last executing test programs: 2m30.032874495s ago: executing program 0 (id=2183): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/rpc/auth.unix.gid/flush\x00', 0x1a9601, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) unshare$auto(0x40000080) mseal$auto(0x1ffff000, 0xfffffffffffefff3, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="ebb09ce18bc97f8601b400fb43de00276382e1f8f5b93b770a9e6028910e2f6f2db4fd48eaeb1a0ccbc8660eb9a727c1460fe56cb25f94ce5bfb03a1e98f46a7f736df11ac5edbbb0037e0123df5c82a5eeb8d2cf44f50905c1de18090565e1cb0fc1365be83aa0d8421adb89d56236c0d5a76fb92db99e2ecc955846527308298bd80d1b1b7d4954d41b6b9", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf250400000004000180040002800500090008000000"], 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) 2m28.610509004s ago: executing program 0 (id=2188): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80502, 0x0) mmap$auto(0x4, 0x0, 0x9, 0x15, 0xffffffffffffffff, 0xce9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x4, 0x2, 0x10, 0x0) mmap$auto(0x0, 0xaa, 0xdf, 0x15, 0x40000000000a5, 0x7ffc) madvise$auto(0x100000000002, 0x2000040080000004, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) renameat$auto(0x6, 0x0, 0x5, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x6}) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.15/usb40/40-0:1.0/bAlternateSetting\x00', 0x487c80, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x109100, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder0\x00', 0x20400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m27.51215647s ago: executing program 0 (id=2192): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x11, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r2, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x801, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2m25.250092241s ago: executing program 2 (id=2203): mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) getsockopt$auto_SO_RCVBUF(r1, 0x1, 0x8, &(0x7f0000000040)='/dev/audio\x00', &(0x7f0000000080)=0x4) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) getsockopt$auto_SO_INCOMING_NAPI_ID(0xffffffffffffffff, 0x9e, 0x38, &(0x7f00000000c0)='\x00', 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0x628, &(0x7f0000000000)={@_si_pad}, 0x8, &(0x7f00000001c0)={{0x1, 0xffffffffffff0000}, {0xfe8, 0x2}, 0x2, 0x9, 0xffffffffffff8915, 0xffffffffffffff89, 0x1, 0x1, 0x7fffffffffffffff, 0x9, 0xfffffffffffffffb, 0xa902, 0x3, 0xb73, 0x7, 0x9}) wait4$auto(r3, 0x0, 0x1fe, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/vmwgfx/new_id\x00', 0xa001, 0x0) r6 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r6, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0xfdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r0, &(0x7f00000000c0)=""/91, 0x5b) 2m24.856023964s ago: executing program 2 (id=2205): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) (async) socket(0x2, 0x1, 0x106) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 32) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfffffffc, &(0x7f0000000180)) (rerun: 32) socket(0x2, 0x80001, 0x40) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/190, 0xbe) (async) unshare$auto(0x40000080) (async) pwrite64$auto(0xc8, 0x0, 0x5e, 0x39) (async, rerun: 64) r2 = eventfd2$auto(0x6, 0x4) (async, rerun: 64) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) getrandom$auto(0x0, 0x2, 0x3) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.14/usb38/38-0:1.0/supports_autosuspend\x00', 0xc0003, 0x0) (async, rerun: 32) lseek$auto(0x3, 0x8, 0xb) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) (async) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x8050) (async) msync$auto(0x110c230000, 0x200001, 0x6) (async, rerun: 32) mmap$auto(0x8008d1, 0x100000001, 0xdf, 0x7fff, r2, 0x8000) (rerun: 32) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) (async) mmap$auto(0xed, 0x2020009, 0x4000000000000, 0xeb1, 0xfffffffffffffffa, 0x6) (async) socket(0x1a, 0x1, 0x8) (async, rerun: 32) socket(0xa, 0x5, 0x0) (async, rerun: 32) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000007ff, 0x36f) 2m24.641234715s ago: executing program 2 (id=2207): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x48b, 0x400, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x47, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r4, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r0, 0x0, 0x7, 0x4008) 2m24.515883461s ago: executing program 2 (id=2209): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x2420c0, 0x0) r1 = io_uring_setup$auto(0x86, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) socket(0x2, 0x3, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='0[.[\x00', 0xcd04) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) ioctl$auto(r2, 0xc0205647, r1) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r5) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') io_uring_register$auto(0x2, 0x10, 0x0, 0x7f) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) sysinfo$auto(&(0x7f0000000100)={0x6, [0x404, 0x800c, 0x104], 0x200, 0xd5, 0x0, 0x2, 0x6, 0x1, 0x7f, 0x0, 0x100000000, 0xee, 0x6}) socket(0x28, 0x5, 0x0) 2m23.560965762s ago: executing program 2 (id=2215): bpf$auto(0x9, 0x0, 0x9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex, r0, 0x9c, 0x0, 0x1, @relative_fd=r0, 0x80}, 0x96) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1b, 0x2000000000000) fsopen$auto(0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x240000, 0xd, 0x1, 0x948b, 0x7, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x300000000000000, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) madvise$auto(0x6, 0x401, 0x729) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(0x200000003, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000024, 0x8, 0x4}, 0x0, 0xf4240, 0x0) getcwd$auto(&(0x7f0000000000)='\x00', 0x3b000000000000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x2fe, @remote}, 0x8051) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x7, 0x0) socket(0x23, 0x80805, 0x0) 2m22.610943737s ago: executing program 2 (id=2220): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0xffffffff) (async) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0xffffffff) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) write$auto(0x3, 0x0, 0xffd8) 2m18.380251438s ago: executing program 1 (id=2243): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000003240), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async) io_uring_setup$auto(0x87, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x487, 0x0, 0x0) (async) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x10cc0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) (async) statmount$auto(0x0, 0x0, 0x1fe, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x8, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0xfffffffc, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x8000000000000000, 0x0, 0x10, 0x0, 0x0, 0x1]}, 0x1fe, 0x83) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="ef0d2351a6855eb40975676177ad31430000006b0d0766cf3d0f37400b11affe696f1515084155a3b427c8c74d9b786b35eecc5adc7055447c8fd79f7af6f807ef5cae3975b4009327009bc1196fbb164f21e01928d9afa2a949a6292d0d6a591c0ac5e70d97188f60498fadf519e457ec57", @ANYBLOB="11e464", @ANYRES32=r0, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) r3 = socket(0x2, 0x1, 0x106) setsockopt$auto(r3, 0x1, 0x21, 0x0, 0x9) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)='16\f', 0x3) (async) socket(0x2, 0x1, 0x0) 2m17.38070248s ago: executing program 1 (id=2249): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) (async) unshare$auto(0x40000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET2(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="09032bbd7000fedbdf250b0000000800010057"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r4, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/macsec0\x00', 0x10000, 0x0) r5 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0xc42, 0x0) flistxattr$auto(r5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r7, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) (async) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) (async) madvise$auto(0x0, 0x8, 0x6) (async) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r6, &(0x7f0000001400)="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", 0xfffff596, 0x0, 0x5, &(0x7f0000000240)="e98d4fdb7ddab4e567ef3519ef0a3819d29b44a27fdaf919278950455925e516a151d3d40301ba963cd5cb744a39f2f9029d5ad58d1736a6344ec5ba7bd8c2bafa4d1baeb19336ed4994be3649d8df129bbdfd74a14bba07cfdcd92ac00916b1b5d240000946cd793aba9ea2ce11bc53a7e4dbb10de9d4ca0b8879d480dfc68f9ec73eb55f2368b108a9a4ad4d29", &(0x7f00000000c0)=0x3}) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r6, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x8000, 0xffffffffffffffff, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) lseek$auto(r1, 0x2, 0x1) madvise$auto(0x0, 0x100000001, 0x15) (async) prctl$auto_PR_SET_SECCOMP(0x16, 0x3c, 0xa1f, 0x3, 0x2bd) 2m17.25165793s ago: executing program 1 (id=2250): openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/personality\x00', 0x6084c1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r0, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x5, 0x6, 0x80000001, 0x14, r0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd0c, 0xf, 0xc, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x100000000, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) r2 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mpls/conf/ip6_vti0/input\x00', 0x1181, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/65, 0x41) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES64=0x0, @ANYBLOB="08009e"], 0x24}}, 0x4000000) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x4000855}, 0x20040880) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 2m16.3341928s ago: executing program 1 (id=2256): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x800, 0x100000000) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async, rerun: 32) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) (async, rerun: 64) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) (async, rerun: 64) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x2, 0x3, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x400005, 0x25, 0x4, @raw=0x6, @reserved="630d530e55f2940f87c5580dd6d03d326858cba1428368e17dd0ceca88463efa8f23d5476ab0aaa17e657c5969b5b494025f33865acc90140000000000000053f3c18172a2579ad612531a4dccc48e8770223069caf4694e9f7759a0d16ffa4780bc3f828dd4a8cc877abd7dc6ae56ff3f0cce0000000400", "7a9fc199a16a2311eacf2fc7ae1d8778dc610400000001000f00000000b6debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cb7c0eb32791702b8d7c2d"}) (async, rerun: 32) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x301, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x1d, 0x2, 0x6) setresuid$auto(0x0, 0x0, 0xffffffffffffffff) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) unshare$auto(0x40000080) (async) select$auto(0x6, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x4, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5a, 0x80000001, 0x5, 0x7, 0x93, 0x400000001, 0x35]}, 0x0) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) (rerun: 32) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) (async, rerun: 32) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x2}) (async, rerun: 32) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000200)={0x9, &(0x7f0000000000)={0xc, 0xf1, 0xb0, @raw=0x43}}) (async) socket(0x10, 0x2, 0x0) 2m15.707134081s ago: executing program 1 (id=2265): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a2bbd7000fbdbdf25010000000e000400", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x40d4) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x80002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x6, 0x9}, 0x80}, 0x803, 0x0) 2m15.596978312s ago: executing program 1 (id=2258): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/gem_names\x00', 0x101402, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r0, &(0x7f0000000240)=""/194, 0xc2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x4, 0x7, 0x67, 0x400, 0x3, 0x0, 0x80f0c8, 0x0, "2fc1d5cbcb9f6b5e511f0dd8d6068f65", r2, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x4a) clone$auto(0x10fffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xe45e) r4 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000180)=0x6) execveat$auto(r4, &(0x7f0000000300)='.\x00', &(0x7f0000000480)=&(0x7f0000000440)='+^\x00', &(0x7f0000000500)=&(0x7f00000004c0)='-&/c{\x00', 0x0) mmap$auto(0x9, 0x20009, 0x4000000000e6, 0x33, 0x401, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r3, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000b726cce17174061ad4168f1f379e5e3d6244341a13b33fc5b195e2d2e74527cb1278671c113b88016dda4042f1eb7d92cc9cb6208b3a3500309d3b9a0ec6d304", @ANYBLOB=':'], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) read$auto(0x3, 0x0, 0xf34) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x8000055}, 0x3fe, 0x2, 0x0) 2m12.503974088s ago: executing program 32 (id=2192): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x11, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r2, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x801, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2m6.801366073s ago: executing program 33 (id=2220): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0xffffffff) (async) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0xffffffff) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) write$auto(0x3, 0x0, 0xffd8) 2m0.358548448s ago: executing program 34 (id=2258): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/gem_names\x00', 0x101402, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r0, &(0x7f0000000240)=""/194, 0xc2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x4, 0x7, 0x67, 0x400, 0x3, 0x0, 0x80f0c8, 0x0, "2fc1d5cbcb9f6b5e511f0dd8d6068f65", r2, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x4a) clone$auto(0x10fffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xe45e) r4 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000180)=0x6) execveat$auto(r4, &(0x7f0000000300)='.\x00', &(0x7f0000000480)=&(0x7f0000000440)='+^\x00', &(0x7f0000000500)=&(0x7f00000004c0)='-&/c{\x00', 0x0) mmap$auto(0x9, 0x20009, 0x4000000000e6, 0x33, 0x401, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r3, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000b726cce17174061ad4168f1f379e5e3d6244341a13b33fc5b195e2d2e74527cb1278671c113b88016dda4042f1eb7d92cc9cb6208b3a3500309d3b9a0ec6d304", @ANYBLOB=':'], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) read$auto(0x3, 0x0, 0xf34) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x8000055}, 0x3fe, 0x2, 0x0) 1m15.168773591s ago: executing program 6 (id=2422): socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r1 = io_uring_setup$auto(0x2008, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/manufacturer\x00', 0xa2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001540)=""/104, 0x68) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statmount$auto(&(0x7f0000000000)={0x7e, @raw=0x400, 0x80000024, 0x7fff, 0x4}, 0x0, 0x7ffffffff001, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/block/nbd12/queue/write_cache\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$auto_NFC_CMD_VENDOR(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x2004c844) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)) epoll_create$auto(0x44) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) 1m11.593028563s ago: executing program 6 (id=2430): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa841, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)=@link_detach={r0}, 0x7e3) (async) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)=@link_detach={r0}, 0x7e3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r2, 0x0, 0x3) (async) writev$auto(r2, 0x0, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffb8}, 0x1f, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xe3a7) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x103441, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x103441, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) 1m5.442825099s ago: executing program 6 (id=2439): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x48b, 0x400, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x47, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r5, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) 1m5.084635301s ago: executing program 6 (id=2443): write$auto(0xffffffffffffffff, 0x0, 0xaf0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000380)='./file0\x00') fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x6a) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, &(0x7f00000003c0)={[{"41ac7a2c9c03bbea1b9bc5af2371b761", 0xfffffff8, {0x1, 0x0, 0x0, 0x1}, {0x8000, 0x9, 0xf7}}, {"4be7c8c45265bf03db97f91e9b68710c", 0x1, {0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x5}}, {"58080ca78179a10bf038e648207afcec", 0x5e, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x92dd, 0x1, 0x4}}, {"fe501a9c74d51595e85d19cbebb5b253", 0x5, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x400, 0x2}}, {"f294e47bfbb9be061da59906e540cef4", 0x2, {0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x88e6, 0x102, 0xa9}}, {"6ebc301bb2cb50e5577e65b750978828", 0x4000079c, {0x0, 0x1, 0x1, 0x1, 0x1}, {0xb5, 0x3}}, {"9ffb6735ad4e54dbbcaac1fa47bfd810", 0xfff, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x2, 0xfff9, 0x8}}, {"c65743ffdf18cca8ec28d194ca7153ce", 0x80000001, {0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x56ae}}, {"2e0620e18badb00192969b6edf4afb5f", 0x5, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x800, 0x3, 0x62f8}}, {"cce8b976e17656af15027d598ffc0b6b", 0x3, {0x0, 0x1}, {0x0, 0x0, 0xd6d8}}, {"0ace1798e2b1d8104e3f2044d3a38494", 0x400000, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1c09, 0x0, 0x3}}, {"ed5773d5d50c55e0a5c34d914ed270fd", 0x1, {0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xd, 0x9}}, {"29600df0ad63e08ca650c60b13dc4277", 0x1e8ecf6e, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x336}}, {"5edf301ef6bc0b881dad5f6c1933bc27", 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd679, 0xfff7, 0x1c}}, {"dcbdabdf9c8ef848be4992fe3af38b71", 0xd060, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x2}}, {"8e17df0461a544d461082dc093b551b7", 0xd3f7, {0x0, 0x0, 0x1}, {0xfffb, 0x3, 0x7}}, {"b700ff6a1d72bfa5ee4ccf556ba4da52", 0x3, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1fb, 0xa1}}, {"813b0a656f76f748329b7eb5792d686a", 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x7}}, {"05cc9723d17dcd8b9e45182935e09ecf", 0x8, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0xcf}}, {"d359d8a9959abc34db7484e500", 0x10, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x8}}, {"aaee063b6a38948bc5d79f01682954db", 0xffff0359, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x8}}, {"951bb7dcc772bc0ef0ffd9c22930bafe", 0x3, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x7}}, {"8a62bacb6ba1803e20d1040551bc7ccc", 0x4, {0x1, 0x0, 0x1}, {0x4, 0x7, 0x8}}, {"ff45cd4447424c41c48ca63ab7e851e0", 0x73b, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x6}}, {"c55e0da5e379973f600927158222aba0", 0x634, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xca7, 0xfffe, 0x6}}, {"4211db8b4a678a000000009100", 0x0, {0x1}, {0xf, 0x1, 0x8b8}}, {"91060500000000000000b72a76cb4f88", 0x40000003, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xb, 0x8, 0x1ff}}, {"f2654e62c46c7ec3336d71c0b9d8e9c2", 0x400, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xfa17, 0x8, 0x9}}, {"c852a485f25cc9c71c8cb127a6ba8776", 0x9, {0x0, 0x1}, {0x3, 0xf7, 0x8}}, {"60d20d0000238e0300000000000000a0", 0xf, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xfffb, 0xf, 0x108}}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8, 0xffffffffffffffff) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01bd7000fbdbdf25030000000400080005000900080000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x800) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, r0, 0x9) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 1m3.807224623s ago: executing program 6 (id=2447): mmap$auto(0x6, 0x2000d, 0x0, 0x10, 0x404, 0x10008003) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0xd8ce, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0xffff, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) setsockopt$auto_SO_ERROR(r3, 0x81, 0x4, &(0x7f00000002c0)='\x00\x00\x00\x02\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) close_range$auto(0x2, 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2f39c0, 0x0) mmap$auto(0x0, 0x98a6, 0xe2, 0x9b76, 0x2, 0xb) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/amidi2\x00', 0x208400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) r5 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x60041, 0x0) write$auto_drm_connector_fops_drm_debugfs(r5, &(0x7f0000001240)="b3827964b69f25ba34ba41a7", 0xc) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) 1m3.585604582s ago: executing program 6 (id=2448): socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x80600, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fdatasync$auto(r3) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) ioctl$auto_TUNSETVNETHDRSZ2(r0, 0x400454d8, &(0x7f0000000000)=0x8) 48.773405232s ago: executing program 5 (id=2500): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio4\x00', 0x169c00, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x2, 0x73) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r0, 0xc0303e03, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r1) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1100af"], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) msgctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000180)={{0x1ff, 0xffffffffffffffff, 0x0, 0x9e, 0xa5, 0x11f1feb6, 0x1}, &(0x7f0000000100)=0xe, &(0x7f0000000140)=0x2, 0x0, 0x7, 0x8000000000, 0x357, 0xfffffffffffffffb, 0x2, 0x3, 0x7, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_LINK_SET(r3, &(0x7f0000001780)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002900)=ANY=[], 0x157c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) 48.575718967s ago: executing program 35 (id=2448): socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x80600, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fdatasync$auto(r3) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) ioctl$auto_TUNSETVNETHDRSZ2(r0, 0x400454d8, &(0x7f0000000000)=0x8) 47.421776581s ago: executing program 5 (id=2503): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, 0x0, 0x420043, 0x0) pwrite64$auto(r3, 0x0, 0x4, 0x3) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x5, 0x0) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480), 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x30, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x40}, @NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x180b008}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000425bd700011dbdf2515000000740019003d68f56930dfec1e0c9ee2d4ec5cdec5a6617f08331f1e41250fe48416dd92cea0221dc8da3d9efe89fd9d72adf19e0e892f0903c80088663c1275a54ef729132cb8005fda646285b305ef19246d6980ac71aad2e89b11409d9c12c63d7f8f32c7aef96670418e95dd66e8912e6a6af108000e0000000000"], 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x41001) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_TIPC_NL_SOCK_GET(r2, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250600000084000480340083802e0067002f7379732f6b65726e656c2f73656375726974792f746f6d6f796f2f646f6d61696e5f706f6c696379000000c282cd17766abdf7f844f5f91155df88468d556fd6d06249e3ce60605442d7f7e6ad035d64e1d2f2aa8e7ff8b1900d15c1c7f23d7b982e041d66cab3327802b5937038d559258eb60400c880530304801400db00fe8800000000000000000000000001010f01b6800400fb8008004400", @ANYRES32, @ANYBLOB="b756e099986cf1e43e89db1f38a4ead08cf468c8157885376f43f9271148fa8a401328c8f2c7c09541fe602cc44c7f3b83fad2106381af68c1ed21f6eed1014e78160d38ded0764d9d033fc97f466626d1b29270b31e125f070f5d573856cbf2553cda4c48f72b1335bffe12d71e3f1b80f7d28da14079c4fd403225c102edea50a71493f21d4df6dd52805ebfb561531e405a0dc406f450d05374f9520ebe6bac999ca415e15bffba8d50527e15cd4a92b6f6fb306875bfd018ac545fc2d70d9d1062a5164ed8c6a45001af4fae99de7b60ccdd326110e884d281d32fca951adc0016fb6cfd8adfb50800aa00", @ANYRES32=0x0, @ANYBLOB="0800f700", @ANYRES32=r0, @ANYBLOB="732926f67b1000b1a16a8ff505de87bf0cc471f081ea8c39fcc7e6dd2de68821cad7d047a5f1a7f7ca4f427c2d8ea86dd583300d0dc9761ee8cadeb74a070261a5aaf2839e28e9552a6421b5c7f99baaf20a38d3284e22c32d7d8e26516c658c96c1f2b32b0fa0b9e2cc99dd54cbffa92e9345e0e7f48121592ba761e55f3423758000cc803e003c00f424acdac01d0f98bc3f7781fa222d2b419f9988bc91aecdeb47ede55bb81b36f4368e393e967bbfd20785187c83e180d7699747edcc739b11b4000008000f00ac1414300400328014004a00fe8800000000000000000000000000010800b800", @ANYRES32, @ANYBLOB="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"], 0x7a4}, 0x1, 0x0, 0x0, 0x2404c000}, 0xc818) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) inotify_init1$auto(0x4) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0x4004af07, &(0x7f00000001c0)=r4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) r6 = open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x17, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa155"}, 0x7d) setsockopt$auto(r6, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r8, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/first_error_time\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r10, &(0x7f0000001280)=""/4124, 0x101c) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 45.53015636s ago: executing program 5 (id=2505): r0 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/mounts\x00', 0x80, 0x0) readv$auto(r0, &(0x7f0000001940)={&(0x7f0000001900), 0x80000001}, 0xed) (async) ioctl$auto(0x3, 0x9, 0x38) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) (async) process_vm_writev$auto(0x1, 0x0, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x15, 0x5, 0x0) r3 = getsockopt$auto(r2, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) linkat$auto(r3, &(0x7f0000000180)='./file0\x00', r3, 0x0, 0xe28a) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x4ea06, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x330, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x5}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_TX_RATES={0x2f2, 0x5a, 0x0, 0x1, [@nested={0x68, 0x4d, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @fd}, @generic="25f46400e9801b908e0ebfcf0840ffab99e400ff1dccccbc3f1faaa2d14ced3bd89df02e5750da66020ff70ae6701b75b37a0dd16bea520d3875b786f9cfbf9ad5ccf1a895eaa28d7c3878d0ae216b5553f99d18", @nested={0x4, 0x112}, @nested={0x4, 0x3a}]}, @nested={0x237, 0xc5, 0x0, 0x1, [@generic="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", @typed={0x6, 0xce, 0x0, 0x0, @str='#\x00'}, @typed={0xc, 0x6b, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x10d}, @generic="a054c3842a3b9f859df3864916ad64b8f6e998cec9ce1903a7fda98543c54acacc4cc5123d45e6d1014f69335796b4a5ae9efc14fa56a0748d478edb343a1315182d41876e836690e18428a2314a03971753d2d5e57f131a157a9ecbca9312ff4f26cb821f2f06e3662b075f2321eb854640773061576a135328fc7d7ba25b7590f46204db885c3543583d626b", @typed={0x8, 0x56, 0x0, 0x0, @u32}]}, @typed={0x8, 0xa1, 0x0, 0x0, @u32=0x7}, @generic="60600624bf038e63d4000800001c546852eaf1791895cae654f75cb5ab17596de8f9efa21439b1dae0a72cf794a3f0529fb8053980268237b18e4d7ddeea318f0c9a79a9eb60"]}, @NL80211_ATTR_FILS_KEK={0x5, 0xf2, "d3"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}]}, 0x330}, 0x1, 0x0, 0x0, 0x4008084}, 0x4080) (async) socket(0x2b, 0x1, 0x1) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) fanotify_init$auto(0xc00, 0x2000000000002) setfsuid$auto(0xee00) (async) setfsuid$auto(0xee01) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) poll$auto(&(0x7f0000000180)={r5, 0xa0b, 0x9816}, 0x7f, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async) capset$auto(0x0, 0x0) 44.587760822s ago: executing program 3 (id=2508): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/nr10/threaded\x00', 0x2000, 0x0) unshare$auto(0x40000084) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) mmap$auto(0x0, 0x200006, 0x3, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x101) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x1fe, 0x8, 0x0) mbind$auto(0x989, 0xffffffffffffffff, 0x14, &(0x7f0000000180)=0x7fffffffffffffff, 0x800, 0x2) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r1, 0x0, 0x700) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0xffffffffffffffff, 0x890b, 0x1) 44.415758854s ago: executing program 3 (id=2510): mmap$auto(0x0, 0x202000d, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70e6fcdbdf2501000000100007800c00018008000180000000000c00020006000000000000000c0004000100000000000000"], 0x3c}}, 0x8090) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x7, 0x7fd, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x80000001}]}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x52d5e0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0xffdfffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0x3f00) close_range$auto(0x2, 0xffffffffffffffff, 0xcf7) 43.928216479s ago: executing program 3 (id=2512): madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r0, 0x0, 0x400) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f00000003c0)={0xed2, 0x3, 0x6, 0x5, 0xa8, 0x0}) get_robust_list$auto(r1, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)={&(0x7f0000000080)}}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(r3, &(0x7f0000000380)=',{5,\x00', 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80008000) prctl$auto(0x2, 0x1000001, r1, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) prctl$auto(0x7, 0x1, r1, 0xe, 0x8) write$auto(r3, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc626) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c07, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) 43.476796735s ago: executing program 5 (id=2513): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media11\x00', 0x1, 0x0) mmap$auto(0x1, 0x7, 0xdf, 0xeb1, r2, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) r4 = socket(0x18, 0x800, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) madvise$auto(0x0, 0x1010001, 0x100000003) write$auto(0x3, 0x0, 0xfdef) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, 0x0, 0x40482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000140)={0x0, 0xdc7}, 0x4) ioctl$auto_BTRFS_IOC_DEVICES_READY(r1, 0x90009427, &(0x7f0000000040)={@inferred=r0, "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"}) mmap$auto(0x0, 0x8011000, 0xffb, 0x8000000008011, 0x3, 0x8000) 43.116484232s ago: executing program 5 (id=2514): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cb5b2cbd7000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x4, 0x0) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xbda}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d4}, 0x20000000) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) r5 = socket(0x10, 0x2, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000400)=r0) read$auto_sc_seq_fops_netdebug(r6, &(0x7f0000000440)=""/118, 0x76) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000300)=ANY=[@ANYBLOB="bbab7b4168b0531c30280768d978c4922749b99dff5410a7d45723d1f401fb777f871f49a6adb9afa671c75b543123037c05b9ab84358449896f888556add2f0ce22e50d300ff92173da06e247f9973f8c47cce6f75b13b66b24ed3aaf54c9c45cf9fa4e44befb2523878d8c4f89028af6a3c8d2e7ba2a4ef2568e", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250500000005000700050000006d00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000802) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 42.426751521s ago: executing program 3 (id=2517): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_dummy.0/sound/card0/audio/uevent\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r0 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000040)=0x2) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000140), r0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_on\x00', 0x40000, 0x0) ioctl$auto(r3, 0x1000, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x40, 0x0, [{0x10, 0xe3, 0xb8}]}) 42.202769502s ago: executing program 5 (id=2518): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/nr10/threaded\x00', 0x2000, 0x0) unshare$auto(0x40000084) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) mmap$auto(0x0, 0x200006, 0x3, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x101) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x1fe, 0x8, 0x0) mbind$auto(0x989, 0xffffffffffffffff, 0x14, &(0x7f0000000180)=0x7fffffffffffffff, 0x800, 0x2) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r1, 0x0, 0x700) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0xffffffffffffffff, 0x890b, 0x1) 41.372544275s ago: executing program 3 (id=2523): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000100)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x482b) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r3 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) listen$auto(0xffffffffffffffff, 0x1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r4, 0x0, 0x3ef, 0x9) sendfile$auto(r1, r1, 0x0, 0x7fffe000) pwrite64$auto(0xc8, &(0x7f0000000380)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\t\x00\x00\x00X\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\xa2\x01\x88\v\xae\xa9\xe98W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*6\x9b\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbb\x9e\x93H\xdan\x1d\x00\xeb]B\xa0\x99\xb0R\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1uO\x8fL\"\xact\xee\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4_\x85\xf0k\xe0\"*^o\x83-\xc2\xcc\xa6\x12\x96\xe7\xef3\xcay\xfcl:Du9U\xf6\x1f&F\xa8\xe0\x0f\xd0\x04\xa2*\x17\x81\x85\xf3p7Oq\xd6\x97-\xb7CFKU\xf0\x7f1Qg\xe12\x84\xbfl \x06aq \x04\xd3\x15\x0f\nn\xf3\xf5\xe3\x1a\xad;\x8d\x80\x86\xec6Xm>\xd8,YhS\xf3\xac\xd1)\xa3\x9b\xd4\xd2\x86?\fH\xfaa()\xd1A\x9b\xabZ54i\x95\xac\x1a\xf2\xff\x19\xc7.\xfe\x06i\xcfAy\t)\xf3m\x93_\xe0I\x99\x89\xcb\xb7.\xa2\xd8\x97.\xbfH\x9bP\xaf{\x1c_\xfa6\f\a\x84\xc6\xa0\xe7\x00\x00\x00', 0xfded, 0x6) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) write$auto(r5, 0x0, 0xff4b) prctl$auto_PR_SET_MM_ENV_END(0x1, 0xb, 0x0, 0xff, 0x7ffe) ioctl$auto_FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000080)="0e9611e1d3b886f83b6aca1274271305ed3ab83b38a9cf28") setsockopt$auto_SO_PASSSEC(r0, 0x4, 0x22, &(0x7f0000000000)='/|ys/devices/nutde\a\x00\x00\x00\xffMy\x00l_po\x04\x00\x00', 0x1) 40.228378047s ago: executing program 3 (id=2525): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r0) exit$auto(0x2) r1 = open(&(0x7f0000000100)='.\x00', 0x100, 0x0) getdents64$auto(r1, 0x0, 0x400) mmap$auto(0x40000000000, 0x2020009, 0x4, 0x7fffffff, 0xfffffffffffffffa, 0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r4) r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x24e, 0x2, 0x5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@generic="bf8db95702"]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto(r3, 0x540a, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) 26.949991402s ago: executing program 36 (id=2518): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/nr10/threaded\x00', 0x2000, 0x0) unshare$auto(0x40000084) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) mmap$auto(0x0, 0x200006, 0x3, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x101) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x1fe, 0x8, 0x0) mbind$auto(0x989, 0xffffffffffffffff, 0x14, &(0x7f0000000180)=0x7fffffffffffffff, 0x800, 0x2) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r1, 0x0, 0x700) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0xffffffffffffffff, 0x890b, 0x1) 25.86169496s ago: executing program 4 (id=2541): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) fcntl$auto_F_SETFL(r0, 0x4, 0x80000000) 25.80429288s ago: executing program 4 (id=2542): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fadvise64$auto(r1, 0x7fff, 0x6, 0x1) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, 0x0, 0x6c) (async) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3c0900, 0x50) (async) mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.7/usb8/power/runtime_active_time\x00', 0x480, 0x0) (async) pipe$auto(0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x4) (async) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 25.708120274s ago: executing program 4 (id=2543): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3a8453d3, 0x80, 0x8, 0x2, 0x1, 0x200, 0x8, 0x401, 0x2, 0x2, 0x2, 0xc28}, 0x0) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x12}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/usbip-vudc.0/udc/usbip-vudc.0/is_a_peripheral\x00', 0x100580, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000", @ANYRES8=r4, @ANYBLOB="0a07000000000000000000800f00051002000dc0b5fdea000180080003000700000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100be601483455a782583847dc439605383610f5abaf07e7f12fed7e0e714eaa48452e0d8979e700e50cca83dbd91d1d86b56fd179aa0b217c639c114ca8e0d00d4082acd11e824c2dbd21e3b3820015bfbb2b0dc53a132dbce0e473b5e1b1b6088c8d546def5586de57375862308e7eb76cbcdae259a3b52112d09f1fbe92d5f80efb264db00c5fcbe09cd5daac3", @ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES16=r3, @ANYRES64=r5, @ANYRES16, @ANYRES16=r5], 0xb4}, 0x1, 0x0, 0x0, 0x5}, 0x20000054) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fsopen$auto(&(0x7f0000000280)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) r6 = open(&(0x7f0000000000)='./cgroup\x00', 0x50000, 0x169) fchdir$auto(r6) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@task_fd_query={0x9, r5, 0x7ff, 0x8, 0x800000000, 0x9, 0x5f, 0x0, 0x3}, 0x6f3) r7 = socket(0x5, 0x80000, 0x88) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r7, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2, 0xdf, 0x19, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xb8, 0x13ff4, 0x7, 0x4000000b6) 24.857071188s ago: executing program 37 (id=2525): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r0) exit$auto(0x2) r1 = open(&(0x7f0000000100)='.\x00', 0x100, 0x0) getdents64$auto(r1, 0x0, 0x400) mmap$auto(0x40000000000, 0x2020009, 0x4, 0x7fffffff, 0xfffffffffffffffa, 0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r4) r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x24e, 0x2, 0x5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@generic="bf8db95702"]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto(r3, 0x540a, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) 22.918299164s ago: executing program 4 (id=2546): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCMBIS2(r1, 0x5416, &(0x7f0000001a40)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x448c5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) getsockopt$auto_SO_PEERPIDFD(r0, 0x713b, 0x4d, &(0x7f0000000000)=']\x00', &(0x7f0000000280)=0x9) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301719fbb1a96ce0ea3dc73d6c1a6bbf5f25eab"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x6, 0x6) socket(0xf, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c014}, 0x800) read$auto(0xffffffffffffffff, 0x0, 0x1ff) unshare$auto(0x40000080) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x8, 0xfffffffeffffffff, 0x9b72, r3, 0x7ffc) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x6) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, 0x0, 0x1, 0x0) 21.628722924s ago: executing program 4 (id=2547): mmap$auto(0x6, 0x2000d, 0x0, 0x10, 0x404, 0x10008003) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0xd8ce, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0xffff, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) setsockopt$auto_SO_ERROR(r3, 0x81, 0x4, &(0x7f00000002c0)='\x00\x00\x00\x02\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) 21.396881381s ago: executing program 4 (id=2549): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x20400, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon19\x00', 0x200, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040), 0xcf4, 0x80000000}) pread64$auto(r0, 0x0, 0x8, 0x8000) 19.873262595s ago: executing program 7 (id=2552): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3a8453d3, 0x80, 0x8, 0x2, 0x1, 0x200, 0x8, 0x401, 0x2, 0x2, 0x2, 0xc28}, 0x0) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x12}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/usbip-vudc.0/udc/usbip-vudc.0/is_a_peripheral\x00', 0x100580, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000", @ANYRES8=r4, @ANYBLOB="0a07000000000000000000800f00051002000dc0b5fdea000180080003000700000008000100", @ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="08000100be601483455a782583847dc439605383610f5abaf07e7f12fed7e0e714eaa48452e0d8979e700e50cca83dbd91d1d86b56fd179aa0b217c639c114ca8e0d00d4082acd11e824c2dbd21e3b3820015bfbb2b0dc53a132dbce0e473b5e1b1b6088c8d546def5586de57375862308e7eb76cbcdae259a3b52112d09f1fbe92d5f80efb264db00c5fcbe09cd5daac3", @ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES16=r3, @ANYRES64=r5, @ANYRES16, @ANYRES16=r5], 0xb4}, 0x1, 0x0, 0x0, 0x5}, 0x20000054) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fsopen$auto(&(0x7f0000000280)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) r6 = open(&(0x7f0000000000)='./cgroup\x00', 0x50000, 0x169) fchdir$auto(r6) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@task_fd_query={0x9, r5, 0x7ff, 0x8, 0x800000000, 0x9, 0x5f, 0x0, 0x3}, 0x6f3) r7 = socket(0x5, 0x80000, 0x88) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r7, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2, 0xdf, 0x19, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xb8, 0x13ff4, 0x7, 0x4000000b6) 16.865151691s ago: executing program 7 (id=2553): r0 = prctl$auto(0xe, 0x0, 0x3, 0x4, 0x400) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r1, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011d3da4420008bd7100f9db5f250200000000000010", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x80) (async) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_gl861/parameters/adapter_nr\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/172, 0xac) (async) socket(0x28, 0x1, 0x0) (async) r4 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) (async) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000001380)={0x2, 0x0, [{0x47f, 0x400, 0xffffffffffffffff}]}) 16.576882674s ago: executing program 7 (id=2554): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/fs/netfs/volumes\x00', 0xc0000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4") r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x10) read$auto(r0, 0x0, 0x20) mq_open$auto(0x0, 0x83, 0x7, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x380000}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r3) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 16.235232817s ago: executing program 7 (id=2562): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x100, 0x0) read$auto(0x3, 0x0, 0x80) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x6, 0x1f, 0x0, 0x3d) r3 = getpid() r4 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) preadv$auto(r4, &(0x7f0000000200)={0x0, 0x101}, 0x9, 0x1ff, 0x5) ioctl$auto_FS_IOC_UNRESVSP64(r4, 0x4030582b, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000004, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001242}, 0xa, 0x0) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x638, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xda9}, @NL80211_ATTR_EMA_RNR_ELEMS={0x95, 0x145, 0x0, 0x1, [@typed={0xc, 0x97, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xc8, 0x0, 0x0, @fd=r1}, @generic="bd2065b89264f4bb0f7e4453c1cdcf5ef92f94705968b6695f2e5c3ff4fe92ff4f0fbf7d577e13e3550bd3242381239b6bf89659ce65976cb9fe26110bd721985cd8de89b7e1583133940cd8aa40c28deabbc6e545cf8c0565ac282f25a23451102b46317cec1b3082242baf4532464be6c3ca62d6a493ba929e1f60eb"]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb7}, @NL80211_ATTR_CQM={0x285, 0x5e, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @pid=r3}, @generic="19a4b58f390aaa5bd9bce9b4dd55ccedc0e9f66cf1e6f733aaf7987587e362ecbff98c90223abb6520f92a6bd9fbbe21626281a350847f6a1938e005ccdbb6f7634a17902ff23f60df81e6689a50b92b4127fd01d92cecbcddd5f20f39d9bd40b5adda75f64eaf4fbffeeb5135570c6cf47463a141bfb334e076620329a20f1be89775fb6865d7b3ae9479ff076a620d1272d9346130a625f4b4aa29c6d4ca8be17add8f453f70b0c8558629e224e05cc3864714f0eec787bb12f08c987dfde1c0efcc8b3c70e5428d844a8cec947eb39407ad8500723ad49d71f3260ebf71fa", @generic="0ecc0d3712cc4ccfee381afb6fd1b943301e914b49b04a3456b7e0d2ae5f8207c0ca229af79780fb3d56fa83f00b167845a5160c71783300600eca4ea87316e56fe10cb51974755b5cb598ed217f35da3ef46b34ab69903d46fd202ed98f691d75f4de6151dd9d1924fac13fedba9875e63ba3c3953f1379541847071ee9f1dcdad1d4bc49aa495eb18323e88f2e6e90709215a5be8395da49c74e1bf6ff9376d8bc659a49fc4d0efc41d355d3aeb2232bfaa5295d4b83ded2cfdc", @generic="f8d8197687ed954424385226b2ba84aab21bb9a4852464fc035c89a562c7be4118c1626800a7c54aa152004f19d65c1f300a917b46545ef08629a53fe486d98e7c70e25c49a44c715087f1037b784ed1b9a32d7c3a6ded34a8e4b5b0de184dcafec2a7643f812daa8855ddfe2fd068fbd6fbfb", @generic="0cd3c60f8fab7ae5ca768b42d370ba3a1c08c66dbcf5874846f62ec0671109c2c3f17f7be128fb45f5810703852ce8468ee22490e7e2f4bf62a660cf7d8f3fada800e172cb948fa259916f27aef1e6ff9c5228c856aae434c708e05dcdc0c907674143bee594e50fa789bb"]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_KEY_DATA={0x10, 0x7, "c75d3ccfb382dd52dad8f7ca"}, @NL80211_ATTR_REKEY_DATA={0x2c9, 0x7a, 0x0, 0x1, [@generic="09df32eb7922", @nested={0xce, 0x1e, 0x0, 0x1, [@generic="6b3734712be4f26f318427120753d4e463e75592e0b2cfbb32a4ba02211c34873cada57ca35f34bef4942b73f752fa03f369853010a2f2984b67b1d113036e98001c7a4dc5cd065ac9af48e86dedea3543bad2c6d9913adbd41112b2952bc63c409a14ed5afc119157c761376c9c8ff9901d52fc232a2e79d124114345ab8ed88efbed7b7c6682eb01b23d8c75481b8f0fc06eb3fc246a17afc43822177732f7d9177b47c8b5a31ee5ad2099a029364429fb1ec8c51780ae6f0ab5cdc5fd5878d05289d620f88ca8deee"]}, @nested={0x92, 0xea, 0x0, 0x1, [@generic="dc63f9f21edffae457f5f3ffd4735ffee776f62ba5be8ead519c014c9c17e4845192ac7ef6e1d0451c588704c02aa7f256914bcc8702aced13c9e8b795137321ddc2f5ba27ad11577a3d301ce0fba8cf4ea87d7667bb6631d44aaae64ff832e37117bf261920b04687d23c540d342f6691248127580098b3bd386fa1ff8051b00de568ec6d9252e7399f437829a1"]}, @generic="b33cf111de939a6407305830c16259dd7dc0fb7f7fb9c392e0aa03bcf641076d8ce9f7ff2815ecf0f6f5b553a4a5dfb9c7e2365037f4761e9114723416716c9c6198a5dc7f2ef47a77991d9ef4e0a9d7e50b360a0b398aca42aae2f739b1dd2587ff1a603e3d0f7e5e683f83d69f5660499d39d4fb587ec86fc476", @generic="e926db656edc09e7dcd6f393d6055fb6f4856a53678e8ec36896dc3e7076f479419e65f67e226de4af31e8f5f1b0d2b45f0c958e6aee31d2af7c9da4bbfcdcdc74a009a273c9057bf275a34f790150856fdab3376fe80e272482de1ab150a9b46add601f298f78734b5fdd1599e4d78cd7c68a9ccb04eaf2aa9a85f2ef833535f86f404276b5ce8e31232af95d8121ae989498e7c42dbe830f3dc43bef4dc4ecd6503078c4eee805ead434d3434f23a7131a70fb82f81ca362b2bdfd507e02ec8d4da6b218790a0aba4fb0ccef4646292401c828d5e576941c4e76882a756656"]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7efd}]}, 0x638}, 0x1, 0x0, 0x0, 0x40000}, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r5 = epoll_create$auto(0x4) r6 = socket(0x2, 0x5, 0x0) r7 = epoll_create$auto(0x3e) epoll_ctl$auto(r7, 0x1, r5, 0x0) shutdown$auto(r6, 0x1) 15.201438253s ago: executing program 7 (id=2556): mmap$auto(0x6, 0x2000d, 0x0, 0x10, 0x404, 0x10008003) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0xd8ce, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0xffff, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) setsockopt$auto_SO_ERROR(r3, 0x81, 0x4, &(0x7f00000002c0)='\x00\x00\x00\x02\x00', 0x2) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) 14.980277499s ago: executing program 7 (id=2557): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) io_uring_setup$auto(0xa, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8b0f, 0x24) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80400, 0x0) lsm_list_modules$auto(0x0, 0xfffffffffffffffd, 0x0) 12.678496987s ago: executing program 9 (id=2560): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) 12.551565186s ago: executing program 9 (id=2561): sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x8, 0x0, 0x0, 0x2, 0x1) (async, rerun: 32) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x2ab01, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000380)="faef58", 0xc2) (async) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, 0x0) (async, rerun: 32) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000008) (async, rerun: 32) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) rmdir$auto(&(0x7f0000000080)='./cgroup/../file0\x00') syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) (async) writev$auto(0x3, 0x0, 0x8009) (async, rerun: 64) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x7fffffff, 0x10000000, 0x80) fsopen$auto(0x0, 0x10000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x5, 0x1, 0x8, 0xd, 0xe13, 0x0, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x7fffffed, 0x8627, 0x9, 0x20000800001, 0x7, 0x5, 0x1eb68525, 0x6, 0x85, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0x6, 0x800000000000000, 0x0, 0x0, 0x0, 0x80000000000000, 0x100000000, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x1, 0x4, 0x2]}, 0x209, 0x81) (async) r6 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) (async, rerun: 32) pread64$auto(r5, 0x0, 0x101, 0x104) (rerun: 32) read$auto_mon_fops_text_t_mon_text(r6, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0xa101, 0x0) 11.518384098s ago: executing program 9 (id=2565): r0 = socket(0xa, 0x1, 0x2) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = eventfd$auto(0x4) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) pwrite64$auto(r2, &(0x7f0000000100)='-![(\'\xb0\'\x00', 0x2, 0x12) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, 0x0, 0x2437b59cbfe687a8) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) 10.896307867s ago: executing program 9 (id=2568): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x100, 0x0) read$auto(0x3, 0x0, 0x80) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x6, 0x1f, 0x0, 0x3d) r3 = getpid() r4 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) preadv$auto(r4, &(0x7f0000000200)={0x0, 0x101}, 0x9, 0x1ff, 0x5) ioctl$auto_FS_IOC_UNRESVSP64(r4, 0x4030582b, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000004, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001242}, 0xa, 0x0) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x638, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xda9}, @NL80211_ATTR_EMA_RNR_ELEMS={0x95, 0x145, 0x0, 0x1, [@typed={0xc, 0x97, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xc8, 0x0, 0x0, @fd=r1}, @generic="bd2065b89264f4bb0f7e4453c1cdcf5ef92f94705968b6695f2e5c3ff4fe92ff4f0fbf7d577e13e3550bd3242381239b6bf89659ce65976cb9fe26110bd721985cd8de89b7e1583133940cd8aa40c28deabbc6e545cf8c0565ac282f25a23451102b46317cec1b3082242baf4532464be6c3ca62d6a493ba929e1f60eb"]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb7}, @NL80211_ATTR_CQM={0x285, 0x5e, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @pid=r3}, @generic="19a4b58f390aaa5bd9bce9b4dd55ccedc0e9f66cf1e6f733aaf7987587e362ecbff98c90223abb6520f92a6bd9fbbe21626281a350847f6a1938e005ccdbb6f7634a17902ff23f60df81e6689a50b92b4127fd01d92cecbcddd5f20f39d9bd40b5adda75f64eaf4fbffeeb5135570c6cf47463a141bfb334e076620329a20f1be89775fb6865d7b3ae9479ff076a620d1272d9346130a625f4b4aa29c6d4ca8be17add8f453f70b0c8558629e224e05cc3864714f0eec787bb12f08c987dfde1c0efcc8b3c70e5428d844a8cec947eb39407ad8500723ad49d71f3260ebf71fa", @generic="0ecc0d3712cc4ccfee381afb6fd1b943301e914b49b04a3456b7e0d2ae5f8207c0ca229af79780fb3d56fa83f00b167845a5160c71783300600eca4ea87316e56fe10cb51974755b5cb598ed217f35da3ef46b34ab69903d46fd202ed98f691d75f4de6151dd9d1924fac13fedba9875e63ba3c3953f1379541847071ee9f1dcdad1d4bc49aa495eb18323e88f2e6e90709215a5be8395da49c74e1bf6ff9376d8bc659a49fc4d0efc41d355d3aeb2232bfaa5295d4b83ded2cfdc", @generic="f8d8197687ed954424385226b2ba84aab21bb9a4852464fc035c89a562c7be4118c1626800a7c54aa152004f19d65c1f300a917b46545ef08629a53fe486d98e7c70e25c49a44c715087f1037b784ed1b9a32d7c3a6ded34a8e4b5b0de184dcafec2a7643f812daa8855ddfe2fd068fbd6fbfb", @generic="0cd3c60f8fab7ae5ca768b42d370ba3a1c08c66dbcf5874846f62ec0671109c2c3f17f7be128fb45f5810703852ce8468ee22490e7e2f4bf62a660cf7d8f3fada800e172cb948fa259916f27aef1e6ff9c5228c856aae434c708e05dcdc0c907674143bee594e50fa789bb"]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_KEY_DATA={0x10, 0x7, "c75d3ccfb382dd52dad8f7ca"}, @NL80211_ATTR_REKEY_DATA={0x2c9, 0x7a, 0x0, 0x1, [@generic="09df32eb7922", @nested={0xce, 0x1e, 0x0, 0x1, [@generic="6b3734712be4f26f318427120753d4e463e75592e0b2cfbb32a4ba02211c34873cada57ca35f34bef4942b73f752fa03f369853010a2f2984b67b1d113036e98001c7a4dc5cd065ac9af48e86dedea3543bad2c6d9913adbd41112b2952bc63c409a14ed5afc119157c761376c9c8ff9901d52fc232a2e79d124114345ab8ed88efbed7b7c6682eb01b23d8c75481b8f0fc06eb3fc246a17afc43822177732f7d9177b47c8b5a31ee5ad2099a029364429fb1ec8c51780ae6f0ab5cdc5fd5878d05289d620f88ca8deee"]}, @nested={0x92, 0xea, 0x0, 0x1, [@generic="dc63f9f21edffae457f5f3ffd4735ffee776f62ba5be8ead519c014c9c17e4845192ac7ef6e1d0451c588704c02aa7f256914bcc8702aced13c9e8b795137321ddc2f5ba27ad11577a3d301ce0fba8cf4ea87d7667bb6631d44aaae64ff832e37117bf261920b04687d23c540d342f6691248127580098b3bd386fa1ff8051b00de568ec6d9252e7399f437829a1"]}, @generic="b33cf111de939a6407305830c16259dd7dc0fb7f7fb9c392e0aa03bcf641076d8ce9f7ff2815ecf0f6f5b553a4a5dfb9c7e2365037f4761e9114723416716c9c6198a5dc7f2ef47a77991d9ef4e0a9d7e50b360a0b398aca42aae2f739b1dd2587ff1a603e3d0f7e5e683f83d69f5660499d39d4fb587ec86fc476", @generic="e926db656edc09e7dcd6f393d6055fb6f4856a53678e8ec36896dc3e7076f479419e65f67e226de4af31e8f5f1b0d2b45f0c958e6aee31d2af7c9da4bbfcdcdc74a009a273c9057bf275a34f790150856fdab3376fe80e272482de1ab150a9b46add601f298f78734b5fdd1599e4d78cd7c68a9ccb04eaf2aa9a85f2ef833535f86f404276b5ce8e31232af95d8121ae989498e7c42dbe830f3dc43bef4dc4ecd6503078c4eee805ead434d3434f23a7131a70fb82f81ca362b2bdfd507e02ec8d4da6b218790a0aba4fb0ccef4646292401c828d5e576941c4e76882a756656"]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7efd}]}, 0x638}, 0x1, 0x0, 0x0, 0x40000}, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r5 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, r5, 0x0) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0xffffffffffffffff, 0x0) shutdown$auto(r5, 0x1) 10.362352742s ago: executing program 9 (id=2569): mmap$auto(0x6, 0x2000d, 0x0, 0x10, 0x404, 0x10008003) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0xd8ce, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0xffff, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) 10.234698164s ago: executing program 9 (id=2570): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) 6.363509971s ago: executing program 38 (id=2549): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x20400, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon19\x00', 0x200, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040), 0xcf4, 0x80000000}) pread64$auto(r0, 0x0, 0x8, 0x8000) 4.669405559s ago: executing program 8 (id=2580): mmap$auto(0x0, 0x400008, 0xdb, 0x10, 0x2, 0x8000) mmap$auto(0x5, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram8/trace/pid\x00', 0x101042, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = prctl$auto_PR_SET_MM_END_DATA(0x400, 0x4, 0x0, 0x6, 0x4) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)=0x5) pread64$auto(r0, 0x0, 0x10001, 0xf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1000001, 0x450, 0x7, 0x1, 0x100000000, 0x8a0d, 0x8, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000000, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x4, 0x0, 0xfffffffffffffffe, 0x6, 0x401, 0x22b8, 0x9, 0x400, 0x84, 0x0, 0x0, 0xff, 0x0, 0x0, [0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xbc7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, 0x5, 0xd, 0x0, 0x10000000000, 0xfffffffffffffffd]}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd04, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) 3.844507837s ago: executing program 8 (id=2581): mmap$auto(0x0, 0xe983, 0xdf, 0x111, 0x401, 0x8000) socket(0x2, 0x1, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x400019, 0x0, 0x0) 3.67793072s ago: executing program 8 (id=2582): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000400) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000400) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mseal$auto(0x1ffff000, 0xfffffffffffefff3, 0x0) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) 2.76088125s ago: executing program 8 (id=2583): r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0xc3, 0x0) mbind$auto(0xf004, 0xbb, 0x120000000, 0x0, 0x5, 0x4fd) mmap$auto(0x0, 0x2020009, 0x3, 0xebe, r0, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff008}}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r3 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x202000b, 0x3, 0x12, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x4) r4 = getsockopt$auto(r3, 0x200000000001, 0x1d, 0x0, 0x0) read$auto(0x3, 0x0, 0xf3c) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="01f91de4d1cfbbe26cbbfe00", @ANYRESDEC=r4, @ANYRES16=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x4090}, 0x8044) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyq4\x00', 0x40, 0x0) setresuid$auto(0x0, 0x7, 0x8080) r5 = setfsuid$auto(0x0) setresuid$auto(0x0, 0x8, 0x8000) setgid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000035c0)=ANY=[@ANYBLOB="cb1c00aa00", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000800d000", @ANYRES32, @ANYBLOB="040003002a9d272f660400338000000004000280"], 0x1c2c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 1.728602455s ago: executing program 8 (id=2584): prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x5db8c0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) 1.633431657s ago: executing program 0 (id=2577): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008081}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x1ac}}, 0x40000) socket(0xa, 0xa, 0x88) socket(0x10, 0x3, 0xc) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$auto(r1, 0x64c6, r0) pidfd_send_signal$auto_SIGCONT(r1, 0x12, &(0x7f0000000040)={@_si_pad}, 0x3ff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpgrp(0x0) mmap$auto(0x0, 0x2000a, 0x2000000000000a3, 0x11, r1, 0x10008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r2, 0x4004550d, 0xffffffffffffffff) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 1.35701294s ago: executing program 8 (id=2585): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)="c2", 0x1) (async) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)="c2", 0x1) mmap$auto(0x0, 0x804, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x3, 0x0, 0x7fffffff) 952.125092ms ago: executing program 0 (id=2586): mmap$auto(0x0, 0x2020009, 0x3, 0x2000001000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) adjtimex$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x650, 0x3381, 0x4) nanosleep$auto(0x0, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) msgsnd$auto(0x5, 0x0, 0x3, 0x8) mlockall$auto(0x7) madvise$auto(0x0, 0x200007, 0x19) 41.273083ms ago: executing program 0 (id=2587): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x100, 0x0) read$auto(0x3, 0x0, 0x80) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x6, 0x1f, 0x0, 0x3d) r3 = getpid() r4 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) preadv$auto(r4, &(0x7f0000000200)={0x0, 0x101}, 0x9, 0x1ff, 0x5) ioctl$auto_FS_IOC_UNRESVSP64(r4, 0x4030582b, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000004, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001242}, 0xa, 0x0) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x638, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xda9}, @NL80211_ATTR_EMA_RNR_ELEMS={0x95, 0x145, 0x0, 0x1, [@typed={0xc, 0x97, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xc8, 0x0, 0x0, @fd=r1}, @generic="bd2065b89264f4bb0f7e4453c1cdcf5ef92f94705968b6695f2e5c3ff4fe92ff4f0fbf7d577e13e3550bd3242381239b6bf89659ce65976cb9fe26110bd721985cd8de89b7e1583133940cd8aa40c28deabbc6e545cf8c0565ac282f25a23451102b46317cec1b3082242baf4532464be6c3ca62d6a493ba929e1f60eb"]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb7}, @NL80211_ATTR_CQM={0x285, 0x5e, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @pid=r3}, @generic="19a4b58f390aaa5bd9bce9b4dd55ccedc0e9f66cf1e6f733aaf7987587e362ecbff98c90223abb6520f92a6bd9fbbe21626281a350847f6a1938e005ccdbb6f7634a17902ff23f60df81e6689a50b92b4127fd01d92cecbcddd5f20f39d9bd40b5adda75f64eaf4fbffeeb5135570c6cf47463a141bfb334e076620329a20f1be89775fb6865d7b3ae9479ff076a620d1272d9346130a625f4b4aa29c6d4ca8be17add8f453f70b0c8558629e224e05cc3864714f0eec787bb12f08c987dfde1c0efcc8b3c70e5428d844a8cec947eb39407ad8500723ad49d71f3260ebf71fa", @generic="0ecc0d3712cc4ccfee381afb6fd1b943301e914b49b04a3456b7e0d2ae5f8207c0ca229af79780fb3d56fa83f00b167845a5160c71783300600eca4ea87316e56fe10cb51974755b5cb598ed217f35da3ef46b34ab69903d46fd202ed98f691d75f4de6151dd9d1924fac13fedba9875e63ba3c3953f1379541847071ee9f1dcdad1d4bc49aa495eb18323e88f2e6e90709215a5be8395da49c74e1bf6ff9376d8bc659a49fc4d0efc41d355d3aeb2232bfaa5295d4b83ded2cfdc", @generic="f8d8197687ed954424385226b2ba84aab21bb9a4852464fc035c89a562c7be4118c1626800a7c54aa152004f19d65c1f300a917b46545ef08629a53fe486d98e7c70e25c49a44c715087f1037b784ed1b9a32d7c3a6ded34a8e4b5b0de184dcafec2a7643f812daa8855ddfe2fd068fbd6fbfb", @generic="0cd3c60f8fab7ae5ca768b42d370ba3a1c08c66dbcf5874846f62ec0671109c2c3f17f7be128fb45f5810703852ce8468ee22490e7e2f4bf62a660cf7d8f3fada800e172cb948fa259916f27aef1e6ff9c5228c856aae434c708e05dcdc0c907674143bee594e50fa789bb"]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_KEY_DATA={0x10, 0x7, "c75d3ccfb382dd52dad8f7ca"}, @NL80211_ATTR_REKEY_DATA={0x2c9, 0x7a, 0x0, 0x1, [@generic="09df32eb7922", @nested={0xce, 0x1e, 0x0, 0x1, [@generic="6b3734712be4f26f318427120753d4e463e75592e0b2cfbb32a4ba02211c34873cada57ca35f34bef4942b73f752fa03f369853010a2f2984b67b1d113036e98001c7a4dc5cd065ac9af48e86dedea3543bad2c6d9913adbd41112b2952bc63c409a14ed5afc119157c761376c9c8ff9901d52fc232a2e79d124114345ab8ed88efbed7b7c6682eb01b23d8c75481b8f0fc06eb3fc246a17afc43822177732f7d9177b47c8b5a31ee5ad2099a029364429fb1ec8c51780ae6f0ab5cdc5fd5878d05289d620f88ca8deee"]}, @nested={0x92, 0xea, 0x0, 0x1, [@generic="dc63f9f21edffae457f5f3ffd4735ffee776f62ba5be8ead519c014c9c17e4845192ac7ef6e1d0451c588704c02aa7f256914bcc8702aced13c9e8b795137321ddc2f5ba27ad11577a3d301ce0fba8cf4ea87d7667bb6631d44aaae64ff832e37117bf261920b04687d23c540d342f6691248127580098b3bd386fa1ff8051b00de568ec6d9252e7399f437829a1"]}, @generic="b33cf111de939a6407305830c16259dd7dc0fb7f7fb9c392e0aa03bcf641076d8ce9f7ff2815ecf0f6f5b553a4a5dfb9c7e2365037f4761e9114723416716c9c6198a5dc7f2ef47a77991d9ef4e0a9d7e50b360a0b398aca42aae2f739b1dd2587ff1a603e3d0f7e5e683f83d69f5660499d39d4fb587ec86fc476", @generic="e926db656edc09e7dcd6f393d6055fb6f4856a53678e8ec36896dc3e7076f479419e65f67e226de4af31e8f5f1b0d2b45f0c958e6aee31d2af7c9da4bbfcdcdc74a009a273c9057bf275a34f790150856fdab3376fe80e272482de1ab150a9b46add601f298f78734b5fdd1599e4d78cd7c68a9ccb04eaf2aa9a85f2ef833535f86f404276b5ce8e31232af95d8121ae989498e7c42dbe830f3dc43bef4dc4ecd6503078c4eee805ead434d3434f23a7131a70fb82f81ca362b2bdfd507e02ec8d4da6b218790a0aba4fb0ccef4646292401c828d5e576941c4e76882a756656"]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7efd}]}, 0x638}, 0x1, 0x0, 0x0, 0x40000}, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) r5 = epoll_create$auto(0x4) r6 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r5, 0x1, r6, 0x0) r7 = epoll_create$auto(0x3e) epoll_ctl$auto(r7, 0x1, r5, 0x0) shutdown$auto(r6, 0x1) 0s ago: executing program 39 (id=2557): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) io_uring_setup$auto(0xa, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8b0f, 0x24) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80400, 0x0) lsm_list_modules$auto(0x0, 0xfffffffffffffffd, 0x0) kernel console output (not intermixed with test programs): tes in process `syz.1.1881'. [ 536.624182][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1882'. [ 537.930865][T14010] can: request_module (can-proto-0) failed. [ 538.025159][T14020] program syz.2.1890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.553180][T14016] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1891'. [ 539.948111][T13970] kexec: Could not allocate control_code_buffer [ 542.464441][T14093] sd 0:0:1:0: device reset [ 543.845530][T14096] kexec: Could not allocate control_code_buffer [ 543.860249][ T9590] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 946 with max blocks 4 with error 117 [ 543.944243][ T9590] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.944243][ T9590] [ 544.104717][ T9590] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1410 with max blocks 27 with error 117 [ 544.177648][ T9590] EXT4-fs (sda1): This should not happen!! Data will be lost [ 544.177648][ T9590] [ 544.750439][T14133] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1914'. [ 551.181203][T14251] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1942'. [ 552.349497][T14260] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1945'. [ 557.615921][T14345] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1967'. [ 558.238349][T14357] tipc: Started in network mode [ 558.272735][T14357] tipc: Node identity ee00, cluster identity 4711 [ 558.279350][T14357] tipc: Node number set to 60928 [ 558.610245][T14364] FAULT_INJECTION: forcing a failure. [ 558.610245][T14364] name failslab, interval 1, probability 0, space 0, times 0 [ 558.740641][T14364] CPU: 0 UID: 0 PID: 14364 Comm: syz.2.1971 Tainted: G U syzkaller #0 PREEMPT(full) [ 558.740671][T14364] Tainted: [U]=USER [ 558.740677][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.740687][T14364] Call Trace: [ 558.740693][T14364] [ 558.740699][T14364] dump_stack_lvl+0x16c/0x1f0 [ 558.740724][T14364] should_fail_ex+0x512/0x640 [ 558.740750][T14364] ? __kmalloc_cache_noprof+0x5f/0x780 [ 558.740780][T14364] should_failslab+0xc2/0x120 [ 558.740804][T14364] __kmalloc_cache_noprof+0x72/0x780 [ 558.740832][T14364] ? snd_seq_timer_new+0x44/0x1b0 [ 558.740853][T14364] ? snd_seq_timer_new+0x44/0x1b0 [ 558.740868][T14364] snd_seq_timer_new+0x44/0x1b0 [ 558.740886][T14364] snd_seq_queue_alloc+0x177/0x5a0 [ 558.740914][T14364] snd_seq_ioctl_create_queue+0xa9/0x390 [ 558.740936][T14364] call_seq_client_ctl+0x9f/0x110 [ 558.740956][T14364] snd_seq_kernel_client_ctl+0x77/0xd0 [ 558.740976][T14364] alloc_seq_queue+0xda/0x180 [ 558.741002][T14364] ? __pfx_alloc_seq_queue+0x10/0x10 [ 558.741040][T14364] ? mark_held_locks+0x49/0x80 [ 558.741065][T14364] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.741083][T14364] ? lockdep_hardirqs_on+0x7c/0x110 [ 558.741105][T14364] snd_seq_oss_open+0x38c/0xa20 [ 558.741130][T14364] odev_open+0x79/0xc0 [ 558.741148][T14364] ? __pfx_odev_open+0x10/0x10 [ 558.741167][T14364] soundcore_open+0x40c/0x580 [ 558.741190][T14364] ? __pfx_soundcore_open+0x10/0x10 [ 558.741209][T14364] chrdev_open+0x234/0x6a0 [ 558.741230][T14364] ? __pfx_apparmor_file_open+0x10/0x10 [ 558.741255][T14364] ? __pfx_chrdev_open+0x10/0x10 [ 558.741276][T14364] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 558.741299][T14364] do_dentry_open+0x982/0x1530 [ 558.741319][T14364] ? __pfx_chrdev_open+0x10/0x10 [ 558.741343][T14364] vfs_open+0x82/0x3f0 [ 558.741369][T14364] path_openat+0x1de4/0x2cb0 [ 558.741394][T14364] ? __pfx_path_openat+0x10/0x10 [ 558.741414][T14364] ? __lock_acquire+0xb8a/0x1c90 [ 558.741439][T14364] do_filp_open+0x20b/0x470 [ 558.741457][T14364] ? __pfx_do_filp_open+0x10/0x10 [ 558.741491][T14364] ? alloc_fd+0x471/0x7d0 [ 558.741513][T14364] do_sys_openat2+0x11b/0x1d0 [ 558.741537][T14364] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.741570][T14364] __x64_sys_openat+0x174/0x210 [ 558.741595][T14364] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.741629][T14364] do_syscall_64+0xcd/0xfa0 [ 558.741649][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.741670][T14364] RIP: 0033:0x7fb66b58f6c9 [ 558.741685][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.741701][T14364] RSP: 002b:00007fb66c364038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 558.741718][T14364] RAX: ffffffffffffffda RBX: 00007fb66b7e6180 RCX: 00007fb66b58f6c9 [ 558.741729][T14364] RDX: 00000000001c8740 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 558.741739][T14364] RBP: 00007fb66b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.741749][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.741759][T14364] R13: 00007fb66b7e6218 R14: 00007fb66b7e6180 R15: 00007ffd6f1977f8 [ 558.741781][T14364] [ 560.097831][T14397] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1978'. [ 560.161866][T14410] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1982'. [ 560.625811][T14420] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128 [ 560.843682][T14422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input129 [ 563.331462][T14496] Invalid ELF header magic: != ELF [ 563.516178][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 563.724253][T14496] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2005'. [ 565.640674][T14549] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 941 with max blocks 5 with error 117 [ 565.727409][T14549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 565.727409][T14549] [ 566.050861][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.057890][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.259729][T14609] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2036'. [ 569.961625][T14654] netlink: 'syz.0.2046': attribute type 16 has an invalid length. [ 569.990628][T14654] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2046'. [ 570.062911][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 570.138607][T14660] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2047'. [ 570.429675][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2049'. [ 570.534437][T14664] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.2048'. [ 570.690852][T14679] openvswitch: HfR: Dropping previously announced user features [ 570.732048][T14679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2053'. [ 571.383739][T14699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2061'. [ 574.376008][T14776] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2077'. [ 574.401664][ T7411] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 946 with max blocks 4 with error 117 [ 574.447874][ T7411] EXT4-fs (sda1): This should not happen!! Data will be lost [ 574.447874][ T7411] [ 574.551725][ T7411] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 928 with max blocks 3 with error 117 [ 574.610733][ T7411] EXT4-fs (sda1): This should not happen!! Data will be lost [ 574.610733][ T7411] [ 574.668903][ T7411] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3542 with max blocks 41 with error 117 [ 574.742439][ T7411] EXT4-fs (sda1): This should not happen!! Data will be lost [ 574.742439][ T7411] [ 576.353345][T14843] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2094'. [ 576.809307][T14854] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2098'. [ 578.897110][T14900] nbd: must specify an index to disconnect [ 580.601125][T14929] random: crng reseeded on system resumption [ 580.896367][T14939] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 936 with max blocks 9 with error 117 [ 581.043489][T14939] EXT4-fs (sda1): This should not happen!! Data will be lost [ 581.043489][T14939] [ 582.911748][ T5833] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 584.157389][T14998] FAULT_INJECTION: forcing a failure. [ 584.157389][T14998] name failslab, interval 1, probability 0, space 0, times 0 [ 584.245234][T14998] CPU: 0 UID: 0 PID: 14998 Comm: syz.2.2126 Tainted: G U syzkaller #0 PREEMPT(full) [ 584.245265][T14998] Tainted: [U]=USER [ 584.245286][T14998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 584.245296][T14998] Call Trace: [ 584.245304][T14998] [ 584.245311][T14998] dump_stack_lvl+0x16c/0x1f0 [ 584.245336][T14998] should_fail_ex+0x512/0x640 [ 584.245363][T14998] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 584.245383][T14998] should_failslab+0xc2/0x120 [ 584.245407][T14998] kmem_cache_alloc_noprof+0x75/0x6e0 [ 584.245422][T14998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 584.245449][T14998] ? mas_preallocate+0xe6a/0x11f0 [ 584.245474][T14998] ? mas_preallocate+0xe6a/0x11f0 [ 584.245493][T14998] mas_preallocate+0xe6a/0x11f0 [ 584.245573][T14998] ? __pfx_mas_preallocate+0x10/0x10 [ 584.245592][T14998] ? rcu_is_watching+0x12/0xc0 [ 584.245618][T14998] ? anon_vma_name+0x81/0x2f0 [ 584.245646][T14998] __split_vma+0x34a/0x1070 [ 584.245677][T14998] ? __pfx___split_vma+0x10/0x10 [ 584.245718][T14998] vms_gather_munmap_vmas+0x3aa/0x1340 [ 584.245749][T14998] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 584.245780][T14998] ? mas_walk+0x6f5/0x980 [ 584.245804][T14998] __mmap_region+0x434/0x27a0 [ 584.245821][T14998] ? find_held_lock+0x2b/0x80 [ 584.245839][T14998] ? __pfx___mmap_region+0x10/0x10 [ 584.245854][T14998] ? finish_task_switch.isra.0+0x21c/0xc10 [ 584.245873][T14998] ? rcu_is_watching+0x12/0xc0 [ 584.245890][T14998] ? finish_task_switch.isra.0+0x221/0xc10 [ 584.245906][T14998] ? lockdep_hardirqs_on+0x7c/0x110 [ 584.245925][T14998] ? finish_task_switch.isra.0+0x221/0xc10 [ 584.245958][T14998] ? __lock_acquire+0x622/0x1c90 [ 584.245983][T14998] ? __pfx___schedule+0x10/0x10 [ 584.246027][T14998] ? trace_cap_capable+0x18d/0x200 [ 584.246059][T14998] mmap_region+0x1ab/0x3f0 [ 584.246076][T14998] ? __get_unmapped_area+0x267/0x440 [ 584.246100][T14998] do_mmap+0xa3e/0x1210 [ 584.246126][T14998] ? __pfx_do_mmap+0x10/0x10 [ 584.246147][T14998] ? __pfx_down_write_killable+0x10/0x10 [ 584.246174][T14998] vm_mmap_pgoff+0x29e/0x470 [ 584.246200][T14998] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 584.246222][T14998] ? find_held_lock+0x2b/0x80 [ 584.246241][T14998] ? __x64_sys_futex+0x1e0/0x4c0 [ 584.246263][T14998] ? __x64_sys_futex+0x1e9/0x4c0 [ 584.246289][T14998] ksys_mmap_pgoff+0x7d/0x5c0 [ 584.246309][T14998] ? xfd_validate_state+0x61/0x180 [ 584.246337][T14998] __x64_sys_mmap+0x125/0x190 [ 584.246364][T14998] do_syscall_64+0xcd/0xfa0 [ 584.246384][T14998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.246401][T14998] RIP: 0033:0x7fb66b58f6c9 [ 584.246415][T14998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.246431][T14998] RSP: 002b:00007fb66c385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 584.246449][T14998] RAX: ffffffffffffffda RBX: 00007fb66b7e6090 RCX: 00007fb66b58f6c9 [ 584.246460][T14998] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 584.246470][T14998] RBP: 00007fb66b611f91 R08: 0000000000000002 R09: 0000000000008000 [ 584.246479][T14998] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 584.246489][T14998] R13: 00007fb66b7e6128 R14: 00007fb66b7e6090 R15: 00007ffd6f1977f8 [ 584.246519][T14998] [ 585.951262][T14983] kexec: Could not allocate control_code_buffer [ 586.217976][T15028] netlink: 'syz.0.2135': attribute type 8 has an invalid length. [ 588.828984][T15089] capability: warning: `syz.3.2149' uses deprecated v2 capabilities in a way that may be insecure [ 588.942328][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 589.640652][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2151'. [ 591.490555][T15159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2170'. [ 592.215158][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 592.294695][T15190] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2175'. [ 593.407395][T15213] vhci_hcd: invalid port number 16 [ 593.447113][ T5833] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 593.447140][ T5833] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 593.462192][ T5833] Bluetooth: hci0: Dropping invalid advertising data [ 593.470461][ T5833] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 593.470488][ T5833] Bluetooth: hci0: Dropping invalid advertising data [ 593.486152][ T5833] Bluetooth: hci0: Malformed LE Event: 0x02 [ 595.611921][T15246] zswap: compressor not available [ 596.813702][T15273] bridge0: port 2(dummy0) entered blocking state [ 596.874631][T15273] bridge0: port 2(dummy0) entered disabled state [ 596.944408][T15273] dummy0: entered allmulticast mode [ 596.987278][T15273] dummy0: entered promiscuous mode [ 597.038717][T15273] bridge0: port 2(dummy0) entered blocking state [ 597.045975][T15273] bridge0: port 2(dummy0) entered forwarding state [ 598.544981][ T5833] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 599.468414][T15323] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2206'. [ 599.651290][T15325] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x12f pfn:0x78000 [ 599.683504][T15325] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 599.716818][T15325] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 599.751523][T15325] raw: 000000000000012f 0000000000000000 00000001ffffffff 0000000000000000 [ 599.782341][T15325] page dumped because: unmovable page [ 599.801082][T15325] page_owner tracks the page as allocated [ 599.823924][T15325] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 2, tgid 2 (kthreadd), ts 318153810023, free_ts 254923309510 [ 599.885131][T15325] post_alloc_hook+0x1c0/0x230 [ 599.912078][T15325] get_page_from_freelist+0x10a3/0x3a30 [ 599.922366][T15325] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 599.944248][T15325] alloc_pages_mpol+0x1fb/0x550 [ 599.967006][T15325] alloc_pages_noprof+0x131/0x390 [ 599.977681][T15325] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 599.984098][T15325] __vmalloc_node_noprof+0xad/0xf0 [ 600.016667][T15325] copy_process+0x2c77/0x76a0 [ 600.036506][T15325] kernel_clone+0xfc/0x930 [ 600.041054][T15325] kernel_thread+0xd7/0x120 [ 600.045584][T15325] kthreadd+0x503/0x800 [ 600.075864][T15325] ret_from_fork+0x675/0x7d0 [ 600.089618][T15325] ret_from_fork_asm+0x1a/0x30 [ 600.106031][T15325] page last free pid 8439 tgid 8439 stack trace: [ 600.118248][T15325] __free_frozen_pages+0x7df/0x1160 [ 600.133692][T15325] vfree+0x1fd/0xb50 [ 600.143773][T15325] snd_dma_free_pages+0x54/0x70 [ 600.163990][T15325] snd_pcm_lib_free_pages+0x172/0x390 [ 600.184360][T15325] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 600.203007][T15325] snd_pcm_release_substream+0x5b/0x70 [ 600.225537][T15325] snd_pcm_oss_release+0x16f/0x310 [ 600.244278][T15325] __fput+0x402/0xb70 [ 600.271474][T15325] task_work_run+0x150/0x240 [ 600.291354][T15325] exit_to_user_mode_loop+0xec/0x130 [ 600.333326][T15325] do_syscall_64+0x426/0xfa0 [ 600.353747][T15325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.397263][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 601.567251][T15372] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2221'. [ 604.823835][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 604.849474][T15416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.119329][ T9615] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1394 with max blocks 3 with error 117 [ 605.176671][ T9615] EXT4-fs (sda1): This should not happen!! Data will be lost [ 605.176671][ T9615] [ 605.332866][ T9615] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1399 with max blocks 38 with error 117 [ 605.376551][ T9615] EXT4-fs (sda1): This should not happen!! Data will be lost [ 605.376551][ T9615] [ 605.754687][T15451] Invalid ELF header magic: != ELF [ 606.037057][T15463] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 9 with max blocks 8 with error 117 [ 606.049994][T15463] EXT4-fs (sda1): This should not happen!! Data will be lost [ 606.049994][T15463] [ 606.129107][T15465] : entered promiscuous mode [ 606.248142][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2247'. [ 607.906326][T15507] sctp: [Deprecated]: syz.3.2255 (pid 15507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.906326][T15507] Use struct sctp_sack_info instead [ 611.599027][T15572] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 611.642176][T15572] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 611.691822][T15572] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 612.183717][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.194007][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 612.202365][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 612.210531][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 612.218282][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.516100][T15588] tipc: Started in network mode [ 612.535212][T15588] tipc: Node identity 45e5412, cluster identity 4711 [ 612.555066][T15588] tipc: Node number set to 73290770 [ 612.566802][T15590] delete_channel: no stack [ 612.596250][T15578] chnl_net:caif_netlink_parms(): no params data found [ 612.831357][T15578] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.845768][T15578] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.853028][T15578] bridge_slave_0: entered allmulticast mode [ 612.879579][T15578] bridge_slave_0: entered promiscuous mode [ 612.895062][T15578] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.912581][T15578] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.924480][T15578] bridge_slave_1: entered allmulticast mode [ 612.941766][T15578] bridge_slave_1: entered promiscuous mode [ 613.005699][T15578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.030481][T15578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.098142][T15578] team0: Port device team_slave_0 added [ 613.114745][T15578] team0: Port device team_slave_1 added [ 613.196250][T15578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.211405][T15578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.264670][T15578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.292564][T15578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.299724][T15578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.366474][T15578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.508202][T15578] hsr_slave_0: entered promiscuous mode [ 613.525270][T15578] hsr_slave_1: entered promiscuous mode [ 613.541628][T15578] debugfs: 'hsr0' already exists in 'hsr' [ 613.547561][T15578] Cannot create hsr debugfs directory [ 613.911696][T15578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 613.958255][T15578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 613.981060][T15578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 614.022451][T15578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 614.187471][T15578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.220186][T15578] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.248379][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.255688][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.263828][ T5833] Bluetooth: hci4: command tx timeout [ 614.297614][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.304794][ T7420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.650658][T15578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.056414][T15578] veth0_vlan: entered promiscuous mode [ 615.082404][T15578] veth1_vlan: entered promiscuous mode [ 615.151804][T15578] veth0_macvtap: entered promiscuous mode [ 615.166874][T15578] veth1_macvtap: entered promiscuous mode [ 615.202659][T15578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.232336][T15627] block nbd7: not configured, cannot reconfigure [ 615.240300][T15578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.280963][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.301995][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.322649][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.367510][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.497483][ T7407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.520525][ T7407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.638799][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.663797][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.324015][ T5833] Bluetooth: hci4: command tx timeout [ 617.916346][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 617.926810][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 617.937123][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 617.946999][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 617.959181][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 618.394505][ T5842] Bluetooth: hci4: command tx timeout [ 618.439278][T15666] chnl_net:caif_netlink_parms(): no params data found [ 618.606089][T15666] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.620149][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.638886][T15666] bridge_slave_0: entered allmulticast mode [ 618.656253][T15666] bridge_slave_0: entered promiscuous mode [ 618.674034][T15666] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.689679][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.706294][T15666] bridge_slave_1: entered allmulticast mode [ 618.723348][T15666] bridge_slave_1: entered promiscuous mode [ 618.816156][T15666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.843358][T15666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.910721][T15666] team0: Port device team_slave_0 added [ 618.945730][T15666] team0: Port device team_slave_1 added [ 618.971126][T15685] random: crng reseeded on system resumption [ 619.041762][T15666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.058255][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.111158][T15688] hub 1-0:1.0: USB hub found [ 619.120941][T15688] hub 1-0:1.0: 1 port detected [ 619.151517][T15666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.168981][T15688] Restarting kernel threads ... [ 619.184284][T15688] Done restarting kernel threads. [ 619.195000][T15666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.214803][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.287181][T15666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.441467][T15691] zswap: compressor not available [ 619.467264][T15666] hsr_slave_0: entered promiscuous mode [ 619.484164][T15666] hsr_slave_1: entered promiscuous mode [ 619.498050][T15666] debugfs: 'hsr0' already exists in 'hsr' [ 619.514091][T15666] Cannot create hsr debugfs directory [ 619.983860][ T5842] Bluetooth: hci5: command tx timeout [ 620.058084][T15666] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 620.087183][T15666] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 620.145781][T15666] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 620.191052][T15666] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 620.220822][T15701] ima: policy update failed [ 620.250274][ T30] audit: type=1802 audit(4294967314.086:13): pid=15701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2294" res=0 errno=0 [ 620.461352][ T5842] Bluetooth: hci4: command tx timeout [ 620.473365][T15666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.553474][T15666] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.588812][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.596199][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.660339][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.667595][ T7420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.762172][T15666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.804596][T15666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.872415][T15723] bond0: option all_slaves_active: invalid value () [ 621.325488][T15666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.003373][T15666] veth0_vlan: entered promiscuous mode [ 622.034545][T15666] veth1_vlan: entered promiscuous mode [ 622.054726][ T5842] Bluetooth: hci5: command tx timeout [ 622.120343][T15666] veth0_macvtap: entered promiscuous mode [ 622.149818][T15666] veth1_macvtap: entered promiscuous mode [ 622.197486][T15666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.229744][T15666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.262286][ T9607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.289321][ T9607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.383846][ T9607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.413243][ T9607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.596364][ T7420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.633776][ T7420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.860572][ T9588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.877346][ T9588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.067706][T15758] zswap: compressor not available [ 623.322264][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2284'. [ 623.987541][T15773] zswap: compressor 000 not available [ 624.127976][ T5833] Bluetooth: hci5: command tx timeout [ 624.512705][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 624.537104][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 624.547244][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 624.561276][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 624.569369][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 624.793632][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 624.803669][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 624.813818][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 624.823730][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 624.833444][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 625.345161][ T7407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.594870][T15803] sd 0:0:1:0: PR command failed: 1026 [ 625.601925][ T7407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.615997][T15803] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 625.649259][T15803] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 625.745087][ T7407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.913258][ T7407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.190549][ T5833] Bluetooth: hci5: command tx timeout [ 626.204554][T15779] chnl_net:caif_netlink_parms(): no params data found [ 626.274849][T15784] chnl_net:caif_netlink_parms(): no params data found [ 626.492084][ T7407] team0: left allmulticast mode [ 626.522969][ T7407] team_slave_0: left allmulticast mode [ 626.547111][ T7407] team_slave_1: left allmulticast mode [ 626.552775][ T7407] team0: left promiscuous mode [ 626.585650][ T5833] Bluetooth: hci1: command tx timeout [ 626.593857][ T7407] team_slave_0: left promiscuous mode [ 626.613215][ T7407] team_slave_1: left promiscuous mode [ 626.627742][ T7407] bridge0: port 3(team0) entered disabled state [ 626.665552][ T7407] bridge_slave_1: left allmulticast mode [ 626.686270][ T7407] bridge_slave_1: left promiscuous mode [ 626.720414][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.780933][ T7407] bridge_slave_0: left allmulticast mode [ 626.794876][ T7407] bridge_slave_0: left promiscuous mode [ 626.801399][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.903726][ T5833] Bluetooth: hci6: command tx timeout [ 627.153390][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.159829][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.681832][ T7407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.729466][ T7407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.789957][ T7407] bond0 (unregistering): Released all slaves [ 628.012981][ T7407] HfR: left promiscuous mode [ 628.236937][T15779] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.262492][T15779] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.298278][T15779] bridge_slave_0: entered allmulticast mode [ 628.332635][T15779] bridge_slave_0: entered promiscuous mode [ 628.377450][T15779] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.407600][T15779] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.449655][T15779] bridge_slave_1: entered allmulticast mode [ 628.467114][T15845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2317'. [ 628.497509][T15779] bridge_slave_1: entered promiscuous mode [ 628.516058][ T7407] : left promiscuous mode [ 628.561377][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.589455][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.649673][T15784] bridge_slave_0: entered allmulticast mode [ 628.661283][ T5833] Bluetooth: hci1: command tx timeout [ 628.701953][T15784] bridge_slave_0: entered promiscuous mode [ 628.848376][ T7407] tipc: Left network mode [ 628.857354][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.921865][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.929309][T15784] bridge_slave_1: entered allmulticast mode [ 628.972580][ T5833] Bluetooth: hci6: command tx timeout [ 629.022191][T15861] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 629.035494][T15784] bridge_slave_1: entered promiscuous mode [ 629.104282][T15779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.124941][T15855] zswap: compressor not available [ 629.367716][T15784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.405743][T15857] zswap: compressor not available [ 629.427542][T15779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.515591][T15784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.684543][T15784] team0: Port device team_slave_0 added [ 629.706433][T15779] team0: Port device team_slave_0 added [ 629.773753][T15784] team0: Port device team_slave_1 added [ 629.786059][T15779] team0: Port device team_slave_1 added [ 630.011747][T15784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.037337][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.118584][T15784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.162888][T15779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.192838][T15779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.268804][T15779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.298867][ T7407] hsr_slave_0: left promiscuous mode [ 630.330431][ T7407] hsr_slave_1: left promiscuous mode [ 630.394919][ T7407] veth1_macvtap: left promiscuous mode [ 630.418979][ T7407] veth0_macvtap: left promiscuous mode [ 630.439061][ T7407] veth1_vlan: left promiscuous mode [ 630.461529][ T7407] veth0_vlan: left promiscuous mode [ 630.721980][ T5833] Bluetooth: hci1: command tx timeout [ 631.041209][ T5833] Bluetooth: hci6: command tx timeout [ 631.520033][ T7407] team0 (unregistering): Port device team_slave_1 removed [ 631.610270][ T7407] team0 (unregistering): Port device team_slave_0 removed [ 632.410018][T15784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.426898][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.519482][T15784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.556322][T15779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.584040][T15779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.700616][T15779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.789981][ T5833] Bluetooth: hci1: command tx timeout [ 632.999249][T15779] hsr_slave_0: entered promiscuous mode [ 633.006495][T15779] hsr_slave_1: entered promiscuous mode [ 633.029714][T15779] debugfs: 'hsr0' already exists in 'hsr' [ 633.048541][T15779] Cannot create hsr debugfs directory [ 633.109222][ T5833] Bluetooth: hci6: command tx timeout [ 633.218653][T15784] hsr_slave_0: entered promiscuous mode [ 633.240304][T15784] hsr_slave_1: entered promiscuous mode [ 633.264936][T15784] debugfs: 'hsr0' already exists in 'hsr' [ 633.289047][T15784] Cannot create hsr debugfs directory [ 634.919773][T15921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.958254][T15921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.977726][T15921] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 634.983730][T15921] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 635.001924][T15779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 635.025960][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 635.039411][T15921] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.072180][T15921] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 635.105221][T15779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 635.137395][T15921] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 635.162912][T15779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 635.187844][T15921] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 635.194120][T15921] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 635.219535][T15779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 635.239557][T15921] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 635.283172][T15921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.309894][T15921] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 635.367146][T15921] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 635.428198][T15921] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 635.445686][T15921] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 635.475919][T15921] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 635.498153][ T9588] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 943 with max blocks 3 with error 117 [ 635.562123][ T9588] EXT4-fs (sda1): This should not happen!! Data will be lost [ 635.562123][ T9588] [ 635.702107][ T9588] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 944 with max blocks 1 with error 117 [ 635.774371][ T9588] EXT4-fs (sda1): This should not happen!! Data will be lost [ 635.774371][ T9588] [ 635.839957][T15958] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input130 [ 635.870740][T15784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 635.995037][T15784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 636.157409][T15959] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131 [ 636.204690][T15784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 636.237401][T15784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 636.369660][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 636.631160][T15779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.743071][T15779] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.910144][ T9588] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.917631][ T9588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.928723][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 637.005796][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 637.048625][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.055846][ T7420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.098424][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 637.170286][T15784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.244695][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 637.328624][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.483493][ T5833] Bluetooth: hci6: command 0x0c1a tx timeout [ 637.501677][T15779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.581348][T15779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.682408][T15784] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.766124][T12123] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.773490][T12123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.989291][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.996627][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.448823][T16007] FAULT_INJECTION: forcing a failure. [ 638.448823][T16007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 638.547052][T16007] CPU: 0 UID: 0 PID: 16007 Comm: syz.4.2330 Tainted: G U syzkaller #0 PREEMPT(full) [ 638.547083][T16007] Tainted: [U]=USER [ 638.547089][T16007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 638.547099][T16007] Call Trace: [ 638.547105][T16007] [ 638.547112][T16007] dump_stack_lvl+0x16c/0x1f0 [ 638.547138][T16007] should_fail_ex+0x512/0x640 [ 638.547168][T16007] should_fail_alloc_page+0xe7/0x130 [ 638.547194][T16007] prepare_alloc_pages+0x3c2/0x610 [ 638.547220][T16007] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 638.547246][T16007] ? lock_acquire+0x179/0x350 [ 638.547270][T16007] ? find_held_lock+0x2b/0x80 [ 638.547287][T16007] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 638.547314][T16007] ? xas_find+0x303/0x890 [ 638.547334][T16007] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 638.547355][T16007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 638.547384][T16007] ? policy_nodemask+0xea/0x4e0 [ 638.547408][T16007] alloc_pages_mpol+0x1fb/0x550 [ 638.547432][T16007] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 638.547455][T16007] ? filemap_map_pages+0xe01/0x1b70 [ 638.547475][T16007] folio_alloc_mpol_noprof+0x36/0x2f0 [ 638.547502][T16007] vma_alloc_folio_noprof+0xed/0x1e0 [ 638.547527][T16007] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 638.547554][T16007] ? rcu_read_unlock+0x2d/0xb0 [ 638.547575][T16007] do_wp_page+0x2084/0x52b0 [ 638.547602][T16007] ? __pfx_do_wp_page+0x10/0x10 [ 638.547627][T16007] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 638.547652][T16007] ? ___pte_offset_map+0x2ad/0x4f0 [ 638.547677][T16007] __handle_mm_fault+0x1ae3/0x2aa0 [ 638.547709][T16007] ? __pfx___handle_mm_fault+0x10/0x10 [ 638.547745][T16007] ? lock_vma_under_rcu+0x176/0x530 [ 638.547778][T16007] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 638.547809][T16007] handle_mm_fault+0x589/0xd10 [ 638.547836][T16007] ? __pkru_allows_pkey+0x11/0xb0 [ 638.547866][T16007] do_user_addr_fault+0x60c/0x1370 [ 638.547895][T16007] ? rcu_is_watching+0x12/0xc0 [ 638.547916][T16007] exc_page_fault+0x64/0xc0 [ 638.547936][T16007] asm_exc_page_fault+0x26/0x30 [ 638.547952][T16007] RIP: 0033:0x7f4bde7490d5 [ 638.547967][T16007] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 638.547982][T16007] RSP: 002b:00007f4bdf68ede0 EFLAGS: 00010293 [ 638.547996][T16007] RAX: 0000000000000008 RBX: 00007f4bdf517d60 RCX: 0000000000000000 [ 638.548007][T16007] RDX: 0000000000000000 RSI: 00007f4bde8504b0 RDI: 00007f4bdf517d60 [ 638.548017][T16007] RBP: 00007f4bdf68ef00 R08: 0000000000000000 R09: 0000000000000005 [ 638.548028][T16007] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f4bde84f740 [ 638.548038][T16007] R13: 0000000000000058 R14: 00007f4bde9b7460 R15: 0000000000000000 [ 638.548060][T16007] [ 638.548229][T16007] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 639.149471][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 639.157289][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 639.180118][T15779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.240551][T15779] veth0_vlan: entered promiscuous mode [ 639.258461][T15779] veth1_vlan: entered promiscuous mode [ 639.347310][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 639.375252][T15779] veth0_macvtap: entered promiscuous mode [ 639.410979][T15779] veth1_macvtap: entered promiscuous mode [ 639.417857][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 639.478095][T15779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.525655][T15779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.559392][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 639.577435][ T9607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.603639][T15784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.636669][ T9607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.650809][ T9607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.659594][ T9607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.032845][T12123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.041556][T12123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.352659][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.379030][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.223170][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 641.381426][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 641.414564][T16063] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 641.462511][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.620783][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 641.757314][T16068] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132 [ 641.815046][T15784] veth0_vlan: entered promiscuous mode [ 641.889472][T15784] veth1_vlan: entered promiscuous mode [ 641.974062][T15784] veth0_macvtap: entered promiscuous mode [ 642.056031][T15784] veth1_macvtap: entered promiscuous mode [ 642.188307][T15784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.268060][T15784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.306897][T16069] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133 [ 642.442413][ T9607] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.493441][ T9607] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.665806][ T9607] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.703487][ T9607] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.048034][T16083] zswap: compressor not available [ 643.375903][ T9607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.418508][ T9607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.593206][ T9607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.647944][ T9607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.981169][T16100] FAULT_INJECTION: forcing a failure. [ 643.981169][T16100] name failslab, interval 1, probability 0, space 0, times 0 [ 644.066095][T16100] CPU: 0 UID: 0 PID: 16100 Comm: syz.4.2342 Tainted: G U syzkaller #0 PREEMPT(full) [ 644.066124][T16100] Tainted: [U]=USER [ 644.066130][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.066140][T16100] Call Trace: [ 644.066147][T16100] [ 644.066153][T16100] dump_stack_lvl+0x16c/0x1f0 [ 644.066178][T16100] should_fail_ex+0x512/0x640 [ 644.066207][T16100] should_failslab+0xc2/0x120 [ 644.066232][T16100] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 644.066251][T16100] ? xas_split_alloc+0x11c/0x490 [ 644.066275][T16100] ? xas_split_alloc+0x11c/0x490 [ 644.066304][T16100] xas_split_alloc+0x11c/0x490 [ 644.066331][T16100] __folio_split+0xd73/0x4d80 [ 644.066367][T16100] ? __pfx_try_to_unmap_one+0x10/0x10 [ 644.066397][T16100] ? __mem_cgroup_try_charge_swap+0x8c/0x400 [ 644.066424][T16100] ? __pfx___folio_split+0x10/0x10 [ 644.066458][T16100] ? folio_alloc_swap+0x8af/0xd00 [ 644.066482][T16100] split_folio_to_list+0x9b/0x180 [ 644.066510][T16100] shmem_writeout+0x42e/0x1140 [ 644.066541][T16100] ? __pfx_shmem_writeout+0x10/0x10 [ 644.066567][T16100] ? __pfx_try_to_unmap+0x10/0x10 [ 644.066593][T16100] ? find_held_lock+0x2b/0x80 [ 644.066611][T16100] ? inode_to_bdi+0x9e/0x160 [ 644.066630][T16100] ? folio_clear_dirty_for_io+0x112/0x790 [ 644.066656][T16100] shrink_folio_list+0x2f45/0x4800 [ 644.066689][T16100] ? __pfx_shrink_folio_list+0x10/0x10 [ 644.066714][T16100] ? __lock_acquire+0x622/0x1c90 [ 644.066755][T16100] ? find_held_lock+0x2b/0x80 [ 644.066773][T16100] ? is_bpf_text_address+0x8a/0x1a0 [ 644.066797][T16100] ? bpf_ksym_find+0x124/0x1c0 [ 644.066839][T16100] reclaim_folio_list+0xda/0x5d0 [ 644.066863][T16100] ? __pfx_css_rstat_updated+0x10/0x10 [ 644.066885][T16100] ? __pfx_reclaim_folio_list+0x10/0x10 [ 644.066920][T16100] ? lru_gen_update_size+0x543/0xe10 [ 644.066952][T16100] ? lru_gen_del_folio+0x32b/0x540 [ 644.066979][T16100] reclaim_pages+0x3ec/0x570 [ 644.066997][T16100] ? __pfx_reclaim_pages+0x10/0x10 [ 644.067013][T16100] ? madvise_cold_or_pageout_pte_range+0x1e2f/0x20d0 [ 644.067044][T16100] madvise_cold_or_pageout_pte_range+0x14d1/0x20d0 [ 644.067077][T16100] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 644.067103][T16100] ? __lock_acquire+0x622/0x1c90 [ 644.067127][T16100] ? __pfx_stack_trace_save+0x10/0x10 [ 644.067148][T16100] ? stack_depot_save_flags+0x29/0x9c0 [ 644.067174][T16100] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 644.067200][T16100] walk_pgd_range+0xc05/0x1f50 [ 644.067237][T16100] ? __pfx_walk_pgd_range+0x10/0x10 [ 644.067261][T16100] __walk_page_range+0x163/0x820 [ 644.067282][T16100] ? __lock_acquire+0xb8a/0x1c90 [ 644.067309][T16100] walk_page_range_vma+0x2c7/0xa20 [ 644.067331][T16100] ? __pfx_walk_page_range_vma+0x10/0x10 [ 644.067350][T16100] ? find_held_lock+0x2b/0x80 [ 644.067375][T16100] madvise_pageout+0x257/0x540 [ 644.067399][T16100] ? __pfx_madvise_pageout+0x10/0x10 [ 644.067420][T16100] ? finish_task_switch.isra.0+0x21c/0xc10 [ 644.067453][T16100] madvise_vma_behavior+0xb14/0x2d50 [ 644.067482][T16100] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 644.067502][T16100] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 644.067529][T16100] ? mas_prev+0x9b/0xf0 [ 644.067548][T16100] ? __pfx_mas_prev+0x10/0x10 [ 644.067574][T16100] ? find_vma_prev+0xd3/0x150 [ 644.067596][T16100] ? find_held_lock+0x2b/0x80 [ 644.067612][T16100] ? __pfx_find_vma_prev+0x10/0x10 [ 644.067643][T16100] ? __futex_wait+0x24b/0x2f0 [ 644.067672][T16100] madvise_walk_vmas+0x31f/0x9c0 [ 644.067699][T16100] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 644.067729][T16100] madvise_do_behavior+0x1e2/0x530 [ 644.067837][T16100] ? futex_private_hash_put+0x18a/0x300 [ 644.067863][T16100] ? __pfx_madvise_do_behavior+0x10/0x10 [ 644.067892][T16100] ? down_read+0x13d/0x480 [ 644.067929][T16100] do_madvise+0x176/0x240 [ 644.067955][T16100] ? __pfx_do_madvise+0x10/0x10 [ 644.067980][T16100] ? do_futex+0x122/0x350 [ 644.068031][T16100] ? xfd_validate_state+0x61/0x180 [ 644.068055][T16100] ? __pfx_ksys_write+0x10/0x10 [ 644.068079][T16100] __x64_sys_madvise+0xa9/0x110 [ 644.068103][T16100] ? lockdep_hardirqs_on+0x7c/0x110 [ 644.068122][T16100] do_syscall_64+0xcd/0xfa0 [ 644.068143][T16100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.068161][T16100] RIP: 0033:0x7f4bde78f6c9 [ 644.068176][T16100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.068192][T16100] RSP: 002b:00007f4bdf690038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 644.068209][T16100] RAX: ffffffffffffffda RBX: 00007f4bde9e5fa0 RCX: 00007f4bde78f6c9 [ 644.068220][T16100] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000 [ 644.068230][T16100] RBP: 00007f4bde811f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.068245][T16100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.068255][T16100] R13: 00007f4bde9e6038 R14: 00007f4bde9e5fa0 R15: 00007ffc0a00eee8 [ 644.068278][T16100] [ 644.564078][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.051916][T16110] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 645.515292][T16135] FAULT_INJECTION: forcing a failure. [ 645.515292][T16135] name failslab, interval 1, probability 0, space 0, times 0 [ 645.552107][T16135] CPU: 0 UID: 0 PID: 16135 Comm: syz.3.2346 Tainted: G U syzkaller #0 PREEMPT(full) [ 645.552138][T16135] Tainted: [U]=USER [ 645.552144][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 645.552154][T16135] Call Trace: [ 645.552160][T16135] [ 645.552167][T16135] dump_stack_lvl+0x16c/0x1f0 [ 645.552191][T16135] should_fail_ex+0x512/0x640 [ 645.552217][T16135] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 645.552237][T16135] should_failslab+0xc2/0x120 [ 645.552260][T16135] kmem_cache_alloc_noprof+0x75/0x6e0 [ 645.552277][T16135] ? ptlock_alloc+0x1f/0x70 [ 645.552308][T16135] ? ptlock_alloc+0x1f/0x70 [ 645.552342][T16135] ptlock_alloc+0x1f/0x70 [ 645.552368][T16135] pte_alloc_one+0x84/0x350 [ 645.552389][T16135] __pte_alloc+0x6d/0x380 [ 645.552410][T16135] ? __pfx___pte_alloc+0x10/0x10 [ 645.552430][T16135] ? _raw_spin_unlock+0x28/0x50 [ 645.552447][T16135] ? __pmd_alloc+0x64f/0x8b0 [ 645.552471][T16135] copy_page_range+0x44a1/0x6930 [ 645.552522][T16135] ? __pfx_copy_page_range+0x10/0x10 [ 645.552550][T16135] ? mas_store+0x860/0x1030 [ 645.552570][T16135] ? __pfx___might_resched+0x10/0x10 [ 645.552589][T16135] ? find_held_lock+0x2b/0x80 [ 645.552606][T16135] ? __pfx_mas_store+0x10/0x10 [ 645.552626][T16135] ? __vma_enter_locked+0x163/0x3f0 [ 645.552663][T16135] dup_mmap+0xe80/0x2280 [ 645.552695][T16135] ? __pfx_dup_mmap+0x10/0x10 [ 645.552741][T16135] copy_process+0x3f0c/0x76a0 [ 645.552762][T16135] ? __pfx___futex_wait+0x10/0x10 [ 645.552787][T16135] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 645.552814][T16135] ? __pfx_copy_process+0x10/0x10 [ 645.552836][T16135] ? futex_private_hash_put+0x176/0x300 [ 645.552862][T16135] ? futex_private_hash_put+0x18a/0x300 [ 645.552887][T16135] kernel_clone+0xfc/0x930 [ 645.552909][T16135] ? __pfx_kernel_clone+0x10/0x10 [ 645.552944][T16135] __do_sys_clone+0xce/0x120 [ 645.552965][T16135] ? __pfx___do_sys_clone+0x10/0x10 [ 645.552986][T16135] ? __pfx_proc_ptrace_connector+0x10/0x10 [ 645.553013][T16135] ? xfd_validate_state+0x61/0x180 [ 645.553045][T16135] do_syscall_64+0xcd/0xfa0 [ 645.553066][T16135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.553083][T16135] RIP: 0033:0x7f7183b8f6c9 [ 645.553097][T16135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.553114][T16135] RSP: 002b:00007f7181df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 645.553131][T16135] RAX: ffffffffffffffda RBX: 00007f7183de5fa0 RCX: 00007f7183b8f6c9 [ 645.553142][T16135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 645.553152][T16135] RBP: 00007f7183c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 645.553162][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.553171][T16135] R13: 00007f7183de6038 R14: 00007f7183de5fa0 R15: 00007ffd6701ab98 [ 645.553194][T16135] [ 645.845124][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.933988][T16140] batman_adv: Routing algorithm '' is not supported [ 647.375415][T16142] ubi0: attaching mtd0 [ 647.391992][T16142] ubi0: scanning is finished [ 647.522470][T16142] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 648.137759][T16142] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 648.170264][T16162] ovs_: entered promiscuous mode [ 648.644503][T16169] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 648.747536][T16175] sd 0:0:1:0: PR command failed: 1026 [ 648.903667][T16175] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 648.920885][T16181] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 648.920885][T16181] M' is too long [ 648.966548][T16175] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 648.984576][T16181] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 648.984576][T16181] W ' is too long [ 649.945812][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 650.344063][T16210] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 650.638730][T16211] can: request_module (can-proto-4) failed. [ 651.020414][T16225] nfs: Bad value for 'source' [ 651.868216][T16236] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input134 [ 652.787712][T16237] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input135 [ 653.274713][T16253] FAULT_INJECTION: forcing a failure. [ 653.274713][T16253] name failslab, interval 1, probability 0, space 0, times 0 [ 653.392653][T16253] CPU: 0 UID: 0 PID: 16253 Comm: syz.6.2372 Tainted: G U syzkaller #0 PREEMPT(full) [ 653.392683][T16253] Tainted: [U]=USER [ 653.392690][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 653.392700][T16253] Call Trace: [ 653.392706][T16253] [ 653.392713][T16253] dump_stack_lvl+0x16c/0x1f0 [ 653.392738][T16253] should_fail_ex+0x512/0x640 [ 653.392764][T16253] ? __kmalloc_noprof+0xca/0x880 [ 653.392794][T16253] should_failslab+0xc2/0x120 [ 653.392817][T16253] __kmalloc_noprof+0xdd/0x880 [ 653.392844][T16253] ? string_escape_mem+0x6c8/0xde0 [ 653.392862][T16253] ? kstrdup_quotable+0xc2/0x190 [ 653.392883][T16253] ? kstrdup_quotable+0xc2/0x190 [ 653.392900][T16253] kstrdup_quotable+0xc2/0x190 [ 653.392918][T16253] ? __pfx_kstrdup_quotable+0x10/0x10 [ 653.392937][T16253] ? get_cmdline+0x86/0x380 [ 653.392967][T16253] kstrdup_quotable_cmdline+0x127/0x210 [ 653.392989][T16253] __report_access+0x77/0x370 [ 653.393008][T16253] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.393027][T16253] task_work_run+0x150/0x240 [ 653.393055][T16253] ? __pfx_task_work_run+0x10/0x10 [ 653.393087][T16253] exit_to_user_mode_loop+0xec/0x130 [ 653.393113][T16253] do_syscall_64+0x426/0xfa0 [ 653.393134][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.393151][T16253] RIP: 0033:0x7feb1eb8f6c9 [ 653.393165][T16253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.393181][T16253] RSP: 002b:00007feb1fa3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 653.393199][T16253] RAX: ffffffffffffffff RBX: 00007feb1ede5fa0 RCX: 00007feb1eb8f6c9 [ 653.393209][T16253] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 653.393219][T16253] RBP: 00007feb1ec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 653.393229][T16253] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 653.393239][T16253] R13: 00007feb1ede6038 R14: 00007feb1ede5fa0 R15: 00007ffffe1de6d8 [ 653.393262][T16253] [ 653.393299][T16253] ptrace attach of "./syz-executor exec"[15784] was attempted by "(null)"[16253] [ 655.096716][T16266] FAULT_INJECTION: forcing a failure. [ 655.096716][T16266] name failslab, interval 1, probability 0, space 0, times 0 [ 655.268410][T16262] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 928 with max blocks 17 with error 117 [ 655.372500][T16266] CPU: 0 UID: 0 PID: 16266 Comm: syz.5.2374 Tainted: G U syzkaller #0 PREEMPT(full) [ 655.372549][T16266] Tainted: [U]=USER [ 655.372555][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 655.372565][T16266] Call Trace: [ 655.372571][T16266] [ 655.372578][T16266] dump_stack_lvl+0x16c/0x1f0 [ 655.372604][T16266] should_fail_ex+0x512/0x640 [ 655.372634][T16266] should_failslab+0xc2/0x120 [ 655.372660][T16266] __kmalloc_cache_noprof+0x72/0x780 [ 655.372686][T16266] ? do_raw_spin_lock+0x12c/0x2b0 [ 655.372722][T16266] ? tipc_group_create+0xbc/0x660 [ 655.372745][T16266] ? tipc_group_create+0xbc/0x660 [ 655.372763][T16266] tipc_group_create+0xbc/0x660 [ 655.372785][T16266] tipc_setsockopt+0x7f0/0xdb0 [ 655.372810][T16266] ? __pfx_tipc_setsockopt+0x10/0x10 [ 655.372844][T16266] ? __pfx_tipc_setsockopt+0x10/0x10 [ 655.372868][T16266] do_sock_setsockopt+0xf3/0x1d0 [ 655.372893][T16266] __sys_setsockopt+0x120/0x1a0 [ 655.372923][T16266] __x64_sys_setsockopt+0xbd/0x160 [ 655.372948][T16266] ? do_syscall_64+0x91/0xfa0 [ 655.372967][T16266] ? lockdep_hardirqs_on+0x7c/0x110 [ 655.372986][T16266] do_syscall_64+0xcd/0xfa0 [ 655.373006][T16266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.373023][T16266] RIP: 0033:0x7f35c058f6c9 [ 655.373036][T16266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.373052][T16266] RSP: 002b:00007f35c145f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 655.373069][T16266] RAX: ffffffffffffffda RBX: 00007f35c07e6090 RCX: 00007f35c058f6c9 [ 655.373080][T16266] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 655.373090][T16266] RBP: 00007f35c0611f91 R08: 0000000000000014 R09: 0000000000000000 [ 655.373100][T16266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.373110][T16266] R13: 00007f35c07e6128 R14: 00007f35c07e6090 R15: 00007fff562c9dd8 [ 655.373133][T16266] [ 655.831971][T16262] EXT4-fs (sda1): This should not happen!! Data will be lost [ 655.831971][T16262] [ 655.869072][T16274] FAULT_INJECTION: forcing a failure. [ 655.869072][T16274] name failslab, interval 1, probability 0, space 0, times 0 [ 655.926227][T16274] CPU: 0 UID: 7 PID: 16274 Comm: syz.4.2378 Tainted: G U syzkaller #0 PREEMPT(full) [ 655.926258][T16274] Tainted: [U]=USER [ 655.926264][T16274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 655.926273][T16274] Call Trace: [ 655.926279][T16274] [ 655.926286][T16274] dump_stack_lvl+0x16c/0x1f0 [ 655.926311][T16274] should_fail_ex+0x512/0x640 [ 655.926338][T16274] ? __kmalloc_noprof+0xca/0x880 [ 655.926368][T16274] should_failslab+0xc2/0x120 [ 655.926391][T16274] __kmalloc_noprof+0xdd/0x880 [ 655.926422][T16274] ? lsm_blob_alloc+0x68/0x90 [ 655.926447][T16274] ? lsm_blob_alloc+0x68/0x90 [ 655.926467][T16274] lsm_blob_alloc+0x68/0x90 [ 655.926488][T16274] security_sk_alloc+0x30/0x270 [ 655.926516][T16274] sk_prot_alloc+0x1c7/0x2a0 [ 655.926539][T16274] sk_alloc+0x36/0xc20 [ 655.926573][T16274] __netlink_create+0x5e/0x2c0 [ 655.926598][T16274] ? __wake_up+0x3f/0x60 [ 655.926619][T16274] netlink_create+0x39e/0x620 [ 655.926645][T16274] ? __pfx_genl_bind+0x10/0x10 [ 655.926663][T16274] ? __pfx_genl_unbind+0x10/0x10 [ 655.926681][T16274] ? __pfx_genl_release+0x10/0x10 [ 655.926703][T16274] __sock_create+0x338/0x8d0 [ 655.926730][T16274] __sys_socket+0x14d/0x260 [ 655.926753][T16274] ? __pfx___sys_socket+0x10/0x10 [ 655.926777][T16274] ? do_user_addr_fault+0x843/0x1370 [ 655.926797][T16274] __x64_sys_socket+0x72/0xb0 [ 655.926819][T16274] ? lockdep_hardirqs_on+0x7c/0x110 [ 655.926839][T16274] do_syscall_64+0xcd/0xfa0 [ 655.926860][T16274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.926878][T16274] RIP: 0033:0x7f4bde7915e7 [ 655.926892][T16274] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.926909][T16274] RSP: 002b:00007f4bdf68efa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 655.926926][T16274] RAX: ffffffffffffffda RBX: 00007f4bde9e5fa0 RCX: 00007f4bde7915e7 [ 655.926937][T16274] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 655.926947][T16274] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 655.926957][T16274] R10: 0000200000000740 R11: 0000000000000286 R12: 0000000000000000 [ 655.926967][T16274] R13: 00007f4bde9e6038 R14: 00007f4bde9e5fa0 R15: 00007ffc0a00eee8 [ 655.926988][T16274] [ 658.116361][T16308] FAULT_INJECTION: forcing a failure. [ 658.116361][T16308] name fail_futex, interval 1, probability 0, space 0, times 0 [ 658.213220][T16324] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136 [ 658.232637][T16308] CPU: 0 UID: 0 PID: 16308 Comm: syz.5.2386 Tainted: G U syzkaller #0 PREEMPT(full) [ 658.232666][T16308] Tainted: [U]=USER [ 658.232671][T16308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 658.232681][T16308] Call Trace: [ 658.232687][T16308] [ 658.232693][T16308] dump_stack_lvl+0x16c/0x1f0 [ 658.232717][T16308] should_fail_ex+0x512/0x640 [ 658.232748][T16308] should_fail_futex+0x4c/0x60 [ 658.232769][T16308] __x64_sys_futex+0x25e/0x4c0 [ 658.232796][T16308] ? __pfx___x64_sys_futex+0x10/0x10 [ 658.232837][T16308] do_syscall_64+0xcd/0xfa0 [ 658.232858][T16308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.232876][T16308] RIP: 0033:0x7f35c058f6c9 [ 658.232890][T16308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.232907][T16308] RSP: 002b:00007fff562c9f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 658.232924][T16308] RAX: ffffffffffffffda RBX: 00000000000a161d RCX: 00007f35c058f6c9 [ 658.232934][T16308] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f35c07e618c [ 658.232944][T16308] RBP: 0000000000000032 R08: 00007f35c1481000 R09: 00000018562ca22f [ 658.232960][T16308] R10: 00007fff562ca030 R11: 0000000000000246 R12: 00007f35c07e618c [ 658.232970][T16308] R13: 00007fff562ca030 R14: 00000000000a164f R15: 00007fff562ca050 [ 658.232991][T16308] [ 658.454060][T16323] vivid-000: kernel_thread() failed [ 658.790781][T16327] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input137 [ 659.790860][T16349] netlink: 'syz.6.2394': attribute type 2 has an invalid length. [ 660.554725][T16352] zswap: compressor not available [ 661.626167][T16382] MTRR 1 not used [ 662.783243][T16401] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input138 [ 664.116544][T16403] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139 [ 666.539765][ T7407] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 944 with max blocks 1 with error 117 [ 666.641865][ T7407] EXT4-fs (sda1): This should not happen!! Data will be lost [ 666.641865][ T7407] [ 667.507992][T16454] ima: policy update failed [ 667.577991][ T30] audit: type=1802 audit(4294967361.696:14): pid=16454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2417" res=0 errno=0 [ 667.631664][T16448] sp0: Synchronizing with TNC [ 668.420309][T16463] vivid-007: ================= START STATUS ================= [ 668.460064][T16463] vivid-007: Generate PTS: true [ 668.508591][T16463] vivid-007: Generate SCR: true [ 668.542459][T16463] tpg source WxH: 320x240 (Y'CbCr) [ 668.578098][T16463] tpg field: 1 [ 668.581821][T16463] tpg crop: (0,0)/320x240 [ 668.622325][T16463] tpg compose: (0,0)/320x240 [ 668.645266][T16463] tpg colorspace: 8 [ 668.659864][T16463] tpg transfer function: 0/0 [ 668.697425][T16463] tpg Y'CbCr encoding: 0/0 [ 668.702144][T16463] tpg quantization: 0/0 [ 668.729403][T16463] tpg RGB range: 0/2 [ 668.733417][T16463] vivid-007: ================== END STATUS ================== [ 669.565726][T16488] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 669.692200][T16488] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 670.195201][T16499] scsi_dev_info_list_add_str: bad dev info string '/&c~n] | [ 670.195201][T16499] M' '' '' [ 672.544761][T16505] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 673.370949][T16531] netlink: 'syz.6.2430': attribute type 1 has an invalid length. [ 673.573963][T16531] nbd: error processing sock list [ 673.937644][T16505] PCI: Can't parse resource_alignment parameter: BFjl [ 674.963737][T16545] FAULT_INJECTION: forcing a failure. [ 674.963737][T16545] name failslab, interval 1, probability 0, space 0, times 0 [ 675.083720][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2440'. [ 675.132344][T16545] CPU: 0 UID: 0 PID: 16545 Comm: syz.5.2440 Tainted: G U syzkaller #0 PREEMPT(full) [ 675.132374][T16545] Tainted: [U]=USER [ 675.132380][T16545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 675.132390][T16545] Call Trace: [ 675.132396][T16545] [ 675.132403][T16545] dump_stack_lvl+0x16c/0x1f0 [ 675.132428][T16545] should_fail_ex+0x512/0x640 [ 675.132454][T16545] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 675.132477][T16545] should_failslab+0xc2/0x120 [ 675.132500][T16545] __kmalloc_node_noprof+0xe0/0x8a0 [ 675.132520][T16545] ? load_msg+0x43/0x4a0 [ 675.132543][T16545] ? load_msg+0x43/0x4a0 [ 675.132560][T16545] load_msg+0x43/0x4a0 [ 675.132579][T16545] ? __pfx___sys_sendto+0x10/0x10 [ 675.132607][T16545] do_msgrcv+0x202/0x16c0 [ 675.132627][T16545] ? do_futex+0x122/0x350 [ 675.132649][T16545] ? __pfx_do_msg_fill+0x10/0x10 [ 675.132675][T16545] ? __pfx_do_msgrcv+0x10/0x10 [ 675.132694][T16545] ? __x64_sys_futex+0x1e0/0x4c0 [ 675.132721][T16545] ? xfd_validate_state+0x61/0x180 [ 675.132744][T16545] ? __pfx_ksys_write+0x10/0x10 [ 675.132769][T16545] ? do_syscall_64+0xcd/0xfa0 [ 675.132788][T16545] do_syscall_64+0xcd/0xfa0 [ 675.132807][T16545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.132824][T16545] RIP: 0033:0x7f35c058f6c9 [ 675.132839][T16545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.132854][T16545] RSP: 002b:00007f35c1480038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 675.132871][T16545] RAX: ffffffffffffffda RBX: 00007f35c07e5fa0 RCX: 00007f35c058f6c9 [ 675.132882][T16545] RDX: 0000002400000000 RSI: 0000000000000000 RDI: 00000000000000ff [ 675.132892][T16545] RBP: 00007f35c0611f91 R08: 000000006bc2cc7d R09: 0000000000000000 [ 675.132901][T16545] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 675.132911][T16545] R13: 00007f35c07e6038 R14: 00007f35c07e5fa0 R15: 00007fff562c9dd8 [ 675.132932][T16545] [ 679.029578][T16592] openvswitch: netlink: Key type 29 is not supported [ 679.291376][T16602] FAULT_INJECTION: forcing a failure. [ 679.291376][T16602] name failslab, interval 1, probability 0, space 0, times 0 [ 679.366334][T16602] CPU: 0 UID: 0 PID: 16602 Comm: syz.4.2444 Tainted: G U syzkaller #0 PREEMPT(full) [ 679.366364][T16602] Tainted: [U]=USER [ 679.366370][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 679.366379][T16602] Call Trace: [ 679.366386][T16602] [ 679.366393][T16602] dump_stack_lvl+0x16c/0x1f0 [ 679.366418][T16602] should_fail_ex+0x512/0x640 [ 679.366445][T16602] ? __kmalloc_noprof+0xca/0x880 [ 679.366482][T16602] should_failslab+0xc2/0x120 [ 679.366505][T16602] __kmalloc_noprof+0xdd/0x880 [ 679.366531][T16602] ? __pfx___might_resched+0x10/0x10 [ 679.366547][T16602] ? load_msg+0x118/0x4a0 [ 679.366570][T16602] ? load_msg+0x118/0x4a0 [ 679.366587][T16602] load_msg+0x118/0x4a0 [ 679.366609][T16602] do_msgrcv+0x202/0x16c0 [ 679.366630][T16602] ? do_futex+0x122/0x350 [ 679.366652][T16602] ? __pfx_do_msg_fill+0x10/0x10 [ 679.366678][T16602] ? __pfx_do_msgrcv+0x10/0x10 [ 679.366698][T16602] ? __x64_sys_futex+0x1e0/0x4c0 [ 679.366724][T16602] ? xfd_validate_state+0x61/0x180 [ 679.366748][T16602] ? __pfx_ksys_write+0x10/0x10 [ 679.366772][T16602] ? do_syscall_64+0xcd/0xfa0 [ 679.366789][T16602] do_syscall_64+0xcd/0xfa0 [ 679.366809][T16602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.366826][T16602] RIP: 0033:0x7f4bde78f6c9 [ 679.366841][T16602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.366856][T16602] RSP: 002b:00007f4bdf690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 679.366873][T16602] RAX: ffffffffffffffda RBX: 00007f4bde9e5fa0 RCX: 00007f4bde78f6c9 [ 679.366883][T16602] RDX: 0000002400000000 RSI: 0000000000000000 RDI: 00000000000000ff [ 679.366893][T16602] RBP: 00007f4bde811f91 R08: 000000006bc2cc7d R09: 0000000000000000 [ 679.366903][T16602] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 679.366913][T16602] R13: 00007f4bde9e6038 R14: 00007f4bde9e5fa0 R15: 00007ffc0a00eee8 [ 679.366934][T16602] [ 681.442478][T16620] zswap: compressor not available [ 682.838614][T16650] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2456'. [ 682.988024][T16654] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2457'. [ 683.340141][T16657] nvme_fcloop: unknown parameter or missing value '0' [ 683.752805][T16662] mtrr: base(0x4000000) is not aligned on a size(0x0000) boundary [ 684.635726][T16678] FAULT_INJECTION: forcing a failure. [ 684.635726][T16678] name failslab, interval 1, probability 0, space 0, times 0 [ 684.655301][T16676] FAULT_INJECTION: forcing a failure. [ 684.655301][T16676] name failslab, interval 1, probability 0, space 0, times 0 [ 684.694579][T16678] CPU: 0 UID: 0 PID: 16678 Comm: syz.4.2464 Tainted: G U syzkaller #0 PREEMPT(full) [ 684.694608][T16678] Tainted: [U]=USER [ 684.694614][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.694624][T16678] Call Trace: [ 684.694630][T16678] [ 684.694637][T16678] dump_stack_lvl+0x16c/0x1f0 [ 684.694662][T16678] should_fail_ex+0x512/0x640 [ 684.694687][T16678] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 684.694707][T16678] should_failslab+0xc2/0x120 [ 684.694730][T16678] kmem_cache_alloc_noprof+0x75/0x6e0 [ 684.694746][T16678] ? __memcg_slab_post_alloc_hook+0x47c/0x940 [ 684.694769][T16678] ? ep_ptable_queue_proc+0x5b/0x280 [ 684.694789][T16678] ? ep_ptable_queue_proc+0x5b/0x280 [ 684.694803][T16678] ? do_raw_spin_lock+0x12c/0x2b0 [ 684.694829][T16678] ep_ptable_queue_proc+0x5b/0x280 [ 684.694845][T16678] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 684.694861][T16678] inotify_poll+0x7b/0x160 [ 684.694883][T16678] ? __pfx_inotify_poll+0x10/0x10 [ 684.694904][T16678] ep_item_poll+0x141/0x1f0 [ 684.694922][T16678] do_epoll_ctl+0x1fae/0x3790 [ 684.694949][T16678] ? __pfx_do_epoll_ctl+0x10/0x10 [ 684.694965][T16678] ? find_held_lock+0x2b/0x80 [ 684.694981][T16678] ? __might_fault+0xe3/0x190 [ 684.694997][T16678] ? __might_fault+0xe3/0x190 [ 684.695012][T16678] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 684.695035][T16678] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 684.695052][T16678] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 684.695071][T16678] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 684.695096][T16678] do_syscall_64+0xcd/0xfa0 [ 684.695117][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.695134][T16678] RIP: 0033:0x7f4bde78f6c9 [ 684.695147][T16678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.695163][T16678] RSP: 002b:00007f4bdf690038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 684.695190][T16678] RAX: ffffffffffffffda RBX: 00007f4bde9e5fa0 RCX: 00007f4bde78f6c9 [ 684.695201][T16678] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 684.695211][T16678] RBP: 00007f4bde811f91 R08: 0000000000000000 R09: 0000000000000000 [ 684.695220][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.695230][T16678] R13: 00007f4bde9e6038 R14: 00007f4bde9e5fa0 R15: 00007ffc0a00eee8 [ 684.695253][T16678] [ 684.942988][T16676] CPU: 0 UID: 0 PID: 16676 Comm: syz.3.2463 Tainted: G U syzkaller #0 PREEMPT(full) [ 684.943019][T16676] Tainted: [U]=USER [ 684.943025][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.943035][T16676] Call Trace: [ 684.943042][T16676] [ 684.943049][T16676] dump_stack_lvl+0x16c/0x1f0 [ 684.943074][T16676] should_fail_ex+0x512/0x640 [ 684.943100][T16676] ? __kmalloc_noprof+0xca/0x880 [ 684.943130][T16676] should_failslab+0xc2/0x120 [ 684.943154][T16676] __kmalloc_noprof+0xdd/0x880 [ 684.943187][T16676] ? get_proc_net+0x1c3/0x270 [ 684.943214][T16676] ? __seq_open_private+0x22/0xd0 [ 684.943242][T16676] ? __seq_open_private+0x22/0xd0 [ 684.943266][T16676] __seq_open_private+0x22/0xd0 [ 684.943291][T16676] seq_open_net+0x15c/0x2a0 [ 684.943316][T16676] ? __pfx_seq_open_net+0x10/0x10 [ 684.943343][T16676] proc_reg_open+0x2ab/0x5f0 [ 684.943368][T16676] do_dentry_open+0x982/0x1530 [ 684.943388][T16676] ? __pfx_proc_reg_open+0x10/0x10 [ 684.943414][T16676] vfs_open+0x82/0x3f0 [ 684.943440][T16676] path_openat+0x1de4/0x2cb0 [ 684.943466][T16676] ? __pfx_path_openat+0x10/0x10 [ 684.943485][T16676] ? __lock_acquire+0xb8a/0x1c90 [ 684.943526][T16676] do_filp_open+0x20b/0x470 [ 684.943546][T16676] ? __pfx_do_filp_open+0x10/0x10 [ 684.943577][T16676] ? __pfx_kfree_link+0x10/0x10 [ 684.943607][T16676] ? alloc_fd+0x471/0x7d0 [ 684.943629][T16676] do_sys_openat2+0x11b/0x1d0 [ 684.943652][T16676] ? __pfx_do_sys_openat2+0x10/0x10 [ 684.943678][T16676] ? find_held_lock+0x2b/0x80 [ 684.943700][T16676] __x64_sys_openat+0x174/0x210 [ 684.943730][T16676] ? __pfx___x64_sys_openat+0x10/0x10 [ 684.943764][T16676] do_syscall_64+0xcd/0xfa0 [ 684.943785][T16676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.943802][T16676] RIP: 0033:0x7f7183b8f6c9 [ 684.943816][T16676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.943833][T16676] RSP: 002b:00007f7181df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 684.943850][T16676] RAX: ffffffffffffffda RBX: 00007f7183de5fa0 RCX: 00007f7183b8f6c9 [ 684.943861][T16676] RDX: 0000000000040900 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 684.943871][T16676] RBP: 00007f7183c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 684.943881][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.943890][T16676] R13: 00007f7183de6038 R14: 00007f7183de5fa0 R15: 00007ffd6701ab98 [ 684.943912][T16676] [ 685.504680][T16683] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 942 with max blocks 2 with error 117 [ 685.640323][T16683] EXT4-fs (sda1): This should not happen!! Data will be lost [ 685.640323][T16683] [ 685.717566][T16689] FAULT_INJECTION: forcing a failure. [ 685.717566][T16689] name failslab, interval 1, probability 0, space 0, times 0 [ 685.826008][T16689] CPU: 0 UID: 0 PID: 16689 Comm: syz.3.2466 Tainted: G U syzkaller #0 PREEMPT(full) [ 685.826038][T16689] Tainted: [U]=USER [ 685.826044][T16689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 685.826053][T16689] Call Trace: [ 685.826059][T16689] [ 685.826065][T16689] dump_stack_lvl+0x16c/0x1f0 [ 685.826090][T16689] should_fail_ex+0x512/0x640 [ 685.826116][T16689] ? __kmalloc_cache_noprof+0x5f/0x780 [ 685.826147][T16689] should_failslab+0xc2/0x120 [ 685.826186][T16689] __kmalloc_cache_noprof+0x72/0x780 [ 685.826215][T16689] ? blk_mq_init_allocated_queue+0xd1/0x1240 [ 685.826240][T16689] ? blk_mq_init_allocated_queue+0xd1/0x1240 [ 685.826262][T16689] blk_mq_init_allocated_queue+0xd1/0x1240 [ 685.826286][T16689] ? blk_alloc_queue+0x630/0x760 [ 685.826301][T16689] ? blk_mq_alloc_queue+0x172/0x280 [ 685.826321][T16689] ? blk_alloc_queue+0x1a3/0x760 [ 685.826338][T16689] blk_mq_alloc_queue+0x1bb/0x280 [ 685.826359][T16689] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 685.826393][T16689] ? blk_mq_alloc_tag_set+0xb95/0x12e0 [ 685.826418][T16689] __blk_mq_alloc_disk+0x29/0x120 [ 685.826441][T16689] loop_add+0x490/0xb70 [ 685.826460][T16689] ? __pfx_loop_add+0x10/0x10 [ 685.826491][T16689] ? find_held_lock+0x2b/0x80 [ 685.826512][T16689] loop_control_ioctl+0x13e/0x630 [ 685.826530][T16689] ? __pfx_loop_control_ioctl+0x10/0x10 [ 685.826552][T16689] ? __pfx_loop_control_ioctl+0x10/0x10 [ 685.826571][T16689] __x64_sys_ioctl+0x18e/0x210 [ 685.826598][T16689] do_syscall_64+0xcd/0xfa0 [ 685.826619][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.826643][T16689] RIP: 0033:0x7f7183b8f6c9 [ 685.826658][T16689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.826674][T16689] RSP: 002b:00007f7181dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.826692][T16689] RAX: ffffffffffffffda RBX: 00007f7183de6090 RCX: 00007f7183b8f6c9 [ 685.826703][T16689] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 685.826713][T16689] RBP: 00007f7183c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 685.826723][T16689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.826733][T16689] R13: 00007f7183de6128 R14: 00007f7183de6090 R15: 00007ffd6701ab98 [ 685.826754][T16689] [ 687.636302][T16716] random: crng reseeded on system resumption [ 688.243306][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.249773][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.142581][T16726] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2475'. [ 689.556718][T16737] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141 [ 689.965468][T16738] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input142 [ 690.639432][T16749] zswap: compressor not available [ 692.307406][T16783] FAULT_INJECTION: forcing a failure. [ 692.307406][T16783] name failslab, interval 1, probability 0, space 0, times 0 [ 692.366895][T16783] CPU: 0 UID: 0 PID: 16783 Comm: syz.4.2485 Tainted: G U syzkaller #0 PREEMPT(full) [ 692.366927][T16783] Tainted: [U]=USER [ 692.366932][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 692.366942][T16783] Call Trace: [ 692.366948][T16783] [ 692.366955][T16783] dump_stack_lvl+0x16c/0x1f0 [ 692.366980][T16783] should_fail_ex+0x512/0x640 [ 692.367005][T16783] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 692.367026][T16783] should_failslab+0xc2/0x120 [ 692.367049][T16783] kmem_cache_alloc_noprof+0x75/0x6e0 [ 692.367066][T16783] ? seq_open+0x55/0x170 [ 692.367101][T16783] ? seq_open+0x55/0x170 [ 692.367121][T16783] seq_open+0x55/0x170 [ 692.367143][T16783] __seq_open_private+0x3e/0xd0 [ 692.367168][T16783] seq_open_net+0x15c/0x2a0 [ 692.367193][T16783] ? __pfx_seq_open_net+0x10/0x10 [ 692.367220][T16783] proc_reg_open+0x2ab/0x5f0 [ 692.367244][T16783] do_dentry_open+0x982/0x1530 [ 692.367264][T16783] ? __pfx_proc_reg_open+0x10/0x10 [ 692.367290][T16783] vfs_open+0x82/0x3f0 [ 692.367316][T16783] path_openat+0x1de4/0x2cb0 [ 692.367341][T16783] ? __pfx_path_openat+0x10/0x10 [ 692.367360][T16783] ? __lock_acquire+0xb8a/0x1c90 [ 692.367386][T16783] do_filp_open+0x20b/0x470 [ 692.367404][T16783] ? __pfx_do_filp_open+0x10/0x10 [ 692.367429][T16783] ? __pfx_kfree_link+0x10/0x10 [ 692.367459][T16783] ? alloc_fd+0x471/0x7d0 [ 692.367486][T16783] do_sys_openat2+0x11b/0x1d0 [ 692.367510][T16783] ? __pfx_do_sys_openat2+0x10/0x10 [ 692.367535][T16783] ? find_held_lock+0x2b/0x80 [ 692.367557][T16783] __x64_sys_openat+0x174/0x210 [ 692.367582][T16783] ? __pfx___x64_sys_openat+0x10/0x10 [ 692.367615][T16783] do_syscall_64+0xcd/0xfa0 [ 692.367635][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.367653][T16783] RIP: 0033:0x7f4bde78f6c9 [ 692.367667][T16783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.367683][T16783] RSP: 002b:00007f4bdf690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 692.367701][T16783] RAX: ffffffffffffffda RBX: 00007f4bde9e5fa0 RCX: 00007f4bde78f6c9 [ 692.367712][T16783] RDX: 0000000000040900 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 692.367722][T16783] RBP: 00007f4bde811f91 R08: 0000000000000000 R09: 0000000000000000 [ 692.367732][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.367742][T16783] R13: 00007f4bde9e6038 R14: 00007f4bde9e5fa0 R15: 00007ffc0a00eee8 [ 692.367763][T16783] [ 693.810585][T16814] GUP no longer grows the stack in syz.4.2493 (16814): 10000-411000 (0) [ 693.839199][T16808] zswap: compressor not available [ 693.867140][T16814] CPU: 0 UID: 0 PID: 16814 Comm: syz.4.2493 Tainted: G U syzkaller #0 PREEMPT(full) [ 693.867171][T16814] Tainted: [U]=USER [ 693.867177][T16814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 693.867186][T16814] Call Trace: [ 693.867192][T16814] [ 693.867200][T16814] dump_stack_lvl+0x16c/0x1f0 [ 693.867224][T16814] gup_vma_lookup+0x1d2/0x220 [ 693.867247][T16814] __get_user_pages+0x241/0x3530 [ 693.867278][T16814] ? down_read_killable+0x220/0x4b0 [ 693.867304][T16814] ? __pfx___get_user_pages+0x10/0x10 [ 693.867330][T16814] ? __lock_acquire+0x622/0x1c90 [ 693.867355][T16814] __gup_longterm_locked+0xa92/0x17e0 [ 693.867385][T16814] ? __pfx___gup_longterm_locked+0x10/0x10 [ 693.867412][T16814] ? find_held_lock+0x2b/0x80 [ 693.867429][T16814] ? sanity_check_pinned_pages+0x23/0x11d0 [ 693.867456][T16814] gup_fast_fallback+0xee2/0x22a0 [ 693.867483][T16814] ? stack_depot_save_flags+0x29/0x9c0 [ 693.867520][T16814] ? __pfx_gup_fast_fallback+0x10/0x10 [ 693.867541][T16814] ? do_syscall_64+0xcd/0xfa0 [ 693.867570][T16814] pin_user_pages_fast+0xa7/0xf0 [ 693.867593][T16814] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 693.867623][T16814] iov_iter_extract_pages+0x3a2/0x1ed0 [ 693.867658][T16814] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 693.867690][T16814] ? find_held_lock+0x2b/0x80 [ 693.867707][T16814] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 693.867732][T16814] bio_iov_iter_get_pages+0x395/0x1300 [ 693.867756][T16814] ? find_held_lock+0x2b/0x80 [ 693.867774][T16814] ? bio_associate_blkg+0x137/0x2a0 [ 693.867800][T16814] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 693.867825][T16814] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 693.867847][T16814] ? __lock_acquire+0x622/0x1c90 [ 693.867875][T16814] blkdev_direct_IO+0x128f/0x2100 [ 693.867904][T16814] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 693.867930][T16814] ? filemap_check_errors+0xa9/0x160 [ 693.867954][T16814] ? filemap_write_and_wait_range.part.0+0x60/0x100 [ 693.867984][T16814] blkdev_read_iter+0x289/0x500 [ 693.868006][T16814] do_iter_readv_writev+0x743/0x9e0 [ 693.868027][T16814] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 693.868049][T16814] ? bpf_lsm_file_permission+0x9/0x10 [ 693.868069][T16814] ? security_file_permission+0x71/0x210 [ 693.868089][T16814] ? rw_verify_area+0xcf/0x6c0 [ 693.868107][T16814] vfs_readv+0x4cb/0x8b0 [ 693.868134][T16814] ? __pfx_vfs_readv+0x10/0x10 [ 693.868172][T16814] ? __fget_files+0x20e/0x3c0 [ 693.868195][T16814] ? do_readv+0x132/0x340 [ 693.868209][T16814] do_readv+0x132/0x340 [ 693.868225][T16814] ? __pfx_do_readv+0x10/0x10 [ 693.868248][T16814] do_syscall_64+0xcd/0xfa0 [ 693.868268][T16814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.868287][T16814] RIP: 0033:0x7f4bde78f6c9 [ 693.868302][T16814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.868318][T16814] RSP: 002b:00007f4bdf690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 693.868335][T16814] RAX: ffffffffffffffda RBX: 00007f4bde9e5fa0 RCX: 00007f4bde78f6c9 [ 693.868345][T16814] RDX: 0000000000000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 693.868355][T16814] RBP: 00007f4bde811f91 R08: 0000000000000000 R09: 0000000000000000 [ 693.868365][T16814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.868375][T16814] R13: 00007f4bde9e6038 R14: 00007f4bde9e5fa0 R15: 00007ffc0a00eee8 [ 693.868398][T16814] [ 694.208348][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.379648][T16818] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input144 [ 694.434300][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'. [ 696.057442][T16862] netlink: 146 bytes leftover after parsing attributes in process `syz.5.2500'. [ 696.107695][T16848] zswap: compressor not available [ 696.657195][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 696.667725][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 696.676439][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 696.685129][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 696.693578][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 696.808377][ T7416] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1341 with max blocks 30 with error 117 [ 696.937529][ T7416] EXT4-fs (sda1): This should not happen!! Data will be lost [ 696.937529][ T7416] [ 696.999634][ T7416] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 944 with max blocks 1 with error 117 [ 697.087737][ T7416] EXT4-fs (sda1): This should not happen!! Data will be lost [ 697.087737][ T7416] [ 697.103257][T16879] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input145 [ 697.583741][T16875] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2503'. [ 697.772924][T16871] chnl_net:caif_netlink_parms(): no params data found [ 698.636376][T16871] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.664414][T16871] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.681859][T16871] bridge_slave_0: entered allmulticast mode [ 698.709426][T16871] bridge_slave_0: entered promiscuous mode [ 698.732701][T16871] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.741393][ T5833] Bluetooth: hci7: command tx timeout [ 698.768275][T16871] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.794799][T16871] bridge_slave_1: entered allmulticast mode [ 698.822501][T16871] bridge_slave_1: entered promiscuous mode [ 699.261726][T16871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.321586][T16871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.542510][T16871] team0: Port device team_slave_0 added [ 699.570958][T16871] team0: Port device team_slave_1 added [ 699.742576][T16871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.764550][T16871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.855662][ T5833] block nbd0: Receive control failed (result -107) [ 699.873709][T16871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.938925][T16871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.945936][T16871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.042842][T16871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.238594][T16871] hsr_slave_0: entered promiscuous mode [ 700.269076][T16871] hsr_slave_1: entered promiscuous mode [ 700.300057][T16871] debugfs: 'hsr0' already exists in 'hsr' [ 700.330894][T16871] Cannot create hsr debugfs directory [ 700.802357][ T5833] Bluetooth: hci7: command tx timeout [ 701.302601][T16871] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 701.389753][T16871] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 701.439624][T16871] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 701.487699][T16871] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 701.723955][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2516'. [ 701.767075][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2516'. [ 701.820495][T16943] geneve1: entered promiscuous mode [ 701.831611][T16943] geneve1: entered allmulticast mode [ 701.847106][T16871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.854873][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2516'. [ 701.872829][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2516'. [ 701.892606][T16871] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.930777][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.938130][ T7407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.010614][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.018353][ T7407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.321884][T16953] Invalid ELF header magic: != ELF [ 702.502952][T16871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.874316][ T5833] Bluetooth: hci7: command tx timeout [ 702.983643][T16968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.389598][T16871] veth0_vlan: entered promiscuous mode [ 703.436124][T16871] veth1_vlan: entered promiscuous mode [ 703.542887][T16871] veth0_macvtap: entered promiscuous mode [ 703.588077][T16871] veth1_macvtap: entered promiscuous mode [ 703.699930][T16871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.732066][T16871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.866320][ T9588] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.904560][ T9588] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.953707][ T9588] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.989157][ T9588] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.283122][ T9588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.324204][ T9588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.464813][ T7407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.498046][ T7407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.940611][ T5833] Bluetooth: hci7: command tx timeout [ 708.882595][T17034] FAULT_INJECTION: forcing a failure. [ 708.882595][T17034] name failslab, interval 1, probability 0, space 0, times 0 [ 708.930251][T17034] CPU: 0 UID: 0 PID: 17034 Comm: syz.4.2533 Tainted: G U syzkaller #0 PREEMPT(full) [ 708.930282][T17034] Tainted: [U]=USER [ 708.930294][T17034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 708.930304][T17034] Call Trace: [ 708.930310][T17034] [ 708.930318][T17034] dump_stack_lvl+0x16c/0x1f0 [ 708.930345][T17034] should_fail_ex+0x512/0x640 [ 708.930373][T17034] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 708.930399][T17034] should_failslab+0xc2/0x120 [ 708.930423][T17034] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 708.930445][T17034] ? kstrdup_const+0x63/0x80 [ 708.930468][T17034] ? kstrdup+0x53/0x100 [ 708.930486][T17034] kstrdup+0x53/0x100 [ 708.930506][T17034] kstrdup_const+0x63/0x80 [ 708.930530][T17034] __kernfs_new_node+0x9b/0x8e0 [ 708.930555][T17034] ? __pfx___kernfs_new_node+0x10/0x10 [ 708.930583][T17034] ? find_held_lock+0x2b/0x80 [ 708.930601][T17034] ? kernfs_root+0xee/0x2a0 [ 708.930627][T17034] kernfs_new_node+0x13c/0x1e0 [ 708.930656][T17034] kernfs_create_link+0xcc/0x240 [ 708.930677][T17034] sysfs_do_create_link_sd+0x90/0x140 [ 708.930700][T17034] sysfs_create_link+0x61/0xc0 [ 708.930722][T17034] device_add+0x62c/0x1aa0 [ 708.930751][T17034] ? __pfx_device_add+0x10/0x10 [ 708.930778][T17034] ? lockdep_init_map_type+0x5c/0x280 [ 708.930802][T17034] ? __init_waitqueue_head+0xca/0x150 [ 708.930834][T17034] netdev_register_kobject+0x1a9/0x3d0 [ 708.930860][T17034] register_netdevice+0x13dc/0x2270 [ 708.930883][T17034] ? __pfx_register_netdevice+0x10/0x10 [ 708.930910][T17034] __ip_tunnel_create+0x540/0x6e0 [ 708.930932][T17034] ? __pfx___ip_tunnel_create+0x10/0x10 [ 708.930960][T17034] ip_tunnel_init_net+0x22f/0x7d0 [ 708.930984][T17034] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 708.931012][T17034] ? ops_init+0x77/0x5f0 [ 708.931031][T17034] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 708.931049][T17034] ops_init+0x1e2/0x5f0 [ 708.931069][T17034] setup_net+0x100/0x390 [ 708.931086][T17034] ? __pfx_setup_net+0x10/0x10 [ 708.931105][T17034] ? debug_mutex_init+0x37/0x70 [ 708.931125][T17034] copy_net_ns+0x2f8/0x690 [ 708.931153][T17034] create_new_namespaces+0x3ea/0xa90 [ 708.931178][T17034] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 708.931200][T17034] ksys_unshare+0x45b/0xa40 [ 708.931223][T17034] ? __pfx_ksys_unshare+0x10/0x10 [ 708.931247][T17034] ? xfd_validate_state+0x61/0x180 [ 708.931279][T17034] __x64_sys_unshare+0x31/0x40 [ 708.931301][T17034] do_syscall_64+0xcd/0xfa0 [ 708.931323][T17034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.931341][T17034] RIP: 0033:0x7f4bde78f6c9 [ 708.931356][T17034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.931373][T17034] RSP: 002b:00007f4bdf690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 708.931390][T17034] RAX: ffffffffffffffda RBX: 00007f4bde9e5fa0 RCX: 00007f4bde78f6c9 [ 708.931401][T17034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 708.931411][T17034] RBP: 00007f4bde811f91 R08: 0000000000000000 R09: 0000000000000000 [ 708.931421][T17034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.931431][T17034] R13: 00007f4bde9e6038 R14: 00007f4bde9e5fa0 R15: 00007ffc0a00eee8 [ 708.931454][T17034] [ 709.274482][T17038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2534'. [ 717.152854][T17052] FAULT_INJECTION: forcing a failure. [ 717.152854][T17052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.208116][T17052] CPU: 0 UID: 0 PID: 17052 Comm: syz.4.2538 Tainted: G U syzkaller #0 PREEMPT(full) [ 717.208147][T17052] Tainted: [U]=USER [ 717.208152][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 717.208162][T17052] Call Trace: [ 717.208168][T17052] [ 717.208175][T17052] dump_stack_lvl+0x16c/0x1f0 [ 717.208200][T17052] should_fail_ex+0x512/0x640 [ 717.208233][T17052] _copy_to_user+0x32/0xd0 [ 717.208262][T17052] simple_read_from_buffer+0xcb/0x170 [ 717.208292][T17052] proc_fail_nth_read+0x197/0x240 [ 717.208312][T17052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.208331][T17052] ? rw_verify_area+0xcf/0x6c0 [ 717.208353][T17052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.208371][T17052] vfs_read+0x1e4/0xcf0 [ 717.208392][T17052] ? __pfx___mutex_lock+0x10/0x10 [ 717.208413][T17052] ? __pfx_vfs_read+0x10/0x10 [ 717.208437][T17052] ? __fget_files+0x20e/0x3c0 [ 717.208453][T17052] ? lockdep_hardirqs_on+0x70/0x110 [ 717.208477][T17052] ksys_read+0x12a/0x250 [ 717.208495][T17052] ? __pfx_ksys_read+0x10/0x10 [ 717.208513][T17052] ? __get_user_nocheck_8+0x20/0x20 [ 717.208546][T17052] do_syscall_64+0xcd/0xfa0 [ 717.208567][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.208585][T17052] RIP: 0033:0x7f4bde78e0dc [ 717.208599][T17052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 717.208616][T17052] RSP: 002b:00007f4bdf690030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.208634][T17052] RAX: ffffffffffffffda RBX: 00007f4bde9e5fa0 RCX: 00007f4bde78e0dc [ 717.208645][T17052] RDX: 000000000000000f RSI: 00007f4bdf6900a0 RDI: 0000000000000003 [ 717.208655][T17052] RBP: 00007f4bdf690090 R08: 0000000000000000 R09: 0000000000000000 [ 717.208665][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.208675][T17052] R13: 00007f4bde9e6038 R14: 00007f4bde9e5fa0 R15: 00007ffc0a00eee8 [ 717.208698][T17052] [ 717.422200][T17051] FAULT_INJECTION: forcing a failure. [ 717.422200][T17051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 717.435786][T17051] CPU: 0 UID: 0 PID: 17051 Comm: syz.7.2539 Tainted: G U syzkaller #0 PREEMPT(full) [ 717.435816][T17051] Tainted: [U]=USER [ 717.435821][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 717.435831][T17051] Call Trace: [ 717.435838][T17051] [ 717.435844][T17051] dump_stack_lvl+0x16c/0x1f0 [ 717.435869][T17051] should_fail_ex+0x512/0x640 [ 717.435898][T17051] should_fail_alloc_page+0xe7/0x130 [ 717.435924][T17051] prepare_alloc_pages+0x3c2/0x610 [ 717.435946][T17051] ? is_bpf_text_address+0x94/0x1a0 [ 717.435974][T17051] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 717.435992][T17051] ? arch_stack_walk+0xa6/0x100 [ 717.436019][T17051] ? stack_trace_save+0x8e/0xc0 [ 717.436039][T17051] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 717.436056][T17051] ? rcu_is_watching+0x12/0xc0 [ 717.436081][T17051] ? kasan_save_track+0x14/0x30 [ 717.436101][T17051] ? __kasan_slab_alloc+0x89/0x90 [ 717.436120][T17051] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 717.436136][T17051] ? __pmd_alloc+0xbf/0x8b0 [ 717.436158][T17051] ? __handle_mm_fault+0xada/0x2aa0 [ 717.436183][T17051] ? handle_mm_fault+0x589/0xd10 [ 717.436207][T17051] ? __get_user_pages+0x54e/0x3530 [ 717.436229][T17051] ? populate_vma_page_range+0x267/0x3f0 [ 717.436252][T17051] ? __mm_populate+0x1d8/0x380 [ 717.436274][T17051] ? vm_mmap_pgoff+0x37f/0x470 [ 717.436294][T17051] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 717.436314][T17051] ? __x64_sys_mmap+0x125/0x190 [ 717.436338][T17051] ? do_syscall_64+0xcd/0xfa0 [ 717.436356][T17051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 717.436386][T17051] ? policy_nodemask+0xea/0x4e0 [ 717.436411][T17051] alloc_pages_mpol+0x1fb/0x550 [ 717.436435][T17051] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 717.436465][T17051] alloc_pages_noprof+0x131/0x390 [ 717.436488][T17051] pte_alloc_one+0x1e/0x350 [ 717.436509][T17051] __pte_alloc+0x6d/0x380 [ 717.436529][T17051] ? __pfx___pte_alloc+0x10/0x10 [ 717.436552][T17051] ? do_raw_spin_lock+0x12c/0x2b0 [ 717.436581][T17051] do_pte_missing+0x282c/0x3ba0 [ 717.436608][T17051] ? do_raw_spin_unlock+0x172/0x230 [ 717.436636][T17051] ? _raw_spin_unlock+0x28/0x50 [ 717.436651][T17051] ? __pmd_alloc+0x64f/0x8b0 [ 717.436676][T17051] __handle_mm_fault+0x1556/0x2aa0 [ 717.436709][T17051] ? __pfx___handle_mm_fault+0x10/0x10 [ 717.436760][T17051] handle_mm_fault+0x589/0xd10 [ 717.436791][T17051] __get_user_pages+0x54e/0x3530 [ 717.436824][T17051] ? __pfx___get_user_pages+0x10/0x10 [ 717.436853][T17051] populate_vma_page_range+0x267/0x3f0 [ 717.436880][T17051] ? __pfx_populate_vma_page_range+0x10/0x10 [ 717.436904][T17051] ? __pfx_find_vma_intersection+0x10/0x10 [ 717.436927][T17051] ? do_mmap+0x69c/0x1210 [ 717.436951][T17051] __mm_populate+0x1d8/0x380 [ 717.436977][T17051] ? __pfx___mm_populate+0x10/0x10 [ 717.437003][T17051] ? up_write+0x1b2/0x520 [ 717.437037][T17051] vm_mmap_pgoff+0x37f/0x470 [ 717.437062][T17051] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 717.437089][T17051] ? __x64_sys_futex+0x1e0/0x4c0 [ 717.437112][T17051] ? __x64_sys_futex+0x1e9/0x4c0 [ 717.437138][T17051] ksys_mmap_pgoff+0x7d/0x5c0 [ 717.437159][T17051] ? xfd_validate_state+0x61/0x180 [ 717.437182][T17051] ? __pfx_ksys_write+0x10/0x10 [ 717.437204][T17051] __x64_sys_mmap+0x125/0x190 [ 717.437232][T17051] do_syscall_64+0xcd/0xfa0 [ 717.437253][T17051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.437270][T17051] RIP: 0033:0x7f2ab298f6c9 [ 717.437285][T17051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.437303][T17051] RSP: 002b:00007f2ab38c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 717.437320][T17051] RAX: ffffffffffffffda RBX: 00007f2ab2be5fa0 RCX: 00007f2ab298f6c9 [ 717.437331][T17051] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 717.437341][T17051] RBP: 00007f2ab2a11f91 R08: 0000000000000002 R09: 0000000000008000 [ 717.437351][T17051] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 717.437361][T17051] R13: 00007f2ab2be6038 R14: 00007f2ab2be5fa0 R15: 00007ffd52275d48 [ 717.437384][T17051] [ 718.033591][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 718.049243][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 718.095189][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 718.297726][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 718.322731][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 718.453121][T17069] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146 [ 718.884411][T17073] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input147 [ 719.083908][T17055] chnl_net:caif_netlink_parms(): no params data found [ 719.571357][T17055] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.614978][T17055] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.634822][T17055] bridge_slave_0: entered allmulticast mode [ 719.675749][T17055] bridge_slave_0: entered promiscuous mode [ 719.708939][T17055] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.735453][T17086] [U] [ 719.738865][T17086] [U] [ 719.741595][T17086] [U] [ 719.744401][T17086] [U] [ 719.754070][T17055] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.780150][T17055] bridge_slave_1: entered allmulticast mode [ 719.791556][T17086] [U] [ 719.794297][T17086] [U] [ 719.797097][T17086] [U] [ 719.799911][T17086] [U] [ 719.816810][T17055] bridge_slave_1: entered promiscuous mode [ 719.939480][T17055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.004441][T17055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.058141][T17086] [U] [ 720.060902][T17086] [U] [ 720.063696][T17086] [U] [ 720.066571][T17086] [U] [ 720.105861][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 720.115994][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 720.125099][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 720.134369][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 720.142890][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 720.238155][T17055] team0: Port device team_slave_0 added [ 720.272897][T17055] team0: Port device team_slave_1 added [ 720.281756][T17086] [U] [ 720.284481][T17086] [U] [ 720.287260][T17086] [U] [ 720.289955][T17086] [U] [ 720.373768][ T5833] Bluetooth: hci8: command tx timeout [ 720.401023][T17086] [U] [ 720.403785][T17086] [U] [ 720.406479][T17086] [U] [ 720.409455][T17086] [U] [ 720.421114][T17055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.433366][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.529763][T17055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.542210][T17086] [U] [ 720.544928][T17086] [U] [ 720.547713][T17086] [U] [ 720.550509][T17086] [U] [ 720.600484][T17055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.629086][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.679130][T17086] [U] [ 720.681934][T17086] [U] [ 720.684718][T17086] [U] [ 720.687677][T17086] [U] [ 720.718182][T17055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.811501][T17086] [U] [ 720.814351][T17086] [U] [ 720.817062][T17086] [U] [ 720.819847][T17086] [U] [ 720.888942][T17055] hsr_slave_0: entered promiscuous mode [ 720.905678][T17055] hsr_slave_1: entered promiscuous mode [ 720.928588][T17055] debugfs: 'hsr0' already exists in 'hsr' [ 720.934560][T17086] [U] [ 720.937364][T17086] [U] [ 720.940067][T17086] [U] [ 720.942868][T17086] [U] [ 720.955827][T17055] Cannot create hsr debugfs directory [ 721.054221][T17086] [U] [ 721.057156][T17086] [U] [ 721.060029][T17086] [U] [ 721.062818][T17086] [U] [ 721.187342][T17086] [U] [ 721.190346][T17086] [U] [ 721.193131][T17086] [U] [ 721.195816][T17086] [U] [ 721.277911][T17086] [U] [ 721.280754][T17086] [U] [ 721.283454][T17086] [U] [ 721.286148][T17086] [U] [ 721.396036][T17086] [U] [ 721.398852][T17086] [U] [ 721.401630][T17086] [U] [ 721.404317][T17086] [U] [ 721.525991][T17086] [U] [ 721.528737][T17086] [U] [ 721.531431][T17086] [U] [ 721.534121][T17086] [U] [ 721.665321][T17086] [U] [ 721.668157][T17086] [U] [ 721.671051][T17086] [U] [ 721.673774][T17086] [U] [ 721.716713][T17091] chnl_net:caif_netlink_parms(): no params data found [ 721.766286][T17086] [U] [ 721.769027][T17086] [U] [ 721.771841][T17086] [U] [ 721.774626][T17086] [U] [ 721.892671][T17086] [U] [ 721.895423][T17086] [U] [ 721.898215][T17086] [U] [ 721.901117][T17086] [U] [ 721.942835][T17086] [U] [ 722.067958][T17055] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 722.132705][T17055] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 722.158931][T17055] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 722.200345][ T5833] Bluetooth: hci9: command tx timeout [ 722.250359][T17055] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 722.289075][T17091] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.313388][T17091] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.341357][T17091] bridge_slave_0: entered allmulticast mode [ 722.369636][T17091] bridge_slave_0: entered promiscuous mode [ 722.397231][T17091] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.447601][ T5833] Bluetooth: hci8: command tx timeout [ 722.458923][T17091] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.466552][T17091] bridge_slave_1: entered allmulticast mode [ 722.548560][T17091] bridge_slave_1: entered promiscuous mode [ 722.719173][T17091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.778573][T17091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.883562][T17091] team0: Port device team_slave_0 added [ 722.912709][T17091] team0: Port device team_slave_1 added [ 722.978767][T17091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.987705][T17091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.024425][T17091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.061101][T17091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.079509][T17091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.160630][T17091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.247669][T17124] ptrace attach of "./syz-executor exec"[17125] was attempted by "./syz-executor exec"[17124] [ 723.350551][T17091] hsr_slave_0: entered promiscuous mode [ 723.376286][T17091] hsr_slave_1: entered promiscuous mode [ 723.382443][T17091] debugfs: 'hsr0' already exists in 'hsr' [ 723.403536][T17091] Cannot create hsr debugfs directory [ 723.488148][T17055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.688815][T17055] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.733868][T12123] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.741285][T12123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.775381][T12123] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.782722][T12123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.963904][T17055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.087954][T17091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 724.143233][T17091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 724.200052][T17091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 724.269722][ T5833] Bluetooth: hci9: command tx timeout [ 724.330827][T17091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 724.393274][T17138] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input148 [ 724.507229][ T5833] Bluetooth: hci8: command tx timeout [ 724.733199][T17055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.768301][T17091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.791372][T17145] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input149 [ 724.836342][T17091] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.919925][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.927248][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.985947][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.993098][ T7416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.120059][T17091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 725.603963][T17055] veth0_vlan: entered promiscuous mode [ 725.657692][T17055] veth1_vlan: entered promiscuous mode [ 725.732431][T17091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.758625][T17055] veth0_macvtap: entered promiscuous mode [ 725.800779][T17055] veth1_macvtap: entered promiscuous mode [ 725.862201][T17055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.907617][T17055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.971778][ T7417] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.988825][ T7417] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.070195][ T9607] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.100252][ T9607] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.304360][ T7416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.336746][ T5833] Bluetooth: hci9: command tx timeout [ 726.351720][ T7416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.448108][ T7407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.482154][ T7407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.575406][ T5833] Bluetooth: hci8: command tx timeout [ 726.584186][T17091] veth0_vlan: entered promiscuous mode [ 726.614192][T17091] veth1_vlan: entered promiscuous mode [ 726.709735][T17091] veth0_macvtap: entered promiscuous mode [ 726.759224][T17091] veth1_macvtap: entered promiscuous mode [ 726.838663][T17091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.885890][T17091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.940857][ T9607] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.963986][ T9607] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.044581][ T9607] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.077250][ T9607] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.515591][ T7417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.556503][ T7417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.624318][T17179] HfR: entered promiscuous mode [ 727.660863][ T7416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.691075][ T7416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.198905][ T7407] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1424 with max blocks 13 with error 117 [ 728.345058][ T7407] EXT4-fs (sda1): This should not happen!! Data will be lost [ 728.345058][ T7407] [ 728.407825][ T5833] Bluetooth: hci9: command tx timeout [ 728.506339][T17184] zswap: compressor not available [ 729.290607][T17201] [U] [ 729.293433][T17201] [U] [ 729.296245][T17201] [U] [ 729.298956][T17201] [U] [ 729.357267][T17201] [U] [ 729.360012][T17201] [U] [ 729.362715][T17201] [U] [ 729.365422][T17201] [U] [ 729.421273][T17201] [U] [ 729.424111][T17201] [U] 6ngrW8ز4G&Lb&്HyiNUIhZ]B_RLxSvSɞr,;&|ugL3 li,0pJ jUѾ*V3DҊus랪`^Y\ [ 729.439322][T17201] [U] "P6zUeQ [ 729.444523][T17201] [U] ४j1{sv83Umq[7_9RC/18ToHgxY}(;k+ p@B^ r [ 729.455995][T17201] [U] L~+y5]xt4UB߈Vne [ 729.462440][T17201] [U] MiOf,\- ѬP|c{0עȼjQQ͘žqݶr϶K VI#fDyٳ;% U>H [ 729.476067][T17201] [U] X!cxTΊ&pyT;j8S -jn#MyǷv DЁ9lu"P+a[ [ 729.485544][T17201] [U] )kUDwl2W}<, [ 729.490841][T17201] [U] ; [ 729.493682][T17201] [U] (Nb [ 729.497676][T17201] [U] Tk:5n%5w`Q SQO^LX0tEm/E [ 729.505556][T17201] [U] hE02D;0aH>J(t_a*KlDE_(12H(F [ 729.513977][T17201] [U] I[h2ZY[R He{pjCG#!pZZShN8@#Yt$9ZQY __$G0jO?YV2L ˺Лkb)1p *$,M[%q,yjL>cf<2 | jܦ I0v-ey^ش2Q-΄3 =Iw@~iESXC!i.>vcأuOp~P>Fn^W)5XjeCC6/$[Axq.:8IzUvh_P^.5-6B [ 730.569609][T17201] [U] [ 730.572459][T17201] [U] [ 730.575206][T17201] [U] [ 730.674808][T17201] [U] [ 730.677666][T17201] [U] [ 730.680385][T17201] [U] [ 730.683140][T17201] [U] [ 730.722346][T17201] [U] [ 730.725206][T17201] [U] [ 730.727914][T17201] [U] [ 730.730774][T17201] [U] [ 730.776710][T17201] [U] [ 730.779442][T17201] [U] [ 730.782319][T17201] [U] [ 730.785083][T17201] [U] [ 730.821307][T17201] [U] [ 730.824145][T17201] [U] [ 730.827036][T17201] [U] [ 730.829915][T17201] [U] [ 730.862823][T17201] [U] [ 730.865587][T17201] [U] [ 730.868358][T17201] [U] [ 730.871059][T17201] [U] [ 730.920093][T17201] [U] [ 730.923025][T17201] [U] [ 730.925825][T17201] [U] [ 730.928716][T17201] [U] [ 730.962731][T17201] [U] [ 730.965465][T17201] [U] [ 730.968466][T17201] [U] [ 730.971254][T17201] [U] [ 730.998294][T17201] [U] [ 731.001060][T17201] [U] [ 731.003755][T17201] [U] [ 731.006460][T17201] [U] [ 731.039989][T17201] [U] [ 731.042731][T17201] [U] [ 731.045431][T17201] [U] [ 731.048123][T17201] [U] [ 731.097187][T17201] [U] [ 732.312988][T17230] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2563'. [ 733.532131][T17249] zswap: compressor not available [ 734.507897][T17260] ima: policy update failed [ 734.513402][ T30] audit: type=1802 audit(4294967429.018:15): pid=17260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2571" res=0 errno=0 [ 738.237397][ T5842] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 738.248322][ T5842] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 738.257101][ T5842] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 738.267318][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 738.284327][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 738.319455][T17281] WARNING! power/level is deprecated; use power/control instead [ 738.919975][T17290] chnl_net:caif_netlink_parms(): no params data found [ 738.969530][T17301] zswap: compressor not available [ 739.255299][T17290] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.262461][T17290] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.291790][T17290] bridge_slave_0: entered allmulticast mode [ 739.313419][T17290] bridge_slave_0: entered promiscuous mode [ 739.343010][T17290] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.350252][T17290] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.407683][T17290] bridge_slave_1: entered allmulticast mode [ 739.452902][T17290] bridge_slave_1: entered promiscuous mode [ 739.533333][T17290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.563860][T17290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.586509][T17328] device-mapper: ioctl: Invalid ioctl structure: name , dev 4 [ 739.721431][T17290] team0: Port device team_slave_0 added [ 739.746631][T17290] team0: Port device team_slave_1 added [ 739.855498][T17290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.888916][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.915356][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.011839][T17290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.070268][T17290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.100603][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.128144][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.203597][T17290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.337336][ T5833] Bluetooth: hci10: command tx timeout [ 740.415214][T17290] hsr_slave_0: entered promiscuous mode [ 740.472472][T17290] hsr_slave_1: entered promiscuous mode [ 740.491223][T17290] debugfs: 'hsr0' already exists in 'hsr' [ 740.505764][T17290] Cannot create hsr debugfs directory [ 740.766785][T17290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.855088][T17290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.945300][T17290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.289776][T17290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 741.329645][T17290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 741.347184][T17348] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 741.383325][T17290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 741.408801][T17290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 741.546418][T17290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.573763][T17290] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.591068][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.598313][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.624706][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.632176][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.857123][T17290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.904664][T17290] veth0_vlan: entered promiscuous mode [ 741.923789][T17290] veth1_vlan: entered promiscuous mode [ 741.969370][T17290] veth0_macvtap: entered promiscuous mode [ 741.980617][T17290] veth1_macvtap: entered promiscuous mode [ 742.001325][T17290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.023199][T17290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.044190][ T7407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.059974][ T7407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.082194][ T7407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.147948][ T72] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.219032][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.252645][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.304459][ T7417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.348324][ T7417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.414389][ T5833] Bluetooth: hci10: command tx timeout [ 744.266113][ T31] INFO: task syz.2.2220:15369 blocked for more than 143 seconds. [ 744.275727][ T31] Tainted: G U syzkaller #0 [ 744.301706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 744.339446][ T31] task:syz.2.2220 state:D stack:25912 pid:15369 tgid:15368 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 744.427106][ T31] Call Trace: [ 744.450841][ T31] [ 744.467785][ T31] __schedule+0x1190/0x5de0 [ 744.477940][ T5833] Bluetooth: hci10: command tx timeout [ 744.517132][ T31] ? check_path.constprop.0+0x24/0x50 [ 744.522551][ T31] ? __lock_acquire+0x622/0x1c90 [ 744.578327][ T31] ? __pfx___schedule+0x10/0x10 [ 744.589884][T17378] zswap: compressor not available [ 744.610228][ T31] ? find_held_lock+0x2b/0x80 [ 744.640540][ T31] ? schedule+0x2d7/0x3a0 [ 744.663131][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 744.669092][ T31] schedule+0xe7/0x3a0 [ 744.712174][ T31] schedule_preempt_disabled+0x13/0x30 [ 744.717799][ T31] __mutex_lock+0x818/0x1060 [ 744.764559][ T31] ? ____sys_sendmsg+0xa98/0xc70 [ 744.769700][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 744.801224][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 744.828666][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 744.846988][ T31] ? __asan_memset+0x23/0x50 [ 744.863723][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 744.885259][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 744.981334][ T31] ? __nla_validate_parse+0x600/0x2880 [ 744.987025][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 744.998831][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 745.015103][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 745.023012][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 745.119253][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 745.125230][ T31] ? rcu_is_watching+0x12/0xc0 [ 745.147647][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 745.154408][ T31] ? __nla_parse+0x40/0x60 [ 745.158891][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 745.166827][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 745.174710][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 745.181138][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 745.187247][ T31] ? rcu_is_watching+0x12/0xc0 [ 745.206485][ T31] ? bpf_lsm_capable+0x9/0x10 [ 745.213878][ T31] ? security_capable+0x7e/0x260 [ 745.219640][ T31] genl_rcv_msg+0x55c/0x800 [ 745.224439][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.229892][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 745.236317][ T31] netlink_rcv_skb+0x158/0x420 [ 745.242052][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.247125][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.252781][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 745.258166][ T31] genl_rcv+0x28/0x40 [ 745.262517][ T31] netlink_unicast+0x5aa/0x870 [ 745.267291][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 745.273229][ T31] ? __pfx___might_resched+0x10/0x10 [ 745.278867][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 745.283752][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.289691][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 745.300467][ T31] ____sys_sendmsg+0xa98/0xc70 [ 745.305384][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 745.317508][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.324740][ T31] ___sys_sendmsg+0x134/0x1d0 [ 745.329910][ T31] ? futex_private_hash_put+0x176/0x300 [ 745.335593][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.341503][ T31] ? __lock_acquire+0x622/0x1c90 [ 745.346591][ T31] __sys_sendmsg+0x16d/0x220 [ 745.355331][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.360840][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 745.366007][ T31] do_syscall_64+0xcd/0xfa0 [ 745.370929][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.376936][ T31] RIP: 0033:0x7fb66b58f6c9 [ 745.382019][ T31] RSP: 002b:00007fb66c3a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.391071][ T31] RAX: ffffffffffffffda RBX: 00007fb66b7e5fa0 RCX: 00007fb66b58f6c9 [ 745.403860][ T31] RDX: 0000000000044000 RSI: 0000200000000040 RDI: 0000000000000005 [ 745.412454][ T31] RBP: 00007fb66b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 745.427378][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.437515][ T31] R13: 00007fb66b7e6038 R14: 00007fb66b7e5fa0 R15: 00007ffd6f1977f8 [ 745.445607][ T31] [ 745.502065][ T31] [ 745.502065][ T31] Showing all locks held in the system: [ 745.572741][ T31] 1 lock held by khungtaskd/31: [ 745.596829][ T31] #0: ffffffff8e3c45a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 745.658148][ T31] 2 locks held by getty/11207: [ 745.662991][ T31] #0: ffff888034bc80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 745.725915][ T31] #1: ffffc900042b32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 745.794556][ T31] 2 locks held by syz.0.2192/15269: [ 745.822051][ T31] #0: ffffffff9018e690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 745.865254][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 745.926201][ T31] 2 locks held by syz.2.2220/15369: [ 745.931521][ T31] #0: ffffffff9018e690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 745.995707][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 746.054088][ T31] 2 locks held by syz.1.2258/15519: [ 746.059321][ T31] #0: ffff88807b1800e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 746.102783][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 746.120114][ T31] 2 locks held by syz-executor/15578: [ 746.125872][ T31] #0: ffff88805ecea0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 746.137927][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 746.149308][ T31] 2 locks held by syz-executor/15666: [ 746.155375][ T31] #0: ffff888024c3a0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 746.166222][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 746.176718][ T31] 2 locks held by syz-executor/15784: [ 746.182284][ T31] #0: ffff888054a080e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 746.193004][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 746.208116][ T31] 2 locks held by syz-executor/16871: [ 746.217918][ T31] #0: ffff88805d5aa0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 746.236714][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 746.246924][ T31] 2 locks held by syz.3.2525/16986: [ 746.252260][ T31] #0: ffff88804d07c0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 746.263087][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 746.273518][ T31] 1 lock held by syz.3.2525/16987: [ 746.278643][ T31] #0: ffff88804d07c0e0 (&type->s_umount_key#50){++++}-{4:4}, at: super_lock+0x17d/0x3f0 [ 746.289448][ T31] 2 locks held by syz-executor/17091: [ 746.295250][ T31] #0: ffff8880369ac0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 746.308273][ T31] #1: ffffffff8e7ed148 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 746.326711][ T31] 5 locks held by syz-executor/17290: [ 746.335365][ T31] #0: ffff888087708dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 746.345555][ T31] #1: ffff8880877080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 746.355555][ T31] #2: ffffffff9035e788 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 746.365926][ T31] #3: ffff88804103b338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 746.375710][ T31] #4: ffffffff8e3cfb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 746.389262][ T31] 3 locks held by syz.8.2585/17370: [ 746.395079][ T31] #0: ffff888030108dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 746.405488][ T31] #1: ffff8880301080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 746.419934][ T31] #2: ffffffff9035e788 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 746.431653][ T31] 3 locks held by syz-executor/17386: [ 746.443740][ T31] #0: ffff8880566bcdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 746.453889][ T31] #1: ffff8880566bc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 746.465030][ T31] #2: ffffffff9035e788 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 746.508289][ T31] [ 746.510748][ T31] ============================================= [ 746.510748][ T31] [ 746.586789][ T31] NMI backtrace for cpu 0 [ 746.586809][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 746.586834][ T31] Tainted: [U]=USER [ 746.586839][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 746.586849][ T31] Call Trace: [ 746.586854][ T31] [ 746.586861][ T31] dump_stack_lvl+0x116/0x1f0 [ 746.586887][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 746.586911][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 746.586931][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 746.586957][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 746.586984][ T31] watchdog+0xf3f/0x1170 [ 746.587003][ T31] ? rcu_is_watching+0x12/0xc0 [ 746.587022][ T31] ? __pfx_watchdog+0x10/0x10 [ 746.587036][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 746.587057][ T31] ? __kthread_parkme+0x19e/0x250 [ 746.587079][ T31] ? __pfx_watchdog+0x10/0x10 [ 746.587095][ T31] kthread+0x3c5/0x780 [ 746.587120][ T31] ? __pfx_kthread+0x10/0x10 [ 746.587146][ T31] ? rcu_is_watching+0x12/0xc0 [ 746.587164][ T31] ? __pfx_kthread+0x10/0x10 [ 746.587189][ T31] ret_from_fork+0x675/0x7d0 [ 746.587214][ T31] ? __pfx_kthread+0x10/0x10 [ 746.587239][ T31] ret_from_fork_asm+0x1a/0x30 [ 746.587273][ T31] [ 746.738317][ T7407] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.806340][ T7407] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.876983][ T7407] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.961448][ T7407] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.134209][ T7407] bridge_slave_1: left allmulticast mode [ 747.145741][ T7407] bridge_slave_1: left promiscuous mode [ 747.158490][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.174169][ T7407] bridge_slave_0: left allmulticast mode [ 747.198058][ T7407] bridge_slave_0: left promiscuous mode [ 747.204759][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.950943][ T7407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.981941][ T7407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.999211][ T7407] bond0 (unregistering): Released all slaves [ 748.282254][ T7407] hsr_slave_0: left promiscuous mode [ 748.302238][ T7407] hsr_slave_1: left promiscuous mode [ 748.312865][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.320525][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.343538][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.367811][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.409151][ T7407] veth1_macvtap: left promiscuous mode [ 748.422430][ T7407] veth0_macvtap: left promiscuous mode [ 748.428153][ T7407] veth1_vlan: left promiscuous mode [ 748.446638][ T7407] veth0_vlan: left promiscuous mode [ 749.208794][ T7407] team0 (unregistering): Port device team_slave_1 removed [ 749.262027][ T7407] team0 (unregistering): Port device team_slave_0 removed [ 749.340681][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.348581][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.076290][ T7407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.187083][ T7407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.274447][ T7407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.372482][ T7407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.577439][ T7407] bridge_slave_1: left allmulticast mode [ 750.600640][ T7407] bridge_slave_1: left promiscuous mode [ 750.618436][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.641170][ T7407] bridge_slave_0: left allmulticast mode [ 750.646932][ T7407] bridge_slave_0: left promiscuous mode [ 750.669655][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.042374][ T7407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.053829][ T7407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.064529][ T7407] bond0 (unregistering): Released all slaves [ 751.368975][ T7407] hsr_slave_0: left promiscuous mode [ 751.384603][ T7407] hsr_slave_1: left promiscuous mode [ 751.399652][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.419426][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.441254][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.463413][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.511029][ T7407] veth1_macvtap: left promiscuous mode [ 751.521484][ T7407] veth0_macvtap: left promiscuous mode [ 751.540660][ T7407] veth1_vlan: left promiscuous mode [ 751.563114][ T7407] veth0_vlan: left promiscuous mode [ 752.273881][ T7407] team0 (unregistering): Port device team_slave_1 removed [ 752.327280][ T7407] team0 (unregistering): Port device team_slave_0 removed