20247] ? __pfx_try_charge_memcg+0x10/0x10 [ 887.332363][T20247] ? __pfx_find_held_lock+0x1/0x10 [ 887.332390][T20247] ? rcu_read_unlock+0x17/0x60 [ 887.332440][T20247] charge_memcg+0x8a/0x230 [ 887.332470][T20247] __mem_cgroup_charge+0x2b/0x1e0 [ 887.332506][T20247] shmem_alloc_and_add_folio+0x514/0xc20 [ 887.332545][T20247] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 887.332579][T20247] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 887.332615][T20247] shmem_get_folio_gfp+0x67f/0x1600 [ 887.332652][T20247] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 887.332689][T20247] ? timestamp_truncate+0x21e/0x2d0 [ 887.332728][T20247] shmem_write_begin+0x160/0x300 [ 887.332762][T20247] ? __pfx_shmem_write_begin+0x10/0x10 [ 887.332789][T20247] ? inode_set_ctime_current+0x2a1/0x8f0 [ 887.332823][T20247] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 887.332869][T20247] generic_perform_write+0x3c2/0x900 [ 887.332910][T20247] ? __pfx_generic_perform_write+0x10/0x10 [ 887.332943][T20247] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 887.332975][T20247] ? generic_update_time+0xcf/0xf0 [ 887.333006][T20247] ? mnt_put_write_access_file+0x45/0xf0 [ 887.333038][T20247] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 887.333070][T20247] shmem_file_write_iter+0x10e/0x140 [ 887.333107][T20247] __kernel_write_iter+0x31a/0xb10 [ 887.333140][T20247] ? __pfx___kernel_write_iter+0x10/0x10 [ 887.333169][T20247] ? __up_read+0x1f8/0x750 [ 887.333208][T20247] ? dump_user_range+0x756/0xb70 [ 887.333242][T20247] dump_user_range+0x413/0xb70 [ 887.333277][T20247] ? __pfx_dump_user_range+0x10/0x10 [ 887.333304][T20247] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 887.333350][T20247] ? __pfx_writenote+0x10/0x10 [ 887.333388][T20247] elf_core_dump+0x2929/0x3b60 [ 887.333443][T20247] ? __pfx_elf_core_dump+0x10/0x10 [ 887.333467][T20247] ? kasan_save_stack+0x42/0x60 [ 887.333491][T20247] ? kasan_save_stack+0x33/0x60 [ 887.333515][T20247] ? kasan_save_track+0x14/0x30 [ 887.333540][T20247] ? __kasan_kmalloc+0xaa/0xb0 [ 887.333564][T20247] ? vfs_coredump+0x1dca/0x5670 [ 887.333585][T20247] ? get_signal+0x22e3/0x26d0 [ 887.333611][T20247] ? arch_do_signal_or_restart+0x8f/0x790 [ 887.333649][T20247] ? 0xffffffffff600000 [ 887.333733][T20247] ? vfs_coredump+0x2b94/0x5670 [ 887.333756][T20247] vfs_coredump+0x2b94/0x5670 [ 887.333796][T20247] ? __pfx_vfs_coredump+0x10/0x10 [ 887.333825][T20247] ? __lock_acquire+0x62e/0x1ce0 [ 887.333866][T20247] ? __lock_acquire+0x62e/0x1ce0 [ 887.333900][T20247] ? lock_acquire+0x179/0x350 [ 887.333951][T20247] ? is_bpf_text_address+0x8a/0x1a0 [ 887.333982][T20247] ? bpf_ksym_find+0x124/0x1c0 [ 887.334017][T20247] ? __kernel_text_address+0xd/0x40 [ 887.334042][T20247] ? unwind_get_return_address+0x59/0xa0 [ 887.334069][T20247] ? arch_stack_walk+0xa6/0x100 [ 887.334112][T20247] ? stack_trace_save+0x8e/0xc0 [ 887.334142][T20247] ? __pfx_stack_trace_save+0x10/0x10 [ 887.334171][T20247] ? stack_depot_save_flags+0x29/0x9c0 [ 887.334209][T20247] ? __lock_acquire+0xb97/0x1ce0 [ 887.334308][T20247] ? proc_coredump_connector+0x2d1/0x4f0 [ 887.334340][T20247] ? __pfx_proc_coredump_connector+0x10/0x10 [ 887.334381][T20247] ? rcu_is_watching+0x12/0xc0 [ 887.334419][T20247] get_signal+0x22e3/0x26d0 [ 887.334464][T20247] ? __pfx_get_signal+0x10/0x10 [ 887.334494][T20247] ? rcu_is_watching+0x12/0xc0 [ 887.334520][T20247] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 887.334562][T20247] arch_do_signal_or_restart+0x8f/0x790 [ 887.334596][T20247] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 887.334652][T20247] irqentry_exit_to_user_mode+0x13e/0x290 [ 887.334692][T20247] asm_exc_page_fault+0x26/0x30 [ 887.334717][T20247] RIP: 0033:0x0 [ 887.334735][T20247] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 887.334752][T20247] RSP: 002b:000000000000000f EFLAGS: 00010217 [ 887.334772][T20247] RAX: 0000000000000000 RBX: 00007fe065fe5fa0 RCX: 00007fe065d8eec9 [ 887.334789][T20247] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020003b45 [ 887.334804][T20247] RBP: 00007fe065e11f91 R08: 0000000000000002 R09: 0000000000000000 [ 887.334820][T20247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.334836][T20247] R13: 00007fe065fe6038 R14: 00007fe065fe5fa0 R15: 00007ffe18fcb508 [ 887.334877][T20247] [ 887.866421][T20247] memory: usage 307200kB, limit 307200kB, failcnt 8987 [ 887.876534][T20247] memory+swap: usage 348964kB, limit 9007199254740988kB, failcnt 0 [ 887.884556][T20247] kmem: usage 3148kB, limit 9007199254740988kB, failcnt 0 [ 887.891736][T20247] Memory cgroup stats for /syz8: [ 887.891912][T20247] cache 308879360 [ 887.900580][T20247] rss 2453504 [ 887.903874][T20247] rss_huge 2097152 [ 887.907600][T20247] shmem 308871168 [ 887.911294][T20247] mapped_file 0 [ 887.914758][T20247] dirty 0 [ 887.917695][T20247] writeback 0 [ 887.921029][T20247] workingset_refault_anon 100 [ 887.926143][T20247] workingset_refault_file 4 [ 887.930706][T20247] swap 42766336 [ 887.934238][T20247] swapcached 0 [ 887.937620][T20247] pgpgin 98863 [ 887.941197][T20247] pgpgout 32563 [ 887.944670][T20247] pgfault 20234 [ 887.951036][T20247] pgmajfault 49 [ 887.951097][T20247] inactive_anon 310943744 [ 887.951109][T20247] active_anon 380928 [ 887.951120][T20247] inactive_file 4096 [ 887.951131][T20247] active_file 4096 [ 887.951142][T20247] unevictable 0 [ 887.951153][T20247] hierarchical_memory_limit 314572800 [ 887.951165][T20247] hierarchical_memsw_limit 9223372036854771712 [ 887.951178][T20247] total_cache 308879360 [ 887.951190][T20247] total_rss 2453504 [ 887.951201][T20247] total_rss_huge 2097152 [ 887.951212][T20247] total_shmem 308871168 [ 887.951224][T20247] total_mapped_file 0 [ 887.951235][T20247] total_dirty 0 [ 887.951246][T20247] total_writeback 0 [ 887.951257][T20247] total_workingset_refault_anon 100 [ 887.951270][T20247] total_workingset_refault_file 4 [ 887.951282][T20247] total_swap 42766336 [ 887.951293][T20247] total_swapcached 0 [ 887.951302][T20247] total_pgpgin 98863 [ 887.951313][T20247] total_pgpgout 32563 [ 887.951323][T20247] total_pgfault 20234 [ 887.951334][T20247] total_pgmajfault 49 [ 887.951345][T20247] total_inactive_anon 310943744 [ 887.951355][T20247] total_active_anon 380928 [ 887.951367][T20247] total_inactive_file 4096 [ 887.951379][T20247] total_active_file 4096 [ 887.951390][T20247] total_unevictable 0 [ 887.951401][T20247] anon_cost 16635 [ 887.951412][T20247] file_cost 597 [ 887.951423][T20247] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2753,pid=20262,uid=0 [ 887.952443][T20247] Memory cgroup out of memory: Killed process 20262 (syz.8.2753) total-vm:101020kB, anon-rss:3288kB, file-rss:47400kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 888.109926][ T9580] Bluetooth: hci9: command tx timeout [ 888.670328][ T9580] Bluetooth: hci5: command tx timeout [ 890.009439][T17617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.027071][T17617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.042972][T17617] bond0 (unregistering): Released all slaves [ 890.142148][T20302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.149132][T20302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.190388][ T9580] Bluetooth: hci9: command tx timeout [ 890.210224][T20302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.421144][T20302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.455797][T20302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.488016][T20302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.627088][T20314] chnl_net:caif_netlink_parms(): no params data found [ 890.977847][T17617] hsr_slave_0: left promiscuous mode [ 891.124062][T17617] hsr_slave_1: left promiscuous mode [ 891.231141][T17617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.245882][T17617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.264497][T17617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.273120][T17617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.319056][T17617] veth1_macvtap: left promiscuous mode [ 891.320633][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21100 ms [ 891.333012][ C1] sl0: transmit timed out, bad line quality? [ 891.346317][T17617] veth0_macvtap: left promiscuous mode [ 891.352384][T17617] veth1_vlan: left promiscuous mode [ 891.359456][T17617] veth0_vlan: left promiscuous mode [ 892.086349][T17617] team0 (unregistering): Port device team_slave_1 removed [ 892.156336][T17617] team0 (unregistering): Port device team_slave_0 removed [ 892.893044][T20302] hsr_slave_0: entered promiscuous mode [ 892.899623][T20302] hsr_slave_1: entered promiscuous mode [ 892.906635][T20302] debugfs: 'hsr0' already exists in 'hsr' [ 892.914172][T20302] Cannot create hsr debugfs directory [ 893.095541][T20389] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 893.106184][T20314] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.113840][T20314] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.121094][T20314] bridge_slave_0: entered allmulticast mode [ 893.154074][T20314] bridge_slave_0: entered promiscuous mode [ 893.166285][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2761'. [ 893.187729][T20314] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.219113][T20314] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.257897][T20314] bridge_slave_1: entered allmulticast mode [ 893.272562][T20392] futex_wake_op: syz.8.2761 tries to shift op by -9; fix this program [ 893.282544][T20314] bridge_slave_1: entered promiscuous mode [ 893.476232][T20314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.563333][T20314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.744426][T20314] team0: Port device team_slave_0 added [ 893.946116][T20314] team0: Port device team_slave_1 added [ 894.151372][T20314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.167861][T20314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.221914][T20314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.462665][T20314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.578053][T20314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.773166][T20314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.277654][T20314] hsr_slave_0: entered promiscuous mode [ 895.286818][T20314] hsr_slave_1: entered promiscuous mode [ 895.320812][T20314] debugfs: 'hsr0' already exists in 'hsr' [ 895.329733][T20314] Cannot create hsr debugfs directory [ 896.247763][T20441] FAULT_INJECTION: forcing a failure. [ 896.247763][T20441] name failslab, interval 1, probability 0, space 0, times 0 [ 896.297563][T20441] CPU: 0 UID: 0 PID: 20441 Comm: syz.6.2765 Tainted: G U syzkaller #0 PREEMPT(full) [ 896.297605][T20441] Tainted: [U]=USER [ 896.297615][T20441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 896.297631][T20441] Call Trace: [ 896.297640][T20441] [ 896.297650][T20441] dump_stack_lvl+0x16c/0x1f0 [ 896.297693][T20441] should_fail_ex+0x512/0x640 [ 896.297732][T20441] ? fs_reclaim_acquire+0xae/0x150 [ 896.297782][T20441] should_failslab+0xc2/0x120 [ 896.297819][T20441] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 896.297852][T20441] ? security_inode_alloc+0x3b/0x2b0 [ 896.297890][T20441] security_inode_alloc+0x3b/0x2b0 [ 896.297923][T20441] inode_init_always_gfp+0xce4/0x1030 [ 896.297960][T20441] alloc_inode+0x86/0x240 [ 896.297997][T20441] new_inode+0x22/0x1c0 [ 896.298037][T20441] debugfs_create_dir+0xdd/0x5f0 [ 896.298072][T20441] kvm_dev_ioctl+0x1264/0x1af0 [ 896.298107][T20441] ? find_held_lock+0x2b/0x80 [ 896.298134][T20441] ? hook_file_ioctl_common+0x145/0x410 [ 896.298170][T20441] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 896.298210][T20441] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 896.298239][T20441] __x64_sys_ioctl+0x18b/0x210 [ 896.298282][T20441] do_syscall_64+0xcd/0x4c0 [ 896.298310][T20441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.298338][T20441] RIP: 0033:0x7f8624b8eec9 [ 896.298361][T20441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.298386][T20441] RSP: 002b:00007f8625a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 896.298412][T20441] RAX: ffffffffffffffda RBX: 00007f8624de5fa0 RCX: 00007f8624b8eec9 [ 896.298431][T20441] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 896.298447][T20441] RBP: 00007f8624c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 896.298462][T20441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.298478][T20441] R13: 00007f8624de6038 R14: 00007f8624de5fa0 R15: 00007fffc1459368 [ 896.298515][T20441] [ 896.298711][T20441] debugfs: out of free dentries, can not create directory '20441-10' [ 896.309837][T20302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 896.721825][T20302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 896.775567][T20302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 896.863442][T20302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 897.877928][T20314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 897.932467][T20314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 898.010663][T20314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 898.055715][T20314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 898.209656][T20302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.382660][T20490] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 898.420467][T20302] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.635965][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.643142][T17633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.733010][T10341] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.740257][T10341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.908569][T20302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 899.040884][T20314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.076411][T20488] ima: policy update failed [ 899.094782][ T30] audit: type=1802 audit(4294988029.071:33): pid=20488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2769" res=0 errno=0 [ 899.122967][T20314] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.202090][T17619] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.209324][T17619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.297643][T17619] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.304868][T17619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.759364][T20302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.220460][T20538] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(173544298.2314043776.706666779), cmd(6) [ 900.567891][T20302] veth0_vlan: entered promiscuous mode [ 900.662518][T20302] veth1_vlan: entered promiscuous mode [ 901.020075][T20302] veth0_macvtap: entered promiscuous mode [ 901.076986][T20302] veth1_macvtap: entered promiscuous mode [ 901.209193][T20302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.330190][T20302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.360511][T20314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.632205][T12353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.691035][T12353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.824452][T12353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.843308][T12353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.443675][T20314] veth0_vlan: entered promiscuous mode [ 902.533587][T20314] veth1_vlan: entered promiscuous mode [ 902.613450][T12353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.637081][T12353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.767453][T20314] veth0_macvtap: entered promiscuous mode [ 902.850024][T20314] veth1_macvtap: entered promiscuous mode [ 902.904637][T12353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.974146][T12353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.037992][T20314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.140778][T20314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.183080][T17619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.224561][T17619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.276141][T17619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.392097][T17619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.736733][T10341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.744588][T10341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.928977][ T9651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.973152][ T9651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.438109][T20640] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2785'. [ 905.505105][T20644] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 905.534896][T20640] macvtap0: entered promiscuous mode [ 906.289835][T20643] ima: policy update failed [ 906.295471][ T30] audit: type=1802 audit(4294988036.258:34): pid=20643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2787" res=0 errno=0 [ 906.495264][T20662] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 906.636687][T20672] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 906.969280][T20684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2789'. [ 906.999232][T20683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2789'. [ 907.858642][T20678] sp0: Synchronizing with TNC [ 907.943144][T20702] FAULT_INJECTION: forcing a failure. [ 907.943144][T20702] name failslab, interval 1, probability 0, space 0, times 0 [ 908.016159][T20702] CPU: 1 UID: 0 PID: 20702 Comm: syz.6.2803 Tainted: G U syzkaller #0 PREEMPT(full) [ 908.016204][T20702] Tainted: [U]=USER [ 908.016214][T20702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 908.016231][T20702] Call Trace: [ 908.016242][T20702] [ 908.016253][T20702] dump_stack_lvl+0x16c/0x1f0 [ 908.016298][T20702] should_fail_ex+0x512/0x640 [ 908.016337][T20702] ? __kmalloc_noprof+0xbf/0x510 [ 908.016381][T20702] ? lsm_blob_alloc+0x68/0x90 [ 908.016417][T20702] should_failslab+0xc2/0x120 [ 908.016454][T20702] __kmalloc_noprof+0xd2/0x510 [ 908.016493][T20702] lsm_blob_alloc+0x68/0x90 [ 908.016520][T20702] security_sk_alloc+0x30/0x270 [ 908.016549][T20702] sk_prot_alloc+0xfb/0x2a0 [ 908.016579][T20702] sk_alloc+0x36/0xc20 [ 908.016614][T20702] inet_create+0x3a1/0x1040 [ 908.016644][T20702] ? inet_create+0x93/0x1040 [ 908.016682][T20702] __sock_create+0x335/0x8d0 [ 908.016720][T20702] smc_create_clcsk+0x37/0xd0 [ 908.016751][T20702] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 908.016775][T20702] inet_create+0x936/0x1040 [ 908.016804][T20702] ? inet_create+0x93/0x1040 [ 908.016838][T20702] __sock_create+0x335/0x8d0 [ 908.016875][T20702] __sys_socket+0x14d/0x260 [ 908.016907][T20702] ? __pfx___sys_socket+0x10/0x10 [ 908.016937][T20702] ? xfd_validate_state+0x61/0x180 [ 908.016973][T20702] ? __pfx_do_writev+0x10/0x10 [ 908.017009][T20702] __x64_sys_socket+0x72/0xb0 [ 908.017039][T20702] ? lockdep_hardirqs_on+0x7c/0x110 [ 908.017076][T20702] do_syscall_64+0xcd/0x4c0 [ 908.017151][T20702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.017180][T20702] RIP: 0033:0x7f8624b8eec9 [ 908.017204][T20702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.017230][T20702] RSP: 002b:00007f8625a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 908.017256][T20702] RAX: ffffffffffffffda RBX: 00007f8624de5fa0 RCX: 00007f8624b8eec9 [ 908.017275][T20702] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 908.017291][T20702] RBP: 00007f8624c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 908.017308][T20702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.017324][T20702] R13: 00007f8624de6038 R14: 00007f8624de5fa0 R15: 00007fffc1459368 [ 908.017361][T20702] [ 909.457620][T20716] random: crng reseeded on system resumption [ 909.601340][T20716] Unrecognized hibernate image header format! [ 909.668345][T20716] PM: hibernation: Image mismatch: architecture specific data [ 909.711358][T20719] Invalid ELF header magic: != ELF [ 914.053769][ T9580] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 914.053807][ T9580] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 914.077139][ T9580] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 914.169232][ T9580] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 915.468241][T20854] random: crng reseeded on system resumption [ 915.574144][T20843] bond0: option arp_interval: invalid value () [ 915.590662][T20843] bond0: option arp_interval: allowed values 0 - 2147483647 [ 916.692881][T20886] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 917.210177][T20889] futex_wake_op: syz.3.2818 tries to shift op by -9; fix this program [ 918.322594][T20938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 920.262993][T20981] nbd: must specify an index to disconnect [ 920.766930][ T31] INFO: task syz-executor:5862 blocked for more than 143 seconds. [ 920.774778][ T31] Tainted: G U syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 920.904709][ T31] Blocked by coredump. [ 920.953386][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.985493][ T31] task:syz-executor state:D stack:23224 pid:5862 tgid:5862 ppid:1 task_flags:0x40054c flags:0x00004006 [ 921.042335][T20982] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 921.065708][ T31] Call Trace: [ 921.085127][ T31] [ 921.088107][ T31] __schedule+0x1190/0x5de0 [ 921.134459][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 921.218500][ T31] ? __pfx___schedule+0x10/0x10 [ 921.261149][ T31] ? find_held_lock+0x2b/0x80 [ 921.274984][ T31] ? schedule+0x2d7/0x3a0 [ 921.287613][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 921.292954][ T31] schedule+0xe7/0x3a0 [ 921.354887][ T31] schedule_preempt_disabled+0x13/0x30 [ 921.360419][ T31] __mutex_lock+0x81b/0x1060 [ 921.401576][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 921.415157][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 921.420506][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 921.454840][ T31] ? net_generic+0xea/0x2a0 [ 921.459421][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 921.474970][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 921.480397][ T31] nfsd_umount+0x48/0xe0 [ 921.484678][ T31] deactivate_locked_super+0xbe/0x1a0 [ 921.497608][ T31] deactivate_super+0xde/0x100 [ 921.502426][ T31] cleanup_mnt+0x225/0x450 [ 921.515162][ T31] task_work_run+0x150/0x240 [ 921.519803][ T31] ? __pfx_task_work_run+0x10/0x10 [ 921.535120][ T31] do_exit+0x86f/0x2bf0 [ 921.539340][ T31] ? __pfx_do_exit+0x10/0x10 [ 921.543961][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 921.574747][ T31] ? find_held_lock+0x2b/0x80 [ 921.579497][ T31] do_group_exit+0xd3/0x2a0 [ 921.584038][ T31] get_signal+0x2673/0x26d0 [ 921.604843][ T31] ? __pfx_get_signal+0x10/0x10 [ 921.609765][ T31] arch_do_signal_or_restart+0x8f/0x790 [ 921.625171][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 921.631386][ T31] ? ksys_read+0x1ac/0x250 [ 921.646489][ T31] ? __pfx_ksys_read+0x10/0x10 [ 921.652335][ T31] exit_to_user_mode_loop+0x84/0x110 [ 921.663823][ T31] do_syscall_64+0x41c/0x4c0 [ 921.673272][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.689782][ T31] RIP: 0033:0x7f1f84b8d8dc [ 921.703498][ T31] RSP: 002b:00007fffc4cb3890 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 921.727604][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f1f84b8d8dc [ 921.740920][ T31] RDX: 0000000000000030 RSI: 00007fffc4cb3950 RDI: 00000000000000f9 [ 921.761746][ T31] RBP: 00007fffc4cb38fc R08: 0000000000000000 R09: 00007fffc4cb3607 [ 921.781105][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 921.793407][ T31] R13: 00000000000927c0 R14: 00000000000bd722 R15: 00007fffc4cb3950 [ 921.817029][ T31] [ 921.820198][ T31] INFO: task syz-executor:10206 blocked for more than 144 seconds. [ 921.917287][ T31] Tainted: G U syzkaller #0 [ 921.923831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 921.965096][ T31] task:syz-executor state:D stack:24184 pid:10206 tgid:10206 ppid:1 task_flags:0x400140 flags:0x00004004 [ 922.014802][ T31] Call Trace: [ 922.018143][ T31] [ 922.021091][ T31] __schedule+0x1190/0x5de0 [ 922.054429][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 922.059937][ T31] ? __pfx___schedule+0x10/0x10 [ 922.084577][ T31] ? find_held_lock+0x2b/0x80 [ 922.089312][ T31] ? schedule+0x2d7/0x3a0 [ 922.114634][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 922.119974][ T31] schedule+0xe7/0x3a0 [ 922.124083][ T31] schedule_preempt_disabled+0x13/0x30 [ 922.165014][ T31] __mutex_lock+0x81b/0x1060 [ 922.169655][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 922.208414][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 922.213765][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 922.242291][ T31] ? net_generic+0xea/0x2a0 [ 922.254763][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 922.260111][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 922.304519][ T31] nfsd_umount+0x48/0xe0 [ 922.344422][ T31] deactivate_locked_super+0xbe/0x1a0 [ 922.349862][ T31] deactivate_super+0xde/0x100 [ 922.384430][ T31] cleanup_mnt+0x225/0x450 [ 922.411431][ T31] task_work_run+0x150/0x240 [ 922.426313][ T31] ? __pfx_task_work_run+0x10/0x10 [ 922.431478][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 922.452932][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 922.461500][ T31] do_syscall_64+0x41c/0x4c0 [ 922.474747][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.480694][ T31] RIP: 0033:0x7fe7f01901f7 [ 922.513532][ T31] RSP: 002b:00007ffdc8534a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 922.544328][ T31] RAX: 0000000000000000 RBX: 00007fe7f0211d7d RCX: 00007fe7f01901f7 [ 922.552342][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc8534b40 [ 922.592225][ T31] RBP: 00007ffdc8534b40 R08: 0000000000000000 R09: 0000000000000000 [ 922.609783][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc8535bd0 [ 922.622701][ T31] R13: 00007fe7f0211d7d R14: 00000000000b9ecc R15: 00007ffdc8535c10 [ 922.632119][ T31] [ 922.643845][ T31] INFO: task syz-executor:16323 blocked for more than 145 seconds. [ 922.680046][ T31] Tainted: G U syzkaller #0 [ 922.708237][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 922.743929][ T31] task:syz-executor state:D stack:24152 pid:16323 tgid:16323 ppid:1 task_flags:0x400140 flags:0x00004004 [ 922.784460][ T31] Call Trace: [ 922.787791][ T31] [ 922.790736][ T31] __schedule+0x1190/0x5de0 [ 922.824269][ T31] ? __pfx___schedule+0x10/0x10 [ 922.829193][ T31] ? find_held_lock+0x2b/0x80 [ 922.833890][ T31] ? schedule+0x2d7/0x3a0 [ 922.865345][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 922.870680][ T31] schedule+0xe7/0x3a0 [ 922.884421][ T31] schedule_preempt_disabled+0x13/0x30 [ 922.889938][ T31] __mutex_lock+0x81b/0x1060 [ 922.909303][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 922.922488][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 922.931389][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 922.940574][ T31] ? net_generic+0xea/0x2a0 [ 922.962909][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 922.982597][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 923.004171][ T31] nfsd_umount+0x48/0xe0 [ 923.008476][ T31] deactivate_locked_super+0xbe/0x1a0 [ 923.029224][ T31] deactivate_super+0xde/0x100 [ 923.038875][ T31] cleanup_mnt+0x225/0x450 [ 923.043348][ T31] task_work_run+0x150/0x240 [ 923.051395][ T31] ? __pfx_task_work_run+0x10/0x10 [ 923.062061][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 923.098841][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 923.117607][ T31] do_syscall_64+0x41c/0x4c0 [ 923.122244][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.164156][ T31] RIP: 0033:0x7f12819901f7 [ 923.168614][ T31] RSP: 002b:00007fff404b2018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 923.208677][ T31] RAX: 0000000000000000 RBX: 00007f1281a11d7d RCX: 00007f12819901f7 [ 923.244157][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff404b20d0 [ 923.252182][ T31] RBP: 00007fff404b20d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.261031][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff404b3160 [ 923.274047][ T31] R13: 00007f1281a11d7d R14: 00000000000bcfde R15: 00007fff404b31a0 [ 923.282077][ T31] [ 923.296577][ T31] [ 923.296577][ T31] Showing all locks held in the system: [ 923.350637][ T31] 1 lock held by ksoftirqd/1/23: [ 923.364481][ T31] 1 lock held by khungtaskd/31: [ 923.369367][ T31] #0: ffffffff8e5c1520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 923.387089][ T31] 2 locks held by syz-executor/5862: [ 923.393422][ T31] #0: ffff8880342e40e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 923.414312][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 923.450594][ T31] 2 locks held by kworker/0:4/5931: [ 923.458546][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 923.483961][ T31] #1: ffffc9000440fd10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 923.503165][ T31] 2 locks held by kworker/u11:1/9596: [ 923.509478][ T31] #0: ffff888026c9a948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 923.534191][ T31] #1: ffffc900183d7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 923.563632][ T31] 2 locks held by syz-executor/10206: [ 923.571283][ T31] #0: ffff88807977e0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 923.593338][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 923.611787][ T31] 3 locks held by kworker/u10:10/10343: [ 923.621731][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 923.647929][ T31] #1: ffffc9001a79fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 923.682456][ T31] #2: ffffffff90388d48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 923.693195][ T31] 2 locks held by syz-executor/16323: [ 923.709413][ T31] #0: ffff88803492c0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 923.732556][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 923.752557][ T31] 2 locks held by getty/17897: [ 923.758552][ T31] #0: ffff88803530e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 923.781943][ T31] #1: ffffc90003e2b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 923.806144][ T31] 2 locks held by syz.0.2363/18006: [ 923.811377][ T31] #0: ffffffff9042c210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 923.830209][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 923.852169][ T31] 2 locks held by syz-executor/18453: [ 923.858867][ T31] #0: ffff88802275a0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 923.883026][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 923.900355][ T31] 2 locks held by syz-executor/18835: [ 923.906758][ T31] #0: ffff88808f1240e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 923.917279][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 923.927021][ T31] 2 locks held by syz.6.2571/19162: [ 923.932229][ T31] #0: ffff888049cb60e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 923.942656][ T31] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 923.952324][ T31] 4 locks held by syz-executor/20302: [ 923.958032][ T31] #0: ffff88805e2f0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 923.967934][ T31] #1: ffff88805e2f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 923.982923][ T31] #2: ffffffff905f13a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 923.993425][ T31] #3: ffff888030ede338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 924.003314][ T31] 2 locks held by syz.8.2806/20784: [ 924.009114][ T31] #0: ffffffff90388d48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 924.022555][ T31] #1: ffffffff8e5ccab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 924.042502][ T31] 3 locks held by syz.3.2830/20987: [ 924.049269][ T31] #0: ffff888063accdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 924.062519][ T31] #1: ffff888063acc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 924.073291][ T31] #2: ffffffff8e5ccab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 924.088699][ T31] [ 924.092080][ T31] ============================================= [ 924.092080][ T31] [ 924.100695][ T31] NMI backtrace for cpu 0 [ 924.100718][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 924.100747][ T31] Tainted: [U]=USER [ 924.100754][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.100766][ T31] Call Trace: [ 924.100773][ T31] [ 924.100782][ T31] dump_stack_lvl+0x116/0x1f0 [ 924.100819][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 924.100846][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 924.100936][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 924.100973][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 924.101004][ T31] watchdog+0xf0e/0x1260 [ 924.101043][ T31] ? __pfx_watchdog+0x10/0x10 [ 924.101073][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 924.101106][ T31] ? __kthread_parkme+0x19e/0x250 [ 924.101136][ T31] ? __pfx_watchdog+0x10/0x10 [ 924.101169][ T31] kthread+0x3c2/0x780 [ 924.101204][ T31] ? __pfx_kthread+0x10/0x10 [ 924.101241][ T31] ? rcu_is_watching+0x12/0xc0 [ 924.101268][ T31] ? __pfx_kthread+0x10/0x10 [ 924.101304][ T31] ret_from_fork+0x56d/0x730 [ 924.101339][ T31] ? __pfx_kthread+0x10/0x10 [ 924.101373][ T31] ret_from_fork_asm+0x1a/0x30 [ 924.101413][ T31] [ 924.101422][ T31] Sending NMI from CPU 0 to CPUs 1: [ 924.236981][ C1] NMI backtrace for cpu 1 [ 924.237002][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U syzkaller #0 PREEMPT(full) [ 924.237034][ C1] Tainted: [U]=USER [ 924.237042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.237055][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 924.237091][ C1] Code: fd 63 02 e9 13 0a 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 35 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 924.237137][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 924.237155][ C1] RAX: 00000000007b476d RBX: 0000000000000001 RCX: ffffffff8b91db29 [ 924.237170][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f872 RDI: ffffffff8c163780 [ 924.237184][ C1] RBP: ffffed1003c55b40 R08: 0000000000000001 R09: ffffed10170a6655 [ 924.237199][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 924.237212][ C1] R13: ffff88801e2ada00 R14: ffffffff90abad90 R15: 0000000000000000 [ 924.237226][ C1] FS: 0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 924.237247][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 924.237262][ C1] CR2: 000055d6af1ea560 CR3: 000000007c14a000 CR4: 00000000003526f0 [ 924.237276][ C1] Call Trace: [ 924.237284][ C1] [ 924.237292][ C1] default_idle+0x13/0x20 [ 924.237312][ C1] default_idle_call+0x6d/0xb0 [ 924.237333][ C1] do_idle+0x391/0x510 [ 924.237357][ C1] ? __pfx_do_idle+0x10/0x10 [ 924.237377][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 924.237412][ C1] cpu_startup_entry+0x4f/0x60 [ 924.237434][ C1] start_secondary+0x21d/0x2b0 [ 924.237463][ C1] ? __pfx_start_secondary+0x10/0x10 [ 924.237495][ C1] common_startup_64+0x13e/0x148 [ 924.237526][ C1] [ 924.241103][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 924.241133][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 924.241167][ T31] Tainted: [U]=USER [ 924.241176][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.241191][ T31] Call Trace: [ 924.241201][ T31] [ 924.241212][ T31] dump_stack_lvl+0x3d/0x1f0 [ 924.241254][ T31] vpanic+0x6e8/0x7a0 [ 924.241290][ T31] ? __pfx_vpanic+0x10/0x10 [ 924.241325][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 924.241367][ T31] panic+0xca/0xd0 [ 924.241400][ T31] ? __pfx_panic+0x10/0x10 [ 924.241434][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 924.241470][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 924.241502][ T31] ? watchdog+0xd78/0x1260 [ 924.241536][ T31] ? watchdog+0xd6b/0x1260 [ 924.241571][ T31] watchdog+0xd89/0x1260 [ 924.241611][ T31] ? __pfx_watchdog+0x10/0x10 [ 924.241643][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 924.241692][ T31] ? __kthread_parkme+0x19e/0x250 [ 924.241724][ T31] ? __pfx_watchdog+0x10/0x10 [ 924.241758][ T31] kthread+0x3c2/0x780 [ 924.241793][ T31] ? __pfx_kthread+0x10/0x10 [ 924.241830][ T31] ? rcu_is_watching+0x12/0xc0 [ 924.241856][ T31] ? __pfx_kthread+0x10/0x10 [ 924.241893][ T31] ret_from_fork+0x56d/0x730 [ 924.241928][ T31] ? __pfx_kthread+0x10/0x10 [ 924.241963][ T31] ret_from_fork_asm+0x1a/0x30 [ 924.242007][ T31] [ 924.559194][ T31] Kernel Offset: disabled [ 924.563514][ T31] Rebooting in 86400 seconds..